/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
 * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */
(window.securitySolution_bundle_jsonpfunction=window.securitySolution_bundle_jsonpfunction||[]).push([[23,6,8,11,12,13],Array(105).concat([function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(103),i=n(130),r=n.n(i);const o=e=>Object(a.useSelector)(e,a.shallowEqual),s=e=>Object(a.useSelector)(e,r.a)},function(e,t,n){"use strict";n.d(t,"a",(function(){return y})),n.d(t,"k",(function(){return M})),n.d(t,"d",(function(){return _})),n.d(t,"g",(function(){return D})),n.d(t,"l",(function(){return P})),n.d(t,"j",(function(){return q})),n.d(t,"e",(function(){return B})),n.d(t,"c",(function(){return $})),n.d(t,"m",(function(){return U})),n.d(t,"i",(function(){return G})),n.d(t,"h",(function(){return H})),n.d(t,"f",(function(){return W})),n.d(t,"n",(function(){return X})),n.d(t,"o",(function(){return Z})),n.d(t,"b",(function(){return ie}));var a=n(43),i=n(112),r=n(145),o=n(113);const s=Object(r.c)(a.array(a.string)),l=(a.intersection([a.type({eventId:a.string}),a.partial({pinnedEventId:Object(r.c)(a.string),timelineId:Object(r.c)(a.string)})]),a.intersection([a.type({timelineId:a.string,eventId:a.string}),a.partial({created:Object(r.c)(a.number),createdBy:Object(r.c)(a.string),updated:Object(r.c)(a.number),updatedBy:Object(r.c)(a.string)})])),c=a.intersection([a.type({pinnedEventId:a.string,version:a.string}),l,a.partial({timelineVersion:Object(r.c)(a.string)})]);var u=n(207),d=n(373);const p=a.intersection([a.type({timelineId:Object(r.c)(a.string)}),a.partial({eventId:Object(r.c)(a.string),note:Object(r.c)(a.string),created:Object(r.c)(a.number),createdBy:Object(r.c)(a.string),updated:Object(r.c)(a.number),updatedBy:Object(r.c)(a.string)})]),m=a.intersection([p,a.type({noteId:a.string,version:a.string}),a.partial({timelineVersion:Object(r.c)(a.string)})]),f=a.partial({aggregatable:Object(r.c)(a.boolean),category:Object(r.c)(a.string),columnHeaderType:Object(r.c)(a.string),description:Object(r.c)(a.string),example:Object(r.c)(a.string),indexes:Object(r.c)(a.array(a.string)),id:Object(r.c)(a.string),name:Object(r.c)(a.string),placeholder:Object(r.c)(a.string),searchable:Object(r.c)(a.boolean),type:Object(r.c)(a.string)}),g=a.partial({field:Object(r.c)(a.string),displayField:Object(r.c)(a.string),value:a.union([a.null,a.string,a.array(a.string)]),displayValue:Object(r.c)(a.string),operator:Object(r.c)(a.string)}),b=a.partial({id:Object(r.c)(a.string),name:Object(r.c)(a.string),enabled:Object(r.c)(a.boolean),excluded:Object(r.c)(a.boolean),kqlQuery:Object(r.c)(a.string),queryMatch:Object(r.c)(g)});let y;!function(e){e.default="default",e.template="template"}(y||(y={}));const h=a.union([a.literal(y.default),a.literal(y.template)]),v=a.partial({id:Object(r.c)(a.string),name:Object(r.c)(a.string),enabled:Object(r.c)(a.boolean),excluded:Object(r.c)(a.boolean),kqlQuery:Object(r.c)(a.string),queryMatch:Object(r.c)(g),and:Object(r.c)(a.array(b)),type:Object(r.c)(h)}),E=a.partial({alias:Object(r.c)(a.string),controlledBy:Object(r.c)(a.string),disabled:Object(r.c)(a.boolean),field:Object(r.c)(a.string),formattedValue:Object(r.c)(a.string),index:Object(r.c)(a.string),key:Object(r.c)(a.string),negate:Object(r.c)(a.boolean),params:Object(r.c)(a.string),type:Object(r.c)(a.string),value:Object(r.c)(a.string)}),x=a.partial({exists:Object(r.c)(a.string),meta:Object(r.c)(E),match_all:Object(r.c)(a.string),missing:Object(r.c)(a.string),query:Object(r.c)(a.string),range:Object(r.c)(a.string),script:Object(r.c)(a.string)}),j=a.partial({eventCategoryField:Object(r.c)(a.string),query:Object(r.c)(a.string),tiebreakerField:Object(r.c)(a.string),timestampField:Object(r.c)(a.string),size:Object(r.c)(a.union([a.string,a.number]))}),O=a.partial({kind:Object(r.c)(a.string),expression:Object(r.c)(a.string)}),S=a.partial({kuery:Object(r.c)(O),serializedQuery:Object(r.c)(a.string)}),k=a.partial({filterQuery:Object(r.c)(S)}),w=a.partial({start:Object(r.c)(a.union([a.string,a.number])),end:Object(r.c)(a.union([a.string,a.number]))}),I=a.partial({keySearch:Object(r.c)(a.string),favoriteDate:Object(r.c)(a.number),fullName:Object(r.c)(a.string),userName:Object(r.c)(a.string)}),T=a.partial({columnId:Object(r.c)(a.string),columnType:Object(r.c)(a.string),sortDirection:Object(r.c)(a.string)}),C=a.union([a.array(T),T]);let M;!function(e){e.active="active",e.draft="draft",e.immutable="immutable"}(M||(M={}));const A=a.union([a.literal(M.active),a.literal(M.draft),a.literal(M.immutable)]);let _;Object(r.c)(A),function(e){e.alert="alert",e.alerts="alerts",e.auditd="auditd",e.auditd_file="auditd_file",e.library="library",e.netflow="netflow",e.plain="plain",e.registry="registry",e.suricata="suricata",e.system="system",e.system_dns="system_dns",e.system_endgame_process="system_endgame_process",e.system_file="system_file",e.system_fim="system_fim",e.system_security_event="system_security_event",e.system_socket="system_socket",e.threat_match="threat_match",e.zeek="zeek"}(_||(_={}));const F=Object(r.b)(_,"RowRendererId");let D;!function(e){e.elastic="elastic",e.custom="custom"}(D||(D={}));const N=a.union([a.literal(D.elastic),a.literal(D.custom)]);let P;Object(r.c)(N),function(e){e.default="default",e.template="template"}(P||(P={}));const R=a.union([a.literal(P.template),a.literal(P.default)]),L=(Object(r.c)(R),a.partial({columns:Object(r.c)(a.array(f)),dataProviders:Object(r.c)(a.array(v)),dataViewId:Object(r.c)(a.string),description:Object(r.c)(a.string),eqlOptions:Object(r.c)(j),eventType:Object(r.c)(a.string),excludedRowRendererIds:Object(r.c)(a.array(F)),favorite:Object(r.c)(a.array(I)),filters:Object(r.c)(a.array(x)),indexNames:Object(r.c)(a.array(a.string)),kqlMode:Object(r.c)(a.string),kqlQuery:Object(r.c)(k),title:Object(r.c)(a.string),templateTimelineId:Object(r.c)(a.string),templateTimelineVersion:Object(r.c)(a.number),timelineType:Object(r.c)(R),dateRange:Object(r.c)(w),savedQueryId:Object(r.c)(a.string),sort:Object(r.c)(C),status:Object(r.c)(A),created:Object(r.c)(a.number),createdBy:Object(r.c)(a.string),updated:Object(r.c)(a.number),updatedBy:Object(r.c)(a.string)})),q=a.intersection([L,a.type({savedObjectId:a.string,version:a.string}),a.partial({eventIdToNoteIds:a.array(m),noteIds:a.array(a.string),notes:a.array(m),pinnedEventIds:a.array(a.string),pinnedEventsSaveObject:a.array(c)})]),B=a.type({data:a.type({getOneTimeline:q})}),z=a.intersection([a.type({timeline:q,outcome:u.O}),a.partial({alias_target_id:u.N,alias_purpose:u.M})]),$=a.type({data:z}),V=a.type({timeline:a.array(q),totalCount:a.number}),U=a.intersection([V,a.type({defaultTimelineCount:a.number,templateTimelineCount:a.number,elasticTemplateTimelineCount:a.number,customTemplateTimelineCount:a.number,favoriteCount:a.number})]),G=a.type({data:a.type({persistTimeline:a.intersection([a.partial({code:Object(r.c)(a.number),message:Object(r.c)(a.string)}),a.type({timeline:q})])})}),H=a.type({status_code:a.number,message:a.string});let W;!function(e){e.title="title",e.description="description",e.updated="updated",e.created="created"}(W||(W={}));const Q=a.union([a.literal(W.title),a.literal(W.description),a.literal(W.updated),a.literal(W.created)]),Y=a.union([a.literal(o.b.asc),a.literal(o.b.desc)]),K=a.type({sortField:Q,sortOrder:Y}),X=a.exact(a.type({success:d.h,success_count:d.i,timelines_installed:i.n,timelines_updated:i.n,errors:a.array(d.g)})),J=a.partial({fullName:Object(r.c)(a.string),userName:Object(r.c)(a.string),favoriteDate:Object(r.c)(a.number)}),Z=a.partial({savedObjectId:a.string,version:a.string,code:Object(r.c)(a.number),message:Object(r.c)(a.string),templateTimelineId:Object(r.c)(a.string),templateTimelineVersion:Object(r.c)(a.number),timelineType:Object(r.c)(R),favorite:Object(r.c)(a.array(J))}),ee=a.type({pageIndex:a.number,pageSize:a.number}),te=(a.partial({onlyUserFavorite:Object(r.c)(a.boolean),pageInfo:Object(r.c)(ee),search:Object(r.c)(a.string),sort:Object(r.c)(K),status:Object(r.c)(A),timelineType:Object(r.c)(R)}),a.type({timelineType:R}),a.type({timelineType:R}),a.intersection([a.type({timeline:L}),a.partial({status:Object(r.c)(A),timelineId:Object(r.c)(a.string),templateTimelineId:Object(r.c)(a.string),templateTimelineVersion:Object(r.c)(a.number),timelineType:Object(r.c)(R),version:Object(r.c)(a.string)})]),a.partial({noteId:Object(r.c)(a.string)}),a.type({savedObjectIds:a.array(a.string)}),a.type({file_name:a.string}),a.partial({ids:Object(r.c)(a.array(a.string))}),a.partial({template_timeline_id:a.string,id:a.string}),a.union([a.literal("true"),a.literal("false")])),ne=(a.partial({only_user_favorite:Object(r.c)(te),page_index:Object(r.c)(a.string),page_size:Object(r.c)(a.string),search:Object(r.c)(a.string),sort_field:Q,sort_order:Y,status:Object(r.c)(A),timeline_type:Object(r.c)(R)}),Object(r.c)(a.array(p))),ae=Object(r.c)(a.array(p)),ie=a.intersection([L,a.type({savedObjectId:Object(r.c)(a.string),version:Object(r.c)(a.string)}),a.type({globalNotes:ae,eventNotes:ne,pinnedEventIds:s})]),re=a.partial({_maxListeners:a.unknown,_readableState:a.unknown,_read:a.unknown,readable:a.boolean,_events:a.unknown,_eventsCount:a.number,_data:a.unknown,_position:a.number,_encoding:a.string}),oe=a.union([a.literal("true"),a.literal("false")]);a.intersection([a.type({file:a.intersection([re,a.type({hapi:a.type({filename:a.string,headers:a.unknown})})])}),a.partial({isImmutable:oe})]),a.type({timeline:L,timelineId:Object(r.c)(a.string),version:Object(r.c)(a.string)}),a.type({timelineId:Object(r.c)(a.string),templateTimelineId:Object(r.c)(a.string),templateTimelineVersion:Object(r.c)(a.number),timelineType:Object(r.c)(R)}),a.intersection([a.type({note:p}),a.partial({overrideOwner:Object(r.c)(a.boolean),noteId:Object(r.c)(a.string),version:Object(r.c)(a.string)})]),a.type({timelinesToInstall:a.array(Object(r.c)(ie)),timelinesToUpdate:a.array(Object(r.c)(ie)),prepackagedTimelines:a.array(Object(r.c)(q))})},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(2);const i=e=>Object(a.useCallback)(((t="")=>{if(e)return`${e}${t?`-${t}`:""}`}),[e])},,,function(e,t,n){"use strict";n.r(t),n.d(t,"SourcererScopeName",(function(){return i})),n.d(t,"initSourcererScope",(function(){return r})),n.d(t,"initDataView",(function(){return o})),n.d(t,"initialSourcererState",(function(){return s}));var a=n(54);let i;!function(e){e.default="default",e.detections="detections",e.timeline="timeline"}(i||(i={}));const r={loading:!1,selectedDataViewId:null,selectedPatterns:[],missingPatterns:[]},o={browserFields:a.EMPTY_BROWSER_FIELDS,id:"",indexFields:a.EMPTY_INDEX_FIELDS,fields:void 0,loading:!1,patternList:[],runtimeMappings:{},title:"",dataView:void 0},s={defaultDataView:o,kibanaDataViews:[],signalIndexName:null,sourcererScopes:{[i.default]:{...r,id:i.default},[i.detections]:{...r,id:i.detections},[i.timeline]:{...r,id:i.timeline}}}},function(e,t,n){"use strict";var a=n(12);n.d(t,"a",(function(){return a}));var i=n(376);n.d(t,"b",(function(){return i}))},,function(e,t,n){"use strict";n.d(t,"b",(function(){return a.a})),n.d(t,"h",(function(){return i.f})),n.d(t,"i",(function(){return i.g})),n.d(t,"j",(function(){return i.h})),n.d(t,"x",(function(){return i.w})),n.d(t,"y",(function(){return i.x})),n.d(t,"H",(function(){return i.F})),n.d(t,"c",(function(){return i.b})),n.d(t,"z",(function(){return i.y})),n.d(t,"F",(function(){return i.D})),n.d(t,"G",(function(){return i.E})),n.d(t,"D",(function(){return i.B})),n.d(t,"E",(function(){return i.C})),n.d(t,"C",(function(){return i.A})),n.d(t,"v",(function(){return i.u})),n.d(t,"w",(function(){return i.v})),n.d(t,"l",(function(){return i.j})),n.d(t,"n",(function(){return i.m})),n.d(t,"t",(function(){return i.s})),n.d(t,"f",(function(){return i.d})),n.d(t,"g",(function(){return i.e})),n.d(t,"o",(function(){return i.n})),n.d(t,"p",(function(){return i.o})),n.d(t,"q",(function(){return i.p})),n.d(t,"s",(function(){return i.r})),n.d(t,"u",(function(){return i.t})),n.d(t,"r",(function(){return i.q})),n.d(t,"m",(function(){return i.l})),n.d(t,"a",(function(){return i.a})),n.d(t,"B",(function(){return i.z})),n.d(t,"d",(function(){return i.c})),n.d(t,"k",(function(){return r.b})),n.d(t,"A",(function(){return r.c})),n.d(t,"e",(function(){return r.a}));var a=n(536),i=n(338),r=n(530);n(54)},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.global="global",e.timeline="timeline",e.socTrends="socTrends"}(a||(a={}))},function(e,t,n){"use strict";n.r(t),n.d(t,"parseRoute",(function(){return g})),n.d(t,"manageOldSiemRoutes",(function(){return b})),n.d(t,"getInspectResponse",(function(){return y})),n.d(t,"isDetectionsPath",(function(){return h})),n.d(t,"isTourPath",(function(){return v})),n.d(t,"isThreatIntelligencePath",(function(){return E})),n.d(t,"getSubPluginRoutesByCapabilities",(function(){return x})),n.d(t,"isSubPluginAvailable",(function(){return j})),n.d(t,"getFieldKey",(function(){return k})),n.d(t,"getField",(function(){return w})),n.d(t,"isTimelineScope",(function(){return I})),n.d(t,"isInTableScope",(function(){return T})),n.d(t,"isAlertsPageScope",(function(){return C})),n.d(t,"getScopedActions",(function(){return M})),n.d(t,"getScopedSelectors",(function(){return A})),n.d(t,"isActiveTimeline",(function(){return _})),n.d(t,"getSourcererScopeId",(function(){return F}));var a=n(129),i=n(42),r=n(2),o=n.n(r),s=n(45),l=n(119),c=n(4),u=n(698),d=n(131),p=n(111),m=n(142),f=n(110);const g=e=>{if(!Object(i.isEmpty)(e.hash)){var t;const n=e.hash.split("?"),a=n.length>=1?`?${n[1]}`:"",i=n.length>0?n[0].split("/"):[];return{pageName:i.length>=1?i[1]:"",path:`/${null!==(t=i.slice(2).join("/"))&&void 0!==t?t:""}${a}`,search:a}}const n=e.search,a=e.pathname.split("/");return{pageName:a[3],path:`${a.length>4?`/${a.slice(4).join("/")}`:""}${n}`,search:n}},b=async e=>{const{application:t}=e,{pageName:n,path:a}=g(window.location);switch(n){case d.a.overview:t.navigateToApp(c.l,{deepLinkId:d.a.overview,replace:!0,path:a});break;case"ml-hosts":t.navigateToApp(c.l,{deepLinkId:d.a.hosts,replace:!0,path:`/ml-hosts${a}`});break;case d.a.hosts:t.navigateToApp(c.l,{deepLinkId:d.a.hosts,replace:!0,path:a});break;case"ml-network":t.navigateToApp(c.l,{deepLinkId:d.a.network,replace:!0,path:`/ml-network${a}`});break;case d.a.network:t.navigateToApp(c.l,{deepLinkId:d.a.network,replace:!0,path:a});break;case d.a.timelines:t.navigateToApp(c.l,{deepLinkId:d.a.timelines,replace:!0,path:a});break;case d.a.case:case"case":t.navigateToApp(c.l,{deepLinkId:d.a.case,replace:!0,path:a});break;case d.a.detections:case d.a.alerts:t.navigateToApp(c.l,{deepLinkId:d.a.alerts,replace:!0,path:a});break;case d.a.rules:t.navigateToApp(c.l,{deepLinkId:d.a.rules,replace:!0,path:a});break;case d.a.exceptions:t.navigateToApp(c.l,{deepLinkId:d.a.exceptions,replace:!0,path:a});break;default:t.navigateToApp(c.l,{deepLinkId:d.a.landing,replace:!0,path:a})}},y=(e,t)=>{var n,a,i;return{dsl:null!==(n=null!==(a=null==e||null===(i=e.inspect)||void 0===i?void 0:i.dsl)&&void 0!==a?a:null==t?void 0:t.dsl)&&void 0!==n?n:[],response:null!=e?[JSON.stringify(e.rawResponse,null,2)]:null==t?void 0:t.response}},h=e=>!!Object(s.matchPath)(e,{path:`(${c.d}|${c.mc}|${c.tb})`,strict:!1}),v=e=>(e=>!!Object(s.matchPath)(e,{path:`${c.d}`,strict:!1}))(e)||(e=>!!Object(s.matchPath)(e,{path:`${c.r}/:detailName`,strict:!1}))(e),E=e=>!!Object(s.matchPath)(e,{path:`(${c.xc})`,strict:!1}),x=(e,t,n)=>Object.entries(e).reduce(((e,[a,i])=>{if(j(a,t))e.push(...i.routes);else{const t=e=>e.siem.privileges;e.push(...i.routes.map((e=>({path:e.path,component:()=>{const e=n.upselling.getPageUpselling(a);return e?o.a.createElement(e,null):o.a.createElement(u.b,{pageName:a,docLinkSelector:t})}}))))}return e}),[]),j=(e,t)=>"cases"===e?!0===t[c.q].read_cases:!0===t[c.tc].show,O={[a.S]:"signal.rule.id",[a.D]:"signal.rule.name",[`${a.G}.filters`]:"signal.rule.filters",[`${a.G}.language`]:"signal.rule.language",[`${a.G}.query`]:"signal.rule.query"},S={"signal.rule.id":a.S,"signal.rule.name":a.D,"signal.rule.filters":`${a.G}.filters`,"signal.rule.language":`${a.G}.language`,"signal.rule.query":`${a.G}.query`},k=(e,t)=>{var n,a;const r=(null!==(n=S[t])&&void 0!==n?n:t).replace("signal","kibana.alert"),o=(null!==(a=O[t])&&void 0!==a?a:t).replace("kibana.alert","signal");return Object(i.has)(r,e)?r:o},w=(e,t)=>{var n,a,r;const o=(null!==(n=S[t])&&void 0!==n?n:t).replace("signal","kibana.alert"),s=(null!==(a=O[t])&&void 0!==a?a:t).replace("kibana.alert","signal"),l=o.split(".");if(l.includes("parameters")&&"parameters"!==l[l.length-1]){const t=l.slice(0,l.length-1).join("."),n=Object(i.get)(t,e);return Object(i.get)(l[l.length-1],n)}return null!==(r=Object(i.get)(o,e))&&void 0!==r?r:Object(i.get)(s,e)},I=e=>Object.values(m.f).includes(e),T=e=>Object.values(l.e).includes(e),C=e=>[l.e.alertsOnAlertsPage,l.e.alertsOnRuleDetailsPage,l.e.alertsOnCasePage].includes(e),M=e=>I(e)?p.a:T(e)?l.h:void 0,A=e=>I(e)?p.a:T(e)?l.h:void 0,_=e=>e===m.f.active,F=e=>I(e)?f.SourcererScopeName.timeline:C(e)?f.SourcererScopeName.detections:f.SourcererScopeName.default},function(e,t,n){"use strict";n.d(t,"c",(function(){return O})),n.d(t,"d",(function(){return S})),n.d(t,"a",(function(){return w})),n.d(t,"b",(function(){return T}));var a=n(2),i=n(103),r=n(5),o=n(45),s=n(158),l=n(110),c=n(181),u=n(111),d=n(4),p=n(142),m=n(105),f=n(477),g=n(108),b=n(689),y=n(377),h=n(183),v=n(160),E=n(221),x=n(340),j=n(102);const O=(e=l.SourcererScopeName.default)=>{const t=Object(i.useDispatch)(),{data:{dataViews:n}}=Object(j.j)().services,o=Object(a.useRef)(new AbortController),d=Object(a.useRef)(!0),h=Object(a.useRef)(!0),{loading:x,isSignalIndexExists:O,signalIndexName:k}=Object(c.c)(),w=Object(v.d)(E.a.sourcerer),I=Object(a.useMemo)((()=>s.d.getSourcererDataViewsSelector()),[]),{defaultDataView:T,signalIndexName:C}=Object(m.a)((e=>I(e))),{addError:M,addWarning:A}=Object(g.a)();Object(a.useEffect)((()=>{null!=T.error&&A({title:r.i18n.translate("xpack.securitySolution.sourcerer.permissions.title",{defaultMessage:"Write role required to generate data"}),text:r.i18n.translate("xpack.securitySolution.sourcerer.permissions.toastMessage",{defaultMessage:"Users with write permission need to access the Elastic Security app to initialize the app source data."})})}),[A,T.error]);const _=Object(a.useMemo)((()=>u.b.getTimelineByIdSelector()),[]),F=Object(m.a)((e=>_(e,p.f.active))),D=Object(a.useMemo)((()=>s.d.getSourcererScopeSelector()),[]),{sourcererScope:{selectedDataViewId:N,selectedPatterns:P,missingPatterns:R}}=Object(m.a)((t=>D(t,e))),{selectedDataView:L,sourcererScope:{selectedDataViewId:q,selectedPatterns:B,missingPatterns:z}}=Object(m.a)((e=>D(e,l.SourcererScopeName.timeline))),{indexFieldsSearch:$}=Object(y.b)(),V=Object(a.useCallback)((n=>{null!=n?Object.keys(n).forEach((a=>{var i,r,o,c;a===l.SourcererScopeName.default&&e===l.SourcererScopeName.detections||t(s.a.setSelectedDataView({id:a,selectedDataViewId:null!==(i=null===(r=n[a])||void 0===r?void 0:r.id)&&void 0!==i?i:null,selectedPatterns:null!==(o=null===(c=n[a])||void 0===c?void 0:c.selectedPatterns)&&void 0!==o?o:[]}))})):N&&w({[l.SourcererScopeName.default]:{id:N,selectedPatterns:P}})}),[t,N,e,P,w]);Object(v.b)(E.a.sourcerer,V);const U=Object(a.useRef)([]);Object(a.useEffect)((()=>{[...new Set([N,q])].forEach(((e,t)=>{if(null!=e&&e.length>0&&!U.current.includes(e)){U.current=[...U.current,e];const n=0===t?l.SourcererScopeName.default:l.SourcererScopeName.timeline,a=e===N?0===P.length&&0===R.length:q===e&&0===z.length&&0===(null==L?void 0:L.patternList.length);$({dataViewId:e,scopeId:n,needToBeInit:a,...a&&n===l.SourcererScopeName.timeline?{skipScopeUpdate:B.length>0}:{}})}}))}),[$,R.length,N,P.length,q,z.length,L,B.length]),Object(a.useEffect)((()=>{!x&&null!=k&&null==C&&(null==F||null==F.savedObjectId)&&d.current&&T.id.length>0?(d.current=!1,t(s.a.setSelectedDataView({id:l.SourcererScopeName.timeline,selectedDataViewId:T.id,selectedPatterns:Object(f.b)(T,l.SourcererScopeName.timeline,k,!0)}))):null!=C&&(null==F||null==F.savedObjectId)&&d.current&&T.id.length>0&&(d.current=!1,t(s.a.setSelectedDataView({id:l.SourcererScopeName.timeline,selectedDataViewId:T.id,selectedPatterns:Object(f.b)(T,l.SourcererScopeName.timeline,C,!0)})))}),[F,T,t,x,k,C]);const{dataViewId:G}=S(e),H=Object(a.useCallback)((e=>{-1===T.title.indexOf(e)&&(o.current.abort(),(async a=>{o.current=new AbortController,t(s.a.setSourcererScopeLoading({loading:!0}));try{const i=await Object(b.a)({body:{patternList:a},signal:o.current.signal,dataViewService:n,dataViewId:G});null!=i&&i.defaultDataView.patternList.includes(e)&&($({dataViewId:i.defaultDataView.id}),t(s.a.setSourcererDataViews(i))),t(s.a.setSourcererScopeLoading({loading:!1}))}catch(e){"AbortError"===e.name||M(e,{title:r.i18n.translate("xpack.securitySolution.sourcerer.error.title",{defaultMessage:"Error updating Security Data View"}),toastMessage:r.i18n.translate("xpack.securitySolution.sourcerer.error.toastMessage",{defaultMessage:"Refresh the page"})}),t(s.a.setSourcererScopeLoading({loading:!1}))}})([...T.title.split(","),e]))}),[T.title,t,n,G,$,M]),W=Object(a.useCallback)((()=>{!x&&null!=k&&null==C&&T.id.length>0&&(H(k),t(s.a.setSignalIndexName({signalIndexName:k})))}),[T.id.length,t,x,k,C,H]);Object(a.useEffect)((()=>{W()}),[k]),Object(a.useEffect)((()=>{e===l.SourcererScopeName.detections&&O&&null!=k&&h.current&&T.id.length>0?(h.current=!1,t(s.a.setSelectedDataView({id:l.SourcererScopeName.detections,selectedDataViewId:T.id,selectedPatterns:Object(f.b)(T,l.SourcererScopeName.detections,k,!0)}))):e===l.SourcererScopeName.detections&&null!=C&&d.current&&T.id.length>0&&(h.current=!1,s.a.setSelectedDataView({id:l.SourcererScopeName.detections,selectedDataViewId:T.id,selectedPatterns:Object(f.b)(T,l.SourcererScopeName.detections,C,!0)}))}),[T,t,O,e,k,C])},S=(e=l.SourcererScopeName.default)=>{const{getDataViewsSelector:t,getSourcererDataViewSelector:n,getScopeSelector:i}=Object(a.useMemo)((()=>({getDataViewsSelector:s.d.getSourcererDataViewsSelector(),getSourcererDataViewSelector:s.d.sourcererDataViewSelector(),getScopeSelector:s.d.scopeIdSelector()})),[]),{defaultDataView:r,signalIndexName:o,selectedDataView:c,sourcererScope:{missingPatterns:u,selectedPatterns:d,loading:p}}=Object(m.a)((a=>{const r=i(a,e);return{...t(a),selectedDataView:n(a,r.selectedDataViewId),sourcererScope:r}})),g=Object(a.useMemo)((()=>Object(x.b)(d)),[d]),[b,v]=Object(a.useState)([]),[E,j]=Object(h.b)(b),O=Object(a.useMemo)((()=>{var e,t,n,a,i,r,o;return{...j,dataView:j.dataView,runtimeMappings:null!==(e=null===(t=j.dataView)||void 0===t?void 0:t.runtimeFieldMap)&&void 0!==e?e:{},title:null!==(n=null===(a=j.dataView)||void 0===a?void 0:a.title)&&void 0!==n?n:"",id:null!==(i=null===(r=j.dataView)||void 0===r?void 0:r.id)&&void 0!==i?i:null,loading:E,patternList:j.indexes,indexFields:j.indexPatterns.fields,fields:null===(o=j.dataView)||void 0===o?void 0:o.fields}}),[j,E]);Object(a.useEffect)((()=>{null==c||u.length>0?v(g):v([])}),[u,c,g]);const S=Object(a.useMemo)((()=>null==c||u.length>0?O:c),[O,u.length,c]),k=Object(a.useMemo)((()=>!(!p&&!S.loading)||Object(f.a)({scopeId:e,signalIndexName:o,patternList:S.patternList,isDefaultDataViewSelected:S.id===r.id})),[r.id,p,e,o,S.id,S.loading,S.patternList]),w=Object(a.useCallback)((()=>{const{browserFields:e}=Object(y.a)(S.patternList.join(","),S.fields);return e}),[S.fields,S.patternList]);return Object(a.useMemo)((()=>({browserFields:w(),dataViewId:S.id,indexPattern:{fields:S.indexFields,title:g.join(","),getName:()=>g.join(",")},indicesExist:k,loading:p||S.loading,runtimeMappings:S.runtimeMappings,patternList:S.title.split(","),selectedPatterns:g,...b.length>0?{activePatterns:S.patternList}:{},sourcererDataView:S.dataView})),[w,S,g,k,p,b.length])},k=[d.d,`${d.mc}/id/:id`,`${d.r}/:detailName`],w=e=>null==Object(o.matchPath)(e,{path:k,strict:!1})?l.SourcererScopeName.default:l.SourcererScopeName.detections,I=[d.d,d.u,`${d.mc}/id/:id`,d.zb,d.Ic,d.Mb,d.Tb],T=e=>null!=Object(o.matchPath)(e,{path:I,strict:!1})},function(e,t,n){"use strict";n.d(t,"e",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"d",(function(){return p})),n.d(t,"c",(function(){return m})),n.d(t,"a",(function(){return f})),n.d(t,"f",(function(){return g}));var a=n(42),i=n(2),r=n.n(i),o=n(41),s=n.n(o);const l=n(5).i18n.translate("xpack.securitySolution.emptyString.emptyStringDescription",{defaultMessage:"Empty string"}),c=s.a.span.withConfig({displayName:"EmptyWrapper",componentId:"sc-1h9raim-0"})(["color:",";"],(e=>e.theme.eui.euiColorMediumShade));c.displayName="EmptyWrapper";const u=()=>"—",d=()=>`(${l})`,p=()=>r.a.createElement(c,null,u()),m=()=>r.a.createElement(c,null,d()),f=e=>null==e?p():Object(a.isString)(e)&&""===e?m():r.a.createElement(r.a.Fragment,null,e),g=e=>null==e?p():""===e?m():r.a.createElement(r.a.Fragment,null,e)},function(e,t,n){"use strict";n.d(t,"b",(function(){return a.IS_OPERATOR})),n.d(t,"a",(function(){return a.EXISTS_OPERATOR})),n.d(t,"d",(function(){return i})),n.d(t,"c",(function(){return r}));var a=n(54);let i,r;!function(e){e.query="query",e.graph="graph",e.notes="notes",e.pinned="pinned",e.eql="eql",e.session="session",e.securityAssistant="securityAssistant",e.discover="discover"}(i||(i={})),function(e){e.active="timeline-1",e.casePage="timeline-case",e.test="timeline-test",e.detectionsAlertDetailsPage="detections-alert-details-page"}(r||(r={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return Me})),n.d(t,"h",(function(){return a})),n.d(t,"j",(function(){return i})),n.d(t,"o",(function(){return xe})),n.d(t,"i",(function(){return Ke})),n.d(t,"q",(function(){return M})),n.d(t,"k",(function(){return T})),n.d(t,"l",(function(){return C})),n.d(t,"b",(function(){return v.Direction})),n.d(t,"r",(function(){return O})),n.d(t,"c",(function(){return w})),n.d(t,"f",(function(){return k})),n.d(t,"e",(function(){return x})),n.d(t,"d",(function(){return j})),n.d(t,"m",(function(){return R})),n.d(t,"g",(function(){return z})),n.d(t,"p",(function(){return L})),n.d(t,"n",(function(){return Se}));var a={};n.r(a),n.d(a,"createDataTable",(function(){return G})),n.d(a,"upsertColumn",(function(){return H})),n.d(a,"applyDeltaToColumnWidth",(function(){return W})),n.d(a,"updateColumnOrder",(function(){return Q})),n.d(a,"updateColumnWidth",(function(){return Y})),n.d(a,"toggleDetailPanel",(function(){return K})),n.d(a,"removeColumn",(function(){return X})),n.d(a,"updateIsLoading",(function(){return J})),n.d(a,"updateColumns",(function(){return Z})),n.d(a,"updateItemsPerPage",(function(){return ee})),n.d(a,"updateItemsPerPageOptions",(function(){return te})),n.d(a,"updateSort",(function(){return ne})),n.d(a,"setSelected",(function(){return ae})),n.d(a,"clearSelected",(function(){return ie})),n.d(a,"setEventsLoading",(function(){return re})),n.d(a,"clearEventsLoading",(function(){return oe})),n.d(a,"setEventsDeleted",(function(){return se})),n.d(a,"clearEventsDeleted",(function(){return le})),n.d(a,"initializeDataTableSettings",(function(){return ce})),n.d(a,"setDataTableSelectAll",(function(){return ue})),n.d(a,"updateGraphEventId",(function(){return de})),n.d(a,"updateSessionViewConfig",(function(){return pe})),n.d(a,"setTableUpdatedAt",(function(){return me})),n.d(a,"updateTotalCount",(function(){return fe})),n.d(a,"changeViewMode",(function(){return ge})),n.d(a,"updateShowBuildingBlockAlertsFilter",(function(){return be})),n.d(a,"updateShowThreatIndicatorAlertsFilter",(function(){return ye}));var i={};n.r(i),n.d(i,"tableByIdSelector",(function(){return ve})),n.d(i,"getTableByIdSelector",(function(){return xe})),n.d(i,"getManageDataTableById",(function(){return Oe}));var r=n(104),o=n.n(r),s=n(40),l=n(42),c=n(240),u=n.n(c),d=n(2),p=n.n(d),m=n(103),f=n(41),g=n.n(f),b=n(5),y=n(247);const h=180;var v=n(54),E=n(43);let x,j;!function(e){e.usersPageEvents="users-page-events",e.hostsPageEvents="hosts-page-events",e.networkPageEvents="network-page-events",e.hostsPageSessions="hosts-page-sessions-v2",e.alertsOnRuleDetailsPage="alerts-rules-details-page",e.alertsOnAlertsPage="alerts-page",e.test="table-test",e.alternateTest="alternateTest",e.rulePreview="rule-preview",e.kubernetesPageSessions="kubernetes-page-sessions",e.alertsOnCasePage="alerts-case-page",e.alertsRiskInputs="alerts-risk-inputs"}(x||(x={})),function(e){e.alert="alert",e.event="event",e.session="session"}(j||(j={}));const O={[x.alertsOnAlertsPage]:j.alert,[x.alertsOnCasePage]:j.alert,[x.alertsOnRuleDetailsPage]:j.alert,[x.hostsPageEvents]:j.event,[x.networkPageEvents]:j.event,[x.usersPageEvents]:j.event,[x.test]:j.event,[x.alternateTest]:j.event,[x.rulePreview]:j.event,[x.hostsPageSessions]:j.session,[x.kubernetesPageSessions]:j.session,[x.alertsRiskInputs]:j.alert};let S,k;E.union([E.literal(x.usersPageEvents),E.literal(x.hostsPageEvents),E.literal(x.networkPageEvents),E.literal(x.hostsPageSessions),E.literal(x.alertsOnRuleDetailsPage),E.literal(x.alertsOnAlertsPage),E.literal(x.test),E.literal(x.rulePreview),E.literal(x.kubernetesPageSessions),E.literal(x.alertsOnCasePage),E.literal(x.alertsRiskInputs)]),function(e){e.destination="destination",e.source="source"}(S||(S={})),function(e){e.query="query",e.graph="graph",e.notes="notes",e.pinned="pinned",e.eql="eql",e.session="session"}(k||(k={}));const w="open",I=b.i18n.translate("securitySolutionPackages.dataTable.loadingEventsDataLabel",{defaultMessage:"Loading Events"}),T="not-filtered",C=[{columnHeaderType:T,id:"@timestamp",initialWidth:190,esTypes:["date"],type:"date"},{columnHeaderType:T,id:"message",initialWidth:h},{columnHeaderType:T,id:"event.category",initialWidth:h},{columnHeaderType:T,id:"event.action",initialWidth:h},{columnHeaderType:T,id:"host.name",initialWidth:h},{columnHeaderType:T,id:"source.ip",initialWidth:h},{columnHeaderType:T,id:"destination.ip",initialWidth:h},{columnHeaderType:T,id:"user.name",initialWidth:h}],M={defaultColumns:C,dataViewId:null,deletedEventIds:[],expandedDetail:{},filters:[],indexNames:[],isSelectAllChecked:!1,isLoading:!1,itemsPerPage:25,itemsPerPageOptions:[10,25,50,100],loadingEventIds:[],selectedEventIds:{},showCheckboxes:!1,sort:[{columnId:"@timestamp",columnType:"date",esTypes:["date"],sortDirection:"desc"}],selectAll:!1,graphEventId:"",sessionViewConfig:null,columns:C,queryFields:[],title:"",totalCount:0,viewMode:"gridView",additionalFilters:{showBuildingBlockAlerts:!1,showOnlyThreatIndicatorAlerts:!1}},A=e=>({defaultColumns:C,loadingText:I,documentType:"",selectAll:!1,id:e,isLoading:!1,queryFields:[],title:"",unit:e=>{return t=e,b.i18n.translate("securitySolutionPackages.dataTable.unit",{values:{totalCount:t},defaultMessage:"{totalCount, plural, =1 {alert} other {alerts}}"});var t},graphEventId:""});var _=n(21);const F={showSortAsc:!0,showSortDesc:!0,showHide:!1},D=({browserField:e,fieldName:t})=>{var n;const a=null!==(n=null==e?void 0:e.aggregatable)&&void 0!==n&&n;return["kibana.alert.ancestors.depth","kibana.alert.ancestors.id","kibana.alert.ancestors.rule","kibana.alert.ancestors.type","kibana.alert.original_event.action","kibana.alert.original_event.category","kibana.alert.original_event.code","kibana.alert.original_event.created","kibana.alert.original_event.dataset","kibana.alert.original_event.duration","kibana.alert.original_event.end","kibana.alert.original_event.hash","kibana.alert.original_event.id","kibana.alert.original_event.kind","kibana.alert.original_event.module","kibana.alert.original_event.original","kibana.alert.original_event.outcome","kibana.alert.original_event.provider","kibana.alert.original_event.risk_score","kibana.alert.original_event.risk_score_norm","kibana.alert.original_event.sequence","kibana.alert.original_event.severity","kibana.alert.original_event.start","kibana.alert.original_event.timezone","kibana.alert.original_event.type","kibana.alert.original_time","kibana.alert.reason","kibana.alert.rule.created_by","kibana.alert.rule.description","kibana.alert.rule.enabled","kibana.alert.rule.false_positives","kibana.alert.rule.from","kibana.alert.rule.uuid","kibana.alert.rule.immutable","kibana.alert.rule.interval","kibana.alert.rule.max_signals","kibana.alert.rule.name","kibana.alert.rule.note","kibana.alert.rule.references","kibana.alert.risk_score","kibana.alert.rule.rule_id","kibana.alert.severity","kibana.alert.rule.size","kibana.alert.rule.tags","kibana.alert.rule.threat","kibana.alert.rule.threat.tactic.id","kibana.alert.rule.threat.tactic.name","kibana.alert.rule.threat.tactic.reference","kibana.alert.rule.threat.technique.id","kibana.alert.rule.threat.technique.name","kibana.alert.rule.threat.technique.reference","kibana.alert.rule.timeline_id","kibana.alert.rule.timeline_title","kibana.alert.rule.to","kibana.alert.rule.type","kibana.alert.rule.updated_by","kibana.alert.rule.version","kibana.alert.workflow_status"].includes(t)||a},N=e=>{switch(e){case"date":case"date_nanos":return"datetime";case"double":case"long":case"number":return"numeric";case"object":return"json";case"boolean":return"boolean";default:return}},P=[{columnHeaderType:T,id:"@timestamp",displayAsText:b.i18n.translate("securitySolutionPackages.dataTable.eventRenderedView.timestampTitle.column",{defaultMessage:"Timestamp"}),initialWidth:240,actions:!1,isExpandable:!1,isResizable:!1},{columnHeaderType:T,displayAsText:b.i18n.translate("securitySolutionPackages.dataTable.eventRenderedView.ruleTitle.column",{defaultMessage:"Rule"}),id:"kibana.alert.rule.name",initialWidth:230,linkField:"kibana.alert.rule.uuid",actions:!1,isExpandable:!1,isResizable:!1},{columnHeaderType:T,id:"eventSummary",displayAsText:b.i18n.translate("securitySolutionPackages.dataTable.eventRenderedView.eventSummary.column",{defaultMessage:"Event Summary"}),actions:!1,isExpandable:!1,isResizable:!1}],R=(e,t,n,a)=>e.reduce(((e,i)=>({...e,...a&&t.includes(i._id)?{[i._id]:i.data.filter((e=>n.includes(e.field)))}:{}})),{}),L=e=>{var t,n;return!Object(l.isEmpty)(null===(t=e.kibana)||void 0===t||null===(n=t.alert)||void 0===n?void 0:n.building_block_type)},q=e=>{switch(e){case"asc":case"desc":return e;default:return"desc"}},B=({columns:e,columnHeaders:t})=>e.map((({id:e,direction:n})=>{var a,i;const r=t.find((t=>t.id===e)),o=null!==(a=null==r?void 0:r.type)&&void 0!==a?a:"",s=null!==(i=null==r?void 0:r.esTypes)&&void 0!==i?i:[];return{columnId:e,columnType:o,esTypes:s,sortDirection:n}})),z=(e,t,n,a)=>{const i=null!=a?a:{};L(e)?n({style:{...i,backgroundColor:`${t.eui.euiColorHighlight}`}}):n({style:{...i,backgroundColor:"inherit"}})},$=b.i18n.translate("securitySolutionPackages.dataTable.columnHeaders.flyout.pane.removeColumnButtonLabel",{defaultMessage:"Remove column"});var V=n(22);const U=n.n(V)()("x-pack/security_solution/data-table"),G=U("CREATE_DATA_TABLE"),H=U("UPSERT_COLUMN"),W=U("APPLY_DELTA_TO_COLUMN_WIDTH"),Q=U("UPDATE_COLUMN_ORDER"),Y=U("UPDATE_COLUMN_WIDTH"),K=U("TOGGLE_DETAIL_PANEL"),X=U("REMOVE_COLUMN"),J=U("UPDATE_LOADING"),Z=U("UPDATE_COLUMNS"),ee=U("UPDATE_ITEMS_PER_PAGE"),te=U("UPDATE_ITEMS_PER_PAGE_OPTIONS"),ne=U("UPDATE_SORT"),ae=U("SET_DATA_TABLE_SELECTED"),ie=U("CLEAR_DATA_TABLE_SELECTED"),re=U("SET_DATA_TABLE_EVENTS_LOADING"),oe=U("CLEAR_DATA_TABLE_EVENTS_LOADING"),se=U("SET_DATA_TABLE_EVENTS_DELETED"),le=U("CLEAR_DATA_TABLE_EVENTS_DELETED"),ce=U("INITIALIZE_DATA_TABLE"),ue=U("SET_DATA_TABLE_SELECT_ALL"),de=U("UPDATE_DATA_TABLE_GRAPH_EVENT_ID"),pe=U("UPDATE_DATA_TABLE_SESSION_VIEW_CONFIG"),me=U("SET_TABLE_UPDATED_AT"),fe=U("UPDATE_TOTAL_COUNT"),ge=U("CHANGE_ALERT_TABLE_VIEW_MODE"),be=U("UPDATE_BUILDING_BLOCK_ALERTS_FILTER"),ye=U("UPDATE_SHOW_THREAT_INDICATOR_ALERTS_FILTER");var he=n(139);const ve=Object(he.createSelector)((e=>e.dataTable.tableById),(e=>e)),Ee=(e,t)=>e.dataTable.tableById[t],xe=()=>Object(he.createSelector)(Ee,(e=>e)),je=(e,t)=>{return Object(l.getOr)(Object(l.getOr)((n=t,{...M,...A(n)}),["tableById",t],e),["dataTable","tableById",t],e);var n},Oe=()=>Object(he.createSelector)(je,(({dataViewId:e,defaultColumns:t,isLoading:n,loadingText:a,queryFields:i,title:r,selectAll:o,graphEventId:s})=>({dataViewId:e,defaultColumns:t,isLoading:n,loadingText:a,queryFields:i,title:r,selectAll:o,graphEventId:s}))),Se=(e,t)=>e%t,ke=g.a.span`
  font-size: ${({theme:e})=>e.eui.euiFontSizeXS};
  font-weight: ${({theme:e})=>e.eui.euiFontWeightSemiBold};
  border-right: ${({theme:e})=>e.eui.euiBorderThin};
  margin-right: ${({theme:e})=>e.eui.euiSizeS};
  padding-right: ${({theme:e})=>e.eui.euiSizeM};
`,we=b.i18n.translate("securitySolutionPackages.dataTable.ariaLabel",{defaultMessage:"Alerts"}),Ie=(e=!1)=>({border:"none",fontSize:"s",header:"underline",stripes:!0===e}),Te=g.a.div`
  ul.euiPagination__list {
    li.euiPagination__item:last-child {
      ${({hideLastPage:e})=>e?"display:none":""};
    }
  }
  div .euiDataGridRowCell__contentByHeight {
    height: auto;
    align-self: center;
  }
  div .euiDataGridRowCell--lastColumn .euiDataGridRowCell__contentByHeight {
    flex-grow: 0;
    width: 100%;
  }
  div .siemEventsTable__trSupplement--summary {
    display: block;
  }
`,Ce=u()(((e,t,n)=>{const a=(e=>Object(l.keyBy)("name",(e=>Object.values(e).reduce(((e,t)=>[...e,...Object.values(null!=t.fields?t.fields:{})]),[]))(e)))(t),i=n?P:e;return i?i.map((e=>{var t,n,i,r;const o=a[e.id],s={...e,...o,schema:null!==(t=e.schema)&&void 0!==t?t:N(null==o?void 0:o.type)},l=Object(_.jsx)(p.a.Fragment,null,null!==(n=null!==(i=e.display)&&void 0!==i?i:e.displayAsText)&&void 0!==n?n:e.id);return{...s,actions:null!==(r=e.actions)&&void 0!==r?r:F,defaultSortDirection:"desc",display:Object(_.jsx)(p.a.Fragment,null,l),isSortable:D({browserField:o,fieldName:e.id})}})):[]})),Me=p.a.memo((({additionalControls:e,browserFields:t,bulkActions:n=!0,data:r,fieldBrowserOptions:c,hasCrudPermissions:u,id:g,leadingControlColumns:b,loadPage:v,renderCellValue:E,rowRenderers:x,pagination:j,unitCountText:O,totalItems:S,rowHeightsOptions:k,isEventRenderedView:w=!1,getFieldBrowser:I,getFieldSpec:C,cellActionsTriggerId:A,...F})=>{const D=i.getTableByIdSelector(),N=(P=e=>{var t;return null!==(t=D(e,g))&&void 0!==t?t:M},Object(m.useSelector)(P,m.shallowEqual));var P;const{columns:R,selectedEventIds:L,showCheckboxes:V,sort:U,isLoading:G,defaultColumns:H}=N,W=Ce(R,t,w),Q=Object(d.useRef)(null),Y=Object(m.useDispatch)(),K=Object(d.useMemo)((()=>Object.keys(L).length),[L]),X=Object(d.useContext)(f.ThemeContext),J=Object(d.useMemo)((()=>{var e,t;return!!u&&!(0===K||!V)&&("boolean"==typeof n?n:null===(e=(null==n||null===(t=n.customBulkActions)||void 0===t?void 0:t.length)||(null==n?void 0:n.alertStatusActions))||void 0===e||e)}),[u,K,V,n]),Z=Object(d.useCallback)((()=>{Y(a.updateColumns({id:g,columns:H}))}),[H,Y,g]),ee=Object(d.useCallback)((e=>{var t,n,i;W.some((({id:t})=>e===t))?Y(a.removeColumn({columnId:e,id:g})):Y(a.upsertColumn({column:(t=e,n=H,{columnHeaderType:T,id:t,initialWidth:h,...null!==(i=n.find((e=>e.id===t)))&&void 0!==i?i:{}}),id:g,index:1}))}),[W,Y,g,H]),te=Object(d.useMemo)((()=>({additionalControls:{left:{append:Object(_.jsx)(p.a.Fragment,null,G&&Object(_.jsx)(s.EuiProgress,{size:"xs",position:"absolute",color:"accent"}),Object(_.jsx)(ke,{"data-test-subj":"server-side-event-count"},O),null!=e?e:null,w?Object(_.jsx)(p.a.Fragment,null):I({browserFields:t,options:c,columnIds:W.map((({id:e})=>e)),onResetColumns:Z,onToggleColumn:ee}))}},...J||w?{showColumnSelector:!1,showSortSelector:!1,showFullScreenSelector:!1}:{showColumnSelector:{allowHide:!1,allowReorder:!0},showSortSelector:!0,showFullScreenSelector:!0},showDisplaySelector:!1})),[G,O,e,w,I,t,c,W,Z,ee,J]),ne=Object(d.useMemo)((()=>U.map((e=>({id:e.columnId,direction:q(e.sortDirection)})))),[U]),ae=Object(d.useCallback)((e=>{Y(a.updateSort({id:g,sort:B({columns:e,columnHeaders:W})})),setTimeout((()=>{null!=v&&v(0)}),0)}),[W,Y,g,v]),ie=Object(d.useMemo)((()=>W.map((({id:e})=>e))),[W]),re=Object(d.useCallback)((({columnId:e,width:t})=>{Y(a.updateColumnWidth({columnId:e,id:g,width:t}))}),[Y,g]),oe=Object(d.useCallback)((e=>{Y(a.updateColumnOrder({columnIds:e,id:g}))}),[Y,g]),se=Object(d.useMemo)((()=>({scopeId:g})),[g]),le=Object(d.useMemo)((()=>A?W.map((e=>{var t;return null!==(t=C(e.id))&&void 0!==t?t:{name:e.id,type:"",aggregatable:!1,searchable:!1}})):void 0),[A,W,C]),ce=Object(d.useCallback)(((e,t)=>{var n;const a=t%r.length;return null===(n=r[a].data.find((t=>t.field===e)))||void 0===n?void 0:n.value}),[r]),ue=Object(y.j)({triggerId:A,fields:le,getCellValue:ce,metadata:se,dataGridRef:Q}),de=Object(d.useMemo)((()=>W.map(((e,t)=>{var n;return{...e,actions:{...e.actions,additional:[{iconType:"cross",label:$,onClick:()=>{Y(a.removeColumn({id:g,columnId:e.id}))},size:"xs"}]},cellActions:null!==(n=ue[t])&&void 0!==n?n:[],visibleCellActions:3}}))),[W,ue,Y,g]),pe=Object(d.useMemo)((()=>({columnId:e,rowIndex:n,colIndex:a,setCellProps:i,isDetails:o})=>{var s;const c=Se(n,j.pageSize),u=c<r.length?r[c].data:null,p=W.find((t=>t.id===e)),m=c<r.length?r[c]._id:null,f=c<r.length?r[c].ecs:null;return Object(d.useEffect)((()=>{const e={overflow:"hidden"};i({style:{...e}}),f&&u?z(f,X,i,e):i({style:{display:"none"}})}),[n,i,f,u]),null==u||null==p||null==m||null===f?null:E({asPlainText:!1,browserFields:t,columnId:p.id,data:u,ecsData:f,eventId:m,header:p,isDetails:o,isDraggable:!1,isExpandable:!0,isExpanded:!1,linkValues:Object(l.getOr)([],null!==(s=p.linkField)&&void 0!==s?s:"",f),rowIndex:n,colIndex:a,rowRenderers:x,setCellProps:i,scopeId:g,truncate:!o})}),[t,W,r,g,j.pageSize,E,x,X]);return Object(_.jsx)(p.a.Fragment,null,Object(_.jsx)(Te,{hideLastPage:S>9999},Object(_.jsx)(s.EuiDataGrid,o()({},F,{id:"body-data-grid","data-test-subj":"body-data-grid","aria-label":we,columns:w?W:de,columnVisibility:{visibleColumns:ie,setVisibleColumns:oe},gridStyle:Ie(w),leadingControlColumns:b,toolbarVisibility:te,rowCount:S,renderCellValue:pe,sorting:{columns:ne,onSort:ae},onColumnResize:re,pagination:j,ref:Q,rowHeightsOptions:k}))))}));var Ae=n(208),_e=n(8);const Fe=({id:e,tableById:t,...n})=>{const a=t[e];return{...t,[e]:{...a,...M,...n,isLoading:!1}}},De=({column:e,id:t,index:n,tableById:a})=>{const i=a[t];if(-1!==i.columns.findIndex((t=>t.id===e.id))){const r=i.columns.filter((t=>t.id!==e.id));return r.splice(n,0,e),{...a,[t]:{...i,columns:r}}}const r=[...i.columns];return r.splice(n,0,e),{...a,[t]:{...i,columns:r}}},Ne=({id:e,columnId:t,tableById:n})=>{const a=n[e],i=a.columns.filter((e=>e.id!==t));return{...n,[e]:{...a,columns:i}}},Pe=({id:e,tableById:t,dataTableSettingsProps:n})=>{var a;const i=t[e];return null!=i&&i.initialized?t:{...t,[e]:{...M,...A(e),...i,...n,...!i||Object(_e.isEmpty)(i.columns)&&!Object(_e.isEmpty)(n.defaultColumns)?{columns:n.defaultColumns}:{},sort:null!==(a=n.sort)&&void 0!==a?a:M.sort,loadingEventIds:M.loadingEventIds,initialized:!0}}},Re=({id:e,columnId:t,delta:n,tableById:a})=>{var i;const r=a[e],o=r.columns.findIndex((e=>e.id===t));if(-1===o)return{...a,[e]:{...r}};const s=(null!==(i=r.columns[o].initialWidth)&&void 0!==i?i:h)+n,l=Math.max(70,s),c={...r.columns[o],initialWidth:l},u=[...r.columns.slice(0,o),c,...r.columns.slice(o+1)];return{...a,[e]:{...r,columns:u}}},Le=({columnIds:e,id:t,tableById:n})=>{const a=n[t],i=e.reduce(((e,t)=>{const n=a.columns.findIndex((e=>e.id===t));return-1!==n?[...e,a.columns[n]]:e}),[]);return{...n,[t]:{...a,columns:i}}},qe=({columnId:e,id:t,tableById:n,width:a})=>{const i=n[t],r=i.columns.map((t=>({...t,initialWidth:t.id===e?a:t.initialWidth})));return{...n,[t]:{...i,columns:r}}},Be=({id:e,columns:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,columns:t}}},ze=({id:e,sort:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,sort:t}}},$e=({id:e,itemsPerPage:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,itemsPerPage:t}}},Ve=({id:e,itemsPerPageOptions:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,itemsPerPageOptions:t}}},Ue=({id:e,eventIds:t,isDeleted:n,tableById:a})=>{const i=a[e],r=n?Object(l.union)(i.deletedEventIds,t):i.deletedEventIds.filter((e=>!t.includes(e))),o=Object.fromEntries(Object.entries(i.selectedEventIds).filter((([e])=>!r.includes(e)))),s=Object.keys(o).length>0&&i.isSelectAllChecked;return{...a,[e]:{...i,deletedEventIds:r,selectedEventIds:o,isSelectAllChecked:s}}},Ge=({id:e,eventIds:t,isLoading:n,tableById:a})=>{const i=a[e],r=n?Object(l.union)(i.loadingEventIds,t):i.loadingEventIds.filter((e=>!t.includes(e)));return{...a,[e]:{...i,loadingEventIds:r}}},He=({id:e,eventIds:t,isSelectAllChecked:n=!1,isSelected:a,tableById:i})=>{const r=i[e],o=a?{...r.selectedEventIds,...t}:Object(l.omit)(Object.keys(t),r.selectedEventIds);return{...i,[e]:{...r,selectedEventIds:o,isSelectAllChecked:n}}},We=e=>{var t;const{tabType:n,id:a,...i}=e,r=new Set(["eventDetail","hostDetail","networkDetail","userDetail"]),o=null!=n?n:"query",s={params:i.params?{...i.params}:{},panelView:i.panelView};return{[o]:r.has(null!==(t=i.panelView)&&void 0!==t?t:"")?s:{}}},Qe=({id:e,graphEventId:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,graphEventId:t}}},Ye=({id:e,sessionViewConfig:t,tableById:n})=>{const a=n[e];return{...n,[e]:{...a,sessionViewConfig:t}}},Ke=Object(Ae.reducerWithInitialState)({tableById:{}}).case(H,((e,{column:t,id:n,index:a})=>({...e,tableById:De({column:t,id:n,index:a,tableById:e.tableById})}))).case(G,((e,t)=>({...e,tableById:Fe({...t,tableById:e.tableById})}))).case(ce,((e,{id:t,...n})=>({...e,tableById:Pe({id:t,tableById:e.tableById,dataTableSettingsProps:n})}))).case(K,((e,t)=>({...e,tableById:{...e.tableById,[t.id]:{...e.tableById[t.id],expandedDetail:{...e.tableById[t.id].expandedDetail,...We(t)}}}}))).case(W,((e,{id:t,columnId:n,delta:a})=>({...e,tableById:Re({id:t,columnId:n,delta:a,tableById:e.tableById})}))).case(Q,((e,{id:t,columnIds:n})=>({...e,tableById:Le({columnIds:n,id:t,tableById:e.tableById})}))).case(Y,((e,{id:t,columnId:n,width:a})=>({...e,tableById:qe({columnId:n,id:t,tableById:e.tableById,width:a})}))).case(X,((e,{id:t,columnId:n})=>({...e,tableById:Ne({id:t,columnId:n,tableById:e.tableById})}))).case(se,((e,{id:t,eventIds:n,isDeleted:a})=>({...e,tableById:Ue({id:t,eventIds:n,tableById:e.tableById,isDeleted:a})}))).case(le,((e,{id:t})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],deletedEventIds:[]}}}))).case(re,((e,{id:t,eventIds:n,isLoading:a})=>({...e,tableById:Ge({id:t,eventIds:n,tableById:e.tableById,isLoading:a})}))).case(oe,((e,{id:t})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],loadingEventIds:[]}}}))).case(ae,((e,{id:t,eventIds:n,isSelected:a,isSelectAllChecked:i})=>({...e,tableById:He({id:t,eventIds:n,tableById:e.tableById,isSelected:a,isSelectAllChecked:i})}))).case(ie,((e,{id:t})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],selectedEventIds:{},isSelectAllChecked:!1}}}))).case(J,((e,{id:t,isLoading:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],isLoading:n}}}))).case(Z,((e,{id:t,columns:n})=>({...e,tableById:Be({id:t,columns:n,tableById:e.tableById})}))).case(ne,((e,{id:t,sort:n})=>({...e,tableById:ze({id:t,sort:n,tableById:e.tableById})}))).case(ee,((e,{id:t,itemsPerPage:n})=>({...e,tableById:$e({id:t,itemsPerPage:n,tableById:e.tableById})}))).case(te,((e,{id:t,itemsPerPageOptions:n})=>({...e,tableById:Ve({id:t,itemsPerPageOptions:n,tableById:e.tableById})}))).case(ue,((e,{id:t,selectAll:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],selectAll:n}}}))).case(de,((e,{id:t,graphEventId:n})=>({...e,tableById:Qe({id:t,graphEventId:n,tableById:e.tableById})}))).case(pe,((e,{id:t,sessionViewConfig:n})=>({...e,tableById:Ye({id:t,sessionViewConfig:n,tableById:e.tableById})}))).case(me,((e,{id:t,updated:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],updated:n}}}))).case(fe,((e,{id:t,totalCount:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],totalCount:n}}}))).case(ge,((e,{id:t,viewMode:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],viewMode:n}}}))).case(be,((e,{id:t,showBuildingBlockAlerts:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],additionalFilters:{...e.tableById[t].additionalFilters,showBuildingBlockAlerts:n}}}}))).case(ye,((e,{id:t,showOnlyThreatIndicatorAlerts:n})=>({...e,tableById:{...e.tableById,[t]:{...e.tableById[t],additionalFilters:{...e.tableById[t].additionalFilters,showOnlyThreatIndicatorAlerts:n}}}}))).build()},,function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"c",(function(){return h}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(321),c=n(153),u=n(117),d=n(150),p=n(379);const m=({field:e,tooltipContent:t})=>null!=t?t:e,f=r.a.memo((({children:e,field:t,tooltipContent:n,tooltipPosition:i,value:o})=>(e=>null===e)(n)?r.a.createElement(r.a.Fragment,null,e||o):r.a.createElement(a.EuiToolTip,{"data-test-subj":`${t}-tooltip`,position:i,content:m({tooltipContent:n,field:t})},r.a.createElement(r.a.Fragment,null,e||o))));f.displayName="Content";const g=r.a.memo((({hideTopN:e=!1,id:t,isDraggable:n=!0,field:a,fieldType:o="",isAggregatable:s=!1,value:u,name:m,children:g,scopeId:b,tooltipContent:y,tooltipPosition:h,queryValue:v,truncate:E})=>{const x=Object(i.useMemo)((()=>{var e;return{and:[],enabled:!0,id:Object(c.i)(t),name:m||(null!==(e=null==u?void 0:u.toString())&&void 0!==e?e:""),excluded:!1,kqlQuery:"",queryMatch:{field:a,value:v||(null!=u?u:""),operator:d.d}}}),[a,t,m,v,u]),j=Object(i.useCallback)(((e,t,n)=>n.isDragging?r.a.createElement(l.a,null,r.a.createElement(p.a,{dataProvider:e})):r.a.createElement(f,{field:a,tooltipContent:y,tooltipPosition:h,value:u},g)),[g,a,y,h,u]);return null==u?null:r.a.createElement(l.b,{dataProvider:x,fieldType:o,isAggregatable:s,hideTopN:e,isDraggable:n,render:j,scopeId:b,truncate:E})}));g.displayName="DefaultDraggable";const b=s()(a.EuiBadge).withConfig({displayName:"Badge",componentId:"sc-1g0jgxk-0"})(["vertical-align:top;"]);b.displayName="Badge";const y=({contextId:e,eventId:t,field:n,value:a,iconType:i,isDraggable:o,isAggregatable:s,fieldType:l,name:c,color:d="hollow",children:p,scopeId:m,tooltipContent:f,queryValue:y})=>null!=a?r.a.createElement(g,{id:`draggable-badge-default-draggable-${e}-${t}-${n}-${a}`,isDraggable:o,isAggregatable:s,fieldType:l,field:n,name:c,value:a,scopeId:m,tooltipContent:f,queryValue:y},r.a.createElement(b,{iconType:i,color:d,title:""},p||(""!==a?a:Object(u.c)()))):null;y.displayName="DraggableBadgeComponent";const h=r.a.memo(y);h.displayName="DraggableBadge"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a.c})),n.d(t,"b",(function(){return i.c})),n.d(t,"d",(function(){return r.d})),n.d(t,"e",(function(){return o.d})),n.d(t,"c",(function(){return s.b})),n.d(t,"f",(function(){return l}));var a=n(179),i=n(227),r=n(138),o=n(158),s=(n(543),n(398));const l=(e,t)=>n=>{const a={...n,getState:()=>e(n.getState())};return t(a)}},function(e,t,n){"use strict";n.d(t,"g",(function(){return x.d})),n.d(t,"f",(function(){return x.c})),n.d(t,"o",(function(){return w})),n.d(t,"m",(function(){return C})),n.d(t,"d",(function(){return A})),n.d(t,"h",(function(){return N})),n.d(t,"a",(function(){return R})),n.d(t,"c",(function(){return L})),n.d(t,"i",(function(){return q})),n.d(t,"e",(function(){return B})),n.d(t,"b",(function(){return z})),n.d(t,"j",(function(){return H})),n.d(t,"n",(function(){return W})),n.d(t,"l",(function(){return Q})),n.d(t,"k",(function(){return Y}));var a=n(40),i=n(2),r=n.n(i),o=n(42),s=n(291),l=n(199),c=n(363),u=n(4),d=n(449),p=n(169),m=n(263),f=n(102),g=n(228),b=n(5),y=n(364);const h=e=>b.i18n.translate("xpack.securitySolution.cases.caseTable.caseDetailsLinkAria",{values:{detailName:e},defaultMessage:"click to visit case with title {detailName}"});var v=n(131),E=n(669),x=n(318),j=n(104),O=n.n(j),S=n(636),k=n(609);const w=()=>{const e=Object(S.a)(),t=Object(k.a)();return Object(i.useCallback)((({deepLinkId:n,path:a,onClick:i})=>{const r=t(n);return e({id:n,path:a,urlState:r,onClick:i})}),[e,t])},I=e=>(e=>r.a.memo((function({deepLinkId:t,...n}){const a=Object(k.a)()(t);return r.a.createElement(e,O()({id:t,urlState:a},n))})))(Object(S.c)(e)),T=({children:e,Component:t,userName:n,isButton:a,onClick:o,title:s,userTab:l})=>{const c=encodeURIComponent(n),{formatUrl:d,search:m}=Object(p.m)(v.a.users),{application:{navigateToApp:g},telemetry:b}=Object(f.j)().services,y=Object(i.useCallback)((e=>{e.preventDefault(),g(u.l,{deepLinkId:v.a.users,path:l?Object(E.a)(c,l,m):Object(E.c)(c,m)})}),[c,g,m,l]),h=Object(i.useMemo)((()=>d(l?Object(E.a)(c,l):Object(E.c)(c))),[d,c,l]),j=Object(i.useCallback)((e=>{b.reportEntityDetailsClicked({entity:"user"}),(null!=o?o:y)(e)}),[y,o,b]);return a?r.a.createElement(x.b,{Component:t,dataTestSubj:"data-grid-user-details",href:h,onClick:j,title:null!=s?s:n},e||n):r.a.createElement(x.c,{"data-test-subj":"users-link-anchor",onClick:j,href:h},e||n)},C=r.a.memo(T),M=({children:e,Component:t,hostName:n,isButton:a,onClick:o,title:s,hostTab:l})=>{const{formatUrl:c,search:d}=Object(p.m)(v.a.hosts),{application:{navigateToApp:m},telemetry:g}=Object(f.j)().services,b=encodeURIComponent(n),y=Object(i.useCallback)((e=>{e.preventDefault(),m(u.l,{deepLinkId:v.a.hosts,path:l?Object(p.j)(b,l,d):Object(p.e)(b,d)})}),[b,m,d,l]),h=Object(i.useMemo)((()=>c(l?Object(p.j)(b,l):Object(p.e)(b))),[c,b,l]),E=Object(i.useCallback)((e=>{g.reportEntityDetailsClicked({entity:"host"}),(null!=o?o:y)(e)}),[y,o,g]);return a?r.a.createElement(x.b,{Component:t,dataTestSubj:"data-grid-host-details",href:h,iconType:"expand",onClick:E,title:null!=s?s:n},e):r.a.createElement(x.c,{onClick:E,href:h,"data-test-subj":"host-details-button"},e||n)},A=r.a.memo(M),_=["http://","https://"],F=r.a.memo((({url:e,children:t,idx:n,overflowIndexStart:i=5,allItemsLimit:s=5})=>{const l=i-1,c=s-1,u=Math.max(0,Math.min(l,c)),d=_.some((t=>0===e.indexOf(t)));return e&&d&&!Object(g.c)(e)&&t?r.a.createElement(a.EuiToolTip,{content:e,position:"top","data-test-subj":"externalLinkTooltip"},r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiLink,{href:e,target:"_blank",rel:"noopener","data-test-subj":"externalLink"},t),!Object(o.isNil)(n)&&n<u&&r.a.createElement(x.a,{"data-test-subj":"externalLinkComma"}))):null}));F.displayName="ExternalLink";const D=({Component:e,children:t,ip:n,flowTarget:a=m.a.source,isButton:s,onClick:l,title:c})=>{const u=w(),f=Object(i.useCallback)(((n,i)=>{const{onClick:o,href:m}=u({deepLinkId:v.a.network,path:Object(p.g)(encodeURIComponent(Object(d.c)(n)),a)}),f=null!=l?l:e=>o(e);return s?r.a.createElement(x.b,{Component:e,key:`${n}-${i}`,dataTestSubj:"data-grid-network-details",onClick:f,href:m,title:null!=c?c:n},t):r.a.createElement(x.c,{key:`${n}-${i}`,onClick:f,href:m,"data-test-subj":"network-details"},t||n)}),[t,e,a,u,l,s,c]);return Object(o.isArray)(n)?r.a.createElement(r.a.Fragment,null,n.map(f)):f(n,0)},N=r.a.memo(D),P=({index:e,children:t,detailName:n,title:a})=>{const{formatUrl:o,search:d}=Object(p.m)(v.a.case),{navigateToApp:m}=Object(f.j)().services.application,{activeStep:g,isTourShown:b}=Object(c.b)(),y=Object(i.useMemo)((()=>g===l.a.viewCase&&b(l.b.alertsCases)&&0===e),[g,e,b]),E=Object(i.useCallback)((async e=>(e&&e.preventDefault(),m(u.l,{deepLinkId:v.a.case,path:Object(p.b)({id:n,search:d})}))),[n,m,d]);return Object(i.useEffect)((()=>{var e;y&&(null===(e=document.querySelector('[tour-step="RelatedCases-accordion"]'))||void 0===e||e.scrollIntoView())}),[y]),r.a.createElement(s.a,{onClick:E,isTourAnchor:y,step:l.a.viewCase,tourId:l.b.alertsCases},r.a.createElement(x.c,{onClick:E,href:o(Object(p.b)({id:n})),"data-test-subj":"case-details-link","aria-label":h(null!=a?a:n)},t||n))},R=r.a.memo(P);R.displayName="CaseDetailsLink",r.a.memo((({children:e})=>{const{formatUrl:t,search:n}=Object(p.m)(v.a.case),{navigateToApp:a}=Object(f.j)().services.application,o=Object(i.useCallback)((async e=>(e.preventDefault(),a(u.l,{deepLinkId:v.a.case,path:Object(p.c)(n)}))),[a,n]);return r.a.createElement(x.c,{onClick:o,href:t(Object(p.c)())},e)})).displayName="CreateCaseLink";const L=r.a.memo((({children:e,link:t})=>{const n=Object(i.useMemo)((()=>`https://www.google.com/search?q=${encodeURIComponent(t)}`),[t]);return r.a.createElement(F,{url:n},e||t)}));L.displayName="GoogleLink";const q=r.a.memo((({Component:e,title:t,children:n,portOrServiceName:o})=>{var s;const l=Object(i.useMemo)((()=>`https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=${encodeURIComponent(String(o))}`),[o]);return e?r.a.createElement(e,{href:l,"data-test-subj":"data-grid-port-or-service-name-link",title:t,iconType:"link"},null!==(s=null!=t?t:n)&&void 0!==s?s:o):r.a.createElement(x.e,null,r.a.createElement(a.EuiLink,{"data-test-subj":"port-or-service-name-link",href:l,target:"_blank"},n||o))}));q.displayName="PortOrServiceNameLink";const B=r.a.memo((({children:e,ja3Fingerprint:t})=>{const n=Object(i.useMemo)((()=>`https://sslbl.abuse.ch/ja3-fingerprints/${encodeURIComponent(t)}`),[t]);return r.a.createElement(a.EuiLink,{"data-test-subj":"ja3-fingerprint-link",href:n,target:"_blank"},e||t)}));B.displayName="Ja3FingerprintLink";const z=r.a.memo((({children:e,certificateFingerprint:t})=>{const n=Object(i.useMemo)((()=>`https://sslbl.abuse.ch/ssl-certificates/sha1/${encodeURIComponent(t)}`),[t]);return r.a.createElement(a.EuiLink,{"data-test-subj":"certificate-fingerprint-link",href:n,target:"_blank"},e||t)}));var $;function V(e){return e===$["virustotal.com"]||e===$["talosIntelligence.com"]}z.displayName="CertificateFingerprintLink",function(e){e["virustotal.com"]="virustotal.com",e["talosIntelligence.com"]="talosIntelligence.com"}($||($={}));const U={[$["virustotal.com"]]:y.m,[$["talosIntelligence.com"]]:y.l},G=({overflowIndexStart:e=5,allItemsLimit:t=5,showDomain:n=!1,domain:s,direction:l="row"})=>{const[c]=Object(f.p)(u.Fb),d=Object(i.useMemo)((()=>null==c?void 0:c.slice(0,t).filter((({url_template:e,name:t})=>!Object(o.isNil)(e)&&!Object(o.isNil)(t)&&!Object(g.c)(e))).map((({name:e,url_template:t})=>({name:V(e)?U[e]:e,url_template:t.replace("{{ip}}",encodeURIComponent(s))})))),[c,s,U,t]),p=Object(i.useCallback)((n=>{var a;return(e=>void 0!==e.url_template&&void 0!==e.name)(n)&&r.a.createElement(F,{url:n.url_template,overflowIndexStart:e,allItemsLimit:t},r.a.createElement(r.a.Fragment,null,null!==(a=n.name)&&void 0!==a?a:s))}),[t,s,e]);return(null==d?void 0:d.length)>0?r.a.createElement("section",null,r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",justifyContent:"center",direction:l,alignItems:"center","data-test-subj":"reputationLinkGroup"},r.a.createElement(a.EuiFlexItem,{grow:!0},null==d?void 0:d.slice(0,e).map((({name:t,url_template:a},i)=>r.a.createElement(F,{allItemsLimit:d.length,idx:i,overflowIndexStart:e,url:a,"data-test-subj":"externalLinkComponent",key:`reputationLink-${i}`},r.a.createElement(r.a.Fragment,null,n?s:null!=t?t:s))))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(x.f,{rowItems:d,render:p,moreMaxHeight:"200px",overflowIndexStart:e})))):null};G.displayName="ReputationLinkComponent";const H=r.a.memo(G),W=r.a.memo((({children:e,domain:t})=>{const n=Object(i.useMemo)((()=>`https://www.iana.org/whois?q=${encodeURIComponent(t)}`),[t]);return r.a.createElement(F,{url:n},e||t)}));W.displayName="WhoIsLink";const Q=I(x.d),Y=I(x.c)},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(103),i=n(15);const r=Object(i.b)(),o=e=>{const t=s();if(!t||!(e in t))throw new Error(`Invalid enable value ${e}. Allowed values are: ${r.join(", ")}`);return t[e]},s=()=>Object(a.useSelector)((({app:{enableExperimental:e}})=>e))},function(e,t,n){"use strict";var a=n(52);n.d(t,"j",(function(){return a.getUseField})),n.d(t,"i",(function(){return a.getFieldValidityAndErrorMessage})),n.d(t,"a",(function(){return a.FIELD_TYPES})),n.d(t,"c",(function(){return a.Form})),n.d(t,"e",(function(){return a.UseField})),n.d(t,"f",(function(){return a.UseMultiFields})),n.d(t,"k",(function(){return a.useForm})),n.d(t,"l",(function(){return a.useFormContext})),n.d(t,"m",(function(){return a.useFormData})),n.d(t,"g",(function(){return a.VALIDATION_TYPES}));var i=n(67);n.d(t,"b",(function(){return i.Field})),n.d(t,"d",(function(){return i.SelectField}));var r=n(75);n.d(t,"h",(function(){return r.fieldValidators}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(1059);const r=()=>Object(a.useContext)(i.a)},function(e,t,n){"use strict";n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"d",(function(){return d})),n.d(t,"f",(function(){return p})),n.d(t,"g",(function(){return m}));var a=n(40),i=n(42),r=n(41),o=n.n(r);const s="details",l=o.a.div.attrs((()=>({className:s}))).withConfig({displayName:"Details",componentId:"sc-1ucey7j-0"})(["margin:5px 0 5px 10px;& .euiBadge{margin:2px 0 2px 0;}& .euiFlexGroup{justify-content:center;}"]);l.displayName="Details";const c=o()(a.EuiFlexItem).withConfig({displayName:"TokensFlexItem",componentId:"sc-1ucey7j-1"})(["margin-left:3px;"]);function u(e){return Object(i.isNumber)(e)?!isFinite(e):Object(i.isEmpty)(e)}c.displayName="TokensFlexItem";const d=({eventCategory:e,eventDataset:t})=>"file"===(null==e?void 0:e.toLowerCase())||"file"===(null==t?void 0:t.toLowerCase())||"endpoint.events.file"===(null==t?void 0:t.toLowerCase()),p=e=>["process_stopped","termination_event"].includes(`${e}`.toLowerCase()),m=e=>["created","creation","deleted","deletion","file_create_event","file_delete_event","files-encrypted","load","modification","overwrite","rename"].includes(`${e}`.toLowerCase())},function(e,t,n){"use strict";n.d(t,"z",(function(){return a.D})),n.d(t,"E",(function(){return a.I})),n.d(t,"x",(function(){return a.B})),n.d(t,"s",(function(){return a.w})),n.d(t,"H",(function(){return a.L})),n.d(t,"F",(function(){return a.J})),n.d(t,"w",(function(){return a.A})),n.d(t,"v",(function(){return a.z})),n.d(t,"q",(function(){return a.t})),n.d(t,"t",(function(){return a.x})),n.d(t,"C",(function(){return a.G})),n.d(t,"j",(function(){return a.l})),n.d(t,"I",(function(){return a.P})),n.d(t,"c",(function(){return a.e})),n.d(t,"g",(function(){return a.i})),n.d(t,"l",(function(){return a.p})),n.d(t,"L",(function(){return a.R})),n.d(t,"i",(function(){return a.k})),n.d(t,"d",(function(){return a.g})),n.d(t,"B",(function(){return a.F})),n.d(t,"u",(function(){return a.y})),n.d(t,"y",(function(){return a.C})),n.d(t,"R",(function(){return a.X})),n.d(t,"S",(function(){return a.Y})),n.d(t,"p",(function(){return a.s})),n.d(t,"O",(function(){return a.U})),n.d(t,"P",(function(){return a.V})),n.d(t,"o",(function(){return a.r})),n.d(t,"f",(function(){return a.h})),n.d(t,"Q",(function(){return a.W})),n.d(t,"N",(function(){return a.T})),n.d(t,"m",(function(){return a.q})),n.d(t,"h",(function(){return a.j})),n.d(t,"a",(function(){return a.a})),n.d(t,"M",(function(){return a.S})),n.d(t,"b",(function(){return a.d})),n.d(t,"J",(function(){return a.Q})),n.d(t,"k",(function(){return a.o})),n.d(t,"T",(function(){return a.Z})),n.d(t,"r",(function(){return a.u})),n.d(t,"G",(function(){return a.K})),n.d(t,"A",(function(){return a.E})),n.d(t,"D",(function(){return a.H})),n.d(t,"cb",(function(){return a.bb})),n.d(t,"ab",(function(){return c})),n.d(t,"n",(function(){return p})),n.d(t,"fb",(function(){return o.k})),n.d(t,"W",(function(){return o.c})),n.d(t,"ib",(function(){return o.n})),n.d(t,"X",(function(){return o.d})),n.d(t,"db",(function(){return o.i})),n.d(t,"gb",(function(){return o.l})),n.d(t,"hb",(function(){return o.m})),n.d(t,"U",(function(){return o.a})),n.d(t,"bb",(function(){return o.g})),n.d(t,"Y",(function(){return o.e})),n.d(t,"lb",(function(){return o.r})),n.d(t,"Z",(function(){return o.f})),n.d(t,"mb",(function(){return o.s})),n.d(t,"eb",(function(){return o.j})),n.d(t,"jb",(function(){return o.p})),n.d(t,"kb",(function(){return o.q})),n.d(t,"V",(function(){return o.b})),n.d(t,"K",(function(){return f})),n.d(t,"e",(function(){return b})),n.d(t,"nb",(function(){return v})),n(238);var a=n(207),i=n(112),r=n(43),o=n(433);const s=r.exact(r.partial({id:r.string,rule_id:a.I,list_id:i.k,item_id:i.k})),l=r.exact(r.type({error:r.type({status_code:o.o,message:o.h})})),c=r.intersection([s,l]),u=i.o,d=(r.union([u,r[void 0]]),i.n),p=(r.union([d,r[void 0]]),r.type({page:u,per_page:d,total:i.n}));var m=n(8);const f=r.keyof({asc:null,desc:null}),g=(r.union([f,r[void 0]]),e=>new r.Type(`DefaultSortOrder${Object(m.capitalize)(e)}`,f.is,((t,n)=>null==t?r.success(e):f.validate(t,n)),r.identity)),b=(g("asc"),g("desc")),y=r.exact(r.partial({buttonLabel:r.string})),h=r.exact(r.type({type:r.string,message:r.string,actionPath:r.string})),v=r.intersection([y,h])},function(e,t,n){"use strict";n.d(t,"o",(function(){return r})),n.d(t,"E",(function(){return o})),n.d(t,"a",(function(){return c})),n.d(t,"c",(function(){return u})),n.d(t,"e",(function(){return d})),n.d(t,"f",(function(){return p})),n.d(t,"j",(function(){return m})),n.d(t,"k",(function(){return f})),n.d(t,"n",(function(){return g})),n.d(t,"l",(function(){return b})),n.d(t,"m",(function(){return y})),n.d(t,"p",(function(){return h})),n.d(t,"s",(function(){return k})),n.d(t,"t",(function(){return w})),n.d(t,"z",(function(){return I})),n.d(t,"D",(function(){return T})),n.d(t,"G",(function(){return C})),n.d(t,"H",(function(){return M})),n.d(t,"J",(function(){return A})),n.d(t,"M",(function(){return _})),n.d(t,"P",(function(){return F})),n.d(t,"S",(function(){return N})),n.d(t,"V",(function(){return v})),n.d(t,"W",(function(){return E})),n.d(t,"fb",(function(){return x})),n.d(t,"gb",(function(){return D})),n.d(t,"hb",(function(){return j})),n.d(t,"jb",(function(){return O})),n.d(t,"kb",(function(){return S})),n.d(t,"qb",(function(){return s})),n.d(t,"sb",(function(){return a})),n.d(t,"tb",(function(){return l})),n.d(t,"q",(function(){return B})),n.d(t,"r",(function(){return z})),n.d(t,"u",(function(){return $})),n.d(t,"v",(function(){return V})),n.d(t,"w",(function(){return U})),n.d(t,"x",(function(){return G})),n.d(t,"A",(function(){return H})),n.d(t,"B",(function(){return W})),n.d(t,"C",(function(){return Q})),n.d(t,"F",(function(){return Y})),n.d(t,"I",(function(){return K})),n.d(t,"K",(function(){return X})),n.d(t,"L",(function(){return J})),n.d(t,"N",(function(){return Z})),n.d(t,"O",(function(){return ee})),n.d(t,"Q",(function(){return te})),n.d(t,"R",(function(){return ne})),n.d(t,"T",(function(){return ae})),n.d(t,"U",(function(){return ie})),n.d(t,"Y",(function(){return de})),n.d(t,"Z",(function(){return ue})),n.d(t,"ab",(function(){return se})),n.d(t,"bb",(function(){return ce})),n.d(t,"cb",(function(){return oe})),n.d(t,"db",(function(){return le})),n.d(t,"eb",(function(){return pe})),n.d(t,"ib",(function(){return me})),n.d(t,"lb",(function(){return fe})),n.d(t,"nb",(function(){return P})),n.d(t,"ob",(function(){return R})),n.d(t,"pb",(function(){return L})),n.d(t,"rb",(function(){return q})),n.d(t,"b",(function(){return ge})),n.d(t,"g",(function(){return be})),n.d(t,"h",(function(){return ye})),n.d(t,"d",(function(){return he})),n.d(t,"i",(function(){return ve})),n.d(t,"y",(function(){return Ee})),n.d(t,"mb",(function(){return xe})),n.d(t,"X",(function(){return je}));const a="@timestamp",i="kibana",r=`${i}.alert`,o=`${r}.rule`,s=`${i}.space_ids`,l=`${i}.version`,c=`${r}.action_group`,u=`${r}.case_ids`,d=`${r}.duration.us`,p=`${r}.end`,m=`${r}.flapping`,f=`${r}.flapping_history`,g=`${r}.maintenance_window_ids`,b=`${r}.instance.id`,y=`${r}.last_detected`,h=`${r}.reason`,v=`${r}.start`,E=`${r}.status`,x=`${r}.time_range`,j=`${r}.uuid`,O=`${r}.workflow_status`,S=`${r}.workflow_tags`,k=`${o}.category`,w=`${o}.consumer`,I=`${o}.execution.uuid`,T=`${o}.name`,C=`${o}.parameters`,M=`${o}.producer`,A=`${o}.revision`,_=`${o}.tags`,F=`${o}.rule_type_id`,D=`${r}.url`,N=`${o}.uuid`,P="ecs.version",R="event.action",L="event.kind",q="tags",B=`${r}.risk_score`,z=`${o}.author`,$=`${o}.created_at`,V=`${o}.created_by`,U=`${o}.description`,G=`${o}.enabled`,H=`${o}.from`,W=`${o}.interval`,Q=`${o}.license`,Y=`${o}.note`,K=`${o}.references`,X=`${o}.rule_id`,J=`${o}.rule_name_override`,Z=`${o}.to`,ee=`${o}.type`,te=`${o}.updated_at`,ne=`${o}.updated_by`,ae=`${o}.version`,ie=`${r}.severity`,re=`${r}.suppression`,oe=`${re}.terms`,se=`${oe}.field`,le=`${oe}.value`,ce=`${re}.start`,ue=`${re}.end`,de=`${re}.docs_count`,pe=`${r}.system_status`,me=`${r}.workflow_reason`,fe=`${r}.workflow_user`,ge=`${r}.building_block_type`,be=`${r}.evaluation.threshold`,ye=`${r}.evaluation.value`,he=`${r}.context`,ve=`${r}.evaluation.values`,Ee=`${o}.exceptions_list`,xe={APM:"apm",LOGS:"logs",INFRASTRUCTURE:"infrastructure",OBSERVABILITY:"observability",SLO:"slo",SIEM:"siem",UPTIME:"uptime"},je=(Object.values(xe).map((e=>e)),"recovered")},function(e,t,n){"use strict";e.exports=function e(t,n){if(t===n)return!0;if(t&&n&&"object"==typeof t&&"object"==typeof n){if(t.constructor!==n.constructor)return!1;var a,i,r;if(Array.isArray(t)){if((a=t.length)!=n.length)return!1;for(i=a;0!=i--;)if(!e(t[i],n[i]))return!1;return!0}if(t.constructor===RegExp)return t.source===n.source&&t.flags===n.flags;if(t.valueOf!==Object.prototype.valueOf)return t.valueOf()===n.valueOf();if(t.toString!==Object.prototype.toString)return t.toString()===n.toString();if((a=(r=Object.keys(t)).length)!==Object.keys(n).length)return!1;for(i=a;0!=i--;)if(!Object.prototype.hasOwnProperty.call(n,r[i]))return!1;for(i=a;0!=i--;){var o=r[i];if(!e(t[o],n[o]))return!1}return!0}return t!=t&&n!=n}},function(e,t,n){"use strict";var a=n(4);n.d(t,"a",(function(){return a.wc}))},function(e,t,n){"use strict";n.d(t,"c",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"e",(function(){return g})),n.d(t,"a",(function(){return b})),n.d(t,"b",(function(){return y}));var a=n(76),i=n.n(a),r=n(2),o=n.n(r),s=n(44),l=n(102),c=n(117),u=n(907),d=n(712);const p=o.a.memo((({value:e,dateFormat:t=Object(l.g)()})=>o.a.createElement(o.a.Fragment,null,i.a.tz(e,Object(l.m)()).format(t))));p.displayName="PreferenceFormattedDate";const m=({value:e})=>{if(null==e)return Object(c.f)(e);const t=Object(d.a)(e);if(!t.isValid())return Object(c.f)(e);const n=t.toDate();return o.a.createElement(p,{value:n})};m.displayName="PreferenceFormattedDateFromPrimitive";const f=e=>Array.isArray(e)&&"P1DT"===e[0]&&2===e.length,g=o.a.memo((({value:e})=>{const[t]=Object(l.p)("dateFormat:scaled"),n=Array.isArray(t)?t.find(f):null,a=Array.isArray(n)&&2===n.length?n[1]:"YYYY-MM-DD";return o.a.createElement(p,{dateFormat:a,value:e})}));g.displayName="PreferenceFormattedP1DTDate";const b=o.a.memo((({value:e,fieldName:t,className:n="",dateFormat:a})=>{if(null==e)return Object(c.f)(e);const i=Object(d.a)(e);return i.isValid()?o.a.createElement(u.a,{date:i.toDate(),fieldName:t,className:n},o.a.createElement(p,{value:i.toDate(),dateFormat:a})):Object(c.f)(e)}));b.displayName="FormattedDate";const y=o.a.memo((({value:e,dateFormat:t,tooltipFieldName:n,tooltipAnchorClassName:a,relativeThresholdInHrs:r=1})=>{if(null==e)return Object(c.f)(e);const l=Object(d.a)(e);if(!l.isValid())return Object(c.f)(e);const m=l.toDate(),f=i()(m).add(r,"hours").isBefore(new Date);return o.a.createElement(u.a,{date:m,fieldName:n,className:a},f?o.a.createElement(p,{"data-test-subj":"preference-time",value:m,dateFormat:t}):o.a.createElement(s.FormattedRelative,{"data-test-subj":"relative-time",value:m}))}));y.displayName="FormattedRelativePreferenceDate"},function(e,t,n){"use strict";n.d(t,"b",(function(){return c})),n.d(t,"a",(function(){return u}));var a=n(118),i=n(106),r=n(190),o=n(387);const{from:s,to:l}=Object(o.a)({from:"",to:""},!1),c={activeTab:a.d.query,prevActiveTab:a.d.query,columns:r.b,documentType:"",defaultColumns:r.b,dataProviders:[],dataViewId:null,dateRange:{start:s,end:l},description:"",eqlOptions:{eventCategoryField:"event.category",tiebreakerField:"",timestampField:"@timestamp",query:"",size:100},eventType:"all",eventIdToNoteIds:{},excludedRowRendererIds:[],expandedDetail:{},highlightedDropAndProviderId:"",historyIds:[],indexNames:[],isFavorite:!1,isLive:!1,isLoading:!1,isSaving:!1,itemsPerPage:25,itemsPerPageOptions:[10,25,50,100],kqlMode:"filter",kqlQuery:{filterQuery:null},loadingEventIds:[],resolveTimelineConfig:void 0,queryFields:[],title:"",timelineType:i.l.default,templateTimelineId:null,templateTimelineVersion:null,noteIds:[],pinnedEventIds:{},pinnedEventsSaveObject:{},savedObjectId:null,selectAll:!1,sessionViewConfig:null,show:!1,sort:[{columnId:"@timestamp",columnType:"date",esTypes:["date"],sortDirection:"desc"}],status:i.k.draft,version:null,deletedEventIds:[],selectedEventIds:{},isSelectAllChecked:!1,filters:[]},u=e=>({defaultColumns:r.b,documentType:"",selectAll:!1,id:e,isLoading:!1,queryFields:[],title:"",graphEventId:""})},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(42),i=n(2),r=n(103),o=n(114),s=n(105),l=n(122),c=n(182);const u=()=>{const e=Object(r.useDispatch)(),{from:t,to:n}=Object(s.a)((e=>Object(a.pick)(["from","to"],l.d.globalTimeRangeSelector(e)))),[u,d]=Object(i.useState)(!0),p=Object(i.useRef)([]),m=Object(i.useCallback)((({id:t,inspect:n,loading:a,refetch:i,searchSessionId:r})=>{p.current=[...p.current,t],e(c.c.setQuery({inputId:o.a.global,id:t,inspect:n,loading:a,refetch:i,searchSessionId:r}))}),[e]),f=Object(i.useCallback)((({id:t})=>e(c.c.deleteOneQuery({inputId:o.a.global,id:t}))),[e]);return Object(i.useEffect)((()=>{d(!1)}),[]),Object(i.useEffect)((()=>()=>{p.current.length>0&&p.current.forEach((e=>f({id:e})))}),[f]),Object(i.useMemo)((()=>({isInitializing:u,from:t,to:n,setQuery:m,deleteQuery:f})),[f,t,u,m,n])}},function(e,t,n){"use strict";n.d(t,"H",(function(){return i})),n.d(t,"y",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"U",(function(){return s})),n.d(t,"p",(function(){return l})),n.d(t,"r",(function(){return c})),n.d(t,"q",(function(){return u})),n.d(t,"s",(function(){return d})),n.d(t,"n",(function(){return p})),n.d(t,"o",(function(){return m})),n.d(t,"u",(function(){return f})),n.d(t,"v",(function(){return g})),n.d(t,"t",(function(){return b})),n.d(t,"l",(function(){return y})),n.d(t,"m",(function(){return h})),n.d(t,"h",(function(){return v})),n.d(t,"i",(function(){return E})),n.d(t,"g",(function(){return x})),n.d(t,"e",(function(){return j})),n.d(t,"f",(function(){return O})),n.d(t,"d",(function(){return S})),n.d(t,"A",(function(){return k})),n.d(t,"G",(function(){return w})),n.d(t,"c",(function(){return I})),n.d(t,"z",(function(){return T})),n.d(t,"F",(function(){return C})),n.d(t,"b",(function(){return M})),n.d(t,"E",(function(){return A})),n.d(t,"w",(function(){return _})),n.d(t,"x",(function(){return F})),n.d(t,"J",(function(){return D})),n.d(t,"j",(function(){return N})),n.d(t,"k",(function(){return P})),n.d(t,"D",(function(){return R})),n.d(t,"I",(function(){return L})),n.d(t,"K",(function(){return q})),n.d(t,"L",(function(){return B})),n.d(t,"T",(function(){return z})),n.d(t,"M",(function(){return $})),n.d(t,"N",(function(){return V})),n.d(t,"S",(function(){return U})),n.d(t,"Q",(function(){return G})),n.d(t,"P",(function(){return H})),n.d(t,"O",(function(){return W})),n.d(t,"R",(function(){return Q})),n.d(t,"C",(function(){return Y})),n.d(t,"B",(function(){return K}));var a=n(5);a.i18n.translate("xpack.securitySolution.detectionEngine.pageTitle",{defaultMessage:"Detection engine"}),a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.documentTypeTitle",{defaultMessage:"Alerts"});const i=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.openAlertsTitle",{defaultMessage:"Open"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.closedAlertsTitle",{defaultMessage:"Closed"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.acknowledgedAlertsTitle",{defaultMessage:"Acknowledged"}),s=(a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.loadingAlertsTitle",{defaultMessage:"Loading Alerts"}),a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.totalCountOfAlertsTitle",{defaultMessage:"alerts"})),l=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.ruleTitle",{defaultMessage:"Rule"}),c=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.ruleNameTitle",{defaultMessage:"Rule name"}),u=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.ruleDescriptionTitle",{defaultMessage:"Rule description"}),d=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.severityTitle",{defaultMessage:"Severity"}),p=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.reasonTitle",{defaultMessage:"Reason"}),m=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.riskScoreTitle",{defaultMessage:"Risk Score"}),f=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.thresholdCount",{defaultMessage:"Event Count"}),g=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.thresholdTerms",{defaultMessage:"Threshold Terms"}),b=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.thresholdCardinality",{defaultMessage:"Event Cardinality"}),y=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.newTerms",{defaultMessage:"New Terms"}),h=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.newTermsFields",{defaultMessage:"New Terms fields"}),v=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.investigateInTimelineTitle",{defaultMessage:"Investigate in timeline"}),E=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.investigateInTimelineAriaLabel",{defaultMessage:"Send alert to timeline"}),x=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addException",{defaultMessage:"Add rule exception"}),j=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addEventFilter",{defaultMessage:"Add Endpoint event filter"}),O=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addEventFilter.disabled.tooltip",{defaultMessage:"Endpoint event filters can be created from the Events section of the Hosts page."}),S=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addEndpointException",{defaultMessage:"Add Endpoint exception"}),k=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.closedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully closed {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."}),w=(a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.alertDurationTitle",{defaultMessage:"Alert duration"}),e=>a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.openedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully opened {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."})),I=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.acknowledgedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully marked {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}} as acknowledged."}),T=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.closedAlertFailedToastMessage",{defaultMessage:"Failed to close alert(s)."}),C=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.openedAlertFailedToastMessage",{defaultMessage:"Failed to open alert(s)"}),M=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.acknowledgedAlertFailedToastMessage",{defaultMessage:"Failed to mark alert(s) as acknowledged"}),A=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.moreActionsAriaLabel",{defaultMessage:"More actions"}),_=(a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.statusTitle",{defaultMessage:"Status"}),a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.overview.changeAlertStatus",{defaultMessage:"Change alert status"})),F=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.overview.clickToChangeAlertStatus",{defaultMessage:"Click to change alert status"}),D=a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.overviewTable.signalStatusTitle",{defaultMessage:"Status"}),N=(a.i18n.translate("xpack.securitySolution.eventsViewer.alerts.defaultHeaders.triggeredTitle",{defaultMessage:"Triggered"}),a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addToCase",{defaultMessage:"Add to existing case"})),P=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addToNewCase",{defaultMessage:"Add to new case"}),R=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.addBulkToTimeline",{defaultMessage:"Investigate in timeline"}),L=a.i18n.translate("xpack.securitySolution.sessionsView.sessionsTitle",{defaultMessage:"Sessions"}),q=(a.i18n.translate("xpack.securitySolution.detectionEngine.groups.additionalActions.takeAction",{defaultMessage:"Take actions"}),a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.alertsCount",{defaultMessage:"Alerts:"})),B=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.hostsCount",{defaultMessage:"Hosts:"}),z=(a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.ipsCount",{defaultMessage:"IP's:"}),a.i18n.translate("xpack.securitySolution.detectionEngine.selectGroup.title",{defaultMessage:"Group alerts by"}),a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.usersCount",{defaultMessage:"Users:"})),$=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.rulesCount",{defaultMessage:"Rules:"}),V=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity",{defaultMessage:"Severity:"}),U=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity.multi",{defaultMessage:"Multi"}),G=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity.low",{defaultMessage:"Low"}),H=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity.high",{defaultMessage:"High"}),W=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity.critical",{defaultMessage:"Critical"}),Q=a.i18n.translate("xpack.securitySolution.detectionEngine.groups.stats.severity.medium",{defaultMessage:"Medium"}),Y=a.i18n.translate("xpack.securitySolution.detectionsEngine.grouping.inspectTitle",{defaultMessage:"Grouping query"}),K={timestamp:a.i18n.translate("xpack.securitySolution.EventRenderedView.timestampTitle.column",{defaultMessage:"Timestamp"}),rule:a.i18n.translate("xpack.securitySolution.EventRenderedView.ruleTitle.column",{defaultMessage:"Rule"}),eventSummary:a.i18n.translate("xpack.securitySolution.EventRenderedView.eventSummary.column",{defaultMessage:"Event Summary"})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return g}));var a=n(42),i=n(2),r=n.n(i),o=n(1073),s=n(774),l=n(355),c=n(356);const u=[{id:"default-system-prompt",content:c.b,name:c.a,promptType:"system"},{id:"CB9FA555-B59F-4F71-AFF9-8A891AC5BC28",content:c.d,name:c.c,promptType:"system"}];var d=n(372),p=n(21);const m=r.a.createContext(void 0),f=({actionTypeRegistry:e,assistantAvailability:t,assistantTelemetry:n,augmentMessageCodeBlocks:r,baseAllow:c,baseAllowReplacement:f,defaultAllow:g,defaultAllowReplacement:b,docLinks:y,basePromptContexts:h=[],baseQuickPrompts:v=[],baseSystemPrompts:E=u,children:x,getComments:j,http:O,getInitialConversations:S,nameSpace:k="elasticAssistantDefault",setConversations:w,setDefaultAllow:I,setDefaultAllowReplacement:T,title:C=l.c})=>{const[M,A]=Object(o.useLocalStorage)(`${k}.quickPrompts`,v),[_,F]=Object(o.useLocalStorage)(`${k}.systemPrompts`,E),[D,N]=Object(o.useLocalStorage)(`${k}.lastConversationId`),[P,R]=Object(i.useState)({}),L=Object(i.useCallback)((e=>{R((t=>null!=e&&null==t[e.id]?Object(s.b)({prevPromptContexts:t,promptContext:e}):t))}),[]),q=Object(i.useCallback)((e=>R((t=>null==t[e]?t:Object(a.omit)(e,t)))),[]),[B,z]=Object(i.useState)((e=>{})),[$,V]=Object(i.useState)(d.b),[U,G]=Object(i.useState)(S()),H=Object(i.useMemo)((()=>Object.keys(U).sort()),[U]);Object(i.useEffect)((()=>{G(S())}),[S]);const W=Object(i.useCallback)((e=>{if("function"==typeof e){const t=e;G((e=>{const n=t(e);return w(n),n}))}else w(e),G(e)}),[w]),Q=Object(i.useMemo)((()=>({actionTypeRegistry:e,assistantAvailability:t,assistantTelemetry:n,augmentMessageCodeBlocks:r,allQuickPrompts:null!=M?M:[],allSystemPrompts:null!=_?_:[],baseAllow:Object(a.uniq)(c),baseAllowReplacement:Object(a.uniq)(f),basePromptContexts:h,baseQuickPrompts:v,baseSystemPrompts:E,conversationIds:H,conversations:U,defaultAllow:Object(a.uniq)(g),defaultAllowReplacement:Object(a.uniq)(b),docLinks:y,getComments:j,http:O,promptContexts:P,nameSpace:k,registerPromptContext:L,selectedSettingsTab:$,setAllQuickPrompts:A,setAllSystemPrompts:F,setConversations:W,setDefaultAllow:I,setDefaultAllowReplacement:T,setSelectedSettingsTab:V,setShowAssistantOverlay:z,showAssistantOverlay:B,title:C,unRegisterPromptContext:q,localStorageLastConversationId:D,setLastConversationId:N})),[e,t,n,r,c,f,h,v,E,H,U,g,b,y,j,O,D,M,_,k,W,P,L,$,I,T,N,A,F,V,B,C,q]);return Object(p.jsx)(m.Provider,{value:Q},x)},g=()=>{const e=r.a.useContext(m);if(null==e)throw new Error("useAssistantContext must be used within a AssistantProvider");return e}},function(e,t,n){"use strict";n.d(t,"cc",(function(){return i})),n.d(t,"Lb",(function(){return r})),n.d(t,"Nb",(function(){return o})),n.d(t,"Zc",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"bc",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"Bb",(function(){return d})),n.d(t,"dc",(function(){return p})),n.d(t,"f",(function(){return m})),n.d(t,"r",(function(){return f})),n.d(t,"p",(function(){return g})),n.d(t,"s",(function(){return b})),n.d(t,"q",(function(){return y})),n.d(t,"m",(function(){return h})),n.d(t,"t",(function(){return v})),n.d(t,"w",(function(){return E})),n.d(t,"g",(function(){return x})),n.d(t,"n",(function(){return j})),n.d(t,"i",(function(){return O})),n.d(t,"o",(function(){return S})),n.d(t,"j",(function(){return k})),n.d(t,"h",(function(){return w})),n.d(t,"v",(function(){return I})),n.d(t,"u",(function(){return T})),n.d(t,"W",(function(){return C})),n.d(t,"U",(function(){return M})),n.d(t,"V",(function(){return A})),n.d(t,"Y",(function(){return _})),n.d(t,"A",(function(){return F})),n.d(t,"l",(function(){return D})),n.d(t,"y",(function(){return N})),n.d(t,"k",(function(){return P})),n.d(t,"z",(function(){return R})),n.d(t,"X",(function(){return L})),n.d(t,"S",(function(){return q})),n.d(t,"K",(function(){return B})),n.d(t,"B",(function(){return z})),n.d(t,"M",(function(){return $})),n.d(t,"C",(function(){return V})),n.d(t,"E",(function(){return U})),n.d(t,"F",(function(){return G})),n.d(t,"D",(function(){return H})),n.d(t,"L",(function(){return W})),n.d(t,"N",(function(){return Q})),n.d(t,"O",(function(){return Y})),n.d(t,"G",(function(){return K})),n.d(t,"P",(function(){return X})),n.d(t,"H",(function(){return J})),n.d(t,"T",(function(){return Z})),n.d(t,"J",(function(){return ee})),n.d(t,"I",(function(){return te})),n.d(t,"Q",(function(){return ne})),n.d(t,"R",(function(){return ae})),n.d(t,"Gb",(function(){return ie})),n.d(t,"Pc",(function(){return re})),n.d(t,"Oc",(function(){return oe})),n.d(t,"Uc",(function(){return se})),n.d(t,"Sc",(function(){return le})),n.d(t,"ab",(function(){return ce})),n.d(t,"Rc",(function(){return ue})),n.d(t,"Cb",(function(){return de})),n.d(t,"Qb",(function(){return pe})),n.d(t,"Rb",(function(){return me})),n.d(t,"Ab",(function(){return fe})),n.d(t,"Hb",(function(){return ge})),n.d(t,"xb",(function(){return be})),n.d(t,"mb",(function(){return ye})),n.d(t,"lb",(function(){return he})),n.d(t,"nb",(function(){return ve})),n.d(t,"gb",(function(){return Ee})),n.d(t,"ib",(function(){return xe})),n.d(t,"hb",(function(){return je})),n.d(t,"pb",(function(){return Oe})),n.d(t,"bb",(function(){return Se})),n.d(t,"ob",(function(){return ke})),n.d(t,"eb",(function(){return we})),n.d(t,"fb",(function(){return Ie})),n.d(t,"jb",(function(){return Te})),n.d(t,"kb",(function(){return Ce})),n.d(t,"cb",(function(){return Me})),n.d(t,"db",(function(){return Ae})),n.d(t,"Eb",(function(){return _e})),n.d(t,"zb",(function(){return Fe})),n.d(t,"rb",(function(){return De})),n.d(t,"Db",(function(){return Ne})),n.d(t,"Xc",(function(){return Pe})),n.d(t,"Qc",(function(){return Re})),n.d(t,"Fc",(function(){return Le})),n.d(t,"Yb",(function(){return qe})),n.d(t,"Hc",(function(){return Be})),n.d(t,"Sb",(function(){return ze})),n.d(t,"Xb",(function(){return $e})),n.d(t,"Tb",(function(){return Ve})),n.d(t,"Ub",(function(){return Ue})),n.d(t,"Vb",(function(){return Ge})),n.d(t,"Wb",(function(){return He})),n.d(t,"sb",(function(){return We})),n.d(t,"b",(function(){return Qe})),n.d(t,"Nc",(function(){return Ye})),n.d(t,"Gc",(function(){return Ke})),n.d(t,"tb",(function(){return Xe})),n.d(t,"a",(function(){return Je})),n.d(t,"Mc",(function(){return Ze})),n.d(t,"c",(function(){return et})),n.d(t,"Zb",(function(){return tt})),n.d(t,"qb",(function(){return nt})),n.d(t,"ub",(function(){return at})),n.d(t,"Mb",(function(){return it})),n.d(t,"Tc",(function(){return rt})),n.d(t,"Ob",(function(){return ot})),n.d(t,"ac",(function(){return st})),n.d(t,"Wc",(function(){return lt})),n.d(t,"Jb",(function(){return ct})),n.d(t,"Kb",(function(){return ut})),n.d(t,"x",(function(){return dt})),n.d(t,"Vc",(function(){return pt})),n.d(t,"wb",(function(){return mt})),n.d(t,"vb",(function(){return ft})),n.d(t,"ec",(function(){return gt})),n.d(t,"Z",(function(){return bt})),n.d(t,"Dc",(function(){return yt})),n.d(t,"Ec",(function(){return ht})),n.d(t,"Cc",(function(){return vt})),n.d(t,"Ac",(function(){return Et})),n.d(t,"Bc",(function(){return xt})),n.d(t,"pc",(function(){return jt})),n.d(t,"qc",(function(){return Ot})),n.d(t,"nc",(function(){return St})),n.d(t,"oc",(function(){return kt})),n.d(t,"hc",(function(){return wt})),n.d(t,"ic",(function(){return It})),n.d(t,"fc",(function(){return Tt})),n.d(t,"gc",(function(){return Ct})),n.d(t,"yc",(function(){return Mt})),n.d(t,"zc",(function(){return At})),n.d(t,"wc",(function(){return _t})),n.d(t,"xc",(function(){return Ft})),n.d(t,"lc",(function(){return Dt})),n.d(t,"mc",(function(){return Nt})),n.d(t,"jc",(function(){return Pt})),n.d(t,"kc",(function(){return Rt})),n.d(t,"tc",(function(){return Lt})),n.d(t,"vc",(function(){return qt})),n.d(t,"uc",(function(){return Bt})),n.d(t,"rc",(function(){return zt})),n.d(t,"sc",(function(){return $t})),n.d(t,"Lc",(function(){return Vt})),n.d(t,"Ic",(function(){return Ut})),n.d(t,"Fb",(function(){return Gt})),n.d(t,"yb",(function(){return Ht})),n.d(t,"Jc",(function(){return Wt})),n.d(t,"Pb",(function(){return Qt})),n.d(t,"Yc",(function(){return Yt})),n.d(t,"Ib",(function(){return Kt})),n.d(t,"Kc",(function(){return Xt}));var a=n(5);const i=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.popoverTooltip.ariaLabel",{defaultMessage:"Tooltip for column: {columnName}",values:{columnName:e}}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.importRuleTitle",{defaultMessage:"Import rules"}),o=a.i18n.translate("xpack.securitySolution.lists.detectionEngine.rules.importValueListsButton",{defaultMessage:"Import value lists"}),s=a.i18n.translate("xpack.securitySolution.lists.detectionEngine.rules.uploadValueListsButtonTooltip",{defaultMessage:"Use value lists to create an exception when a field value matches a value found in a list"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.addNewRuleTitle",{defaultMessage:"Create new rule"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.pageTitle",{defaultMessage:"Rules"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.addPageTitle",{defaultMessage:"Create"}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.editPageTitle",{defaultMessage:"Edit"}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.refreshTitle",{defaultMessage:"Refresh"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.batchActionsTitle",{defaultMessage:"Bulk actions"}),f=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.enableTitle",{defaultMessage:"Enable"}),g=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.disableTitle",{defaultMessage:"Disable"}),b=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.exportTitle",{defaultMessage:"Export"}),y=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicateTitle",{defaultMessage:"Duplicate"}),h=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.deleteTitle",{defaultMessage:"Delete"}),v=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.indexPatternsTitle",{defaultMessage:"Index patterns"}),E=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.tagsTitle",{defaultMessage:"Tags"}),x=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.addIndexPatternsTitle",{defaultMessage:"Add index patterns"}),j=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.deleteIndexPatternsTitle",{defaultMessage:"Delete index patterns"}),O=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.addTagsTitle",{defaultMessage:"Add tags"}),S=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.deleteTagsTitle",{defaultMessage:"Delete tags"}),k=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.applyTimelineTemplateTitle",{defaultMessage:"Apply Timeline template"}),w=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.addRuleActionsTitle",{defaultMessage:"Add rule actions"}),I=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.setScheduleTitle",{defaultMessage:"Update rule schedules"}),T=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.contextMenuTitle",{defaultMessage:"Options"}),C=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkEditWarningToastTitle",{defaultMessage:"Rules updates are in progress"}),M=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkEditWarningToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} updating."}),A=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkEditWarningToastNotifyButtonLabel",{defaultMessage:"Notify me when done"}),_=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkExportConfirmationDeniedTitle",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule} other {# rules}} cannot be exported"}),F=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkEditConfirmationDeniedTitle",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule} other {# rules}} cannot be edited"}),D=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.bulkActionConfirmationPartlyTitle",{values:{customRulesCount:e},defaultMessage:"This action can only be applied to {customRulesCount, plural, =1 {# custom rule} other {# custom rules}}"}),N=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditConfirmationCancelButtonLabel",{defaultMessage:"Cancel"}),P=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkActionConfirmationCloseButtonLabel",{defaultMessage:"Close"}),R=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditConfirmation.confirmButtonLabel",{values:{customRulesCount:e},defaultMessage:"Edit {customRulesCount, plural, =1 {# custom rule} other {# custom rules}}"}),L=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkExportConfirmation.confirmButtonLabel",{values:{customRulesCount:e},defaultMessage:"Export {customRulesCount, plural, =1 {# custom rule} other {# custom rules}}"}),q=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.saveButtonLabel",{defaultMessage:"Save"}),B=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.cancelButtonLabel",{defaultMessage:"Cancel"}),z=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addIndexPatternsComboboxHelpText",{defaultMessage:"Enter the pattern of Elasticsearch indices that you would like to add. By default, the dropdown includes index patterns defined in Security Solution advanced settings."}),$=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteIndexPatternsComboboxHelpText",{defaultMessage:"Enter the pattern of Elasticsearch indices that you would like to delete. By default, the dropdown includes index patterns defined in Security Solution advanced settings."}),V=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addIndexPatternsComboboxLabel",{defaultMessage:"Add index patterns for selected rules"}),U=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.indexPatternsRequiredErrorMessage",{defaultMessage:"A minimum of one index pattern is required."}),G=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addIndexPatternsTitle",{defaultMessage:"Add index patterns"}),H=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addIndexPatternsOverwriteCheckboxLabel",{defaultMessage:"Overwrite all selected rules' index patterns"}),W=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.dataViewsOverwriteCheckboxLabel",{defaultMessage:"Apply changes to rules configured with data views"}),Q=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteIndexPatternsComboboxLabel",{defaultMessage:"Delete index patterns for selected rules"}),Y=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteIndexPatternsTitle",{defaultMessage:"Delete index patterns"}),K=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addTagsComboboxHelpText",{defaultMessage:"Add one or more tags for selected rules from the dropdown. You can also enter custom identifying tags and press Enter to begin a new one."}),X=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteTagsComboboxHelpText",{defaultMessage:"Delete one or more tags for selected rules from the dropdown. You can also enter custom identifying tags and press Enter to begin a new one."}),J=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addTagsComboboxLabel",{defaultMessage:"Add tags for selected rules"}),Z=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.tagsComoboxRequiredErrorMessage",{defaultMessage:"A minimum of one tag is required."}),ee=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addTagsTitle",{defaultMessage:"Add tags"}),te=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.addTagsOverwriteCheckboxLabel",{defaultMessage:"Overwrite all selected rules' tags"}),ne=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteTagsComboboxLabel",{defaultMessage:"Delete tags for selected rules"}),ae=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkActions.bulkEditFlyoutForm.deleteTagsTitle",{defaultMessage:"Delete tags"}),ie=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.exportFilenameTitle",{defaultMessage:"rules_export"}),re=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.searchAriaLabel",{defaultMessage:"Search rules"}),oe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.searchPlaceholder",{defaultMessage:'Rule name, index pattern (e.g., "filebeat-*"), or MITRE ATT&CK™ tactic or technique (e.g., "Defense Evasion" or "TA0005")'}),se=(e,t,n)=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.showingRulesTitle",{values:{firstInPage:e,lastOfPage:t,totalRules:n},defaultMessage:"Showing {firstInPage}-{lastOfPage} of {totalRules} {totalRules, plural, =1 {rule} other {rules}}"}),le=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.selectAllRulesTitle",{values:{totalRules:e},defaultMessage:"Select all {totalRules} {totalRules, plural, =1 {rule} other {rules}}"}),ce=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.clearSelectionTitle",{defaultMessage:"Clear selection"}),ue=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.selectedRulesTitle",{values:{selectedRules:e},defaultMessage:"Selected {selectedRules} {selectedRules, plural, =1 {rule} other {rules}}"}),de=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.editRuleSettingsDescription",{defaultMessage:"Edit rule settings"}),pe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.lackOfKibanaActionsFeaturePrivileges",{defaultMessage:"You do not have Kibana Actions privileges"}),me=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.lackOfKibanaSecurityPrivileges",{defaultMessage:"You do not have Kibana Security privileges"}),fe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.duplicateRuleDescription",{defaultMessage:"Duplicate rule"}),ge=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.exportRuleDescription",{defaultMessage:"Export rule"}),be=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.actions.deleteRuleDescription",{defaultMessage:"Delete rule"}),ye=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.ruleTitle",{defaultMessage:"Rule"}),he=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.riskScoreTitle",{defaultMessage:"Risk score"}),ve=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.severityTitle",{defaultMessage:"Severity"}),Ee=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.lastRunTitle",{defaultMessage:"Last run"}),xe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.lastUpdateTitle",{defaultMessage:"Last updated"}),je=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.lastResponseTitle",{defaultMessage:"Last response"}),Oe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.tagsTitle",{defaultMessage:"Tags"}),Se=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.enabledTitle",{defaultMessage:"Enabled"}),ke=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.snoozeTitle",{defaultMessage:"Notify"}),we=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.indexingTimes",{defaultMessage:"Indexing Time (ms)"}),Ie=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.indexingTimesTooltip",{defaultMessage:"Total time spent indexing alerts during last Rule execution"}),Te=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.queryTimes",{defaultMessage:"Query Time (ms)"}),Ce=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.queryTimesTooltip",{defaultMessage:"Total time spent querying source indices during last Rule execution"}),Me=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.gap",{defaultMessage:"Last Gap (if any)"}),Ae=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.columns.gapTooltipSeeDocsDescription",{defaultMessage:"see documentation"}),_e=(a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.tabs.rules",{defaultMessage:"Rules"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.tabs.monitoring",{defaultMessage:"Rule Monitoring"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.enabledRulesTitle",{defaultMessage:"Enabled rules"})),Fe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.disabledRulesTitle",{defaultMessage:"Disabled rules"}),De=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.customRulesTitle",{defaultMessage:"Custom rules"}),Ne=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.elasticRulesTitle",{defaultMessage:"Elastic rules"}),Pe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.tagsLabel",{defaultMessage:"Tags"}),Re=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.searchTagsPlaceholder",{defaultMessage:"Search tags"}),Le=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.rulesTagSearchText",{defaultMessage:"Rules tag search"}),qe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.noTagsAvailableDescription",{defaultMessage:"No tags available"}),Be=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.ruleExecutionStatusFilter",{defaultMessage:"Select rule execution status to filter by"}),ze=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.noRulesTitle",{defaultMessage:"No rules found"}),$e=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.filters.noRulesBodyTitle",{defaultMessage:"We weren't able to find any rules with the above filters."}),Ve=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.addRules.noRulesTitle",{defaultMessage:"All Elastic rules have been installed"}),Ue=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.addRules.noRulesBodyTitle",{defaultMessage:"There are no prebuilt detection rules available for installation"}),Ge=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.upgradeRules.noRulesTitle",{defaultMessage:"All Elastic rules are up to date"}),He=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.upgradeRules.noRulesBodyTitle",{defaultMessage:"There are currently no available updates to your installed Elastic rules."}),We=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.defineRuleTitle",{defaultMessage:"Define rule"}),Qe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.aboutRuleTitle",{defaultMessage:"About rule"}),Ye=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.scheduleRuleTitle",{defaultMessage:"Schedule rule"}),Ke=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.ruleActionsTitle",{defaultMessage:"Rule actions"}),Xe=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.stepDefinitionTitle",{defaultMessage:"Definition"}),Je=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.stepAboutTitle",{defaultMessage:"About"}),Ze=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.stepScheduleTitle",{defaultMessage:"Schedule"}),et=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.stepActionsTitle",{defaultMessage:"Actions"}),tt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.optionalFieldDescription",{defaultMessage:"Optional"}),nt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.continueButtonTitle",{defaultMessage:"Continue"}),at=(a.i18n.translate("xpack.securitySolution.detectionEngine.rules.updateButtonTitle",{defaultMessage:"Update"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.deleteDescription",{defaultMessage:"Delete"})),it=a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.importRuleTitle",{defaultMessage:"Import"}),rt=a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.selectRuleDescription",{defaultMessage:"Select rules to import. Associated rule actions and exceptions can be included."}),ot=a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.initialPromptTextDescription",{defaultMessage:"Select or drag and drop a valid rules_export.ndjson file"}),st=a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.overwriteDescription",{defaultMessage:'Overwrite existing detection rules with conflicting "rule_id"'}),lt=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.successfullyImportedRulesTitle",{values:{totalRules:e},defaultMessage:"Successfully imported {totalRules} {totalRules, plural, =1 {rule} other {rules}}"}),ct=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.importFailedTitle",{values:{totalRules:e},defaultMessage:"Failed to import {totalRules} {totalRules, plural, =1 {rule} other {rules}}"}),ut=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.importFailedDetailedTitle",{values:{message:e},defaultMessage:"{message}"}),dt=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.bulkDeleteConfirmationTitle",{defaultMessage:"Confirm bulk deletion"}),pt=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.singleDeleteConfirmationTitle",{defaultMessage:"Confirm deletion"}),mt=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.deleteConfirmationConfirm",{defaultMessage:"Delete"}),ft=a.i18n.translate("xpack.securitySolution.detectionEngine.components.allRules.deleteConfirmationCancel",{defaultMessage:"Cancel"}),gt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.refreshRulePopoverDescription",{defaultMessage:"Automatically refresh table"}),bt=(a.i18n.translate("xpack.securitySolution.detectionEngine.rules.refreshRulePopoverLabel",{defaultMessage:"Refresh settings"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.clearRulesTableFilters",{defaultMessage:"Clear filters"})),yt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.export.successToastTitle",{defaultMessage:"Rules exported"}),ht=(e,t)=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.export.successToastDescription",{values:{totalRules:t,exportedRules:e},defaultMessage:"Successfully exported {exportedRules} of {totalRules} {totalRules, plural, =1 {rule} other {rules}}."}),vt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.export.prebuiltRulesExcludedToastDescription",{defaultMessage:"Prebuilt rules were excluded from the resulting file."}),Et=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.export.errorToastTitle",{defaultMessage:"Error exporting rules"}),xt=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.export.errorToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} failed to export."}),jt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.successToastTitle",{defaultMessage:"Rules duplicated"}),Ot=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.successToastDescription",{values:{totalRules:e},defaultMessage:"Successfully duplicated {totalRules, plural, =1 {{totalRules} rule} other {{totalRules} rules}}"}),St=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.errorToastTitle",{defaultMessage:"Error duplicating rule"}),kt=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.errorToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} failed to duplicate."}),wt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.delete.successToastTitle",{defaultMessage:"Rules deleted"}),It=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.delete.successToastDescription",{values:{totalRules:e},defaultMessage:"Successfully deleted {totalRules, plural, =1 {{totalRules} rule} other {{totalRules} rules}}"}),Tt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.delete.errorToastTitle",{defaultMessage:"Error deleting rules"}),Ct=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.delete.errorToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} failed to delete."}),Mt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.enable.successToastTitle",{defaultMessage:"Rules enabled"}),At=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkAction.enable.successToastDescription",{values:{totalRules:e},defaultMessage:"Successfully enabled {totalRules, plural, =1 {{totalRules} rule} other {{totalRules} rules}}"}),_t=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.enable.errorToastTitle",{defaultMessage:"Error enabling rules"}),Ft=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.enable.errorToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} failed to enable."}),Dt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.disable.successToastTitle",{defaultMessage:"Rules disabled"}),Nt=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.disable.successToastDescription",{values:{totalRules:e},defaultMessage:"Successfully disabled {totalRules, plural, =1 {{totalRules} rule} other {{totalRules} rules}}"}),Pt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.disable.errorToastTitle",{defaultMessage:"Error disabling rules"}),Rt=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.disable.errorToastDescription",{values:{rulesCount:e},defaultMessage:"{rulesCount, plural, =1 {# rule is} other {# rules are}} failed to disable."}),Lt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.successToastTitle",{defaultMessage:"Rules updated"}),qt=(e,t)=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.successToastDescription",{values:{succeededRulesCount:e,skippedRulesCount:t},defaultMessage:"{succeededRulesCount, plural, =0 {} =1 {You've successfully updated # rule. } other {You've successfully updated # rules. }}\n        {skippedRulesCount, plural, =0 {} =1 { # rule was skipped.} other { # rules were skipped.}}\n        "}),Bt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.successIndexEditToastDescription",{defaultMessage:"If you did not select to apply changes to rules using Kibana data views, those rules were not updated and will continue using data views."}),zt=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.errorToastTitle",{defaultMessage:"Error updating rules"}),$t=(e,t)=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.errorToastDescription",{values:{failedRulesCount:e,skippedRulesCount:t},defaultMessage:"{failedRulesCount, plural, =0 {} =1 {# rule} other {# rules}} failed to update. {skippedRulesCount, plural, =0 {} =1 { # rule was skipped.} other { # rules were skipped.}}"}),Vt=(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.cancelButtonLabel",{defaultMessage:"Cancel"}),a.i18n.translate("xpack.securitySolution.hooks.useGetSavedQuery.errorToastMessage",{defaultMessage:"Failed to load the saved query"})),Ut=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleManagement.ruleManagementContextDescription",{defaultMessage:"Selected Detection Rules"}),Gt=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleManagement.explainThenSummarizeRuleDetails",{defaultMessage:"Please explain the selected rules above. For each rule, highlight why they are relevant, the query as published on Elastic's detection rules repository and an in-depth explanation of it, and what they typically mean for an organization if detected."}),Ht=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleManagement.detectionRulesConversationId",{defaultMessage:"Detection Rules"}),Wt=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleManagement.ruleManagementContextTooltip",{defaultMessage:"Add this alert as context"}),Qt=a.i18n.translate("xpack.securitySolution.addRules.installRuleButton",{defaultMessage:"Install rule"}),Yt=a.i18n.translate("xpack.securitySolution.addRules.upgradeRuleButton",{defaultMessage:"Update rule"}),Kt=a.i18n.translate("xpack.securitySolution.addRules.goBackToRulesTableButton",{defaultMessage:"Go back to installed Elastic rules"}),Xt=a.i18n.translate("xpack.securitySolution.ruleUpdates.documentationLink",{defaultMessage:"See what's new in Prebuilt Security Detection Rules"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"b",(function(){return a})),n.d(t,"d",(function(){return i}));var a=n(151),i=(n(541),n(542)),r=n(42),o=n(208),s=n(114),l=n(286),c=n(707);const{socTrends:u,...d}=Object(l.d)(!1),p={global:{timerange:{kind:"relative",...d},queries:[],policy:Object(l.c)(!1),linkTo:[s.a.timeline],query:{query:"",language:"kuery"},filters:[],fullScreen:!1},timeline:{timerange:{kind:"relative",...d},queries:[],policy:Object(l.c)(!1),linkTo:[s.a.global],query:{query:"",language:"kuery"},filters:[],fullScreen:!1}},m=e=>{const{from:t,fromStr:n,to:a,toStr:i,socTrends:r}=Object(l.d)(),{kind:o,duration:c}=Object(l.c)();return{global:{timerange:{kind:"relative",fromStr:n,toStr:i,from:t,to:a},queries:[],policy:{kind:o,duration:c},linkTo:[s.a.timeline,...e?[s.a.socTrends]:[]],query:{query:"",language:"kuery"},filters:[],fullScreen:!1},timeline:{timerange:{kind:"relative",fromStr:n,toStr:i,from:t,to:a},queries:[],policy:{kind:o,duration:c},linkTo:[s.a.global],query:{query:"",language:"kuery"},filters:[],fullScreen:!1},...e?{socTrends:{timerange:r,linkTo:[s.a.global],policy:{kind:o,duration:c}}}:{}}},f=Object(o.reducerWithInitialState)(p).case(a.setTimelineRangeDatePicker,((e,{from:t,to:n})=>({...e,global:{...e.global,linkTo:e.global.linkTo.filter((e=>e!==s.a.timeline))},timeline:{...e.timeline,timerange:{kind:"absolute",fromStr:void 0,toStr:void 0,from:t,to:n},linkTo:[]}}))).case(a.setAbsoluteRangeDatePicker,((e,{id:t,from:n,to:a,fromStr:i,toStr:r})=>{const o={kind:"absolute",fromStr:i,toStr:r,from:n,to:a};return Object(c.i)(t,o,e)})).case(a.setRelativeRangeDatePicker,((e,{id:t,fromStr:n,from:a,to:i,toStr:r})=>{const o={kind:"relative",fromStr:n,toStr:r,from:a,to:i};return Object(c.i)(t,o,e)})).case(a.setFullScreen,((e,{id:t,fullScreen:n})=>Object(c.h)(t,n,e))).case(a.deleteAllQuery,((e,{id:t})=>({...e,[t]:{...Object(r.get)(t,e),queries:e.global.queries.slice(e.global.queries.length)}}))).case(a.setQuery,((e,{inputId:t,id:n,inspect:a,loading:i,refetch:r,searchSessionId:o})=>Object(c.j)({inputId:t,id:n,inspect:a,loading:i,refetch:r,state:e,searchSessionId:o}))).case(a.deleteOneQuery,((e,{inputId:t,id:n})=>Object(c.b)({inputId:t,id:n,state:e}))).case(a.setDuration,((e,{id:t,duration:n})=>({...e,[t]:{...Object(r.get)(t,e),policy:{...Object(r.get)(`${t}.policy`,e),duration:n}}}))).case(a.startAutoReload,((e,{id:t})=>({...e,[t]:{...Object(r.get)(t,e),policy:{...Object(r.get)(`${t}.policy`,e),kind:"interval"}}}))).case(a.stopAutoReload,((e,{id:t})=>({...e,[t]:{...Object(r.get)(t,e),policy:{...Object(r.get)(`${t}.policy`,e),kind:"manual"}}}))).case(a.toggleTimelineLinkTo,(e=>Object(c.g)(e))).case(a.toggleSocTrendsLinkTo,(e=>Object(c.f)(e))).case(a.setInspectionParameter,((e,{id:t,inputId:n,isInspected:a,selectedInspectIndex:i,searchSessionId:r})=>Object(c.e)({id:t,inputId:n,isInspected:a,selectedInspectIndex:i,state:e,searchSessionId:r}))).case(a.removeLinkTo,((e,t)=>Object(c.d)(t,e))).case(a.addLinkTo,((e,t)=>Object(c.a)(t,e))).case(a.setFilterQuery,((e,{id:t,query:n,language:a})=>({...e,[t]:{...Object(r.get)(t,e),query:{query:n,language:a}}}))).case(a.setSavedQuery,((e,{id:t,savedQuery:n})=>({...e,[t]:{...Object(r.get)(t,e),savedQuery:n}}))).case(a.setSearchBarFilter,((e,{id:t,filters:n})=>({...e,[t]:{...Object(r.get)(t,e),filters:n}}))).build()},,function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"h",(function(){return s})),n.d(t,"i",(function(){return l})),n.d(t,"k",(function(){return c})),n.d(t,"j",(function(){return u})),n.d(t,"l",(function(){return d})),n.d(t,"m",(function(){return p})),n.d(t,"n",(function(){return m})),n.d(t,"o",(function(){return f})),n.d(t,"q",(function(){return g})),n.d(t,"p",(function(){return b})),n.d(t,"y",(function(){return y})),n.d(t,"A",(function(){return h})),n.d(t,"B",(function(){return v})),n.d(t,"C",(function(){return E})),n.d(t,"D",(function(){return x})),n.d(t,"d",(function(){return j})),n.d(t,"e",(function(){return O})),n.d(t,"f",(function(){return S})),n.d(t,"g",(function(){return k})),n.d(t,"E",(function(){return w})),n.d(t,"F",(function(){return I})),n.d(t,"G",(function(){return T})),n.d(t,"H",(function(){return C})),n.d(t,"J",(function(){return M})),n.d(t,"K",(function(){return A})),n.d(t,"L",(function(){return _})),n.d(t,"M",(function(){return F})),n.d(t,"Y",(function(){return D})),n.d(t,"Z",(function(){return N})),n.d(t,"ab",(function(){return P})),n.d(t,"bb",(function(){return R})),n.d(t,"z",(function(){return L})),n.d(t,"cb",(function(){return q})),n.d(t,"db",(function(){return B})),n.d(t,"N",(function(){return z})),n.d(t,"O",(function(){return $})),n.d(t,"Q",(function(){return V})),n.d(t,"T",(function(){return U})),n.d(t,"U",(function(){return G})),n.d(t,"R",(function(){return H})),n.d(t,"S",(function(){return W})),n.d(t,"X",(function(){return Q})),n.d(t,"W",(function(){return Y})),n.d(t,"s",(function(){return K})),n.d(t,"r",(function(){return X})),n.d(t,"w",(function(){return J})),n.d(t,"P",(function(){return Z})),n.d(t,"x",(function(){return ee})),n.d(t,"I",(function(){return te})),n.d(t,"V",(function(){return ne})),n.d(t,"t",(function(){return ae})),n.d(t,"v",(function(){return ie})),n.d(t,"u",(function(){return re}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.open.timeline.batchActionsTitle",{defaultMessage:"Bulk actions"}),r=a.i18n.translate("xpack.securitySolution.open.timeline.cancelButton",{defaultMessage:"Cancel"}),o=a.i18n.translate("xpack.securitySolution.open.timeline.collapseButton",{defaultMessage:"Collapse"}),s=a.i18n.translate("xpack.securitySolution.open.timeline.deleteButton",{defaultMessage:"Delete"}),l=a.i18n.translate("xpack.securitySolution.open.timeline.deleteSelectedButton",{defaultMessage:"Delete selected"}),c=a.i18n.translate("xpack.securitySolution.open.timeline.deleteWarningLabel",{defaultMessage:"You will not be able to recover this timeline or its notes once deleted."}),u=a.i18n.translate("xpack.securitySolution.open.timeline.deleteTemplateWarningLabel",{defaultMessage:"You will not be able to recover this timeline template or its notes once deleted."}),d=a.i18n.translate("xpack.securitySolution.open.timeline.descriptionTableHeader",{defaultMessage:"Description"}),p=a.i18n.translate("xpack.securitySolution.open.timeline.expandButton",{defaultMessage:"Expand"}),m=a.i18n.translate("xpack.securitySolution.open.timeline.exportFileNameTitle",{defaultMessage:"timelines_export"}),f=a.i18n.translate("xpack.securitySolution.open.timeline.exportSelectedButton",{defaultMessage:"Export selected"}),g=a.i18n.translate("xpack.securitySolution.open.timeline.favoriteSelectedButton",{defaultMessage:"Favorite selected"}),b=a.i18n.translate("xpack.securitySolution.open.timeline.favoritesTooltip",{defaultMessage:"Favorites"}),y=a.i18n.translate("xpack.securitySolution.open.timeline.lastModifiedTableHeader",{defaultMessage:"Last modified"}),h=a.i18n.translate("xpack.securitySolution.open.timeline.missingSavedObjectIdTooltip",{defaultMessage:"Missing savedObjectId"}),v=a.i18n.translate("xpack.securitySolution.open.timeline.modifiedByTableHeader",{defaultMessage:"Modified by"}),E=a.i18n.translate("xpack.securitySolution.open.timeline.notesTooltip",{defaultMessage:"Notes"}),x=a.i18n.translate("xpack.securitySolution.open.timeline.onlyFavoritesButtonLabel",{defaultMessage:"Only favorites"}),j=a.i18n.translate("xpack.securitySolution.open.timeline.createRuleFromTimelineTooltip",{defaultMessage:"Create query rule from timeline"}),O=a.i18n.translate("xpack.securitySolution.open.timeline.createRuleFromTimelineEqlTooltip",{defaultMessage:"Create EQL rule from timeline"}),S=a.i18n.translate("xpack.securitySolution.open.timeline.createTemplateFromTimelineTooltip",{defaultMessage:"Create template from timeline"}),k=a.i18n.translate("xpack.securitySolution.open.timeline.createTimelineFromTemplateTooltip",{defaultMessage:"Create timeline from template"}),w=a.i18n.translate("xpack.securitySolution.open.timeline.openAsDuplicateTooltip",{defaultMessage:"Duplicate timeline"}),I=a.i18n.translate("xpack.securitySolution.open.timeline.openAsDuplicateTemplateTooltip",{defaultMessage:"Duplicate template"}),T=a.i18n.translate("xpack.securitySolution.open.timeline.openTimelineButton",{defaultMessage:"Open Timeline…"}),C=a.i18n.translate("xpack.securitySolution.open.timeline.openTimelineTitle",{defaultMessage:"Open"}),M=a.i18n.translate("xpack.securitySolution.open.timeline.pinnedEventsTooltip",{defaultMessage:"Pinned events"}),A=a.i18n.translate("xpack.securitySolution.open.timeline.refreshTitle",{defaultMessage:"Refresh"}),_=a.i18n.translate("xpack.securitySolution.open.timeline.searchPlaceholder",{defaultMessage:"e.g. timeline name, or description"}),F=a.i18n.translate("xpack.securitySolution.open.timeline.searchTemplatePlaceholder",{defaultMessage:"e.g. template name, or description"}),D=a.i18n.translate("xpack.securitySolution.open.timeline.timelineNameTableHeader",{defaultMessage:"Timeline name"}),N=a.i18n.translate("xpack.securitySolution.open.timeline.timelineTemplateNameTableHeader",{defaultMessage:"Template name"}),P=a.i18n.translate("xpack.securitySolution.open.timeline.untitledTimelineLabel",{defaultMessage:"Untitled timeline"}),R=a.i18n.translate("xpack.securitySolution.open.timeline.withLabel",{defaultMessage:"with"}),L=a.i18n.translate("xpack.securitySolution.open.timeline.loadingLabel",{defaultMessage:"Loading..."}),q=a.i18n.translate("xpack.securitySolution.open.timeline.zeroTimelinesMatchLabel",{defaultMessage:"0 timelines match the search criteria"}),B=a.i18n.translate("xpack.securitySolution.open.timeline.zeroTimelineTemplatesMatchLabel",{defaultMessage:"0 timeline templates match the search criteria"}),z=e=>a.i18n.translate("xpack.securitySolution.open.timeline.selectedTemplatesTitle",{values:{selectedTemplates:e},defaultMessage:"Selected {selectedTemplates} {selectedTemplates, plural, =1 {template} other {templates}}"}),$=e=>a.i18n.translate("xpack.securitySolution.open.timeline.selectedTimelinesTitle",{values:{selectedTimelines:e},defaultMessage:"Selected {selectedTimelines} {selectedTimelines, plural, =1 {timeline} other {timelines}}"}),V=a.i18n.translate("xpack.securitySolution.open.timeline.showingLabel",{defaultMessage:"Showing:"}),U=e=>a.i18n.translate("xpack.securitySolution.open.timeline.successfullyExportedTimelinesTitle",{values:{totalTimelines:e},defaultMessage:"Successfully exported {totalTimelines, plural, =0 {all timelines} =1 {{totalTimelines} timeline} other {{totalTimelines} timelines}}"}),G=e=>a.i18n.translate("xpack.securitySolution.open.timeline.successfullyExportedTimelineTemplatesTitle",{values:{totalTimelineTemplates:e},defaultMessage:"Successfully exported {totalTimelineTemplates, plural, =0 {all timelines} =1 {{totalTimelineTemplates} timeline template} other {{totalTimelineTemplates} timeline templates}}"}),H=e=>a.i18n.translate("xpack.securitySolution.open.timeline.successfullyDeletedTimelinesTitle",{values:{totalTimelines:e},defaultMessage:"Successfully deleted {totalTimelines, plural, =0 {all timelines} =1 {{totalTimelines} timeline} other {{totalTimelines} timelines}}"}),W=e=>a.i18n.translate("xpack.securitySolution.open.timeline.successfullyDeletedTimelineTemplatesTitle",{values:{totalTimelineTemplates:e},defaultMessage:"Successfully deleted {totalTimelineTemplates, plural, =0 {all timelines} =1 {{totalTimelineTemplates} timeline template} other {{totalTimelineTemplates} timeline templates}}"}),Q=a.i18n.translate("xpack.securitySolution.timelines.components.tabs.timelinesTitle",{defaultMessage:"Timelines"}),Y=a.i18n.translate("xpack.securitySolution.timelines.components.tabs.templatesTitle",{defaultMessage:"Templates"}),K=a.i18n.translate("xpack.securitySolution.timelines.components.templateFilter.elasticTitle",{defaultMessage:"Elastic templates"}),X=a.i18n.translate("xpack.securitySolution.timelines.components.templateFilter.customizedTitle",{defaultMessage:"Custom templates"}),J=a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.importTimelineTitle",{defaultMessage:"Import"}),Z=a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.selectTimelineDescription",{defaultMessage:"Select a timeline or timeline template file to import"}),ee=a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.initialPromptTextDescription",{defaultMessage:"Select or drag and drop a valid timelines_export.ndjson file"}),te=a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.overwriteDescription",{defaultMessage:"Automatically overwrite saved objects with the same timeline ID"}),ne=e=>a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.successfullyImportedTimelinesTitle",{values:{totalCount:e},defaultMessage:"Successfully imported {totalCount} {totalCount, plural, =1 {item} other {items}}"}),ae=e=>a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.importFailedTitle",{values:{totalTimelines:e},defaultMessage:"Failed to import {totalTimelines} {totalTimelines, plural, =1 {timeline} other {timelines}}"}),ie=a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.importTitle",{defaultMessage:"Import…"}),re=e=>a.i18n.translate("xpack.securitySolution.timelines.components.importTimelineModal.importFailedDetailedTitle",{values:{message:e},defaultMessage:"{message}"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return s})),n.d(t,"d",(function(){return l}));var a=n(2);const i=()=>{const e=Object(a.useRef)(!1),t=Object(a.useCallback)((()=>e.current),[]),n=Object(a.useCallback)((()=>{e.current=!1}),[]);return Object(a.useEffect)((()=>(e.current=!0,n)),[n]),t},r=e=>{const t=i(),[n,r]=Object(a.useState)(!1),[o,s]=Object(a.useState)(),[l,c]=Object(a.useState)();return{error:o,loading:n,result:l,start:Object(a.useCallback)(((...n)=>{r(!0),c(void 0),s(void 0),e(...n).then((e=>t()&&c(e))).catch((e=>t()&&s(e))).finally((()=>t()&&r(!1)))}),[e,t])}};function o(e,t){switch(t.type){case"setResult":return{...e,result:t.result,loading:!1};case"setError":return{...e,error:t.error,loading:!1};case"load":return{loading:!0,result:void 0,error:void 0}}}const s=e=>{const t=i(),n=Object(a.useRef)(),[r,s]=Object(a.useReducer)(o,{loading:!1,error:void 0,result:void 0}),l=Object(a.useCallback)(((...a)=>{n.current&&n.current.unsubscribe(),s({type:"load"}),n.current=e(...a).subscribe((e=>{t()&&s({type:"setResult",result:e})}),(e=>{t()&&s({type:"setError",error:e})}))}),[e,t]);return Object(a.useEffect)((()=>()=>{n.current&&n.current.unsubscribe()}),[]),{result:r.result,error:r.error,loading:r.loading,start:l}},l=e=>t=>{const n=null!=t.signal?t.signal:(new AbortController).signal;return e({...t,signal:n})}},function(e,t,n){"use strict";n.d(t,"e",(function(){return a.b})),n.d(t,"a",(function(){return a.a})),n.d(t,"g",(function(){return a.d})),n.d(t,"f",(function(){return a.c})),n.d(t,"d",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(118);const i="open",r="closed",o="acknowledged"},,function(e,t,n){"use strict";n.d(t,"a",(function(){return h})),n.d(t,"b",(function(){return v}));var a=n(41),i=n.n(a),r=(n(21),n(2)),o=n.n(r),s=n(40),l=n(348),c=n(186),u=n(266),d=n(175),p=n(4),m=n(110),f=n(116),g=n(1072),b=n(282);const y=Object(r.createContext)(void 0),h=({id:e,indexName:t,scopeId:n,children:a})=>{var i;const h=Object(u.a)(),v=t?null!==(i=Object(c.a)(t,h))&&void 0!==i?i:t:"",[{pageName:x}]=Object(d.a)(),j=x===p.wc.detections?m.SourcererScopeName.detections:m.SourcererScopeName.default,O=Object(f.d)(j),[S,k,w,I,T]=Object(l.a)({indexName:v,eventId:null!=e?e:"",runtimeMappings:O.runtimeMappings,skip:!e}),C=Object(g.a)(null==w?void 0:w.fields),{ruleId:M}=Object(c.b)(k),{rule:A}=Object(b.a)(M),_=Object(r.useMemo)((()=>{var a;return e&&t&&n?{eventId:e,indexName:t,scopeId:n,browserFields:O.browserFields,dataAsNestedObject:I,dataFormattedForFieldBrowser:k,searchHit:w,investigationFields:null!==(a=null==A?void 0:A.investigation_fields)&&void 0!==a?a:[],refetchFlyoutData:T,getFieldsData:C}:void 0}),[e,A,t,n,O.browserFields,I,k,w,T,C]);return S?o.a.createElement(E,null,o.a.createElement(s.EuiLoadingSpinner,{size:"xxl"})):o.a.createElement(y.Provider,{value:_},a)},v=()=>{const e=Object(r.useContext)(y);if(!e)throw new Error("RightPanelContext can only be used within RightPanelContext provider");return e};var E=i()(s.EuiFlexItem).withConfig({displayName:"_StyledEuiFlexItem",componentId:"sc-x22vh9-0"})(["align-items:center;justify-content:center;"])},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(43);const i=e=>a.union([e,a.null]),r=(e,t="enum")=>new a.Type(t,(t=>Object.values(e).includes(t)),((t,n)=>Object.values(e).includes(t)?a.success(t):a.failure(t,n)),(e=>e)),o=(e,t="Unknown Field in switch statement")=>{throw new Error(`${t}: ${e}`)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.isDeepEqual=t.off=t.on=t.isClient=void 0;var a=n(34).__importDefault(n(1171));t.isClient="object"==typeof window,t.on=function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n];return e.addEventListener.apply(e,t)},t.off=function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n];return e.removeEventListener.apply(e,t)},t.isDeepEqual=a.default},function(e,t,n){"use strict";e.exports=function(e){return e<-2}},function(e,t,n){"use strict";n.d(t,"g",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"n",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"d",(function(){return g})),n.d(t,"h",(function(){return b})),n.d(t,"l",(function(){return h})),n.d(t,"b",(function(){return v})),n.d(t,"e",(function(){return E})),n.d(t,"i",(function(){return x})),n.d(t,"j",(function(){return j})),n.d(t,"m",(function(){return O})),n.d(t,"k",(function(){return C}));var a=n(42),i=n(59),r=n(713),o=n(145),s=n(161),l=n(150),c=n(170);const u=(e,t)=>e.reduce(((e,n)=>{const a=[n,...n.and].filter((e=>e.enabled));if(!a.length)return e;const i=a.map((e=>((e,t)=>{const{excluded:n,type:a,queryMatch:{field:i,operator:r,value:c}}=e,u=Object(s.c)(i,t),d=n?"NOT ":"";switch(r){case l.d:return S({browserFields:t,field:i,isExcluded:d,isFieldTypeNested:u,type:a,value:c});case l.b:return`${d}${I({browserFields:t,field:i,isFieldTypeNested:u})}`;case l.c:return k({field:i,isExcluded:d,value:c});default:Object(o.a)(r)}})(e,t))),r=i.join(" and ");return[...e,r]}),[]).filter((e=>!Object(a.isEmpty)(e))).reduce(((e,t,n,a)=>a.length<=1?t:n?`${e} or (${t})`:`(${t})`),""),d="event-column-view",p=({globalFullScreen:e,graphEventId:t})=>!e||!(e=>null!=e&&""!==e)(t),m="1",f=2,g="local-events-count-button",b=({itemsCount:e,itemsPerPage:t})=>0===e||0===t?0:Math.ceil(e/t),y=e=>Object(i.elementOrChildrenHasFocus)(null==e?void 0:e.querySelector(`.${c.a}`)),h=({containerElement:e,keyboardEvent:t,onSkipFocusBeforeEventsTable:n,onSkipFocusAfterEventsTable:a})=>{const{shiftKey:r}=t,o=Object(i.getTableSkipFocus)({containerElement:e,getFocusedCell:i.getFocusedAriaColindexCell,shiftKey:r,tableHasFocus:y,tableClassName:c.a});"SKIP_FOCUS_NOOP"!==o&&(Object(i.stopPropagationAndPreventDefault)(t),Object(i.handleSkipFocus)({onSkipFocusBackwards:n,onSkipFocusForward:a,skipFocus:o}))},v="active-timeline-button",E="timeline-flyout-button-bar",x=()=>{setTimeout((()=>{var e;null===(e=document.querySelector(`div.${E} .${v}`))||void 0===e||e.focus()}),0)},j=e=>{var t;null==e||null===(t=e.querySelector("div.siemUtilityBar__action:last-of-type button"))||void 0===t||t.focus()},O=()=>{var e;null===(e=document.querySelector("header.headerGlobalNav a.chrHeaderLogo"))||void 0===e||e.focus()},S=({browserFields:e,field:t,isExcluded:n,isFieldTypeNested:a,type:i,value:r})=>C(r)?`${n}${t} : ${JSON.stringify(r)}`:`${n}${i!==l.a.template?w({browserFields:e,field:t,isFieldTypeNested:a,value:r}):I({browserFields:e,field:t,isFieldTypeNested:a})}`,k=({field:e,isExcluded:t,value:n})=>C(n)?`${t}${T({field:e,value:n})}`:`${t}${e} : ${JSON.stringify(n)}`,w=({browserFields:e,field:t,isFieldTypeNested:n,value:a})=>n?Object(s.h)(t,a,e):Object(s.b)(t,e)?Object(s.e)(t,a):`${t} : ${Object(r.a)(a)}`,I=({browserFields:e,field:t,isFieldTypeNested:n})=>n?Object(s.g)(t,e).trim():`${t} ${l.b}`.trim(),T=({field:e,value:t})=>{const n=e.trim();return t.length?`${n} : (${t.map((e=>Object(a.isNumber)(e)?e:Object(r.b)(String(e).trim()))).join(" OR ")})`:`${n} : ''`},C=e=>Array.isArray(e)&&(e.every((e=>"string"==typeof e))||e.every((e=>"number"==typeof e)))},function(e,t,n){"use strict";n.d(t,"a",(function(){return d})),n.d(t,"c",(function(){return p})),n.d(t,"b",(function(){return f}));var a=n(40),i=n(2),r=n.n(i),o=n(114),s=n(311),l=n(454),c=n(561),u=n(455);const d="inspectButtonComponent",p=({children:e,show:t=!0})=>r.a.createElement(s.a,{show:t,targetClassNames:[d]},e),m=({compact:e=!1,inputId:t=o.a.global,inspectIndex:n=0,isDisabled:i,multiple:s=!1,onCloseInspect:p,queryId:m="",showInspectButton:f=!0,title:g=""})=>{const{additionalRequests:b,additionalResponses:y,handleClick:h,handleCloseModal:v,isButtonDisabled:E,isShowingModal:x,loading:j,request:O,response:S}=Object(c.a)({inputId:t,inspectIndex:n,isDisabled:i,multiple:s,onCloseInspect:p,queryId:m});return r.a.createElement(r.a.Fragment,null,t===o.a.timeline&&!e&&f&&r.a.createElement(a.EuiButtonEmpty,{className:d,"aria-label":u.d,"data-test-subj":"inspect-empty-button",color:"text",iconSide:"left",iconType:"inspect",isDisabled:E,isLoading:j,onClick:h},u.d),(t===o.a.global||e)&&f&&r.a.createElement(a.EuiButtonIcon,{className:d,"aria-label":u.d,"data-test-subj":"inspect-icon-button",iconSize:"m",iconType:"inspect",isDisabled:E,title:u.d,onClick:h}),x&&null!==O&&null!==S&&r.a.createElement(l.a,{additionalRequests:b,additionalResponses:y,closeModal:v,"data-test-subj":"inspect-modal",inputId:t,request:O,response:S,title:g}))};m.displayName="InspectButtonComponent";const f=r.a.memo(m)},function(e,t,n){"use strict";n.d(t,"d",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"a",(function(){return o}));const a=":",i=":*",r="includes";let o;!function(e){e.default="default",e.template="template"}(o||(o={}))},function(e,t,n){"use strict";n.r(t),n.d(t,"setAbsoluteRangeDatePicker",(function(){return r})),n.d(t,"setTimelineRangeDatePicker",(function(){return o})),n.d(t,"setRelativeRangeDatePicker",(function(){return s})),n.d(t,"setDuration",(function(){return l})),n.d(t,"startAutoReload",(function(){return c})),n.d(t,"stopAutoReload",(function(){return u})),n.d(t,"setFullScreen",(function(){return d})),n.d(t,"setQuery",(function(){return p})),n.d(t,"deleteOneQuery",(function(){return m})),n.d(t,"setInspectionParameter",(function(){return f})),n.d(t,"deleteAllQuery",(function(){return g})),n.d(t,"toggleTimelineLinkTo",(function(){return b})),n.d(t,"toggleSocTrendsLinkTo",(function(){return y})),n.d(t,"removeLinkTo",(function(){return h})),n.d(t,"addLinkTo",(function(){return v})),n.d(t,"setFilterQuery",(function(){return E})),n.d(t,"setSavedQuery",(function(){return x})),n.d(t,"setSearchBarFilter",(function(){return j}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/inputs"),r=i("SET_ABSOLUTE_RANGE_DATE_PICKER"),o=i("SET_TIMELINE_RANGE_DATE_PICKER"),s=i("SET_RELATIVE_RANGE_DATE_PICKER"),l=i("SET_DURATION"),c=i("START_KQL_AUTO_RELOAD"),u=i("STOP_KQL_AUTO_RELOAD"),d=i("SET_FULL_SCREEN"),p=i("SET_QUERY"),m=i("DELETE_QUERY"),f=i("SET_INSPECTION_PARAMETER"),g=i("DELETE_ALL_QUERY"),b=i("TOGGLE_TIMELINE_LINK_TO"),y=i("TOGGLE_SOC_TRENDS_LINK_TO"),h=i("REMOVE_LINK_TO"),v=i("ADD_LINK_TO"),E=i("SET_FILTER_QUERY"),x=i("SET_SAVED_QUERY"),j=i("SET_SEARCH_BAR_FILTER")},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a="row-renderer-example"},function(e,t,n){"use strict";n.d(t,"d",(function(){return u})),n.d(t,"e",(function(){return d})),n.d(t,"c",(function(){return m})),n.d(t,"n",(function(){return f}));var a=n(42),i=n(109),r=n(119),o=n(176),s=n(115),l=n(182),c=n(434);n.d(t,"f",(function(){return i.g})),n.d(t,"h",(function(){return i.i})),n.d(t,"g",(function(){return i.h})),n.d(t,"l",(function(){return i.m})),n.d(t,"k",(function(){return i.l})),n.d(t,"p",(function(){return i.r})),n.d(t,"o",(function(){return i.q})),n.d(t,"m",(function(){return i.n})),n.d(t,"i",(function(){return i.j})),n.d(t,"q",(function(){return i.w})),n.d(t,"r",(function(){return i.x})),n.d(t,"j",(function(){return i.k})),n.d(t,"a",(function(){return i.b})),n.d(t,"b",(function(){return i.e}));const u=({activeTimelineDataProviders:e,dataProviders:t,dispatch:n,result:a,timelineId:r,noProviderFound:o=l.b.noProviderFound,onAddedToTimeline:s})=>{const u=Object(i.p)(a),d=t[u];d?Object(c.b)({dataProviders:e,destination:a.destination,dispatch:n,onAddedToTimeline:s,providerToAdd:d,timelineId:r}):n(o({id:u}))},d=({isAggregatable:e,fieldType:t,fieldName:n,hideTopN:a})=>{const i=["boolean","geo-point","geo-shape","ip","keyword","number","numeric","string"].includes(t),r=["kibana.alert.ancestors.depth","kibana.alert.ancestors.id","kibana.alert.ancestors.rule","kibana.alert.ancestors.type","kibana.alert.original_event.action","kibana.alert.original_event.category","kibana.alert.original_event.code","kibana.alert.original_event.created","kibana.alert.original_event.dataset","kibana.alert.original_event.duration","kibana.alert.original_event.end","kibana.alert.original_event.hash","kibana.alert.original_event.id","kibana.alert.original_event.kind","kibana.alert.original_event.module","kibana.alert.original_event.original","kibana.alert.original_event.outcome","kibana.alert.original_event.provider","kibana.alert.original_event.risk_score","kibana.alert.original_event.risk_score_norm","kibana.alert.original_event.sequence","kibana.alert.original_event.severity","kibana.alert.original_event.start","kibana.alert.original_event.timezone","kibana.alert.original_event.type","kibana.alert.original_time","kibana.alert.rule.created_by","kibana.alert.rule.description","kibana.alert.rule.enabled","kibana.alert.rule.false_positives","kibana.alert.rule.from","kibana.alert.rule.uuid","kibana.alert.rule.immutable","kibana.alert.rule.interval","kibana.alert.rule.max_signals","kibana.alert.rule.name","kibana.alert.rule.note","kibana.alert.rule.references","kibana.alert.risk_score","kibana.alert.rule.rule_id","kibana.alert.severity","kibana.alert.rule.size","kibana.alert.rule.tags","kibana.alert.rule.threat","kibana.alert.rule.threat.tactic.id","kibana.alert.rule.threat.tactic.name","kibana.alert.rule.threat.tactic.reference","kibana.alert.rule.threat.technique.id","kibana.alert.rule.threat.technique.name","kibana.alert.rule.threat.technique.reference","kibana.alert.rule.timeline_id","kibana.alert.rule.timeline_title","kibana.alert.rule.to","kibana.alert.rule.type","kibana.alert.rule.updated_by","kibana.alert.rule.version","kibana.alert.workflow_status"].includes(n);return!a&&(r||e&&i)},p={"kibana.alert.rule.name":"kibana.alert.rule.uuid","event.module":"rule.reference"},m=({browserFields:e,dispatch:t,result:n,scopeId:l,defaultsHeader:c})=>{var u;const d=Object(i.o)(n),m=(e=>Object(a.keyBy)("name",(e=>Object.values(e).reduce(((e,t)=>[...e,...Object.values(null!=t.fields?t.fields:{})]),[]))(e)))(e)[d],f=l!==r.e.alertsOnAlertsPage&&l!==r.e.alertsOnRuleDetailsPage||null===(u=c.find((e=>e.id===d)))||void 0===u?{}:u,g=Object(s.getScopedActions)(l);var b;null!=m&&g?t(g.upsertColumn({column:{category:m.category,columnHeaderType:"not-filtered",description:Object(a.isString)(m.description)?m.description:void 0,example:Object(a.isString)(m.example)?m.example:void 0,id:d,linkField:null!==(b=p[d])&&void 0!==b?b:void 0,type:m.type,aggregatable:m.aggregatable,initialWidth:o.a,...f},id:l,index:null!=n.destination?n.destination.index:0})):g&&t(g.upsertColumn({column:{columnHeaderType:"not-filtered",id:d,initialWidth:o.a},id:l,index:null!=n.destination?n.destination.index:0}))},f=e=>e.slice(e.lastIndexOf(".")+1)},function(e,t,n){"use strict";var a=n(237);e.exports=function(e,t,n,i){var r=i?i-1:1/0,o=0;return function(i){return a(i)?(e.enter(n),s(i)):t(i)};function s(i){return a(i)&&o++<r?(e.consume(i),s):(e.exit(n),t(i))}}},function(e,t,n){"use strict";n.d(t,"C",(function(){return i})),n.d(t,"q",(function(){return r})),n.d(t,"v",(function(){return o})),n.d(t,"l",(function(){return s})),n.d(t,"o",(function(){return l})),n.d(t,"p",(function(){return c})),n.d(t,"m",(function(){return u})),n.d(t,"n",(function(){return d})),n.d(t,"B",(function(){return p})),n.d(t,"r",(function(){return m})),n.d(t,"u",(function(){return f})),n.d(t,"y",(function(){return g})),n.d(t,"k",(function(){return b})),n.d(t,"E",(function(){return y})),n.d(t,"w",(function(){return h})),n.d(t,"b",(function(){return v})),n.d(t,"x",(function(){return E})),n.d(t,"z",(function(){return x})),n.d(t,"t",(function(){return j})),n.d(t,"s",(function(){return O})),n.d(t,"a",(function(){return S})),n.d(t,"c",(function(){return k})),n.d(t,"F",(function(){return w})),n.d(t,"g",(function(){return I})),n.d(t,"A",(function(){return T})),n.d(t,"D",(function(){return C})),n.d(t,"e",(function(){return M})),n.d(t,"d",(function(){return A})),n.d(t,"f",(function(){return _})),n.d(t,"i",(function(){return F})),n.d(t,"h",(function(){return D})),n.d(t,"j",(function(){return N}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.alertDetails.threatIntel",{defaultMessage:"Threat Intel"}),r=a.i18n.translate("xpack.securitySolution.alertDetails.overview.investigationGuide",{defaultMessage:"Investigation guide"}),o=a.i18n.translate("xpack.securitySolution.alertDetails.overview",{defaultMessage:"Overview"}),s=a.i18n.translate("xpack.securitySolution.alertDetails.overview.highlightedFields",{defaultMessage:"Highlighted fields"}),l=a.i18n.translate("xpack.securitySolution.alertDetails.overview.highlightedFields.field",{defaultMessage:"Field"}),c=a.i18n.translate("xpack.securitySolution.alertDetails.overview.highlightedFields.value",{defaultMessage:"Value"}),u=a.i18n.translate("xpack.securitySolution.alertDetails.overview.highlightedFields.alertPrevalence",{defaultMessage:"Alert prevalence"}),d=a.i18n.translate("xpack.securitySolution.alertDetails.overview.highlightedFields.alertPrevalenceTooltip",{defaultMessage:"The total count of alerts with the same value within the currently selected timerange. This value is not affected by additional filters."}),p=a.i18n.translate("xpack.securitySolution.eventDetails.table",{defaultMessage:"Table"}),m=a.i18n.translate("xpack.securitySolution.eventDetails.jsonView",{defaultMessage:"JSON"}),f=a.i18n.translate("xpack.securitySolution.eventDetails.osqueryView",{defaultMessage:"Osquery Results"}),g=a.i18n.translate("xpack.securitySolution.eventDetails.responseActionsView",{defaultMessage:"Response Results"}),b=a.i18n.translate("xpack.securitySolution.eventDetails.field",{defaultMessage:"Field"}),y=a.i18n.translate("xpack.securitySolution.eventDetails.value",{defaultMessage:"Value"}),h=(a.i18n.translate("xpack.securitySolution.eventDetails.description",{defaultMessage:"Description"}),a.i18n.translate("xpack.securitySolution.eventDetails.filter.placeholder",{defaultMessage:"Filter by Field, Value, or Description..."})),v=a.i18n.translate("xpack.securitySolution.detections.alerts.agentStatus",{defaultMessage:"Agent status"}),E=a.i18n.translate("xpack.securitySolution.detections.alerts.quarantinedFilePath",{defaultMessage:"Quarantined file path"}),x=a.i18n.translate("xpack.securitySolution.detections.alerts.ruleType",{defaultMessage:"Rule type"}),j=a.i18n.translate("xpack.securitySolution.eventDetails.multiFieldTooltipContent",{defaultMessage:"Multi-fields can have multiple values per field"}),O=a.i18n.translate("xpack.securitySolution.eventDetails.multiFieldBadge",{defaultMessage:"multi-field"}),S=a.i18n.translate("xpack.securitySolution.eventDetails.table.actions",{defaultMessage:"Actions"}),k=a.i18n.translate("xpack.securitySolution.eventDetails.alertReason",{defaultMessage:"Alert reason"}),w=a.i18n.translate("xpack.securitySolution.eventDetails.viewAllFields",{defaultMessage:"View all fields in table"}),I=Object.freeze({tried:e=>a.i18n.translate("xpack.securitySolution.eventDetails.responseActions.endpoint.tried",{values:{command:e},defaultMessage:"tried to execute {command} command"}),executed:e=>a.i18n.translate("xpack.securitySolution.eventDetails.responseActions.endpoint.executed",{values:{command:e},defaultMessage:"executed {command} command"}),pending:e=>a.i18n.translate("xpack.securitySolution.eventDetails.responseActions.endpoint.pending",{values:{command:e},defaultMessage:"is executing {command} command"}),failed:e=>a.i18n.translate("xpack.securitySolution.eventDetails.responseActions.endpoint.failed",{values:{command:e},defaultMessage:"failed to execute {command} command"})}),T=a.i18n.translate("xpack.securitySolution.eventDetails.summaryView",{defaultMessage:"summary"}),C=a.i18n.translate("xpack.securitySolution.eventDetails.timelineView",{defaultMessage:"Timeline"}),M=a.i18n.translate("xpack.securitySolution.alertSummaryView.alertSummaryViewConversationId",{defaultMessage:"Alert summary"}),A=e=>a.i18n.translate("xpack.securitySolution.alertSummaryView.alertSummaryViewContextDescription",{defaultMessage:"Alert (from {view})",values:{view:e}}),_=a.i18n.translate("xpack.securitySolution.alertSummaryView.alertSummaryViewContextTooltip",{defaultMessage:"Add this alert as context"}),F=a.i18n.translate("xpack.securitySolution.alertSummaryView.eventSummaryViewConversationId",{defaultMessage:"Event summary"}),D=e=>a.i18n.translate("xpack.securitySolution.alertSummaryView.eventSummaryViewContextDescription",{defaultMessage:"Event (from {view})",values:{view:e}}),N=a.i18n.translate("xpack.securitySolution.alertSummaryView.eventSummaryViewContextTooltip",{defaultMessage:"Add this event as context"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"u",(function(){return f})),n.d(t,"v",(function(){return g})),n.d(t,"l",(function(){return b})),n.d(t,"j",(function(){return y})),n.d(t,"m",(function(){return h})),n.d(t,"k",(function(){return v})),n.d(t,"d",(function(){return E})),n.d(t,"e",(function(){return x})),n.d(t,"h",(function(){return j})),n.d(t,"p",(function(){return O})),n.d(t,"q",(function(){return S})),n.d(t,"g",(function(){return k})),n.d(t,"n",(function(){return w})),n.d(t,"o",(function(){return I})),n.d(t,"r",(function(){return T})),n.d(t,"f",(function(){return C})),n.d(t,"i",(function(){return M})),n.d(t,"s",(function(){return A})),n.d(t,"t",(function(){return _})),n.d(t,"c",(function(){return F}));var a=n(970),i=n(324),r=n(421),o=n(120),s=n(163),l=n(538),c=n(512);const u=async e=>Object(l.pipe)(await e(),Object(c.fold)((e=>Promise.reject(e)),(e=>Promise.resolve(e)))),d=e=>e instanceof Error?e:new Error(String(e)),p=async({http:e,list:t,signal:n})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,list:t,signal:n})=>e.fetch(s.t,{body:JSON.stringify(t),method:"POST",signal:n}))({http:e,list:t,signal:n})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.o,e)))),Object(i.flow)(u))(),m=async({http:e,listItem:t,signal:n})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,listItem:t,signal:n})=>e.fetch(s.q,{body:JSON.stringify(t),method:"POST",signal:n}))({http:e,listItem:t,signal:n})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.n,e)))),Object(i.flow)(u))(),f=async({http:e,list:t,signal:n})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,list:t,signal:n})=>e.fetch(s.t,{body:JSON.stringify(t),method:"PUT",signal:n}))({http:e,list:t,signal:n})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.o,e)))),Object(i.flow)(u))(),g=async({http:e,listItem:t,signal:n})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,listItem:t,signal:n})=>e.fetch(s.q,{body:JSON.stringify(t),method:"PUT",signal:n}))({http:e,listItem:t,signal:n})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.n,e)))),Object(i.flow)(u))(),b=async({filters:e,http:t,namespaceTypes:n,pagination:l,signal:c,sort:p})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,filters:t,namespaceTypes:n,pagination:a,signal:i,sort:r})=>{const o={filter:t||void 0,namespace_type:n,page:a.page?`${a.page}`:"1",per_page:a.perPage?`${a.perPage}`:"20",sort_field:null!=r&&r.field?null==r?void 0:r.field:"exception-list.created_at",sort_order:null!=r&&r.order?null==r?void 0:r.order:"desc"};return e.fetch(`${s.t}/_find`,{method:"GET",query:o,signal:i})})({filters:e,http:t,namespaceTypes:n,pagination:l,signal:c,sort:p})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.t,e)))),Object(i.flow)(u))(),y=async({http:e,id:t,namespaceType:n,signal:l})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,id:t,namespaceType:n,signal:a})=>e.fetch(s.t,{method:"GET",query:{id:t,namespace_type:n},signal:a}))({http:e,id:t,namespaceType:n,signal:l})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.o,e)))),Object(i.flow)(u))(),h=async({filter:e,http:t,listIds:n,namespaceTypes:l,pagination:c,search:p,signal:m})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,listIds:t,namespaceTypes:n,filter:a,pagination:i,search:r,signal:o})=>{const l={list_id:t.join(","),namespace_type:n.join(","),page:i.page?`${i.page}`:"1",per_page:i.perPage?`${i.perPage}`:"20",search:r,sort_field:"exception-list.created_at",sort_order:"desc",filter:a};return e.fetch(`${s.q}/_find`,{method:"GET",query:l,signal:o})})({filter:e,http:t,listIds:n,namespaceTypes:l,pagination:c,search:p,signal:m})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.s,e)))),Object(i.flow)(u))(),v=async({http:e,id:t,namespaceType:n,signal:l})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,id:t,namespaceType:n,signal:a})=>e.fetch(s.q,{method:"GET",query:{id:t,namespace_type:n},signal:a}))({http:e,id:t,namespaceType:n,signal:l})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.n,e)))),Object(i.flow)(u))(),E=async({http:e,id:t,namespaceType:n,signal:l})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,id:t,namespaceType:n,signal:a})=>e.fetch(s.t,{method:"DELETE",query:{id:t,namespace_type:n},signal:a}))({http:e,id:t,namespaceType:n,signal:l})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.o,e)))),Object(i.flow)(u))(),x=async({http:e,id:t,namespaceType:n,signal:l})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,id:t,namespaceType:n,signal:a})=>e.fetch(s.q,{method:"DELETE",query:{id:t,namespace_type:n},signal:a}))({http:e,id:t,namespaceType:n,signal:l})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.n,e)))),Object(i.flow)(u))(),j=async({http:e,id:t,includeExpiredExceptions:n,listId:a,namespaceType:i,signal:r})=>e.fetch(`${s.t}/_export`,{method:"POST",query:{id:t,list_id:a,namespace_type:i,include_expired_exceptions:n},signal:r}),O=async({alias:e,chunkSize:t,exceptionListIds:n,excludeExceptions:a,http:i,signal:r})=>i.fetch(s.p,{method:"POST",body:JSON.stringify({exception_list_ids:n,type:"exception_list_ids",alias:e,exclude_exceptions:a,chunk_size:t}),signal:r}),S=async({exceptions:e,alias:t,excludeExceptions:n,http:a,chunkSize:i,signal:r})=>a.fetch(s.p,{method:"POST",body:JSON.stringify({exceptions:e,type:"exception_items",alias:t,exclude_exceptions:n,chunk_size:i}),signal:r}),k=async({http:e,includeExpiredExceptions:t,listId:n,namespaceType:a,signal:i})=>e.fetch(`${s.t}/_duplicate`,{method:"POST",query:{list_id:n,namespace_type:a,include_expired_exceptions:t},signal:i}),w=async({cursor:e,http:t,pageIndex:n,pageSize:c,signal:p,sortField:m,sortOrder:f})=>Object(l.pipe)({cursor:null!=e?e.toString():void 0,page:null!=n?n.toString():void 0,per_page:null!=c?c.toString():void 0,sort_field:null!=m?m.toString():void 0,sort_order:f},(e=>Object(a.fromEither)(Object(r.c)(o.r,e))),Object(a.chain)((e=>Object(a.tryCatch)((()=>(async({http:e,cursor:t,page:n,per_page:a,signal:i,sort_field:r,sort_order:o})=>e.fetch(`${s.z}/_find`,{method:"GET",query:{cursor:t,page:n,per_page:a,sort_field:r,sort_order:o},signal:i}))({http:t,signal:p,...e})),d))),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.u,e)))),Object(i.flow)(u)),I=async({cursor:e,http:t,pageIndex:n,pageSize:c,signal:p})=>Object(l.pipe)({cursor:null!=e?e.toString():void 0,page:null!=n?n.toString():void 0,per_page:null!=c?c.toString():void 0},(e=>Object(a.fromEither)(Object(r.c)(o.r,e))),Object(a.chain)((e=>Object(a.tryCatch)((()=>(async({http:e,cursor:t,page:n,per_page:a,signal:i})=>e.fetch(`${s.u}`,{method:"GET",query:{cursor:t,page:n,per_page:a},signal:i}))({http:t,signal:p,...e})),d))),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.v,e)))),Object(i.flow)(u)),T=async({file:e,http:t,listId:n,type:i,signal:c})=>Object(l.pipe)({list_id:n,type:i},(e=>Object(a.fromEither)(Object(r.c)(o.w,e))),Object(a.chain)((t=>Object(l.pipe)(Object(a.fromEither)(Object(r.c)(o.x,{file:e})),Object(a.map)((e=>({...e,...t})))))),Object(a.chain)((e=>Object(a.tryCatch)((()=>(async({file:e,http:t,list_id:n,type:a,signal:i})=>{const r=new FormData;return r.append("file",e),t.fetch(`${s.x}/_import`,{body:r,headers:{"Content-Type":void 0},method:"POST",query:{list_id:n,type:a},signal:i})})({http:t,signal:c,...e})),d))),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.A,e)))),u),C=async({deleteReferences:e,http:t,id:n,ignoreReferences:c,signal:p})=>Object(l.pipe)({deleteReferences:e,id:n,ignoreReferences:c},(e=>Object(a.fromEither)(Object(r.c)(o.j,e))),Object(a.chain)((e=>Object(a.tryCatch)((()=>(async({deleteReferences:e=!1,http:t,id:n,ignoreReferences:a=!1,signal:i})=>t.fetch(s.z,{method:"DELETE",query:{deleteReferences:e,id:n,ignoreReferences:a},signal:i}))({http:t,signal:p,...e})),d))),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.A,e)))),Object(i.flow)(u)),M=async({http:e,listId:t,signal:n})=>Object(l.pipe)({list_id:t},(e=>Object(a.fromEither)(Object(r.c)(o.q,e))),Object(a.chain)((t=>Object(a.tryCatch)((()=>(async({http:e,list_id:t,signal:n})=>e.fetch(`${s.x}/_export`,{method:"POST",query:{list_id:t},signal:n}))({http:e,signal:n,...t})),d))),Object(i.flow)(u)),A=async({http:e,signal:t})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,signal:t})=>e.fetch(s.w,{method:"GET",signal:t}))({http:e,signal:t})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.z,e)))),Object(i.flow)(u))(),_=async({http:e,signal:t})=>e.fetch(s.y,{method:"GET",signal:t}),F=async({http:e,signal:t})=>Object(i.flow)((()=>Object(a.tryCatch)((()=>(async({http:e,signal:t})=>e.fetch(s.w,{method:"POST",signal:t}))({http:e,signal:t})),d)),Object(a.chain)((e=>Object(a.fromEither)(Object(r.c)(o.e,e)))),Object(i.flow)(u))()},function(e,t,n){const a=n(325),{MAX_LENGTH:i,MAX_SAFE_INTEGER:r}=n(326),{safeRe:o,t:s}=n(310),l=n(451),{compareIdentifiers:c}=n(559);class SemVer{constructor(e,t){if(t=l(t),e instanceof SemVer){if(e.loose===!!t.loose&&e.includePrerelease===!!t.includePrerelease)return e;e=e.version}else if("string"!=typeof e)throw new TypeError(`Invalid version. Must be a string. Got type "${typeof e}".`);if(e.length>i)throw new TypeError(`version is longer than ${i} characters`);a("SemVer",e,t),this.options=t,this.loose=!!t.loose,this.includePrerelease=!!t.includePrerelease;const n=e.trim().match(t.loose?o[s.LOOSE]:o[s.FULL]);if(!n)throw new TypeError(`Invalid Version: ${e}`);if(this.raw=e,this.major=+n[1],this.minor=+n[2],this.patch=+n[3],this.major>r||this.major<0)throw new TypeError("Invalid major version");if(this.minor>r||this.minor<0)throw new TypeError("Invalid minor version");if(this.patch>r||this.patch<0)throw new TypeError("Invalid patch version");n[4]?this.prerelease=n[4].split(".").map((e=>{if(/^[0-9]+$/.test(e)){const t=+e;if(t>=0&&t<r)return t}return e})):this.prerelease=[],this.build=n[5]?n[5].split("."):[],this.format()}format(){return this.version=`${this.major}.${this.minor}.${this.patch}`,this.prerelease.length&&(this.version+=`-${this.prerelease.join(".")}`),this.version}toString(){return this.version}compare(e){if(a("SemVer.compare",this.version,this.options,e),!(e instanceof SemVer)){if("string"==typeof e&&e===this.version)return 0;e=new SemVer(e,this.options)}return e.version===this.version?0:this.compareMain(e)||this.comparePre(e)}compareMain(e){return e instanceof SemVer||(e=new SemVer(e,this.options)),c(this.major,e.major)||c(this.minor,e.minor)||c(this.patch,e.patch)}comparePre(e){if(e instanceof SemVer||(e=new SemVer(e,this.options)),this.prerelease.length&&!e.prerelease.length)return-1;if(!this.prerelease.length&&e.prerelease.length)return 1;if(!this.prerelease.length&&!e.prerelease.length)return 0;let t=0;do{const n=this.prerelease[t],i=e.prerelease[t];if(a("prerelease compare",t,n,i),void 0===n&&void 0===i)return 0;if(void 0===i)return 1;if(void 0===n)return-1;if(n!==i)return c(n,i)}while(++t)}compareBuild(e){e instanceof SemVer||(e=new SemVer(e,this.options));let t=0;do{const n=this.build[t],i=e.build[t];if(a("prerelease compare",t,n,i),void 0===n&&void 0===i)return 0;if(void 0===i)return 1;if(void 0===n)return-1;if(n!==i)return c(n,i)}while(++t)}inc(e,t,n){switch(e){case"premajor":this.prerelease.length=0,this.patch=0,this.minor=0,this.major++,this.inc("pre",t,n);break;case"preminor":this.prerelease.length=0,this.patch=0,this.minor++,this.inc("pre",t,n);break;case"prepatch":this.prerelease.length=0,this.inc("patch",t,n),this.inc("pre",t,n);break;case"prerelease":0===this.prerelease.length&&this.inc("patch",t,n),this.inc("pre",t,n);break;case"major":0===this.minor&&0===this.patch&&0!==this.prerelease.length||this.major++,this.minor=0,this.patch=0,this.prerelease=[];break;case"minor":0===this.patch&&0!==this.prerelease.length||this.minor++,this.patch=0,this.prerelease=[];break;case"patch":0===this.prerelease.length&&this.patch++,this.prerelease=[];break;case"pre":{const e=Number(n)?1:0;if(!t&&!1===n)throw new Error("invalid increment argument: identifier is empty");if(0===this.prerelease.length)this.prerelease=[e];else{let a=this.prerelease.length;for(;--a>=0;)"number"==typeof this.prerelease[a]&&(this.prerelease[a]++,a=-2);if(-1===a){if(t===this.prerelease.join(".")&&!1===n)throw new Error("invalid increment argument: identifier already exists");this.prerelease.push(e)}}if(t){let a=[t,e];!1===n&&(a=[t]),0===c(this.prerelease[0],t)?isNaN(this.prerelease[1])&&(this.prerelease=a):this.prerelease=a}break}default:throw new Error(`invalid increment argument: ${e}`)}return this.raw=this.format(),this.build.length&&(this.raw+=`+${this.build.join(".")}`),this}}e.exports=SemVer},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"c",(function(){return b}));var a={};n.r(a),n.d(a,"setDataView",(function(){return o})),n.d(a,"setDataViewLoading",(function(){return s})),n.d(a,"setSignalIndexName",(function(){return l})),n.d(a,"setSourcererDataViews",(function(){return c})),n.d(a,"setSourcererScopeLoading",(function(){return u})),n.d(a,"setSelectedDataView",(function(){return d}));var i=n(22);const r=n.n(i)()("x-pack/security_solution/local/sourcerer"),o=r("SET_DATA_VIEW"),s=r("SET_DATA_VIEW_LOADING"),l=r("SET_SIGNAL_INDEX_NAME"),c=r("SET_SOURCERER_DATA_VIEWS"),u=r("SET_SOURCERER_SCOPE_LOADING"),d=r("SET_SELECTED_DATA_VIEW");var p=n(110),m=n(537),f=n(208),g=n(477);const b=Object(f.reducerWithInitialState)(p.initialSourcererState).case(l,((e,{signalIndexName:t})=>({...e,signalIndexName:t}))).case(s,((e,{id:t,loading:n})=>({...e,...t===e.defaultDataView.id?{defaultDataView:{...e.defaultDataView,loading:n}}:{},kibanaDataViews:e.kibanaDataViews.map((e=>e.id===t?{...e,loading:n}:e))}))).case(c,((e,{defaultDataView:t,kibanaDataViews:n})=>({...e,defaultDataView:{...e.defaultDataView,...t},kibanaDataViews:n.map((t=>{var n;return{...null!==(n=e.kibanaDataViews.find((({id:e})=>e===t.id)))&&void 0!==n?n:p.initDataView,...t}}))}))).case(u,((e,{id:t,loading:n})=>({...e,sourcererScopes:{...e.sourcererScopes,...null!=t?{[t]:{...e.sourcererScopes[t],loading:n}}:{[p.SourcererScopeName.default]:{...e.sourcererScopes[p.SourcererScopeName.default],loading:n},[p.SourcererScopeName.detections]:{...e.sourcererScopes[p.SourcererScopeName.detections],loading:n},[p.SourcererScopeName.timeline]:{...e.sourcererScopes[p.SourcererScopeName.timeline],loading:n}}}}))).case(d,((e,t)=>{const{shouldValidateSelectedPatterns:n=!0,...a}=t;return{...e,sourcererScopes:{...e.sourcererScopes,...Object(g.c)(e,a,n)}}})).case(o,((e,t)=>({...e,...t.id===e.defaultDataView.id?{defaultDataView:{...e.defaultDataView,...t}}:{},kibanaDataViews:e.kibanaDataViews.map((e=>e.id===t.id?{...e,...t}:e))}))).build()},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(2),i=n(102);const r={managed:!0},o=()=>{const{services:{apm:e}}=Object(i.j)();return{startTransaction:Object(a.useCallback)((({name:t,type:n="user-interaction",options:a})=>e.startTransaction(t,n,null!=a?a:r)),[e])}},s=e=>`Timeline search ${e}`},function(e,t,n){"use strict";n.d(t,"b",(function(){return f})),n.d(t,"d",(function(){return g})),n.d(t,"a",(function(){return b})),n.d(t,"c",(function(){return y}));var a=n(2),i=n(42),r=n(103),o=n(246),s=n.n(o),l=n(56),c=n(254),u=n(105),d=n(754),p=n(175),m=n(20);const f=(e,t)=>{const n=Object(r.useDispatch)(),i=Object(c.e)(e);Object(a.useEffect)((()=>{const a=i();return n(d.a.registerUrlParam({key:e,initialValue:a})),t(a),()=>{n(d.a.deregisterUrlParam({key:e}))}}),[])},g=e=>{const t=Object(r.useDispatch)();return Object(a.useCallback)((n=>{t(d.a.updateUrlParam({key:e,value:n}))}),[t,e])},b=()=>{const e=Object(u.b)(d.c.selectGlobalUrlParam);return Object(a.useMemo)((()=>{const t={};return e?(Object.keys(e).forEach((n=>{const a=e[n];if(a&&("object"!=typeof a||!Object(i.isEmpty)(a)))try{t[n]=Object(l.encode)(a)}catch{}})),Object(c.a)(Object(i.pickBy)((e=>!Object(i.isEmpty)(e)),t))):""}),[e])},y=()=>{const[{pageName:e}]=Object(p.a)(),t=Object(u.b)(d.c.selectGlobalUrlParam),n=s()(t),r=Object(c.f)();Object(a.useEffect)((()=>{var a;const o=null!==(a=Object(m.b)(e))&&void 0!==a?a:{skipUrlState:!0},s={...t};o.skipUrlState&&Object.keys(s).forEach((e=>{s[e]=null})),Object(i.difference)(Object.keys(null!=n?n:{}),Object.keys(t)).forEach((e=>{s[e]=null})),Object.keys(s).length>0&&r(s)}),[n,t,e,r])}},function(e,t,n){"use strict";n.d(t,"f",(function(){return u})),n.d(t,"e",(function(){return d})),n.d(t,"b",(function(){return f})),n.d(t,"h",(function(){return g})),n.d(t,"g",(function(){return b})),n.d(t,"c",(function(){return y})),n.d(t,"a",(function(){return h})),n.d(t,"i",(function(){return E})),n.d(t,"d",(function(){return x}));var a=n(49),i=n(42),r=n(240),o=n.n(r),s=n(713),l=n(106),c=n(118);const u=(e,t)=>{try{return e?JSON.stringify(Object(a.toElasticsearchQuery)(Object(a.fromKueryExpression)(e),t)):""}catch(e){return""}},d=(e,t)=>`${e}: ${(e=>!isNaN(Number(e)))(t)?t:new Date(t.toString()).valueOf()}`,p=o()((e=>{const t=Object(i.get)("base",e);return null!=t&&null!=t.fields?Object.keys(t.fields):[]})),m=(e,t)=>{const n=e.split(".");return p(t).includes(e)?["base","fields",e]:[n[0],"fields",e]},f=(e,t)=>{const n=m(e,t),a=Object(i.get)(n,t);return null!=a&&"date"===a.type},g=(e,t,n)=>{const a=m(e,n),r=Object(i.get)(a,n),o=r.subType.nested.path;return`${o}: { ${e.replace(`${o}.`,"")}: ${"date"===r.type?`"${t}"`:t} }`},b=(e,t)=>{const n=m(e,t),a=Object(i.get)(n,t).subType.nested.path;return`${a}: { ${e.replace(`${a}.`,"")}: * }`},y=(e,t)=>{const n=m(e,t),a=Object(i.get)(n,t);return!(null==a||!a.subType||!a.subType.nested)},h=(e,t)=>({range:{"@timestamp":{gte:e,lt:t,format:"strict_date_optional_time"}},meta:{type:"range",disabled:!1,negate:!1,alias:null,key:"@timestamp",params:{gte:e,lt:t,format:"strict_date_optional_time"}},$state:{store:a.FilterStateStore.APP_STATE}}),v=e=>Object(i.isEmpty)(e)||Object(i.isEmpty)(e.filter((e=>!0===e.enabled))),E=({config:e,indexPattern:t,queries:n,filters:i})=>{try{return[JSON.stringify(Object(a.buildEsQuery)(t,n,i.filter((e=>!1===e.meta.disabled)),{nestedIgnoreUnmapped:!0,...e,dateFormatTZ:void 0})),void 0]}catch(e){return[void 0,e]}},x=({config:e,dataProviders:t,indexPattern:n,browserFields:a,filters:r=[],kqlQuery:o,kqlMode:u})=>{const p={query:"",language:o.language};if(v(t)&&Object(i.isEmpty)(o.query)&&Object(i.isEmpty)(r))return null;if(v(t)&&Object(i.isEmpty)(o.query)&&!Object(i.isEmpty)(r)){const[t,a]=E({config:e,queries:[p],indexPattern:n,filters:r});return{filterQuery:t,kqlError:a}}const m="filter"===u?"and":"or",h=((e,t)=>e.reduce(((e,n)=>{const a=[n,...n.and].filter((e=>e.enabled));if(!a.length)return e;const i=a.map((e=>((e,t)=>`${e.excluded?"NOT ":""}${e.queryMatch.operator!==c.a&&e.type!==l.a.template?y(e.queryMatch.field,t)?g(e.queryMatch.field,e.queryMatch.value,t):f(e.queryMatch.field,t)?d(e.queryMatch.field,e.queryMatch.value):`${e.queryMatch.field} : ${Array.isArray(e.queryMatch.value)?e.queryMatch.value:Object(s.a)(e.queryMatch.value)}`:y(e.queryMatch.field,t)?b(e.queryMatch.field,t):`${e.queryMatch.field} ${c.a}`}`.trim())(e,t))),r=i.join(" and ");return[...e,r]}),[]).filter((e=>!Object(i.isEmpty)(e))).reduce(((e,t,n,a)=>a.length<=1?t:n?`${e} or (${t})`:`(${t})`),""))(t,a),x=(j=o.query,Object(i.isEmpty)(j)?"":`(${j})`);var j;const O=h?`(${h})`:"",S=O&&x?m:"";p.query=`(${O} ${S} ${x})`;const[k,w]=E({config:e,queries:[p],indexPattern:n,filters:r});return{filterQuery:k,kqlError:w}}},,,function(e,t,n){"use strict";n.d(t,"a",(function(){return S})),n.d(t,"e",(function(){return k})),n.d(t,"d",(function(){return w})),n.d(t,"f",(function(){return I})),n.d(t,"g",(function(){return C})),n.d(t,"c",(function(){return $})),n.d(t,"h",(function(){return V})),n.d(t,"b",(function(){return U}));var a=n(388),i=n(42),r=n(47),o=n(343),s=n.n(o),l=n(114),c=n(118),u=n(106),d=n(241),p=n(151),m=n(12),f=n(133),g=n(190),b=n(176),y=n(718),h=n(150),v=n(387),E=n(158),x=n(110),j=n(286),O=n(209);const S="open-timeline",k=({pinnedEventIds:e})=>null!=e?Object.keys(e).length:0,w=({eventIdToNoteIds:e,noteIds:t})=>(null!=e?Object.keys(e).reduce(((t,n)=>t+e[n].length),0):0)+(null!=t?t.length:0),I=({title:e})=>null==e||0===e.trim().length,T=(e,t)=>"__typename"===e?void 0:t,C=e=>JSON.parse(JSON.stringify(e),T),M=e=>{try{return JSON.parse(e)}catch{return e}},A=e=>Object.entries(e).reduce(((e,[t,n])=>"id"!==t&&null!=n?{...e,[t]:n}:e),{columnHeaderType:g.a,id:null!=e.id?e.id:"unknown",initialWidth:"@timestamp"===e.id?b.b:b.a}),_=e=>({$state:{store:"appState"},meta:{...e.meta,...e.meta&&null!=e.meta.field?{params:M(e.meta.field)}:{},...e.meta&&null!=e.meta.params?{params:M(e.meta.params)}:{},...e.meta&&null!=e.meta.value?{value:M(e.meta.value)}:{}},...null!=e.exists?{exists:M(e.exists)}:{},...null!=e.match_all?{exists:M(e.match_all)}:{},...null!=e.missing?{exists:M(e.missing)}:{},...null!=e.query?{query:M(e.query)}:{},...null!=e.range?{range:M(e.range)}:{},...null!=e.script?{exists:M(e.script)}:{}}),F=(e,t)=>e?{}:null!=t?t.reduce(((e,t)=>{if(null!=t.eventId){const n=Object(i.getOr)([],t.eventId,e);return{...e,[t.eventId]:[...n,t.noteId]}}return e}),{}):{},D=(e,t)=>e?{}:null!=t?t.reduce(((e,t)=>({...e,...null!=t.eventId?{[t.eventId]:t}:{}})),{}):{},N=(e,t)=>e?{}:null!=t?t.reduce(((e,t)=>({...e,[t]:!0})),{}):{},P=(e,t,n)=>n===u.l.default&&e.timelineType===u.l.template?e.templateTimelineId:t&&e.timelineType===u.l.template?Object(r.v4)():e.templateTimelineId,R=({and:e,...t})=>t.type===u.a.template?s()(t,{type:u.a.default,enabled:t.queryMatch.operator!==h.d,queryMatch:{value:t.queryMatch.operator===h.d?"":t.queryMatch.value}}):t,L=(e,t,n)=>e&&t&&n===u.l.default?t.map((e=>{var t,n;return{...R(e),and:null!==(t=null===(n=e.and)||void 0===n?void 0:n.map(R))&&void 0!==t?t:[]}})):t,q=(e,t,n)=>n&&e.timelineType!==n?"":t?`${e.title} - Duplicate`:e.title||"",B=(e,t,n)=>n&&e.timelineType!==n?u.k.draft:t?u.k.active:e.status,z=(e,t,n)=>{const i=e.timelineType===u.l.template,r={...e,columns:null!=e.columns?e.columns.map(A):g.b,defaultColumns:g.b,dateRange:e.status===u.k.immutable&&e.timelineType===u.l.template?{start:j.a.toISOString(),end:j.b.toISOString()}:e.dateRange,dataProviders:L(t,e.dataProviders,n),eventIdToNoteIds:F(t,e.eventIdToNoteIds),filters:null!=e.filters?e.filters.map(_):[],isFavorite:!t&&null!=e.favorite&&e.favorite.length>0,noteIds:t?[]:null!=e.noteIds?e.noteIds:[],pinnedEventIds:N(t,e.pinnedEventIds),pinnedEventsSaveObject:D(t,e.pinnedEventsSaveObject),id:t?"":e.savedObjectId,status:B(e,t,n),savedObjectId:t?null:e.savedObjectId,version:t?null:e.version,timelineType:null!=n?n:e.timelineType,title:q(e,t,n),templateTimelineId:P(e,t,n),templateTimelineVersion:t&&i?1:e.templateTimelineVersion};return Object.entries(r).reduce(((e,[t,n])=>null!=n?Object(a.set)(t,n,e):e),{...f.b,id:""})},$=(e,t=!1,n)=>{const{notes:a,...i}=e;return{notes:a,timeline:z(i,t,n)}},V=({activeTimelineTab:e=c.d.query,duplicate:t=!1,graphEventId:n="",timelineId:a,timelineType:r,onError:o,onOpenTimeline:s,openTimeline:l=!0,updateIsLoading:u,updateTimeline:d})=>{u({id:c.c.active,isLoading:!0}),null==a?(d({id:c.c.active,duplicate:!1,notes:[],from:j.a.toISOString(),to:j.b.toISOString(),timeline:{...f.b,id:c.c.active,activeTab:e,show:l,initialized:!0}})(),u({id:c.c.active,isLoading:!1})):Promise.resolve(Object(O.i)(a)).then((a=>{const o=Object(i.getOr)(null,"data",a);if(!o)return;const u=C(o.timeline),{timeline:p,notes:m}=$(u,t,r);if(null!=s)s(p);else if(d){const{from:a,to:r}=Object(v.a)({from:Object(i.getOr)(null,"dateRange.start",p),to:Object(i.getOr)(null,"dateRange.end",p)});d({duplicate:t,from:a,id:c.c.active,notes:m,resolveTimelineConfig:{outcome:o.outcome,alias_target_id:o.alias_target_id,alias_purpose:o.alias_purpose},timeline:{...p,activeTab:e,graphEventId:n,show:l,dateRange:{start:a,end:r}},to:r})()}})).catch((e=>{null!=o&&o(e,a)})).finally((()=>{u({id:c.c.active,isLoading:!1})}))},U=e=>({duplicate:t,id:n,forceNotes:a=!1,from:r,notes:o,resolveTimelineConfig:s,timeline:c,to:f,ruleNote:g,ruleAuthor:b})=>()=>{var h;if(Object(i.isEmpty)(c.indexNames)||e(E.a.setSelectedDataView({id:x.SourcererScopeName.timeline,selectedDataViewId:c.dataViewId,selectedPatterns:c.indexNames})),c.status===u.k.immutable&&c.timelineType===u.l.template?e(Object(p.setRelativeRangeDatePicker)({id:l.a.timeline,fromStr:"now-24h",toStr:"now",from:j.a.toISOString(),to:j.b.toISOString()})):e(Object(p.setTimelineRangeDatePicker)({from:r,to:f})),e(Object(m.addTimeline)({id:n,timeline:c,resolveTimelineConfig:s,savedTimeline:t})),null!=c.kqlQuery&&null!=c.kqlQuery.filterQuery&&null!=c.kqlQuery.filterQuery.kuery&&""!==c.kqlQuery.filterQuery.kuery.expression&&e(Object(m.applyKqlFilterQuery)({id:n,filterQuery:{kuery:{kind:null!==(h=c.kqlQuery.filterQuery.kuery.kind)&&void 0!==h?h:"kuery",expression:c.kqlQuery.filterQuery.kuery.expression||""},serializedQuery:c.kqlQuery.filterQuery.serializedQuery||""}})),t&&null!=g&&!Object(i.isEmpty)(g)){const t=Object(y.a)({newNote:g,user:b||"elastic"});e(Object(d.updateNote)({note:t})),e(Object(m.addNote)({noteId:t.id,id:n}))}t&&!a||e(Object(d.addNotes)({notes:null!=o?o.map((e=>{var t,n;return{created:null!=e.created?new Date(e.created):new Date,id:e.noteId,lastEdit:null!=e.updated?new Date(e.updated):new Date,note:e.note||"",user:e.updatedBy||"unknown",saveObjectId:e.noteId,version:e.version,eventId:null!==(t=e.eventId)&&void 0!==t?t:null,timelineId:null!==(n=e.timelineId)&&void 0!==n?n:null}})):[]}))}},function(e,t,n){"use strict";n.d(t,"e",(function(){return d})),n.d(t,"c",(function(){return p}));var a=n(104),i=n.n(a),r=n(247),o=n(2),s=n.n(o),l=n(289);n.d(t,"d",(function(){return l.b})),n.d(t,"b",(function(){return l.a}));var c=n(110),u=n(1034);n.d(t,"a",(function(){return r.b}));const d=r.j,p=({sourcererScopeId:e=c.SourcererScopeName.default,data:t,children:n,...a})=>{const l=Object(u.a)(e),d=JSON.stringify(t),p=Object(o.useMemo)((()=>(Array.isArray(t)?t:[t]).map((({field:e,value:t})=>({field:l(e),value:t}))).filter((e=>!!e.field))),[d,l]);return p.length>0?s.a.createElement(r.a,i()({data:p},a),n):s.a.createElement(s.a.Fragment,null,n)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(53),c=n.n(l),u=n(149),d=n(679),p=n(910);const m=s.a.header.withConfig({displayName:"Header",componentId:"sc-1q9aiyj-0"})(["&.toggle-expand{margin-bottom:",";}.no-margin{margin-top:0 !important;margin-bottom:0 !important;}"," margin-bottom:0;user-select:text;",""],(({theme:e})=>e.eui.euiSizeL),(({height:e})=>e&&Object(o.css)(["height:","px;"],e)),(({border:e})=>e&&Object(o.css)(["border-bottom:",";padding-bottom:",";"],(({theme:e})=>e.eui.euiBorderThin),(({theme:e})=>e.eui.euiSizeL))));m.displayName="Header";const f=({alignHeader:e,stackHeader:t})=>null!=e?e:t?void 0:"center",g=({alignHeader:e,border:t,children:n,outerDirection:o="column",growLeftSplit:s=!0,headerFilters:l,height:g,hideSubtitle:b=!1,id:y,inspectMultiple:h=!1,inspectTitle:v,isInspectDisabled:E,showInspectButton:x=!0,split:j,stackHeader:O,subtitle:S,title:k,titleSize:w="m",toggleQuery:I,toggleStatus:T=!0,tooltip:C,tooltipTitle:M})=>{const A=Object(i.useCallback)((()=>{I&&I(!T)}),[I,T]),_=c()({"toggle-expand":T,siemHeaderSection:!0});return r.a.createElement(m,{"data-test-subj":"header-section",border:t,height:g,className:_,$hideSubtitle:b},r.a.createElement(a.EuiFlexGroup,{"data-test-subj":"headerSectionOuterFlexGroup",direction:o,gutterSize:"xs",responsive:!1},r.a.createElement(a.EuiFlexItem,{grow:s},r.a.createElement(a.EuiFlexGroup,{alignItems:f({alignHeader:e,stackHeader:O}),"data-test-subj":"headerSectionInnerFlexGroup",direction:O?"column":"row",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,{grow:s,className:T?"":"no-margin"},r.a.createElement(a.EuiFlexGroup,{alignItems:"center",responsive:!1,gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{responsive:!1,gutterSize:"none",className:"header-section-titles"},I&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonIcon,{"data-test-subj":"query-toggle-header","aria-label":p.a(T),color:"text",display:"empty",iconType:T?"arrowDown":"arrowRight",onClick:A,size:"s",title:p.a(T)})),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiTitle,{size:w},r.a.createElement("h4",{"data-test-subj":"header-section-title"},r.a.createElement("span",{className:"eui-textBreakNormal"},k),C&&r.a.createElement(r.a.Fragment,null," ",r.a.createElement(a.EuiIconTip,{color:"subdued",title:M,content:C,size:"l",type:"iInCircle"}))))))),y&&T&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(u.b,{isDisabled:E,queryId:y,multiple:h,showInspectButton:x,title:null!=v?v:k})),l&&T&&r.a.createElement(a.EuiFlexItem,{"data-test-subj":"header-section-filters",grow:!1},l))),n&&T&&r.a.createElement(a.EuiFlexItem,{"data-test-subj":"header-section-supplements",grow:!!j},n))),!b&&T&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(d.a,{"data-test-subj":"header-section-subtitle",items:S}))))},b=r.a.memo(g)},function(e,t,n){"use strict";n.d(t,"k",(function(){return i})),n.d(t,"l",(function(){return r})),n.d(t,"m",(function(){return o})),n.d(t,"n",(function(){return s})),n.d(t,"i",(function(){return l})),n.d(t,"g",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"p",(function(){return p})),n.d(t,"e",(function(){return m})),n.d(t,"j",(function(){return f})),n.d(t,"c",(function(){return g})),n.d(t,"d",(function(){return b})),n.d(t,"a",(function(){return y})),n.d(t,"b",(function(){return h})),n.d(t,"o",(function(){return v}));var a=n(4);const i="matched.atomic",r="matched.field",o="matched.id",s="matched.type",l=[i,r,s],c=`${a.pb}.${r}`,u=`${a.pb}.${s}`,d="indicator.first_seen",p="indicator.reference",m="feed.name",f=`${a.pb}.${p}`;let g;!function(e){e.InvestigationTime="investigation_time",e.IndicatorMatchRule="indicator_match_rule"}(g||(g={}));const b={"file.hash.md5":`${a.I}.file.hash.md5`,"file.hash.sha1":`${a.I}.file.hash.sha1`,"file.hash.sha256":`${a.I}.file.hash.sha256`,"file.pe.imphash":`${a.I}.file.pe.imphash`,"file.elf.telfhash":`${a.I}.file.elf.telfhash`,"file.hash.ssdeep":`${a.I}.file.hash.ssdeep`,"source.ip":`${a.I}.ip`,"destination.ip":`${a.I}.ip`,"url.full":`${a.I}.url.full`,"registry.path":`${a.I}.registry.path`},y="now-30d",h="now",v="_others_ti_"},function(e,t,n){"use strict";n.d(t,"h",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"i",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"f",(function(){return f})),n.d(t,"g",(function(){return g}));var a=n(40),i=n(41),r=n.n(i),o=n(4);const s=r.a.div.withConfig({displayName:"SecuritySolutionAppWrapper",componentId:"sc-2kezi3-0"})(["display:flex;flex-direction:column;flex:1 1 auto;width:100%;"]);s.displayName="SecuritySolutionAppWrapper";const l=()=>Object(i.css)([".euiOverlayMask[data-relative-to-header='below']{top:0 !important;}.euiFlyout{top:0 !important;height:100% !important;}"]),c=Object(i.createGlobalStyle)([".euiDataGridRowCell__popover{max-width:815px !important;max-height:none !important;overflow:hidden;.expandable-top-value-button{&.euiButtonEmpty:focus{background-color:transparent;}}&.euiPopover__panel[data-popover-open]{padding:8px 0;min-width:65px;}.euiPopoverFooter{border:0;margin-top:0;.euiFlexGroup{flex-direction:column;}}.euiText + .euiPopoverFooter{border-top:1px solid ",";margin-top:",";}}.euiPanel-loading-hide-border{border:none;}body.euiBody-hasOverlayMask{.euiDataGridRowCell__popover[data-popover-open],.withHoverActions__popover[data-popover-open]{visibility:hidden !important;}}.","{",";}.euiScreenReaderOnly{clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;}"],(({theme:e})=>e.eui.euiColorLightShade),(({theme:e})=>e.eui.euiSizeS),o.yb,(({theme:e})=>`background-color: ${e.eui.euiColorPrimary} !important`)),u=r()(a.EuiDescriptionList).withConfig({displayName:"DescriptionListStyled",componentId:"sc-2kezi3-1"})(["",""],(({theme:e})=>`\n    word-break: break-word;\n    dt {\n      font-size: ${e.eui.euiFontSizeXS} !important;\n    }\n    dd {\n      width: fit-content;\n    }\n    dd > div {\n      width: fit-content;\n    }\n  `));u.displayName="DescriptionListStyled";const d=r()(a.EuiBadge).withConfig({displayName:"CountBadge",componentId:"sc-2kezi3-2"})(["margin-left:5px;"]);d.displayName="CountBadge";const p=r.a.span.withConfig({displayName:"Spacer",componentId:"sc-2kezi3-3"})(["margin-left:5px;"]);p.displayName="Spacer";const m=r()(a.EuiBadge).withConfig({displayName:"Badge",componentId:"sc-2kezi3-4"})(["vertical-align:top;"]);m.displayName="Badge";const f=r()(a.EuiIcon).withConfig({displayName:"MoreRowItems",componentId:"sc-2kezi3-5"})(["margin-left:5px;"]);f.displayName="MoreRowItems";const g=r()(a.EuiFlexGroup).withConfig({displayName:"OverviewWrapper",componentId:"sc-2kezi3-6"})(["position:relative;.euiButtonIcon{position:absolute;right:",";top:6px;z-index:2;}"],(e=>e.theme.eui.euiSizeM));g.displayName="OverviewWrapper"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"d",(function(){return u.a})),n.d(t,"i",(function(){return u.d})),n.d(t,"e",(function(){return d.a})),n.d(t,"j",(function(){return d.b})),n.d(t,"f",(function(){return p})),n.d(t,"h",(function(){return m.b})),n.d(t,"g",(function(){return m.a})),n.d(t,"k",(function(){return f})),n.d(t,"l",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"c",(function(){return y})),n.d(t,"m",(function(){return h})),n.d(t,"n",(function(){return v}));var a=n(42),i=n(2),r=n(636),o=n(609),s=n(323),l=(n(4),n(195));const c=(e,t)=>`/${e}/summary${Object(l.a)(t)}`;var u=n(201),d=n(259);const p=(e,t)=>`/${e}${Object(l.a)(t)}`;var m=n(411);const f=(e,t)=>`/${e}${Object(l.a)(t)}`,g=(e,t)=>`?timeline=(id:'${e}',isOpen:!t${Object(a.isEmpty)(t)?")":`,graphEventId:'${t}')`}`,b=({id:e,search:t})=>`/${encodeURIComponent(e)}${Object(l.a)(null!=t?t:void 0)}`,y=e=>`/create${Object(l.a)(null!=e?e:void 0)}`,h=e=>{const{getAppUrl:t}=Object(s.a)(),n=Object(o.b)(e);return{formatUrl:Object(i.useCallback)(((i,{absolute:r=!1,skipSearch:o=!1}={})=>{const s=function(e,t,n){const[i,r]=e.split("?");return`${i}${n?Object(a.isEmpty)(r)?"":`?${r}`:Object(a.isEmpty)(r)?t:`?${r}${Object(a.isEmpty)(t)?"":`&${t}`}`}`}(i,n,o);return t({deepLinkId:e,path:s,absolute:r})}),[t,e,n]),search:n}},v=()=>{const e=Object(r.b)(),t=Object(o.a)();return Object(i.useCallback)((({deepLinkId:n,path:a="",absolute:i=!1,skipSearch:r=!1})=>{const o=r?"":t(n);return e({id:n,path:a,urlState:o,absolute:i})}),[e,t])}},function(e,t,n){"use strict";n.d(t,"B",(function(){return u})),n.d(t,"A",(function(){return p})),n.d(t,"z",(function(){return m})),n.d(t,"a",(function(){return f})),n.d(t,"i",(function(){return g})),n.d(t,"s",(function(){return b})),n.d(t,"v",(function(){return y})),n.d(t,"q",(function(){return h})),n.d(t,"r",(function(){return v})),n.d(t,"o",(function(){return E})),n.d(t,"p",(function(){return x})),n.d(t,"j",(function(){return j})),n.d(t,"u",(function(){return O})),n.d(t,"t",(function(){return S})),n.d(t,"x",(function(){return k})),n.d(t,"w",(function(){return w})),n.d(t,"m",(function(){return I})),n.d(t,"n",(function(){return T})),n.d(t,"b",(function(){return C})),n.d(t,"k",(function(){return M})),n.d(t,"l",(function(){return A})),n.d(t,"c",(function(){return _})),n.d(t,"f",(function(){return F})),n.d(t,"g",(function(){return D})),n.d(t,"d",(function(){return N})),n.d(t,"e",(function(){return P})),n.d(t,"h",(function(){return R})),n.d(t,"y",(function(){return L}));var a=n(40),i=n(287),r=n(41),o=n.n(r),s=n(109),l=n(148),c=n(268);const u=o.a.div.attrs((({className:e=""})=>({className:`securitySolutionTimeline__container ${e}`}))).withConfig({displayName:"TimelineContainer",componentId:"sc-1fubmdc-0"})(["height:100%;display:flex;flex-direction:column;position:relative;"]),d="securitySolutionTimeline__body",p=Object(r.createGlobalStyle)(["body."," .","{overflow:hidden;}"],s.e,d),m=o.a.div.attrs((({className:e=""})=>({className:`${d} ${e}`}))).withConfig({displayName:"TimelineBody",componentId:"sc-1fubmdc-1"})(["height:auto;overflow:auto;scrollbar-width:thin;flex:1;display:block;&::-webkit-scrollbar{height:",";width:",";}&::-webkit-scrollbar-thumb{background-clip:content-box;background-color:",";border:"," solid transparent;}&::-webkit-scrollbar-corner,&::-webkit-scrollbar-track{background-color:transparent;}"],(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>Object(i.rgba)(e.eui.euiColorDarkShade,.5)),(({theme:e})=>e.eui.euiScrollBarCorner));m.displayName="TimelineBody";const f="siemEventsTable",g=o.a.div.attrs((({className:e="",$columnCount:t,columnWidths:n,$activePage:a,$rowCount:i,$totalPages:r})=>({"aria-label":Object(c.c)({activePage:a+1,totalPages:r}),"aria-colcount":`${t}`,"aria-rowcount":`${i+1}`,className:`siemEventsTable ${e}`,role:"grid",style:{minWidth:`${n}px`},tabindex:"-1"}))).withConfig({displayName:"EventsTable",componentId:"sc-1fubmdc-2"})(["padding:3px;"]),b=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__thead ${e}`,role:"rowgroup"}))).withConfig({displayName:"EventsThead",componentId:"sc-1fubmdc-3"})(["background-color:",";border-bottom:"," solid ",";position:sticky;top:0;z-index:",";"],(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiBorderWidthThick),(({theme:e})=>e.eui.euiColorLightShade),(({theme:e})=>e.eui.euiZLevel1)),y=o.a.div.attrs((({className:e})=>({"aria-rowindex":"1",className:`siemEventsTable__trHeader ${e}`,role:"row"}))).withConfig({displayName:"EventsTrHeader",componentId:"sc-1fubmdc-4"})(["display:flex;"]),h=o.a.div.attrs((({className:e=""})=>({"aria-colindex":`${l.a}`,className:`siemEventsTable__thGroupActions ${e}`,role:"columnheader",tabIndex:"0"}))).withConfig({displayName:"EventsThGroupActions",componentId:"sc-1fubmdc-5"})(["display:flex;flex:0 0 ",";min-width:0;padding-left:",";"],(({actionsColumnWidth:e,isEventViewer:t})=>`${t?e:e+4}px`),(({isEventViewer:e})=>e?"0;":"4px;")),v=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__thGroupData ${e}`}))).withConfig({displayName:"EventsThGroupData",componentId:"sc-1fubmdc-6"})(["display:flex;> div:hover .siemEventsHeading__handle{display:",";opacity:1;visibility:visible;}"],(({isDragging:e})=>e?"none":"block")),E=o.a.div.attrs((({className:e="",role:t="columnheader"})=>({className:`siemEventsTable__th ${e}`,role:t}))).withConfig({displayName:"EventsTh",componentId:"sc-1fubmdc-7"})(["align-items:center;display:flex;flex-shrink:0;min-width:0;.siemEventsTable__thGroupActions &:first-child:last-child{flex:1;}.siemEventsTable__thGroupData &:hover{background-color:",";cursor:move;cursor:grab;}> div:focus{outline:0;}[data-rbd-placeholder-context-id]{display:none !important;}"],(({theme:e})=>e.eui.euiTableHoverColor)),x=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__thContent ${e}`}))).withConfig({displayName:"EventsThContent",componentId:"sc-1fubmdc-8"})(["font-size:",";font-weight:",";line-height:",";min-width:0;padding:",";text-align:",";width:",";> button.euiButtonIcon,> .euiToolTipAnchor > button.euiButtonIcon{margin-left:",";}"],(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiFontWeightSemiBold),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiSizeXS),(({textAlign:e})=>e),(({width:e})=>null!=e?`${e}px`:"100%"),(({theme:e})=>`-${e.eui.euiSizeXS}`)),j=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__tbody ${e}`,role:"rowgroup"}))).withConfig({displayName:"EventsTbody",componentId:"sc-1fubmdc-9"})(["overflow-x:hidden;"]),O=o.a.div.attrs((({className:e="",$ariaRowindex:t})=>({"aria-rowindex":`${t}`,className:`siemEventsTable__trGroup ${e}`,role:"row"}))).withConfig({displayName:"EventsTrGroup",componentId:"sc-1fubmdc-10"})(["border-bottom:"," solid ",";",";",";",";&:hover{background-color:",";}",""],(({theme:e})=>e.eui.euiBorderWidthThin),(({theme:e})=>e.eui.euiColorLightShade),(({theme:e,eventType:t,isEvenEqlSequence:n,showLeftBorder:a})=>a?`border-left: 4px solid\n    ${"raw"===t?e.eui.euiColorLightShade:"eql"===t&&n?e.eui.euiColorPrimary:"eql"!==t||n?e.eui.euiColorWarning:e.eui.euiColorAccent}`:""),(({isBuildingBlockType:e})=>e?"background: repeating-linear-gradient(127deg, rgba(245, 167, 0, 0.2), rgba(245, 167, 0, 0.2) 1px, rgba(245, 167, 0, 0.05) 2px, rgba(245, 167, 0, 0.05) 10px);":""),(({eventType:e,isEvenEqlSequence:t})=>"eql"===e?t?"background: repeating-linear-gradient(127deg, rgba(0, 107, 180, 0.2), rgba(0, 107, 180, 0.2) 1px, rgba(0, 107, 180, 0.05) 2px, rgba(0, 107, 180, 0.05) 10px);":"background: repeating-linear-gradient(127deg, rgba(221, 10, 115, 0.2), rgba(221, 10, 115, 0.2) 1px, rgba(221, 10, 115, 0.05) 2px, rgba(221, 10, 115, 0.05) 10px);":""),(({theme:e})=>e.eui.euiTableHoverColor),(({isExpanded:e,theme:t})=>e&&`\n    background: ${t.eui.euiTableSelectedColor};\n\n    &:hover {\n      ${t.eui.euiTableHoverSelectedColor}\n    }\n  `)),S=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__trData ${e}`}))).withConfig({displayName:"EventsTrData",componentId:"sc-1fubmdc-11"})(["display:flex;"]),k=o.a.div.attrs((({width:e})=>({role:"dialog",style:{width:e-40+"px"}}))).withConfig({displayName:"EventsTrSupplementContainer",componentId:"sc-1fubmdc-12"})([""]),w=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__trSupplement ${e}`}))).withConfig({displayName:"EventsTrSupplement",componentId:"sc-1fubmdc-13"})(["display:",";font-size:",";line-height:",";padding-left:",";.euiAccordion + div{background-color:",";padding:0 ",";border:1px solid ",";border-radius:",";}"],(({$display:e})=>null!=e?e:"inline-block"),(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiSizeM),(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiSizeS),(({theme:e})=>e.eui.euiColorLightShade),(({theme:e})=>e.eui.euiSizeXS)),I=o.a.div.attrs((({className:e=""})=>({"aria-colindex":`${l.a}`,className:`siemEventsTable__tdGroupActions ${e}`,role:"gridcell"}))).withConfig({displayName:"EventsTdGroupActions",componentId:"sc-1fubmdc-14"})(["align-items:center;display:flex;flex:0 0 ",";min-width:0;"],(({width:e})=>`${e}px`)),T=o.a.div.attrs((({className:e=""})=>({className:`siemEventsTable__tdGroupData ${e}`}))).withConfig({displayName:"EventsTdGroupData",componentId:"sc-1fubmdc-15"})(["display:flex;"]),C="siemEventsTable__td",M=o.a.div.attrs((({className:e="",$ariaColumnIndex:t,width:n})=>{const a={className:`siemEventsTable__td ${e}`,role:"gridcell",style:{flexBasis:n?`${n}px`:"auto"}};return null!=t?{...a,"aria-colindex":`${t}`}:a})).withConfig({displayName:"EventsTd",componentId:"sc-1fubmdc-16"})(["align-items:center;display:flex;flex-shrink:0;min-width:0;.siemEventsTable__tdGroupActions &:first-child:last-child{flex:1;}"]),A=o.a.div.attrs((({className:e})=>({className:`siemEventsTable__tdContent ${null!=e?e:""}`}))).withConfig({displayName:"EventsTdContent",componentId:"sc-1fubmdc-17"})(["font-size:",";line-height:",";min-width:0;padding:",";text-align:",";width:",";button.euiButtonIcon{margin-left:",";}"],(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiSizeXS),(({textAlign:e})=>e),(({width:e})=>null!=e?`${e}px`:"100%"),(({theme:e})=>`-${e.eui.euiSizeXS}`)),_=o.a.div.attrs((({className:e=""})=>({className:`siemEventsHeading ${e}`}))).withConfig({displayName:"EventsHeading",componentId:"sc-1fubmdc-18"})(["align-items:center;display:flex;&:hover{cursor:",";}"],(({isLoading:e})=>e?"wait":"grab")),F=o.a.button.attrs((({className:e=""})=>({className:`siemEventsHeading__title siemEventsHeading__title--aggregatable ${e}`,type:"button"}))).withConfig({displayName:"EventsHeadingTitleButton",componentId:"sc-1fubmdc-19"})(["align-items:center;display:flex;font-weight:inherit;min-width:0;&:hover,&:focus{color:",";text-decoration:underline;}&:hover{cursor:pointer;}& > * + *{margin-left:",";}"],(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiSizeXS)),D=o.a.span.attrs((({className:e})=>({className:`siemEventsHeading__title siemEventsHeading__title--notAggregatable ${e}`}))).withConfig({displayName:"EventsHeadingTitleSpan",componentId:"sc-1fubmdc-20"})(["min-width:0;"]),N=o.a.div.attrs((({className:e=""})=>({className:`siemEventsHeading__extra ${e}`}))).withConfig({displayName:"EventsHeadingExtra",componentId:"sc-1fubmdc-21"})(["margin-left:auto;margin-right:2px;&.siemEventsHeading__extra--close{opacity:0;transition:all "," ease;visibility:hidden;.siemEventsTable__th:hover &{opacity:1;visibility:visible;}}"],(({theme:e})=>e.eui.euiAnimSpeedNormal)),P=o.a.div.attrs((({className:e=""})=>({className:`siemEventsHeading__handle ${e}`}))).withConfig({displayName:"EventsHeadingHandle",componentId:"sc-1fubmdc-22"})(["background-color:",";height:100%;opacity:0;transition:all "," ease;visibility:hidden;width:",";&:hover{background-color:",";cursor:col-resize;}"],(({theme:e})=>e.eui.euiBorderColor),(({theme:e})=>e.eui.euiAnimSpeedNormal),(({theme:e})=>e.eui.euiBorderWidthThick),(({theme:e})=>e.eui.euiColorPrimary)),R=o()(a.EuiLoadingSpinner).withConfig({displayName:"EventsLoading",componentId:"sc-1fubmdc-23"})(["margin:0 2px;vertical-align:middle;"]),L=o.a.div.attrs((({$isVisible:e=!1})=>({style:{display:e?"block":"none"}}))).withConfig({displayName:"HideShowContainer",componentId:"sc-1fubmdc-24"})([""])},function(e,t,n){"use strict";n.d(t,"a",(function(){return S})),n.d(t,"b",(function(){return m})),n.d(t,"c",(function(){return f}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40);let l;!function(e){e.openFlyout="open_flyout",e.openRightPanel="open_right_panel",e.openLeftPanel="open_left_panel",e.openPreviewPanel="open_preview_panel",e.closeRightPanel="close_right_panel",e.closeLeftPanel="close_left_panel",e.closePreviewPanel="close_preview_panel",e.previousPreviewPanel="previous_preview_panel",e.closeFlyout="close_flyout"}(l||(l={}));const c={left:void 0,right:void 0,preview:[]};function u(e,t){switch(t.type){case l.openFlyout:{const{left:e,right:n,preview:a}=t.payload;return{left:e,right:n,preview:a?[a]:[]}}case l.openRightPanel:return{...e,right:t.payload};case l.openLeftPanel:return{...e,left:t.payload};case l.openPreviewPanel:return{...e,preview:[...e.preview,t.payload]};case l.closeRightPanel:return{...e,right:void 0};case l.closeLeftPanel:return{...e,left:void 0};case l.closePreviewPanel:return{...e,preview:[]};case l.previousPreviewPanel:{const t=[...e.preview];return t.pop(),{...e,preview:t}}case l.closeFlyout:return{left:void 0,right:void 0,preview:[]};default:return e}}var d=n(21);const p=Object(r.createContext)(void 0),m=o.a.forwardRef((({children:e,onChanges:t=(()=>{}),onClosePanels:n=(()=>{})},a)=>{const[i,o]=Object(r.useReducer)(u,c);Object(r.useEffect)((()=>{!i.right||t(i)}),[i,t]);const s=Object(r.useCallback)((({right:e,left:t,preview:n})=>o({type:l.openFlyout,payload:{left:t,right:e,preview:n}})),[o]),m=Object(r.useCallback)((e=>o({type:l.openRightPanel,payload:e})),[]),f=Object(r.useCallback)((e=>o({type:l.openLeftPanel,payload:e})),[]),g=Object(r.useCallback)((e=>o({type:l.openPreviewPanel,payload:e})),[]),b=Object(r.useCallback)((()=>o({type:l.closeRightPanel})),[]),y=Object(r.useCallback)((()=>o({type:l.closeLeftPanel})),[]),h=Object(r.useCallback)((()=>o({type:l.closePreviewPanel})),[]),v=Object(r.useCallback)((()=>o({type:l.previousPreviewPanel})),[]),E=Object(r.useCallback)((()=>{o({type:l.closeFlyout}),n()}),[n]);Object(r.useImperativeHandle)(a,(()=>({openFlyout:s,getState:()=>i})),[s,i]);const x=Object(r.useMemo)((()=>({panels:i,openFlyout:s,openRightPanel:m,openLeftPanel:f,openPreviewPanel:g,closeRightPanel:b,closeLeftPanel:y,closePreviewPanel:h,closeFlyout:E,previousPreviewPanel:v})),[i,s,m,f,g,b,y,h,E,v]);return Object(d.jsx)(p.Provider,{value:x},e)})),f=()=>{const e=Object(r.useContext)(p);if(!e)throw new Error("ExpandableFlyoutContext can only be used within ExpandableFlyoutContext provider");return e};var g=n(8),b=n(5);const y=b.i18n.translate("expandableFlyout.previewSection.backButton",{defaultMessage:"Back"}),h=b.i18n.translate("expandableFlyout.previewSection.closeButton",{defaultMessage:"Close"}),v=e=>Object(g.has)(e,"title")||Object(g.has)(e,"backgroundColor")||Object(g.has)(e,"textColor"),E=({component:e,showBackButton:t,width:n,banner:a})=>{const{euiTheme:i}=Object(s.useEuiTheme)(),{closePreviewPanel:r,previousPreviewPanel:o}=f(),l=100*(1-n)+"%",c=Object(d.jsx)(s.EuiFlexItem,{grow:!1},Object(d.jsx)(s.EuiButtonIcon,{iconType:"cross",onClick:()=>r(),"data-test-subj":"previewSectionCloseButton","aria-label":h})),u=t?Object(d.jsx)(s.EuiFlexGroup,{justifyContent:"spaceBetween"},Object(d.jsx)(s.EuiFlexItem,{grow:!1},Object(d.jsx)(s.EuiButtonEmpty,{size:"xs",iconType:"arrowLeft",iconSide:"left",onClick:()=>o(),"data-test-subj":"previewSectionBackButton","aria-label":y},y)),c):Object(d.jsx)(s.EuiFlexGroup,{justifyContent:"flexEnd"},c);return Object(d.jsx)("div",{css:Object(d.css)("position:absolute;top:0;bottom:0;right:0;left:",l,";z-index:1000;","")},Object(d.jsx)(s.EuiSplitPanel.Outer,{css:Object(d.css)("margin:",i.size.xs,";height:99%;box-shadow:0px 0px 5px 5px ",i.colors.darkShade,";",""),className:"eui-yScroll","data-test-subj":"previewSection"},v(a)&&Object(d.jsx)(s.EuiSplitPanel.Inner,{grow:!1,color:a.backgroundColor,paddingSize:"none"},Object(d.jsx)(s.EuiText,{textAlign:"center",color:a.textColor,size:"s"},a.title)),Object(d.jsx)(s.EuiSplitPanel.Inner,{grow:!1,paddingSize:"s","data-test-subj":"previewSectionHeader"},u),Object(d.jsx)(s.EuiSplitPanel.Inner,{paddingSize:"none"},e)))};E.displayName="PreviewSection";const x=({component:e,width:t})=>{const n=Object(r.useMemo)((()=>({height:"100%",width:100*t+"%",overflowY:"scroll"})),[t]);return Object(d.jsx)(s.EuiFlexItem,{grow:!1,style:n,"data-test-subj":"rightSection"},Object(d.jsx)(s.EuiFlexGroup,{direction:"column"},e))};x.displayName="RightSection";const j=({component:e,width:t})=>{const n=Object(r.useMemo)((()=>({height:"100%",width:100*t+"%",overflowY:"scroll"})),[t]);return Object(d.jsx)(s.EuiFlexItem,{grow:!0,"data-test-subj":"leftSection",style:n},Object(d.jsx)(s.EuiFlexGroup,{direction:"column"},e))};j.displayName="LeftSection";const O={height:"100%"},S=({registeredPanels:e,handleOnFlyoutClosed:t,...n})=>{var a,o;const{panels:l,closeFlyout:c}=f(),{left:u,right:p,preview:m}=l,g=Object(r.useCallback)((()=>{t&&t(),c()}),[c,t]),b=Object(r.useMemo)((()=>e.find((e=>e.key===(null==u?void 0:u.id)))),[u,e]),y=Object(r.useMemo)((()=>e.find((e=>e.key===(null==p?void 0:p.id)))),[p,e]),h=m?m[m.length-1]:void 0,S=v(null==h||null===(a=h.params)||void 0===a?void 0:a.banner)?null==h||null===(o=h.params)||void 0===o?void 0:o.banner:void 0,k=m&&m.length>1,w=Object(r.useMemo)((()=>e.find((e=>e.key===(null==h?void 0:h.id)))),[h,e]);if(!u&&!p&&!m.length)return null;const I=b&&y?"l":"s",T=b?.4:1,C=b?.4:1;return Object(d.jsx)(s.EuiFlyout,i()({},n,{size:I,ownFocus:!1,onClose:g}),Object(d.jsx)(s.EuiFlexGroup,{direction:b?"row":"column",wrap:!1,gutterSize:"none",style:O},b&&u?Object(d.jsx)(j,{component:b.component({...u}),width:.6}):null,y&&p?Object(d.jsx)(x,{component:y.component({...p}),width:T}):null),w&&m?Object(d.jsx)(E,{component:w.component({...h}),showBackButton:k,width:C,banner:S}):null)};S.displayName="ExpandableFlyout"},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return l}));var a=n(43),i=n(112),r=n(193),o=n(128);let s,l;!function(e){e.enable="enable",e.disable="disable",e.export="export",e.delete="delete",e.duplicate="duplicate",e.edit="edit"}(s||(s={})),function(e){e.add_tags="add_tags",e.delete_tags="delete_tags",e.set_tags="set_tags",e.add_index_patterns="add_index_patterns",e.delete_index_patterns="delete_index_patterns",e.set_index_patterns="set_index_patterns",e.set_timeline="set_timeline",e.add_rule_actions="add_rule_actions",e.set_rule_actions="set_rule_actions",e.set_schedule="set_schedule"}(l||(l={}));const c=a.union([a.literal("rule"),a.literal("1h"),a.literal("1d"),a.literal("7d")]),u=a.type({type:a.union([a.literal(l.add_tags),a.literal(l.delete_tags),a.literal(l.set_tags)]),value:o.F}),d=a.intersection([a.type({type:a.union([a.literal(l.add_index_patterns),a.literal(l.delete_index_patterns),a.literal(l.set_index_patterns)]),value:o.i}),a.exact(a.partial({overwrite_data_views:a.boolean}))]),p=a.type({type:a.literal(l.set_timeline),value:a.type({timeline_id:o.O,timeline_title:o.P})}),m=a.exact(a.intersection([a.type({group:r.i,id:r.j,params:r.k}),a.partial({frequency:r.h}),a.partial({alerts_filter:r.f})])),f=a.type({type:a.union([a.literal(l.add_rule_actions),a.literal(l.set_rule_actions)]),value:a.intersection([a.partial({throttle:c}),a.type({actions:a.array(m)})])}),g=a.type({type:a.literal(l.set_schedule),value:a.type({interval:Object(i.q)({allowedUnits:["s","m","h"]}),lookback:Object(i.q)({allowedUnits:["s","m","h"]})})}),b=a.union([u,d,p,f,g]),y=a.exact(a.type({include_exceptions:a.boolean,include_expired_exceptions:a.boolean}));a.intersection([a.exact(a.type({query:a.union([o.B,a[void 0]])})),a.exact(a.partial({ids:Object(i.j)(a.string)})),a.union([a.exact(a.type({action:a.union([a.literal(s.delete),a.literal(s.disable),a.literal(s.enable),a.literal(s.export)])})),a.intersection([a.exact(a.type({action:a.literal(s.duplicate)})),a.exact(a.partial({[s.duplicate]:y}))]),a.exact(a.type({action:a.literal(s.edit),[s.edit]:Object(i.j)(b)}))])]),a.exact(a.partial({dry_run:a.union([a.literal("true"),a.literal("false")])}))},,function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"g",(function(){return r})),n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"f",(function(){return d}));var a=n(47);const i=e=>null!=e.id?e:{...e,id:Object(a.v4)()},r=e=>{const t=e;if(null!=t.id){const{id:e,...n}=t;return n}return e};var o=n(5);let s,l,c;o.i18n.translate("utils.filename.wildcardWarning",{defaultMessage:"Using wildcards in file paths can impact Endpoint performance"}),o.i18n.translate("utils.filename.pathWarning",{defaultMessage:"Path may be formed incorrectly; verify value"}),function(e){e.HASH="process.hash.*",e.PATH="process.executable.caseless",e.SIGNER="process.Ext.code_signature"}(s||(s={})),function(e){e.HASH=".hash.",e.EXECUTABLE=".executable.caseless",e.PATH=".path",e.SIGNER=".Ext.code_signature"}(l||(l={})),function(e){e.LINUX="linux",e.MAC="macos",e.WINDOWS="windows"}(c||(c={}));const u=({os:e,type:t,value:n})=>{const a=e===c.WINDOWS?"\\":"/",i=n.split(a).pop();if(i)return"wildcard"!==t||1===(i.split("*").length||i.split("?").length)},d=({os:e,field:t,type:n,value:a})=>!["process.executable.caseless","file.path","file.path.text"].includes(t)||("wildcard"===n?e===c.WINDOWS?m(a):f(a):p({value:a,os:e})),p=({os:e,value:t})=>e===c.WINDOWS?/^[a-z]:(?:|\\\\[^<>:"'/\\|?*]+\\[^<>:"'/\\|?*]+|%\w+%|)[\\](?:[^<>:"'/\\|?*]+[\\/])*([^<>:"'/\\|?*])+$/i.test(t):/^(\/|(\/[\w\-]+)+|\/[\w\-]+\.[\w]+|(\/[\w-]+)+\/[\w\-]+\.[\w]+)$/i.test(t),m=e=>{const t=e[0],n=e.slice(-1),a=e.trim(),i=/\//.test(a);return 0!==e.length&&!(i||a.length!==e.length||"^"===t||"\\"===n||!g({path:e,isWindowsPath:!0}))},f=e=>{const t=e[0],n=e.slice(-1),a=e.trim();return 0!==e.length&&!(a.length!==e.length||"/"!==t||"/"===n||e.length>1024==1||!0===e.includes("//")||!g({path:e,isWindowsPath:!1}))},g=({path:e,isWindowsPath:t})=>{for(const n of e.split(t?"\\":"/"))if(!0===/[\*|\?]+/.test(n))return!0;return!1}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(901);const r=()=>Object(a.useContext)(i.a)},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r}));const a=180,i=70,r=190},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(102),r=n(175);const o=e=>{var t;const[{pageName:n}]=Object(r.a)(),{services:{storage:o}}=Object(i.j)(),s=((e,t)=>t&&e.length>0?`kibana.siem:${t}.query.toggle:${e}`:null)(n,e),[l,c]=Object(a.useState)(null==s||null===(t=o.get(s))||void 0===t||t);Object(a.useEffect)((()=>{var e;null!=s&&c(null===(e=o.get(s))||void 0===e||e)}),[o,s]);const u=Object(a.useCallback)((e=>{null!=s&&(o.set(s,e),c(e))}),[o,s]);return e?{toggleStatus:l,setToggleStatus:u}:{toggleStatus:!0,setToggleStatus:()=>{}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"b",(function(){return p}));var a=n(2),i=n(103),r=n(114),o=n(4),s=n(105),l=n(122),c=n(182);const u=()=>{var e;const t=Object(i.useDispatch)(),n=null!==(e=Object(s.b)(l.d.globalFullScreenSelector))&&void 0!==e&&e,u=Object(a.useCallback)((e=>{const n=null!==document.querySelector(".euiDataGrid--fullScreen");e?document.body.classList.add(o.pc,"euiDataGrid__restrictBody"):!1!==n&&!1!==e||document.body.classList.remove(o.pc,"euiDataGrid__restrictBody"),t(c.c.setFullScreen({id:r.a.global,fullScreen:e}))}),[t]);return Object(a.useMemo)((()=>({globalFullScreen:n,setGlobalFullScreen:u})),[n,u])},d=()=>{var e;const t=Object(i.useDispatch)(),n=null!==(e=Object(s.b)(l.d.timelineFullScreenSelector))&&void 0!==e&&e,o=Object(a.useCallback)((e=>{const n=null!==document.querySelector(".euiDataGrid--fullScreen");e?document.body.classList.add("euiDataGrid__restrictBody"):!1!==n&&!1!==e||document.body.classList.remove("euiDataGrid__restrictBody"),t(c.c.setFullScreen({id:r.a.timeline,fullScreen:e}))}),[t]);return Object(a.useMemo)((()=>({timelineFullScreen:n,setTimelineFullScreen:o})),[n,o])},p=()=>{const{globalFullScreen:e}=u(),{timelineFullScreen:t}=d(),n=(()=>{const[e,t]=Object(a.useState)(!1);return Object(a.useEffect)((()=>{const e=document.body,n=new MutationObserver((n=>{for(const a of n)"class"===a.attributeName&&t(e.classList.contains("euiDataGrid__restrictBody"))}));return n.observe(e,{attributes:!0}),()=>n.disconnect()}),[]),e})();return e||t||n}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"c",(function(){return i})),n.d(t,"d",(function(){return o})),n.d(t,"b",(function(){return l}));var a=n(241),i=n(515),r=n(208);const o={notesById:{},errors:[],enableExperimental:{...n(15).a}},s=({note:e,notesById:t})=>({...t,[e.id]:e}),l=Object(r.reducerWithInitialState)(o).case(a.addNotes,((e,{notes:t})=>({...e,notesById:t.reduce(((e,t)=>({...e,[t.id]:t})),{})}))).case(a.deleteNote,((e,{id:t})=>({...e,notesById:Object.fromEntries(Object.entries(e.notesById).filter((([e,n])=>n.id!==t&&n.saveObjectId!==t)))}))).case(a.updateNote,((e,{note:t})=>({...e,notesById:s({note:t,notesById:e.notesById})}))).case(a.addError,((e,{id:t,title:n,message:a})=>({...e,errors:e.errors.concat({id:t,title:n,message:a})}))).case(a.removeError,((e,{id:t})=>({...e,errors:e.errors.filter((e=>e.id!==t))}))).case(a.addErrorHash,((e,{id:t,hash:n,title:a,message:i})=>{const r=e.errors.findIndex((e=>e.id===t)),o=e.errors.find((e=>e.id===t))||{id:t,title:a,message:i};return-1===r?{...e,errors:e.errors.concat({...o,hash:n,displayError:!e.errors.some((e=>e.hash===n))})}:{...e,errors:[...e.errors.slice(0,r),{...o,hash:n,displayError:!e.errors.some((e=>e.hash===n))},...e.errors.slice(r+1)]}})).build()},function(e,t,n){"use strict";e.exports=n(961)},function(e,t,n){"use strict";n.d(t,"b",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"c",(function(){return m}));var a=n(42),i=n(2),r=n.n(i),o=n(285),s=n(299);const l={canUserCRUD:null,canUserREAD:null,hasIndexManage:null,hasIndexMaintenance:null,hasIndexWrite:null,hasIndexRead:null,hasIndexUpdateDelete:null,isSignalIndexExists:null,isAuthenticated:null,hasEncryptionKey:null,loading:!0,signalIndexName:null,signalIndexMappingOutdated:null},c=(e,t)=>{switch(t.type){case"updateLoading":return{...e,loading:t.loading};case"updateHasIndexManage":return{...e,hasIndexManage:t.hasIndexManage};case"updateHasIndexMaintenance":return{...e,hasIndexMaintenance:t.hasIndexMaintenance};case"updateHasIndexWrite":return{...e,hasIndexWrite:t.hasIndexWrite};case"updateHasIndexRead":return{...e,hasIndexRead:t.hasIndexRead};case"updateHasIndexUpdateDelete":return{...e,hasIndexUpdateDelete:t.hasIndexUpdateDelete};case"updateIsSignalIndexExists":return{...e,isSignalIndexExists:t.isSignalIndexExists};case"updateIsAuthenticated":return{...e,isAuthenticated:t.isAuthenticated};case"updateHasEncryptionKey":return{...e,hasEncryptionKey:t.hasEncryptionKey};case"updateSignalIndexName":return{...e,signalIndexName:t.signalIndexName};case"updateSignalIndexMappingOutdated":return{...e,signalIndexMappingOutdated:t.signalIndexMappingOutdated};case"updateCanUserCRUD":return{...e,canUserCRUD:t.canUserCRUD};case"updateCanUserREAD":return{...e,canUserREAD:t.canUserREAD};default:return e}},u=Object(i.createContext)([l,()=>a.noop]),d=()=>Object(i.useContext)(u),p=({children:e})=>r.a.createElement(u.Provider,{value:Object(i.useReducer)(c,l)},e),m=()=>{const[{canUserCRUD:e,canUserREAD:t,hasIndexManage:n,hasIndexMaintenance:a,hasIndexWrite:r,hasIndexRead:l,hasIndexUpdateDelete:c,isSignalIndexExists:u,isAuthenticated:p,hasEncryptionKey:m,loading:f,signalIndexName:g,signalIndexMappingOutdated:b},y]=d(),{loading:h,isAuthenticated:v,hasEncryptionKey:E,hasIndexManage:x,hasIndexMaintenance:j,hasIndexUpdateDelete:O,hasIndexWrite:S,hasIndexRead:k,hasKibanaCRUD:w,hasKibanaREAD:I}=Object(o.a)(),{loading:T,signalIndexExists:C,signalIndexName:M,signalIndexMappingOutdated:A,createDeSignalIndex:_}=Object(s.a)();return Object(i.useEffect)((()=>{f||e===w||y({type:"updateCanUserCRUD",canUserCRUD:w})}),[y,f,e,w]),Object(i.useEffect)((()=>{f||t===I||y({type:"updateCanUserREAD",canUserREAD:I})}),[y,f,t,I]),Object(i.useEffect)((()=>{f!==(h||T)&&y({type:"updateLoading",loading:h||T})}),[y,f,h,T]),Object(i.useEffect)((()=>{f||n===x||null==x||y({type:"updateHasIndexManage",hasIndexManage:x})}),[y,f,n,x]),Object(i.useEffect)((()=>{f||r===S||null==S||y({type:"updateHasIndexWrite",hasIndexWrite:S})}),[y,f,r,S]),Object(i.useEffect)((()=>{f||l===k||null==k||y({type:"updateHasIndexRead",hasIndexRead:k})}),[y,f,l,k]),Object(i.useEffect)((()=>{f||c===O||null==O||y({type:"updateHasIndexUpdateDelete",hasIndexUpdateDelete:O})}),[y,f,c,O]),Object(i.useEffect)((()=>{f||a===j||null==j||y({type:"updateHasIndexMaintenance",hasIndexMaintenance:j})}),[y,f,a,j]),Object(i.useEffect)((()=>{f||u===C||null==C||y({type:"updateIsSignalIndexExists",isSignalIndexExists:C})}),[y,f,u,C]),Object(i.useEffect)((()=>{f||p===v||null==v||y({type:"updateIsAuthenticated",isAuthenticated:v})}),[y,f,p,v]),Object(i.useEffect)((()=>{f||m===E||null==E||y({type:"updateHasEncryptionKey",hasEncryptionKey:E})}),[y,f,m,E]),Object(i.useEffect)((()=>{f||g===M||null==M||y({type:"updateSignalIndexName",signalIndexName:M})}),[y,f,g,M]),Object(i.useEffect)((()=>{f||b===A||null==A||y({type:"updateSignalIndexMappingOutdated",signalIndexMappingOutdated:A})}),[y,f,b,A]),Object(i.useEffect)((()=>{p&&m&&n&&(null!=u&&!u||null!=b&&b)&&null!=_&&_()}),[_,p,m,u,n,b]),{loading:f,isSignalIndexExists:u,isAuthenticated:p,hasEncryptionKey:m,canUserCRUD:e,canUserREAD:t,hasIndexManage:n,hasIndexMaintenance:a,hasIndexWrite:r,hasIndexRead:l,hasIndexUpdateDelete:c,signalIndexName:g,signalIndexMappingOutdated:b}}},function(e,t,n){"use strict";var a=n(179);n.d(t,"a",(function(){return a.a}));var i=n(227);n.d(t,"b",(function(){return i.a}));var r=n(138);n.d(t,"c",(function(){return r.b}));var o=n(158);n.d(t,"d",(function(){return o.a}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return g}));var a=n(42),i=n(240),r=n.n(i),o=n(2),s=n(102),l=n(513),c=n(377),u=n(108);const d=e=>Object(a.keyBy)("name",function(e){const t=[];for(const n of Object.values(e))n.fields&&t.push(...Object.values(n.fields));return t}(e)),p=r()(((e,t)=>t&&t.length>0?{fields:t.map((e=>Object(a.pick)(["name","searchable","type","aggregatable","esTypes","subType","conflictDescriptions"],e))),title:e}:{fields:[],title:e}),((e,t)=>e[0]===t[0]&&e[1].length===t[1].length)),m={},f={fields:[],title:""},g=(e,t=!1,n="indexFields")=>{const{data:i}=Object(s.j)().services,r=Object(o.useRef)(new AbortController),d=Object(o.useRef)([]),[g,b]=Object(o.useState)({browserFields:m,indexes:e,indexExists:!0,indexPatterns:f,dataView:void 0,loading:!1}),{addError:y}=Object(u.a)(),h=Object(o.useCallback)((t=>{(async()=>{try{b({...g,loading:!0}),r.current=new AbortController;const e=await i.dataViews.create({title:t.join(","),allowNoIndex:!0}),n=e.toSpec(),{browserFields:a}=Object(c.a)(t,n.fields);d.current=e.getIndexPattern().split(","),b({loading:!1,dataView:n,browserFields:a,indexes:e.getIndexPattern().split(","),indexExists:e.getIndexPattern().split(",").length>0,indexPatterns:p(e.getIndexPattern(),e.fields)})}catch(t){b({browserFields:m,indexes:e,indexExists:!0,indexPatterns:f,dataView:void 0,loading:!1}),y(null==t?void 0:t.message,{title:l.a})}})()}),[y,i.dataViews,e,g]);return Object(o.useEffect)((()=>(Object(a.isEmpty)(e)||Object(a.isEqual)(d.current,e)||h(e),()=>{r.current.abort()})),[e,d]),[g.loading,g]}},function(e,t,n){"use strict";let a,i,r;n.r(t),n.d(t,"UsersType",(function(){return a})),n.d(t,"UsersTableType",(function(){return i})),n.d(t,"UsersDetailsTableType",(function(){return r})),function(e){e.page="page",e.details="details"}(a||(a={})),function(e){e.allUsers="allUsers",e.authentications="authentications",e.anomalies="anomalies",e.risk="userRisk",e.events="events"}(i||(i={})),function(e){e.authentications="authentications",e.anomalies="anomalies",e.risk="userRisk",e.events="events"}(r||(r={}))},function(e,t,n){"use strict";let a,i,r,o,s,l,c;n.d(t,"e",(function(){return a})),n.d(t,"d",(function(){return i})),n.d(t,"c",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return c})),function(e){e.windows="windows",e.mac="mac",e.linux="linux"}(a||(a={})),function(e){e.is="is",e.matches="matches"}(i||(i={})),function(e){e.enrolled="enrolled",e.unenrolled="unenrolled"}(r||(r={})),function(e){e.UNHEALTHY="unhealthy",e.HEALTHY="healthy",e.OFFLINE="offline",e.UPDATING="updating",e.INACTIVE="inactive",e.UNENROLLED="unenrolled"}(o||(o={})),function(e){e.detect="detect",e.prevent="prevent",e.off="off"}(s||(s={})),function(e){e.success="success",e.failure="failure",e.warning="warning",e.unsupported="unsupported"}(l||(l={})),function(e){e.ENROLLED_AT="enrolled_at",e.HOSTNAME="metadata.host.hostname",e.HOST_STATUS="host_status",e.POLICY_NAME="metadata.Endpoint.policy.applied.name",e.POLICY_STATUS="metadata.Endpoint.policy.applied.status",e.HOST_OS_NAME="metadata.host.os.name",e.HOST_IP="metadata.host.ip",e.AGENT_VERSION="metadata.agent.version",e.LAST_SEEN="last_checkin"}(c||(c={}))},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return l}));var a=n(42),i=n(2),r=n(350),o=n(4);const s=e=>{const t=Object(a.some)({category:"kibana",field:"kibana.alert.rule.uuid"},e),n=Object(i.useMemo)((()=>t?Object(r.a)({category:"kibana",field:"kibana.alert.rule.uuid"},e):Object(r.a)({category:"signal",field:"signal.rule.id"},e)),[t,e]),o=Object(i.useMemo)((()=>Object(r.a)({category:"kibana",field:"kibana.alert.rule.name"},e)),[e]),s=Object(i.useMemo)((()=>Object(r.a)({category:"kibana",field:"kibana.alert.rule.description"},e)),[e]),l=Object(i.useMemo)((()=>Object(r.a)({category:"_id",field:"_id"},e)),[e]),c=Object(i.useMemo)((()=>Object(r.a)({category:"_index",field:"_index"},e)),[e]),u=Object(i.useMemo)((()=>Object(r.a)({category:"kibana",field:"kibana.alert.url"},e)),[e]),d=Object(i.useMemo)((()=>Object(r.a)({category:"agent",field:"agent.id"},e)),[e]),p=Object(i.useMemo)((()=>Object(r.a)({category:"host",field:"host.name"},e)),[e]),m=Object(i.useMemo)((()=>Object(r.a)({category:"user",field:"user.name"},e)),[e]),f=Object(i.useMemo)((()=>Object(r.a)({category:"base",field:"@timestamp"},e)),[e]);return Object(i.useMemo)((()=>({agentId:d,alertId:l,alertUrl:u,data:e,hostName:p,indexName:c,isAlert:t,ruleDescription:s,ruleId:n,ruleName:o,timestamp:f,userName:m})),[d,l,u,e,p,c,t,s,n,o,f,m])},l=(e,t="default")=>e.startsWith(`.internal${o.v}`)?`${o.v}-${t}`:e.startsWith(`.internal${o.P}`)?`${o.P}-${t}`:void 0},function(e,t,n){"use strict";n.d(t,"g",(function(){return u})),n.d(t,"a",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"i",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"c",(function(){return g})),n.d(t,"j",(function(){return b})),n.d(t,"d",(function(){return y})),n.d(t,"h",(function(){return h})),n.d(t,"f",(function(){return v}));var a=n(8),i=n(139),r=n(114);const o=e=>e.policy,s=e=>e.timerange,l=e=>e.queries,c=(e,t)=>{const n=e.inputs[t];return Object(a.isEmpty)(n.linkTo)?n.queries:n.linkTo.reduce(((t,n)=>{if(n===r.a.socTrends)return t;const a=e.inputs[n];return[...t,...a.queries]}),n.queries)},u=()=>Object(i.createSelector)(o,(e=>e.kind)),d=()=>Object(i.createSelector)(o,(e=>e.duration)),p=()=>Object(i.createSelector)(s,(e=>e.kind)),m=()=>Object(i.createSelector)(s,(e=>e.from)),f=()=>Object(i.createSelector)(s,(e=>e.to)),g=()=>Object(i.createSelector)(s,(e=>e.fromStr)),b=()=>Object(i.createSelector)(s,(e=>e.toStr)),y=()=>Object(i.createSelector)(l,(e=>e.some((e=>!0===e.loading)))),h=()=>Object(i.createSelector)(c,(e=>e.filter((e=>"kql"!==e.id)))),v=()=>Object(i.createSelector)(l,(e=>e.find((e=>"kql"===e.id))))},,function(e,t,n){"use strict";n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(16),c=n(21);const u=()=>{const{getAppUrl:e}=Object(l.a)();return Object(r.useCallback)((({id:t,path:n="",absolute:a=!1,urlState:i})=>{const{appId:r,deepLinkId:o,path:s=""}=g(t),l=b(s,n),c=i?y(l,i):l;return e({deepLinkId:o,appId:r,path:c,absolute:a})}),[e])},d=()=>{const e=u(),{navigateTo:t}=Object(l.b)();return Object(r.useCallback)((({id:n,path:a,urlState:i,onClick:r,overrideNavigation:o=!0})=>{const s=e({id:n,path:a,urlState:i});return{href:s,onClick:e=>{h(e)||(r&&r(e),o&&(e.preventDefault(),t({url:s})))}}}),[e,t])},p=e=>o.a.memo((function({id:t,path:n,urlState:a,onClick:r,...o}){const s=d(),{onClick:l,href:u}=s({id:t,path:n,urlState:a,onClick:r,..."_blank"===o.target&&{overrideNavigation:!1}});return Object(c.jsx)(e,i()({onClick:l,href:u},o))})),m=(p(s.EuiButton),p(s.EuiLink)),f=e=>!e.includes(":"),g=e=>{const[t,n]=e.split(/\/(.*)/),a=n?`/${n}`:"";if(!f(t)){const[e,n]=t.split(":");return{appId:e,deepLinkId:n,path:a}}return{deepLinkId:t,path:a}},b=(e,t)=>e&&t?`${e.replace(/\/$/,"")}/${t.replace(/^\//,"")}`:e||t||"",y=(e,t)=>{const n=t.replace("?",""),[a,i]=e.split("?");let r="";return n&&i?r=`?${i}&${n}`:i?r=`?${i}`:n&&(r=`?${n}`),`${a}${r}`},h=e=>e.metaKey||e.altKey||e.ctrlKey||e.shiftKey},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(176);const i="not-filtered",r=[{columnHeaderType:i,id:"@timestamp",initialWidth:a.b,esTypes:["date"],type:"date"},{columnHeaderType:i,id:"message",initialWidth:a.a},{columnHeaderType:i,id:"event.category",initialWidth:a.a},{columnHeaderType:i,id:"event.action",initialWidth:a.a},{columnHeaderType:i,id:"host.name",initialWidth:a.a},{columnHeaderType:i,id:"source.ip",initialWidth:a.a},{columnHeaderType:i,id:"destination.ip",initialWidth:a.a},{columnHeaderType:i,id:"user.name",initialWidth:a.a}]},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"E",(function(){return o})),n.d(t,"D",(function(){return s})),n.d(t,"p",(function(){return l})),n.d(t,"x",(function(){return c})),n.d(t,"q",(function(){return u})),n.d(t,"u",(function(){return d})),n.d(t,"z",(function(){return p})),n.d(t,"r",(function(){return m})),n.d(t,"s",(function(){return f})),n.d(t,"v",(function(){return g})),n.d(t,"y",(function(){return b})),n.d(t,"t",(function(){return y})),n.d(t,"w",(function(){return h})),n.d(t,"k",(function(){return v})),n.d(t,"j",(function(){return E})),n.d(t,"I",(function(){return x})),n.d(t,"H",(function(){return j})),n.d(t,"m",(function(){return O})),n.d(t,"l",(function(){return S})),n.d(t,"i",(function(){return k})),n.d(t,"G",(function(){return w})),n.d(t,"c",(function(){return I})),n.d(t,"e",(function(){return T})),n.d(t,"d",(function(){return C})),n.d(t,"g",(function(){return M})),n.d(t,"f",(function(){return A})),n.d(t,"h",(function(){return _})),n.d(t,"F",(function(){return F})),n.d(t,"A",(function(){return D})),n.d(t,"B",(function(){return N})),n.d(t,"C",(function(){return P})),n.d(t,"n",(function(){return R})),n.d(t,"o",(function(){return L}));const a="securitySolutionDocumentDetailsFlyout",i=`${a}AnalyzerGraph`,r=`${a}AnalyzerGraphError`,o=`${a}SessionView`,s=`${a}SessionViewError`,l=`${a}PrevalenceDetailsDatePicker`,c=`${a}PrevalenceDetailsTable`,u=`${a}PrevalenceDetailsLoading`,d=`${a}PrevalenceDetailsTableFieldCell`,p=`${a}PrevalenceDetailsTableValueCell`,m=`${a}PrevalenceDetailsTableAlertCountCell`,f=`${a}PrevalenceDetailsTableDocCountCell`,g=`${a}PrevalenceDetailsTableHostPrevalenceCell`,b=`${a}PrevalenceDetailsTableUserPrevalenceCell`,y=`${a}PrevalenceDetailsTableError`,h=`${a}PrevalenceDetailsTableNoData`,v=`${a}EntitiesDetails`,E=`${v}NoData`,x=`${a}UsersDetails`,j=`${a}UsersDetailsRelatedHostsTable`,O=`${a}HostsDetails`,S=`${a}HostsDetailsRelatedUsersTable`,k=`${a}CorrelationsDetails`,w=`${a}ThreatIntelligenceDetailsLoadingSpinner`,I=`${k}AlertsByAncestrySection`,T=`${k}AlertsBySourceSection`,C=`${k}AlertsBySessionSection`,M=`${k}CasesSection`,A=`${M}Table`,_=`${k}SuppressedAlertsSection`,F=`${k}SuppressedAlertsSectionTechnicalPreview`,D=`${a}Responses`,N=`${D}Details`,P=`${D}Empty`,R=`${a}InvestigationGuideLoading`,L=`${a}NoData`},function(e,t,n){const a=n(157);e.exports=(e,t,n)=>new a(e,n).compare(new a(t,n))},function(e,t,n){"use strict";n.d(t,"i",(function(){return p})),n.d(t,"j",(function(){return m})),n.d(t,"k",(function(){return b})),n.d(t,"f",(function(){return y})),n.d(t,"g",(function(){return v})),n.d(t,"a",(function(){return x})),n.d(t,"b",(function(){return w})),n.d(t,"c",(function(){return I})),n.d(t,"h",(function(){return d})),n.d(t,"t",(function(){return Z})),n.d(t,"u",(function(){return k})),n.d(t,"d",(function(){return T})),n.d(t,"e",(function(){return M})),n.d(t,"m",(function(){return ee})),n.d(t,"n",(function(){return te})),n.d(t,"o",(function(){return ne})),n.d(t,"p",(function(){return A})),n.d(t,"q",(function(){return F})),n.d(t,"v",(function(){return Y})),n.d(t,"C",(function(){return ae})),n.d(t,"z",(function(){return ie})),n.d(t,"x",(function(){return re})),n.d(t,"w",(function(){return le})),n.d(t,"B",(function(){return ce})),n.d(t,"y",(function(){return ue})),n.d(t,"A",(function(){return de})),n.d(t,"r",(function(){return pe})),n.d(t,"s",(function(){return me})),n.d(t,"l",(function(){return l})),n.d(t,"D",(function(){return fe}));var a=n(112),i=n(43);const r=i.recursion("saved_object_attribute_single",(()=>i.union([i.string,i.number,i.boolean,i.null,i[void 0],s]))),o=i.recursion("saved_object_attribute",(()=>i.union([r,i.array(r)]))),s=i.recursion("saved_object_attributes",(()=>i.record(i.string,o))),l=i.union([i.literal("no_actions"),i.literal("rule"),Object(a.q)({allowedUnits:["s","m","h","d"]})]),c=i.boolean,u=i.union([i.literal("onActionGroupChange"),i.literal("onActiveAlert"),i.literal("onThrottleInterval")]),d=i.type({summary:c,notifyWhen:u,throttle:i.union([l,i.null])}),p=i.string,m=i.string,f=i.string,g=a.k,b=s,y=i.partial({query:i.union([i[void 0],i.intersection([i.strict({kql:i.string,filters:i.array(i.intersection([i.type({meta:i.partial({alias:i.union([i.string,i.null]),disabled:i.boolean,negate:i.boolean,controlledBy:i.string,group:i.string,index:i.string,isMultiIndex:i.boolean,type:i.string,key:i.string,params:i.any,value:i.string})}),i.partial({$state:i.type({store:i.any}),query:i.record(i.string,i.any)})]))}),i.partial({dsl:i.string})])]),timeframe:i.union([i[void 0],i.strict({timezone:i.string,days:i.array(i.union([i.literal(1),i.literal(2),i.literal(3),i.literal(4),i.literal(5),i.literal(6),i.literal(7)])),hours:i.strict({start:i.string,end:i.string})})])}),h=i.exact(i.intersection([i.type({group:p,id:m,action_type_id:f,params:b}),i.partial({uuid:g,alerts_filter:y,frequency:d})])),v=i.array(h),E=i.exact(i.intersection([i.type({group:p,id:m,actionTypeId:f,params:b}),i.partial({uuid:g,alertsFilter:y,frequency:d})])),x=(i.array(E),new i.Type("DefaultActionsArray",v.is,((e,t)=>null==e?i.success([]):v.validate(e,t)),i.identity),new i.Type("DefaultExportFileName",i.string.is,((e,t)=>null==e?i.success("export.ndjson"):i.string.validate(e,t)),i.identity));var j=n(421);const O=new i.Type("From",i.string.is,((e,t)=>(e=>"string"==typeof e)(e)&&null==Object(j.a)(e)?i.failure(e,t,'Failed to parse "from" on rule param'):i.string.validate(e,t)),i.identity),S=(new i.Type("DefaultFromString",i.string.is,((e,t)=>null==e?i.success("now-6m"):O.validate(e,t)),i.identity),new i.Type("DefaultIntervalString",i.string.is,((e,t)=>null==e?i.success("5m"):i.string.validate(e,t)),i.identity),i.keyof({eql:null,kuery:null,lucene:null})),k=(i.union([S,i[void 0]]),new i.Type("DefaultLanguageString",i.string.is,((e,t)=>null==e?i.success("kuery"):S.validate(e,t)),i.identity),a.o),w=(i.union([k,i[void 0]]),new i.Type("DefaultMaxSignals",i.number.is,((e,t)=>null==e?i.success(100):k.validate(e,t)),i.identity),new i.Type("DefaultPerPage",i.number.is,((e,t)=>null==e?i.success(1):"string"==typeof e?a.o.validate(parseInt(e,10),t):a.o.validate(e,t)),i.identity)),I=new i.Type("DefaultPerPage",i.number.is,((e,t)=>null==e?i.success(20):"string"==typeof e?a.o.validate(parseInt(e,10),t):a.o.validate(e,t)),i.identity),T=new i.Type("RiskScore",i.number.is,((e,t)=>"number"==typeof e&&Number.isSafeInteger(e)&&e>=0&&e<=100?i.success(e):i.failure(e,t)),i.identity),C=i.exact(i.type({field:i.string,value:i.string,operator:a.w,risk_score:i.union([T,i[void 0]])})),M=i.array(C),A=(new i.Type("DefaultRiskScoreMappingArray",M.is,((e,t)=>null==e?i.success([]):M.validate(e,t)),i.identity),i.keyof({low:null,medium:null,high:null,critical:null})),_=i.exact(i.type({field:i.string,operator:a.w,value:i.string,severity:A})),F=i.array(_),D=(new i.Type("DefaultSeverityMappingArray",F.is,((e,t)=>null==e?i.success([]):F.validate(e,t)),i.identity),i.string),N=i.string,P=i.string,R=i.type({id:D,name:N,reference:P}),L=i.string,q=i.string,B=i.string,z=i.type({id:L,name:q,reference:B}),$=i.array(z),V=i.string,U=i.string,G=i.string,H=i.intersection([i.exact(i.type({id:V,name:U,reference:G})),i.exact(i.partial({subtechnique:$}))]),W=i.array(H),Q=i.string,Y=i.intersection([i.exact(i.type({framework:Q,tactic:R})),i.exact(i.partial({technique:W}))]),K=i.array(Y);i.union([K,i[void 0]]),new i.Type("DefaultThreatArray",K.is,((e,t)=>null==e?i.success([]):K.validate(e,t)),i.identity),new i.Type("DefaultToString",i.string.is,((e,t)=>null==e?i.success("now"):i.string.validate(e,t)),i.identity);var X=n(47);new i.Type("DefaultUuid",i.string.is,((e,t)=>null==e?i.success(Object(X.v4)()):a.k.validate(e,t)),i.identity);const J=Object(a.j)(i.string),Z=(i.union([J,i[void 0]]),i.union([i.string,J])),ee=(i.union([Z,i[void 0]]),new i.Type("referencesWithDefaultArray",i.array(i.string).is,((e,t)=>null==e?i.success([]):i.array(i.string).validate(e,t)),i.identity),i.string),te=O,ne=i.string,ae=i.string,ie=(i.union([ae,i[void 0]]),i.string),re=(i.union([ie,i[void 0]]),i.array(i.unknown)),oe=(i.union([re,i[void 0]]),i.exact(i.type({field:a.k,type:i.keyof({mapping:null}),value:a.k}))),se=i.array(oe),le=i.exact(i.type({entries:se})),ce=Object(a.j)(le,"NonEmptyArray<ThreatMap>"),ue=(i.union([ce,i[void 0]]),i.array(i.string)),de=(i.union([ue,i[void 0]]),i.union([S,i[void 0]])),pe=(i.union([de,i[void 0]]),a.o),me=(i.union([pe,i[void 0]]),a.o),fe=(i.union([me,i[void 0]]),i.keyof({eql:null,machine_learning:null,query:null,saved_query:null,threshold:null,threat_match:null,new_terms:null}));i.union([fe,i[void 0]])},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(60),i=n(42),r=n(2),o=n(141),s=n(13),l=n(85),c=n(5);const u=e=>c.i18n.translate("xpack.securitySolution.searchStrategy.error",{values:{factoryQueryType:e},defaultMessage:"Failed to run search: {factoryQueryType}"});var d=n(115),p=n(102),m=n(108),f=n(303),g=n(4);const b={dsl:[],response:[]},y=({factoryQueryType:e,initialResult:t,errorMessage:n,abort:y=!1,showErrorToast:h=!0})=>{const v=Object(r.useRef)(new AbortController),E=Object(r.useRef)(i.noop),{addError:x}=Object(m.a)(),j=(e=>{const{data:t}=Object(p.j)().services,{addWarning:n}=Object(m.a)(),{startTracking:i}=Object(f.a)();return Object(r.useCallback)((({abortSignal:r,request:o})=>{const{endTracking:l}=i({name:`${g.l} searchStrategy ${e}`,spanName:"batched search"}),u=t.search.search({...o,factoryQueryType:e},{strategy:"securitySolutionSearchStrategy",abortSignal:r}).pipe(Object(a.filter)((e=>Object(s.isErrorResponse)(e)||Object(s.isCompleteResponse)(e))));return u.subscribe({next:t=>{Object(s.isErrorResponse)(t)?(n((e=>c.i18n.translate("xpack.securitySolution.searchStrategy.warning",{values:{factoryQueryType:e},defaultMessage:"An error has occurred running search: {factoryQueryType}"}))(e)),l("invalid")):l("success")},error:()=>{l(r.aborted?"aborted":"error")}}),u}),[n,t.search,e,i])})(e),{start:O,error:S,result:k,loading:w}=Object(o.c)(j);Object(r.useEffect)((()=>{!h||null==S||S instanceof l.AbortError||x(S,{title:null!=n?n:u(e)})}),[x,S,n,e,h]);const I=Object(r.useCallback)((e=>{const t=()=>{v.current=new AbortController,O({request:e,abortSignal:v.current.signal})};v.current.abort(),t(),E.current=t}),[O]);Object(r.useEffect)((()=>()=>{v.current.abort()}),[]),Object(r.useEffect)((()=>{y&&v.current.abort()}),[y]);const[T,C]=Object(r.useMemo)((()=>Object(s.isErrorResponse)(k)?[t,b]:[Object(i.omit)("rawResponse",k),Object(d.getInspectResponse)(k,b)]),[k,t]);return{loading:w,result:T,error:S,search:I,refetch:E.current,inspect:C}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(42);const i=e=>Object(a.isEmpty)(e)?"":`${null!=e&&e.startsWith("?")?e:`?${e}`}`},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"c",(function(){return c}));var a=n(4);const i={ENABLE:`${a.l} singleRuleActions enable`,DISABLE:`${a.l} singleRuleActions disable`,DUPLICATE:`${a.l} singleRuleActions duplicate`,EXPORT:`${a.l} singleRuleActions export`,DELETE:`${a.l} singleRuleActions delete`,PREVIEW:`${a.l} singleRuleActions preview`,SAVE:`${a.l} singleRuleActions save`},r={ENABLE:`${a.l} bulkRuleActions enable`,DISABLE:`${a.l} bulkRuleActions disable`,DUPLICATE:`${a.l} bulkRuleActions duplicate`,EXPORT:`${a.l} bulkRuleActions export`,DELETE:`${a.l} bulkRuleActions delete`,EDIT:`${a.l} bulkRuleActions edit`},o={REFRESH:`${a.l} rulesTable refresh`,FILTER:`${a.l} rulesTable filter`,LOAD_PREBUILT:`${a.l} rulesTable loadPrebuilt`},s={SAVE:`${a.l} timeline save`,DUPLICATE:`${a.l} timeline duplicate`,DELETE:`${a.l} timeline delete`,BULK_DELETE:`${a.l} timeline bulkDelete`},l={OPEN_ANALYZER:`${a.l} alerts openAnalyzer`,OPEN_SESSION_VIEW:`${a.l} alerts openSessionView`,INVESTIGATE_IN_TIMELINE:`${a.l} alerts investigateInTimeline`},c={FIELD_SAVED:`${a.l} fieldBrowser fieldSaved`,FIELD_DELETED:`${a.l} fieldBrowser fieldDeleted`}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"g",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"h",(function(){return d}));var a=n(8);n(210);const i=e=>{if(null!=e){const t=e.trim().split(/[ \t\r\n]+/);return"sequence"===t[0]&&"where"!==t[1]}return!1},r=e=>"eql"===e,o=e=>"threshold"===e,s=e=>"query"===e||"saved_query"===e,l=e=>"threat_match"===e,c=e=>"machine_learning"===e,u=e=>"new_terms"===e,d=e=>Array.isArray(e)?e:Object(a.isEmpty)(e)?[]:[e]},function(e,t,n){"use strict";n.d(t,"B",(function(){return i})),n.d(t,"y",(function(){return r})),n.d(t,"A",(function(){return o})),n.d(t,"z",(function(){return s})),n.d(t,"x",(function(){return l})),n.d(t,"w",(function(){return c})),n.d(t,"q",(function(){return u})),n.d(t,"p",(function(){return d})),n.d(t,"u",(function(){return p})),n.d(t,"t",(function(){return m})),n.d(t,"X",(function(){return f})),n.d(t,"Z",(function(){return g})),n.d(t,"V",(function(){return b})),n.d(t,"W",(function(){return y})),n.d(t,"Y",(function(){return h})),n.d(t,"j",(function(){return v})),n.d(t,"O",(function(){return E})),n.d(t,"E",(function(){return x})),n.d(t,"F",(function(){return j})),n.d(t,"s",(function(){return O})),n.d(t,"k",(function(){return S})),n.d(t,"o",(function(){return k})),n.d(t,"gb",(function(){return w.T})),n.d(t,"m",(function(){return w.p})),n.d(t,"C",(function(){return w.u})),n.d(t,"r",(function(){return w.s})),n.d(t,"v",(function(){return w.t})),n.d(t,"n",(function(){return w.r})),n.d(t,"nb",(function(){return w.cb})),n.d(t,"db",(function(){return w.Q})),n.d(t,"mb",(function(){return w.bb})),n.d(t,"bb",(function(){return w.O})),n.d(t,"cb",(function(){return w.P})),n.d(t,"pb",(function(){return w.eb})),n.d(t,"D",(function(){return w.v})),n.d(t,"eb",(function(){return w.R})),n.d(t,"jb",(function(){return w.X})),n.d(t,"lb",(function(){return w.Z})),n.d(t,"kb",(function(){return w.Y})),n.d(t,"R",(function(){return w.H})),n.d(t,"Q",(function(){return w.F})),n.d(t,"T",(function(){return w.J})),n.d(t,"S",(function(){return w.I})),n.d(t,"P",(function(){return w.E})),n.d(t,"ab",(function(){return w.N})),n.d(t,"a",(function(){return w.c})),n.d(t,"U",(function(){return w.K})),n.d(t,"fb",(function(){return w.S})),n.d(t,"b",(function(){return w.d})),n.d(t,"i",(function(){return w.m})),n.d(t,"l",(function(){return w.o})),n.d(t,"h",(function(){return w.l})),n.d(t,"f",(function(){return w.j})),n.d(t,"g",(function(){return w.k})),n.d(t,"d",(function(){return w.h})),n.d(t,"e",(function(){return w.i})),n.d(t,"c",(function(){return w.e})),n.d(t,"ob",(function(){return w.db})),n.d(t,"ib",(function(){return w.W})),n.d(t,"hb",(function(){return w.U})),n.d(t,"G",(function(){return w.w})),n.d(t,"M",(function(){return w.C})),n.d(t,"K",(function(){return w.A})),n.d(t,"J",(function(){return w.z})),n.d(t,"L",(function(){return w.B})),n.d(t,"N",(function(){return w.D})),n.d(t,"H",(function(){return w.x})),n.d(t,"I",(function(){return w.y}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.exception.list.empty.viewer_title",{defaultMessage:"Create exceptions to this list"}),r=e=>a.i18n.translate("xpack.securitySolution.exception.list.empty.viewer_body",{values:{listName:e},defaultMessage:"There is no exception in your [{listName}]. Create rule exceptions to this list."}),o=a.i18n.translate("xpack.securitySolution.exception.list.empty.viewer_button_endpoint",{defaultMessage:"Create endpoint exception"}),s=a.i18n.translate("xpack.securitySolution.exception.list.empty.viewer_button",{defaultMessage:"Create rule exception"}),l=a.i18n.translate("xpack.securitySolution.exception.list.search_bar_button_enpoint",{defaultMessage:"Add endpoint exception to list"}),c=a.i18n.translate("xpack.securitySolution.exception.list.search_bar_button",{defaultMessage:"Add rule exception to list"}),u=(a.i18n.translate("xpack.securitySolution.exceptions.list.exceptionItemSearchErrorTitle",{defaultMessage:"Error searching"}),a.i18n.translate("xpack.securitySolution.exceptions.list.exceptionItemSearchErrorBody",{defaultMessage:"An error occurred searching for exception items. Please try again."}),a.i18n.translate("xpack.securitySolution.exceptions.list.exceptionItemsFetchError",{defaultMessage:"Unable to load exception items"})),d=a.i18n.translate("xpack.securitySolution.exceptions.list.exceptionItemsFetchErrorDescription",{defaultMessage:"There was an error loading the exception items. Contact your administrator for help."}),p=a.i18n.translate("xpack.securitySolution.exceptions.list.exception.item.card.exceptionItemDeleteSuccessTitle",{defaultMessage:"Exception deleted"}),m=e=>a.i18n.translate("xpack.securitySolution.exceptions.list.exception.item.card.exceptionItemDeleteSuccessText",{values:{itemName:e},defaultMessage:'"{itemName}" deleted successfully.'}),f=a.i18n.translate("xpack.securitySolution.exceptions.list.manage_rules_cancel",{defaultMessage:"Cancel"}),g=a.i18n.translate("xpack.securitySolution.exceptions.list.manage_rules_save",{defaultMessage:"Save"}),b=a.i18n.translate("xpack.securitySolution.exceptions.list.link_rules_header",{defaultMessage:"Link rules"}),y=a.i18n.translate("xpack.securitySolution.exceptions.list.link_rules_overflow_button_title",{defaultMessage:"Link rules"}),h=a.i18n.translate("xpack.securitySolution.exceptions.list.manage_rules_description",{defaultMessage:"Link or unlink rules to this exception list."}),v=a.i18n.translate("xpack.securitySolution.exceptionsTable.deleteExceptionList",{defaultMessage:"Delete exception list"}),E=a.i18n.translate("xpack.securitySolution.exceptionsTable.exportExceptionList",{defaultMessage:"Export exception list"}),x=a.i18n.translate("xpack.securitySolution.exceptionsTable.manageRulesError",{defaultMessage:"Manage rules error"}),j=a.i18n.translate("xpack.securitySolution.exceptionsTable.manageRulesErrorDescription",{defaultMessage:"An error occurred linking or unlinking rules"}),O=a.i18n.translate("xpack.securitySolution.exceptionsTable.exportListDescription",{defaultMessage:"An error occurred exporting a list"}),S=a.i18n.translate("xpack.securitySolution.exceptionsTable.duplicateExceptionList",{defaultMessage:"Duplicate exception list"}),k=a.i18n.translate("xpack.securitySolution.exceptionsTable.duplicateListDescription",{defaultMessage:"An error occurred duplicating a list"});n(567);var w=n(729)},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"c",(function(){return s})),n.d(t,"d",(function(){return c})),n.d(t,"e",(function(){return u}));var a=n(5);let i,r;!function(e){e.rules="rules",e.alertsCases="alertsCases"}(i||(i={})),function(e){e[e.none=0]="none",e[e.pointToAlertName=1]="pointToAlertName",e[e.expandEvent=2]="expandEvent",e[e.reviewAlertDetailsFlyout=3]="reviewAlertDetailsFlyout",e[e.addAlertToCase=4]="addAlertToCase",e[e.createCase=5]="createCase",e[e.submitCase=6]="submitCase",e[e.viewCase=7]="viewCase"}(r||(r={}));const o={minWidth:360,maxWidth:360,offset:10,repositionOnScroll:!0,ownFocus:!0,initialFocus:'[tour-step="nextButton"]'},s=(e,t)=>`tourStepAnchor-${t}-${e}`,l=[{...o,step:r.pointToAlertName,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.ruleNameStep.tourTitle",{defaultMessage:"Examine the Alerts Table"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.ruleNameStep.tourContent",{defaultMessage:"To help you practice triaging alerts, here is the alert from the rule that we enabled in the previous step."}),anchorPosition:"downCenter",dataTestSubj:s(r.pointToAlertName,i.alertsCases),initialFocus:'button[tour-step="nextButton"]'},{...o,step:r.expandEvent,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.openFlyout.tourTitle",{defaultMessage:"Review the alert details"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.openFlyout.tourContent",{defaultMessage:"Some information is provided at-a-glance in the table, but for full details, you'll want to open the alert."}),anchorPosition:"rightUp",dataTestSubj:s(r.expandEvent,i.alertsCases)},{...o,step:r.reviewAlertDetailsFlyout,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.flyoutOverview.tourTitle",{defaultMessage:"Explore alert details"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.flyoutOverview.tourContent",{defaultMessage:"Learn more about alerts by checking out all the information available."}),anchor:`[tour-step="${s(r.reviewAlertDetailsFlyout,i.alertsCases)}"] span.euiTab__content`,offset:20,anchorPosition:"leftUp",dataTestSubj:s(r.reviewAlertDetailsFlyout,i.alertsCases)},{...o,step:r.addAlertToCase,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.addToCase.tourTitle",{defaultMessage:"Create a case"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.addToCase.tourContent",{defaultMessage:'From the Take action menu, select "Add to new case".'}),anchorPosition:"upRight",dataTestSubj:s(r.addAlertToCase,i.alertsCases)},{...o,step:r.createCase,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.createCase.tourTitle",{defaultMessage:"Add Case details"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.createCase.tourContent",{defaultMessage:"Provide the relevant information to create the case. We have included sample text for you."}),anchor:'[tour-step="create-case-flyout"] label',anchorPosition:"leftUp",dataTestSubj:s(r.createCase,i.alertsCases),offset:20,repositionOnScroll:!1},{...o,step:r.submitCase,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.submitCase.tourTitle",{defaultMessage:"Create a case"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.submitCase.tourContent",{defaultMessage:'Press "Create case" to continue.'}),anchor:'[tour-step="create-case-flyout"] [tour-step="create-case-submit"]',anchorPosition:"leftUp",hideNextButton:!0,dataTestSubj:s(r.submitCase,i.alertsCases),offset:20,ownFocus:!1,initialFocus:'[tour-step="create-case-flyout"] [tour-step="create-case-submit"]'},{...o,step:r.viewCase,title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.viewCase.tourTitle",{defaultMessage:"View the case"}),content:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.viewCase.tourContent",{defaultMessage:"Cases are shown under Insights, in the alert details."}),anchorPosition:"rightUp",dataTestSubj:s(r.viewCase,i.alertsCases)}],c={title:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.createCase.title",{defaultMessage:"This is a test case"}),description:a.i18n.translate("xpack.securitySolution.guided_onboarding.tour.createCase.description",{defaultMessage:"Add a description and other relevant information. The alert will be added to the case."})},u={[i.rules]:[],[i.alertsCases]:l}},function(e,t,n){"use strict";let a,i;n.r(t),n.d(t,"HostsType",(function(){return a})),n.d(t,"HostsTableType",(function(){return i})),function(e){e.page="page",e.details="details"}(a||(a={})),function(e){e.authentications="authentications",e.hosts="allHosts",e.events="events",e.uncommonProcesses="uncommonProcesses",e.anomalies="anomalies",e.risk="hostRisk",e.sessions="sessions"}(i||(i={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return l}));var a=n(195);const i=e=>`${Object(a.a)(e)}`,r=e=>`${Object(a.a)(e)}`,o=(e,t)=>`/id/${e}${Object(a.a)(t)}`,s=(e,t,n)=>`/id/${e}/${t}${Object(a.a)(n)}`,l=(e,t)=>`/id/${e}/edit${Object(a.a)(t)}`},function(e,t,n){"use strict";n.d(t,"g",(function(){return i})),n.d(t,"f",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(5);const i=e=>a.i18n.translate("xpack.securitySolution.flyout.errorTitle",{values:{title:e},defaultMessage:"Unable to display {title}"}),r=e=>a.i18n.translate("xpack.securitySolution.flyout.errorMessage",{values:{message:e},defaultMessage:"There was an error displaying {message}"}),o=e=>a.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.suppressedAlerts",{defaultMessage:"suppressed {count, plural, =1 {alert} other {alerts}}",values:{count:e}}),s=e=>a.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.ancestryAlerts",{defaultMessage:"{count, plural, one {alert} other {alerts}} related by ancestry",values:{count:e}}),l=e=>a.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.sourceAlerts",{defaultMessage:"{count, plural, one {alert} other {alerts}} related by source event",values:{count:e}}),c=e=>a.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.sessionAlerts",{defaultMessage:"{count, plural, one {alert} other {alerts}} related by session",values:{count:e}}),u=e=>a.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.relatedCases",{defaultMessage:"related {count, plural, one {case} other {cases}}",values:{count:e}})},function(e,t,n){"use strict";n.d(t,"W",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"r",(function(){return l})),n.d(t,"A",(function(){return c})),n.d(t,"B",(function(){return u})),n.d(t,"H",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"f",(function(){return m})),n.d(t,"i",(function(){return f})),n.d(t,"n",(function(){return g})),n.d(t,"q",(function(){return b})),n.d(t,"s",(function(){return y})),n.d(t,"t",(function(){return h})),n.d(t,"u",(function(){return v})),n.d(t,"v",(function(){return E})),n.d(t,"E",(function(){return x})),n.d(t,"k",(function(){return j})),n.d(t,"G",(function(){return O})),n.d(t,"F",(function(){return S})),n.d(t,"m",(function(){return k})),n.d(t,"l",(function(){return w})),n.d(t,"j",(function(){return I})),n.d(t,"p",(function(){return T})),n.d(t,"J",(function(){return C})),n.d(t,"o",(function(){return M})),n.d(t,"I",(function(){return A})),n.d(t,"z",(function(){return _})),n.d(t,"h",(function(){return F})),n.d(t,"w",(function(){return D})),n.d(t,"d",(function(){return N})),n.d(t,"a",(function(){return P})),n.d(t,"y",(function(){return R})),n.d(t,"x",(function(){return L})),n.d(t,"K",(function(){return q})),n.d(t,"L",(function(){return B})),n.d(t,"M",(function(){return z})),n.d(t,"D",(function(){return $})),n.d(t,"C",(function(){return V})),n.d(t,"N",(function(){return U})),n.d(t,"R",(function(){return G})),n.d(t,"P",(function(){return H})),n.d(t,"T",(function(){return W})),n.d(t,"Q",(function(){return Q})),n.d(t,"U",(function(){return Y})),n.d(t,"O",(function(){return K})),n.d(t,"S",(function(){return X})),n.d(t,"V",(function(){return J}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.system.withResultDescription",{defaultMessage:"with result"}),r=a.i18n.translate("xpack.securitySolution.system.acceptedAConnectionViaDescription",{defaultMessage:"accepted a connection via"}),o=a.i18n.translate("xpack.securitySolution.system.attemptedLoginDescription",{defaultMessage:"attempted a login via"}),s=a.i18n.translate("xpack.securitySolution.system.disconnectedViaDescription",{defaultMessage:"disconnected via"}),l=a.i18n.translate("xpack.securitySolution.system.loggedOutDescription",{defaultMessage:"logged out via"}),c=(a.i18n.translate("xpack.securitySolution.system.usingDescription",{defaultMessage:"using"}),a.i18n.translate("xpack.securitySolution.system.processStartedDescription",{defaultMessage:"started process"})),u=a.i18n.translate("xpack.securitySolution.system.processStoppedDescription",{defaultMessage:"stopped process"}),d=a.i18n.translate("xpack.securitySolution.system.terminatedProcessDescription",{defaultMessage:"terminated process"}),p=a.i18n.translate("xpack.securitySolution.system.createdFileDescription",{defaultMessage:"created a file"}),m=a.i18n.translate("xpack.securitySolution.system.deletedFileDescription",{defaultMessage:"deleted a file"}),f=a.i18n.translate("xpack.securitySolution.rowRenderer.executedProcessDescription",{defaultMessage:"executed process"}),g=a.i18n.translate("xpack.securitySolution.rowRenderer.forkedProcessDescription",{defaultMessage:"forked process"}),b=a.i18n.translate("xpack.securitySolution.rowRenderer.loadedLibraryDescription",{defaultMessage:"loaded library"}),y=a.i18n.translate("xpack.securitySolution.rowRenderer.madeAHttpRequestViaDescription",{defaultMessage:"made a http request via"}),h=a.i18n.translate("xpack.securitySolution.rowRenderer.modifiedFileDescription",{defaultMessage:"modified a file"}),v=a.i18n.translate("xpack.securitySolution.rowRenderer.modifiedRegistryKeyDescription",{defaultMessage:"modified registry key"}),E=a.i18n.translate("xpack.securitySolution.rowRenderer.overwroteFileDescription",{defaultMessage:"overwrote a file"}),x=a.i18n.translate("xpack.securitySolution.rowRenderer.renamedFileDescription",{defaultMessage:"renamed a file"}),j=a.i18n.translate("xpack.securitySolution.system.existingProcessDescription",{defaultMessage:"is running process"}),O=a.i18n.translate("xpack.securitySolution.system.socketOpenedDescription",{defaultMessage:"opened a socket with"}),S=a.i18n.translate("xpack.securitySolution.system.socketClosedDescription",{defaultMessage:"closed a socket with"}),k=a.i18n.translate("xpack.securitySolution.system.existingUserDescription",{defaultMessage:"is an existing user"}),w=a.i18n.translate("xpack.securitySolution.system.existingSocketDescription",{defaultMessage:"is using an existing socket from"}),I=a.i18n.translate("xpack.securitySolution.system.existingPackageDescription",{defaultMessage:"is using an existing package"}),T=a.i18n.translate("xpack.securitySolution.system.invalidDescription",{defaultMessage:"attempted invalid usage of"}),C=a.i18n.translate("xpack.securitySolution.system.userChangedDescription",{defaultMessage:"user has changed"}),M=a.i18n.translate("xpack.securitySolution.system.hostDescription",{defaultMessage:"host information"}),A=a.i18n.translate("xpack.securitySolution.system.userAddedDescription",{defaultMessage:"user was added"}),_=a.i18n.translate("xpack.securitySolution.system.processErrorDescription",{defaultMessage:"encountered a process error with"}),F=a.i18n.translate("xpack.securitySolution.system.errorDescription",{defaultMessage:"encountered an error with"}),D=a.i18n.translate("xpack.securitySolution.system.packageInstalledDescription",{defaultMessage:"installed package"}),N=a.i18n.translate("xpack.securitySolution.system.packageSystemStartedDescription",{defaultMessage:"system started"}),P=a.i18n.translate("xpack.securitySolution.system.acceptedDescription",{defaultMessage:"accepted the user via"}),R=a.i18n.translate("xpack.securitySolution.system.packageUpdatedDescription",{defaultMessage:"updated package"}),L=a.i18n.translate("xpack.securitySolution.system.packageRemovedDescription",{defaultMessage:"removed package"}),q=a.i18n.translate("xpack.securitySolution.system.userRemovedDescription",{defaultMessage:"was removed"}),B=a.i18n.translate("xpack.securitySolution.system.viaDescription",{defaultMessage:"via"}),z=a.i18n.translate("xpack.securitySolution.system.viaParentProcessDescription",{defaultMessage:"via parent process"}),$=a.i18n.translate("xpack.securitySolution.rowRenderer.ransomwareWasPreventedFromeEcryptingFilesDescription",{defaultMessage:"ransomware was prevented from encrypting files"}),V=a.i18n.translate("xpack.securitySolution.rowRenderer.ransomwareWasDetectedEcryptingFilesDescription",{defaultMessage:"ransomware was detected encrypting files"}),U=a.i18n.translate("xpack.securitySolution.rowRenderer.wasDetectedCreatingAMaliciousFileDescription",{defaultMessage:"was detected creating a malicious file"}),G=a.i18n.translate("xpack.securitySolution.rowRenderer.wasPreventedFromCreatingAMaliciousFileDescription",{defaultMessage:"was prevented from creating a malicious file"}),H=a.i18n.translate("xpack.securitySolution.rowRenderer.wasDetectedModifyingAMaliciousFileDescription",{defaultMessage:"was detected modifying a malicious file"}),W=a.i18n.translate("xpack.securitySolution.rowRenderer.wasPreventedFromModifyingAMaliciousFileDescription",{defaultMessage:"was prevented from modifying a malicious file"}),Q=a.i18n.translate("xpack.securitySolution.rowRenderer.wasDetectedRenamingAMaliciousFileDescription",{defaultMessage:"was detected renaming a malicious file"}),Y=a.i18n.translate("xpack.securitySolution.rowRenderer.wasPreventedFromRenamingAMaliciousFileDescription",{defaultMessage:"was prevented from renaming a malicious file"}),K=a.i18n.translate("xpack.securitySolution.rowRenderer.wasDetectedExecutingAMaliciousProcessDescription",{defaultMessage:"was detected executing a malicious process"}),X=a.i18n.translate("xpack.securitySolution.rowRenderer.wasPreventedFromExecutingAMaliciousProcessDescription",{defaultMessage:"was prevented from executing a malicious process"}),J=a.i18n.translate("xpack.securitySolution.system.withExitCodeDescription",{defaultMessage:"with exit code"})},,function(e,t,n){class Range{constructor(e,t){if(t=i(t),e instanceof Range)return e.loose===!!t.loose&&e.includePrerelease===!!t.includePrerelease?e:new Range(e.raw,t);if(e instanceof r)return this.raw=e.value,this.set=[[e]],this.format(),this;if(this.options=t,this.loose=!!t.loose,this.includePrerelease=!!t.includePrerelease,this.raw=e.trim().split(/\s+/).join(" "),this.set=this.raw.split("||").map((e=>this.parseRange(e.trim()))).filter((e=>e.length)),!this.set.length)throw new TypeError(`Invalid SemVer Range: ${this.raw}`);if(this.set.length>1){const e=this.set[0];if(this.set=this.set.filter((e=>!g(e[0]))),0===this.set.length)this.set=[e];else if(this.set.length>1)for(const e of this.set)if(1===e.length&&b(e[0])){this.set=[e];break}}this.format()}format(){return this.range=this.set.map((e=>e.join(" ").trim())).join("||").trim(),this.range}toString(){return this.range}parseRange(e){const t=((this.options.includePrerelease&&m)|(this.options.loose&&f))+":"+e,n=a.get(t);if(n)return n;const i=this.options.loose,s=i?l[c.HYPHENRANGELOOSE]:l[c.HYPHENRANGE];e=e.replace(s,T(this.options.includePrerelease)),o("hyphen replace",e),e=e.replace(l[c.COMPARATORTRIM],u),o("comparator trim",e),e=e.replace(l[c.TILDETRIM],d),o("tilde trim",e),e=e.replace(l[c.CARETTRIM],p),o("caret trim",e);let b=e.split(" ").map((e=>h(e,this.options))).join(" ").split(/\s+/).map((e=>I(e,this.options)));i&&(b=b.filter((e=>(o("loose invalid filter",e,this.options),!!e.match(l[c.COMPARATORLOOSE]))))),o("range list",b);const y=new Map,v=b.map((e=>new r(e,this.options)));for(const e of v){if(g(e))return[e];y.set(e.value,e)}y.size>1&&y.has("")&&y.delete("");const E=[...y.values()];return a.set(t,E),E}intersects(e,t){if(!(e instanceof Range))throw new TypeError("a Range is required");return this.set.some((n=>y(n,t)&&e.set.some((e=>y(e,t)&&n.every((n=>e.every((e=>n.intersects(e,t)))))))))}test(e){if(!e)return!1;if("string"==typeof e)try{e=new s(e,this.options)}catch(e){return!1}for(let t=0;t<this.set.length;t++)if(C(this.set[t],e,this.options))return!0;return!1}}e.exports=Range;const a=new(n(1296))({max:1e3}),i=n(451),r=n(463),o=n(325),s=n(157),{safeRe:l,t:c,comparatorTrimReplace:u,tildeTrimReplace:d,caretTrimReplace:p}=n(310),{FLAG_INCLUDE_PRERELEASE:m,FLAG_LOOSE:f}=n(326),g=e=>"<0.0.0-0"===e.value,b=e=>""===e.value,y=(e,t)=>{let n=!0;const a=e.slice();let i=a.pop();for(;n&&a.length;)n=a.every((e=>i.intersects(e,t))),i=a.pop();return n},h=(e,t)=>(o("comp",e,t),e=j(e,t),o("caret",e),e=E(e,t),o("tildes",e),e=S(e,t),o("xrange",e),e=w(e,t),o("stars",e),e),v=e=>!e||"x"===e.toLowerCase()||"*"===e,E=(e,t)=>e.trim().split(/\s+/).map((e=>x(e,t))).join(" "),x=(e,t)=>{const n=t.loose?l[c.TILDELOOSE]:l[c.TILDE];return e.replace(n,((t,n,a,i,r)=>{let s;return o("tilde",e,t,n,a,i,r),v(n)?s="":v(a)?s=`>=${n}.0.0 <${+n+1}.0.0-0`:v(i)?s=`>=${n}.${a}.0 <${n}.${+a+1}.0-0`:r?(o("replaceTilde pr",r),s=`>=${n}.${a}.${i}-${r} <${n}.${+a+1}.0-0`):s=`>=${n}.${a}.${i} <${n}.${+a+1}.0-0`,o("tilde return",s),s}))},j=(e,t)=>e.trim().split(/\s+/).map((e=>O(e,t))).join(" "),O=(e,t)=>{o("caret",e,t);const n=t.loose?l[c.CARETLOOSE]:l[c.CARET],a=t.includePrerelease?"-0":"";return e.replace(n,((t,n,i,r,s)=>{let l;return o("caret",e,t,n,i,r,s),v(n)?l="":v(i)?l=`>=${n}.0.0${a} <${+n+1}.0.0-0`:v(r)?l="0"===n?`>=${n}.${i}.0${a} <${n}.${+i+1}.0-0`:`>=${n}.${i}.0${a} <${+n+1}.0.0-0`:s?(o("replaceCaret pr",s),l="0"===n?"0"===i?`>=${n}.${i}.${r}-${s} <${n}.${i}.${+r+1}-0`:`>=${n}.${i}.${r}-${s} <${n}.${+i+1}.0-0`:`>=${n}.${i}.${r}-${s} <${+n+1}.0.0-0`):(o("no pr"),l="0"===n?"0"===i?`>=${n}.${i}.${r}${a} <${n}.${i}.${+r+1}-0`:`>=${n}.${i}.${r}${a} <${n}.${+i+1}.0-0`:`>=${n}.${i}.${r} <${+n+1}.0.0-0`),o("caret return",l),l}))},S=(e,t)=>(o("replaceXRanges",e,t),e.split(/\s+/).map((e=>k(e,t))).join(" ")),k=(e,t)=>{e=e.trim();const n=t.loose?l[c.XRANGELOOSE]:l[c.XRANGE];return e.replace(n,((n,a,i,r,s,l)=>{o("xRange",e,n,a,i,r,s,l);const c=v(i),u=c||v(r),d=u||v(s),p=d;return"="===a&&p&&(a=""),l=t.includePrerelease?"-0":"",c?n=">"===a||"<"===a?"<0.0.0-0":"*":a&&p?(u&&(r=0),s=0,">"===a?(a=">=",u?(i=+i+1,r=0,s=0):(r=+r+1,s=0)):"<="===a&&(a="<",u?i=+i+1:r=+r+1),"<"===a&&(l="-0"),n=`${a+i}.${r}.${s}${l}`):u?n=`>=${i}.0.0${l} <${+i+1}.0.0-0`:d&&(n=`>=${i}.${r}.0${l} <${i}.${+r+1}.0-0`),o("xRange return",n),n}))},w=(e,t)=>(o("replaceStars",e,t),e.trim().replace(l[c.STAR],"")),I=(e,t)=>(o("replaceGTE0",e,t),e.trim().replace(l[t.includePrerelease?c.GTE0PRE:c.GTE0],"")),T=e=>(t,n,a,i,r,o,s,l,c,u,d,p,m)=>`${n=v(a)?"":v(i)?`>=${a}.0.0${e?"-0":""}`:v(r)?`>=${a}.${i}.0${e?"-0":""}`:o?`>=${n}`:`>=${n}${e?"-0":""}`} ${l=v(c)?"":v(u)?`<${+c+1}.0.0-0`:v(d)?`<${c}.${+u+1}.0-0`:p?`<=${c}.${u}.${d}-${p}`:e?`<${c}.${u}.${+d+1}-0`:`<=${l}`}`.trim(),C=(e,t,n)=>{for(let n=0;n<e.length;n++)if(!e[n].test(t))return!1;if(t.prerelease.length&&!n.includePrerelease){for(let n=0;n<e.length;n++)if(o(e[n].semver),e[n].semver!==r.ANY&&e[n].semver.prerelease.length>0){const a=e[n].semver;if(a.major===t.major&&a.minor===t.minor&&a.patch===t.patch)return!0}return!1}return!0}},function(e,t,n){"use strict";n.d(t,"h",(function(){return Ee})),n.d(t,"b",(function(){return xe})),n.d(t,"f",(function(){return je})),n.d(t,"c",(function(){return Oe})),n.d(t,"d",(function(){return Se})),n.d(t,"g",(function(){return ke})),n.d(t,"j",(function(){return we})),n.d(t,"i",(function(){return Ie})),n.d(t,"a",(function(){return Te})),n.d(t,"e",(function(){return Ce})),n.d(t,"k",(function(){return It}));var a=n(42),i=n(2),r=n.n(i),o=n(106),s=n(40),l=n(127),c=n(250),u=n(121),d=n(277),p=n(819);const m=r.a.memo((({contextId:e,eventId:t,hostName:n,hostNameSeparator:a="@",isDraggable:i,userDomain:o,userDomainField:s="user.domain",userName:c,userNameField:d="user.name",workingDirectory:m})=>null!=c||null!=o||null!=n||null!=m?r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:d,isDraggable:i,value:c,iconType:"user",fieldType:"keyword",isAggregatable:!0})),null!=o&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{"data-test-subj":"user-host-working-dir-domain-separator-text",grow:!1,component:"span"},"\\"),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:s,isDraggable:i,value:o,fieldType:"keyword",isAggregatable:!0}))),null!=n&&null!=c&&r.a.createElement(l.c,{grow:!1,component:"span"},a),r.a.createElement(p.a,{contextId:e,eventId:t,hostName:n,isDraggable:i,workingDirectory:m})):null));m.displayName="UserHostWorkingDir";var f=n(5);const g=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.dns.askedForDescription",{defaultMessage:"asked for"}),b=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.dns.responseCodeDescription",{defaultMessage:"response code:"}),y=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.dns.viaDescription",{defaultMessage:"via"}),h=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.dns.whichResolvedToDescription",{defaultMessage:", which resolved to"}),v=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.dns.withQuestionTypeDescription",{defaultMessage:"with question type"}),E=r.a.memo((({contextId:e,dnsQuestionName:t,dnsQuestionType:n,dnsResolvedIp:a,dnsResponseCode:i,eventCode:o,hostName:c,id:p,isDraggable:f,processExecutable:E,processName:x,processPid:j,userDomain:O,userName:S,winlogEventId:k})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(m,{contextId:e,eventId:p,hostName:c,isDraggable:f,userDomain:O,userName:S,workingDirectory:void 0}),!Object(l.e)(t)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"asked-for",grow:!1},g),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,field:"dns.question.name",isDraggable:f,value:t,isAggregatable:!0,fieldType:"keyword"}))),!Object(l.e)(n)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"with-question-type",grow:!1},v),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,field:"dns.question.type",isDraggable:f,value:n,isAggregatable:!0,fieldType:"keyword"}))),!Object(l.e)(a)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"which-resolved-to",grow:!1},h),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,field:"dns.resolved_ip",isDraggable:f,value:a,isAggregatable:!0,fieldType:"ip"}))),!Object(l.e)(i)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span",grow:!1},"("),r.a.createElement(l.c,{component:"span","data-test-subj":"response-code",grow:!1},b),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,field:"dns.response_code",isDraggable:f,value:i,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(l.c,{component:"span",grow:!1},")")),r.a.createElement(l.c,{component:"span",grow:!1},y),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(d.b,{contextId:e,endgamePid:void 0,endgameProcessName:void 0,eventId:p,isDraggable:f,processPid:j,processName:x,processExecutable:E})),(!Object(l.e)(o)||!Object(l.e)(k))&&r.a.createElement(r.a.Fragment,null,Object(l.e)(o)?r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,iconType:"logoWindows",field:"winlog.event_id",isDraggable:f,value:k,isAggregatable:!0,fieldType:"keyword"})):r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:p,field:"event.code",isDraggable:f,value:o,isAggregatable:!0,fieldType:"number"})))))));E.displayName="DnsRequestEventDetailsLine";const x=r.a.memo((({data:e,contextId:t,isDraggable:n,timelineId:i})=>{const o=Object(a.get)("dns.question.name[0]",e),u=Object(a.get)("dns.question.type[0]",e),d=Object(a.get)("dns.resolved_ip[0]",e),p=Object(a.get)("dns.response_code[0]",e),m=Object(a.get)("event.code[0]",e),f=Object(a.get)("host.name[0]",e),g=e._id,b=Object(a.get)("process.executable[0]",e),y=Object(a.get)("process.name[0]",e),h=Object(a.get)("process.pid[0]",e),v=Object(a.get)("user.domain[0]",e),x=Object(a.get)("user.name[0]",e),j=Object(a.get)("winlog.event_id[0]",e);return r.a.createElement(l.b,null,r.a.createElement(E,{contextId:t,dnsQuestionName:o,dnsQuestionType:u,dnsResolvedIp:d,dnsResponseCode:p,eventCode:m,hostName:f,id:g,isDraggable:n,processExecutable:b,processName:y,processPid:h,userDomain:v,userName:x,winlogEventId:j}),r.a.createElement(s.EuiSpacer,{size:"s"}),r.a.createElement(c.a,{data:e,isDraggable:n,timelineId:i}))}));x.displayName="DnsRequestEventDetails";const j=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.aLoginWasAttemptedUsingExplicitCredentialsDescription",{defaultMessage:"A login was attempted using explicit credentials"}),O=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.asRequestedBySubjectDescription",{defaultMessage:"as requested by subject"}),S=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endpoint.failedToLogInDescription",{defaultMessage:"failed to log in"}),k=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endpoint.failedToLogOffDescription",{defaultMessage:"failed to log off"}),w=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.loggedOffDescription",{defaultMessage:"logged off"}),I=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeBatchDescription",{defaultMessage:"Batch"}),T=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeCachedInteractiveDescription",{defaultMessage:"Cached Interactive"}),C=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeInteractiveDescription",{defaultMessage:"Interactive"}),M=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeNetworkDescription",{defaultMessage:"Network"}),A=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeNetworkCleartextDescription",{defaultMessage:"Network Cleartext"}),_=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeNewCredentialsDescription",{defaultMessage:"New Credentials"}),F=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeRemoteInteractiveDescription",{defaultMessage:"Remote Interactive"}),D=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeServiceDescription",{defaultMessage:"Service"}),N=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.logonTypeUnlockDescription",{defaultMessage:"Unlock"}),P=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.subjectLogonIdDescription",{defaultMessage:"subject logon ID"}),R=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.successfullyLoggedInDescription",{defaultMessage:"successfully logged in"}),L=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.targetLogonIdDescription",{defaultMessage:"target logon ID"}),q=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.toDescription",{defaultMessage:"to"}),B=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.usingLogonTypeDescription",{defaultMessage:"using logon type"}),z=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.viaDescription",{defaultMessage:"via"}),$=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.endgame.withSpecialPrivilegesDescription",{defaultMessage:"With special privileges,"}),V=e=>{if(Object(l.e)(e))return"";switch(e){case 2:return C;case 3:return M;case 4:return I;case 5:return D;case 7:return N;case 8:return A;case 9:return _;case 10:return F;case 11:return T;default:return`${e}`}},U=e=>"explicit_user_logon"===e||"user_logoff"===e,G=r.a.memo((({contextId:e,endgameLogonType:t,endgameSubjectDomainName:n,endgameSubjectLogonId:a,endgameSubjectUserName:i,endgameTargetDomainName:o,endgameTargetLogonId:c,endgameTargetUserName:p,eventAction:f,eventCode:g,eventOutcome:b,hostName:y,id:h,isDraggable:v,processExecutable:E,processName:x,processPid:I,userDomain:T,userName:C,winlogEventId:M})=>{const A=U(f)?o:T,_=(({eventAction:e,eventOutcome:t})=>{switch(e){case"explicit_user_logon":return"";case"log_off":case"user_logoff":return"failure"===(null==t?void 0:t.toLowerCase())?k:w;default:return"failure"===(null==t?void 0:t.toLowerCase())?S:R}})({eventAction:f,eventOutcome:b}),F=(e=>"explicit_user_logon"===e?q:"@")(f),D=U(f)?p:C,N=(e=>U(e)?"endgame.target_domain_name":"user.domain")(f),G=(e=>U(e)?"endgame.target_user_name":"user.name")(f);return r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},"admin_logon"===f&&r.a.createElement(l.c,{component:"span","data-test-subj":"with-special-privileges",grow:!1},$),"explicit_user_logon"===f&&r.a.createElement(l.c,{component:"span","data-test-subj":"a-login-was-attempted",grow:!1},j),r.a.createElement(m,{contextId:e,eventId:h,hostName:y,hostNameSeparator:F,isDraggable:v,userDomain:A,userDomainField:N,userName:D,userNameField:G,workingDirectory:void 0}),r.a.createElement(l.c,{component:"span","data-test-subj":"event-details",grow:!1},_),!Object(l.e)(t)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"using-logon-type",grow:!1},B),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"endgame.logon_type",isDraggable:v,queryValue:String(t),value:`${t} - ${V(t)}`,isAggregatable:!0,fieldType:"keyword"}))),!Object(l.e)(c)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span",grow:!1},"("),r.a.createElement(l.c,{component:"span","data-test-subj":"using-logon-type",grow:!1},L),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"endgame.target_logon_id",isDraggable:v,value:c,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(l.c,{component:"span",grow:!1},")")),r.a.createElement(l.c,{component:"span",grow:!1},z),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(d.b,{contextId:e,endgamePid:void 0,endgameProcessName:void 0,eventId:h,isDraggable:v,processPid:I,processName:x,processExecutable:E})),!Object(l.e)(i)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"as-requested-by-subject",grow:!1},O),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"endgame.subject_user_name",isDraggable:v,iconType:"user",value:i,isAggregatable:!0,fieldType:"keyword"}))),null!=n&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"subject-domain-name-domain-separator-text",grow:!1},"\\"),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"endgame.subject_domain_name",isDraggable:v,value:n,isAggregatable:!0,fieldType:"keyword"}))),!Object(l.e)(a)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span",grow:!1},"("),r.a.createElement(l.c,{component:"span","data-test-subj":"subject-login-id",grow:!1},P),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"endgame.subject_logon_id",isDraggable:v,value:a,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(l.c,{component:"span",grow:!1},")")),(!Object(l.e)(g)||!Object(l.e)(M))&&r.a.createElement(r.a.Fragment,null,Object(l.e)(g)?r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,iconType:"logoWindows",field:"winlog.event_id",value:M,isAggregatable:!0,fieldType:"keyword"})):r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:h,field:"event.code",value:g,isAggregatable:!0,fieldType:"keyword"})))))}));G.displayName="EndgameSecurityEventDetailsLine";const H=r.a.memo((({data:e,contextId:t,isDraggable:n,timelineId:i})=>{const o=Object(a.get)("endgame.logon_type[0]",e),u=Object(a.get)("endgame.subject_domain_name[0]",e),d=Object(a.get)("endgame.subject_logon_id[0]",e),p=Object(a.get)("endgame.subject_user_name[0]",e),m=Object(a.get)("endgame.target_logon_id[0]",e),f=Object(a.get)("endgame.target_domain_name[0]",e),g=Object(a.get)("endgame.target_user_name[0]",e),b=Object(a.get)("event.action[0]",e),y=Object(a.get)("event.code[0]",e),h=Object(a.get)("event.outcome[0]",e),v=Object(a.get)("host.name[0]",e),E=e._id,x=Object(a.get)("process.executable[0]",e),j=Object(a.get)("process.name[0]",e),O=Object(a.get)("process.pid[0]",e),S=Object(a.get)("user.domain[0]",e),k=Object(a.get)("user.name[0]",e),w=Object(a.get)("winlog.event_id[0]",e);return r.a.createElement(l.b,null,r.a.createElement(G,{contextId:t,endgameLogonType:o,endgameSubjectDomainName:u,endgameSubjectLogonId:d,endgameSubjectUserName:p,endgameTargetDomainName:f,endgameTargetLogonId:m,endgameTargetUserName:g,eventAction:b,eventCode:y,eventOutcome:h,hostName:v,id:E,isDraggable:n,processExecutable:x,processName:j,processPid:O,userDomain:S,userName:k,winlogEventId:w}),r.a.createElement(s.EuiSpacer,{size:"s"}),r.a.createElement(c.a,{data:e,timelineId:i}))}));H.displayName="EndgameSecurityEventDetails";const W=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.registry.viaDescription",{defaultMessage:"via"}),Q=f.i18n.translate("xpack.securitySolution.timeline.body.renderers.registry.withNewValueDescription",{defaultMessage:"with new value"}),Y=({contextId:e,hostName:t,id:n,isDraggable:a,processName:o,processPid:c,registryKey:p,registryPath:f,text:g,userDomain:b,userName:y})=>{const h=Object(i.useMemo)((()=>r.a.createElement(r.a.Fragment,null,r.a.createElement("div",null,"registry.key"),r.a.createElement("div",null,p))),[p]),v=Object(i.useMemo)((()=>r.a.createElement(r.a.Fragment,null,r.a.createElement("div",null,"registry.path"),r.a.createElement("div",null,f))),[f]);return Object(l.e)(p)?null:r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(m,{contextId:e,eventId:n,hostName:t,isDraggable:a,userDomain:b,userName:y,workingDirectory:void 0}),!Object(l.e)(p)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"text",grow:!1},g),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:n,field:"registry.key",isDraggable:a,tooltipContent:h,value:p,isAggregatable:!0,fieldType:"keyword"}))),!Object(l.e)(f)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{component:"span","data-test-subj":"with-new-value",grow:!1},Q),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(u.c,{contextId:e,eventId:n,field:"registry.path",isDraggable:a,tooltipContent:v,value:f,isAggregatable:!0,fieldType:"keyword"}))),r.a.createElement(l.c,{component:"span",grow:!1},W),r.a.createElement(l.c,{component:"span",grow:!1},r.a.createElement(d.b,{contextId:e,endgamePid:void 0,endgameProcessName:void 0,eventId:n,isDraggable:a,processPid:c,processName:o,processExecutable:void 0}))))},K=r.a.memo(Y),X=({contextId:e,data:t,isDraggable:n,text:i})=>{const o=Object(a.get)("host.name[0]",t),s=t._id,c=Object(a.get)("process.name[0]",t),u=Object(a.get)("process.pid[0]",t),d=Object(a.get)("registry.key[0]",t),p=Object(a.get)("registry.path[0]",t),m=Object(a.get)("user.domain[0]",t),f=Object(a.get)("user.name[0]",t);return Object(l.e)(d)?null:r.a.createElement(l.b,null,r.a.createElement(K,{contextId:e,hostName:o,id:s,isDraggable:n,processName:c,processPid:u,registryKey:d,registryPath:p,text:i,userDomain:m,userName:f}))};X.displayName="RegistryEventDetailsComponent";const J=r.a.memo(X);var Z=n(275),ee=n(331),te=n(203);const ne=r.a.memo((({contextId:e,eventId:t,isDraggable:n,packageName:a,packageSummary:i,packageVersion:o})=>null!=a||null!=i||null!=o?r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"system.audit.package.name",isDraggable:n,value:a,iconType:"document",isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"system.audit.package.version",isDraggable:n,value:o,iconType:"document",isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"system.audit.package.summary",isDraggable:n,value:i,isAggregatable:!0,fieldType:"keyword"}))):null));ne.displayName="Package";const ae=r.a.memo((({contextId:e,eventId:t,isDraggable:n,sshSignature:a,sshMethod:i})=>r.a.createElement(r.a.Fragment,null,null!=a&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"system.audit.package.name",isDraggable:n,value:a,iconType:"document",isAggregatable:!0,fieldType:"keyword"})),null!=i&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"system.audit.package.version",isDraggable:n,value:i,iconType:"document",isAggregatable:!0,fieldType:"keyword"})))));ae.displayName="AuthSsh";var ie=n(168);const re=r.a.memo((({contextId:e,hostName:t,id:n,isDraggable:a,message:i,outcome:o,packageName:c,packageSummary:p,packageVersion:f,processPid:g,processName:b,processExecutable:y,sshSignature:h,sshMethod:v,text:E,userDomain:x,userName:j,workingDirectory:O})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(m,{contextId:e,eventId:n,hostName:t,isDraggable:a,userDomain:x,userName:j,workingDirectory:O}),r.a.createElement(l.c,{grow:!1,component:"span"},E),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(d.a,{contextId:e,endgamePid:void 0,endgameProcessName:void 0,eventId:n,isDraggable:a,processPid:g,processName:b,processExecutable:y})),null!=o&&r.a.createElement(l.c,{grow:!1,component:"span"},te.W),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"event.outcome",isDraggable:a,queryValue:o,value:o,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(ae,{contextId:e,eventId:n,isDraggable:a,sshSignature:h,sshMethod:v}),r.a.createElement(ne,{contextId:e,eventId:n,isDraggable:a,packageName:c,packageSummary:p,packageVersion:f})),null!=i&&r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiSpacer,{size:"xs"}),r.a.createElement(s.EuiFlexGroup,{justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(ie.b,{iconType:"editorComment",color:"hollow",title:""},r.a.createElement(ee.a,{value:i}))))))));re.displayName="SystemGenericLine";const oe=r.a.memo((({contextId:e,data:t,isDraggable:n,text:i,timelineId:o})=>{const u=t._id,d=null!=t.message?t.message[0]:null,p=Object(a.get)("host.name[0]",t),m=Object(a.get)("user.domain[0]",t),f=Object(a.get)("user.name[0]",t),g=Object(a.get)("event.outcome[0]",t),b=Object(a.get)("system.audit.package.name[0]",t),y=Object(a.get)("system.audit.package.summary[0]",t),h=Object(a.get)("system.audit.package.version[0]",t),v=Object(a.get)("process.pid[0]",t),E=Object(a.get)("process.name[0]",t),x=Object(a.get)("process.executable[0]",t),j=Object(a.get)("system.auth.ssh.signature[0]",t),O=Object(a.get)("system.auth.ssh.method[0]",t),S=Object(a.get)("process.working_directory[0]",t);return r.a.createElement(l.b,null,r.a.createElement(re,{contextId:e,hostName:p,id:u,isDraggable:n,message:d,outcome:g,packageName:b,packageSummary:y,packageVersion:h,processExecutable:x,processPid:v,processName:E,sshMethod:O,sshSignature:j,text:i,userDomain:m,userName:f,workingDirectory:S}),r.a.createElement(s.EuiSpacer,{size:"s"}),r.a.createElement(c.a,{data:t,isDraggable:n,timelineId:o}))}));oe.displayName="SystemGenericDetails";var se=n(572);const le=r.a.memo((({contextId:e,endgameExitCode:t,eventId:n,isDraggable:a,processExitCode:i,text:o})=>Object(l.e)(i)&&Object(l.e)(t)?null:r.a.createElement(r.a.Fragment,null,!Object(l.e)(o)&&r.a.createElement(l.c,{"data-test-subj":"exit-code-draggable-text",grow:!1,component:"span"},o),!Object(l.e)(i)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"process.exit_code",isDraggable:a,value:`${i}`,fieldType:"number",isAggregatable:!0})),!Object(l.e)(t)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"endgame.exit_code",isDraggable:a,value:t,fieldType:"number",isAggregatable:!0})))));le.displayName="ExitCodeDraggable";var ce=n(392);const ue=r.a.memo((({contextId:e,endgameFileName:t,endgameFilePath:n,eventId:a,fileExtOriginalPath:i,fileName:o,filePath:s,isDraggable:c})=>{if(Object(l.e)(o)&&Object(l.e)(t)&&Object(l.e)(s)&&Object(l.e)(n))return null;const d=!Object(l.e)(s)||!Object(l.e)(n);return r.a.createElement(r.a.Fragment,null,Object(l.e)(o)?Object(l.e)(t)?null:r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:a,field:"endgame.file_name",isDraggable:c,value:t,iconType:"document",isAggregatable:!0,fieldType:"keyword"})):r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:a,field:"file.name",isDraggable:c,value:o,iconType:"document",isAggregatable:!0,fieldType:"keyword"})),d&&r.a.createElement(l.c,{"data-test-subj":"in",grow:!1,component:"span"},ce.e),Object(l.e)(s)?Object(l.e)(n)?null:r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:a,field:"endgame.file_path",isDraggable:c,value:n,iconType:"document",isAggregatable:!0,fieldType:"keyword"})):r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:a,field:"file.path",isDraggable:c,value:s,iconType:"document",isAggregatable:!0,fieldType:"keyword"})),!Object(l.e)(i)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.c,{grow:!1,component:"span"},ce.d),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:a,field:"file.Ext.original.path",isDraggable:c,value:i,iconType:"document",isAggregatable:!0,fieldType:"keyword"}))))}));ue.displayName="FileDraggable";var de=n(41),pe=n.n(de);const me=pe()(s.EuiFlexGroup).withConfig({displayName:"HashFlexGroup",componentId:"sc-ezi1kd-0"})(["margin:",";"],(({theme:e})=>e.eui.euiSizeXS)),fe=r.a.memo((({contextId:e,eventId:t,fileHashSha256:n,isDraggable:a})=>Object(l.e)(n)?null:r.a.createElement(me,{alignItems:"center",direction:"column",gutterSize:"none"},r.a.createElement(l.c,{grow:!1,component:"div"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"file.hash.sha256",isDraggable:a,iconType:"number",value:n,isAggregatable:!0,fieldType:"keyword"})))));fe.displayName="FileHash";const ge=r.a.memo((({contextId:e,endgameParentProcessName:t,eventId:n,isDraggable:a,processParentName:i,processParentPid:o,processPpid:s,text:c})=>Object(l.e)(i)&&Object(l.e)(t)?null:r.a.createElement(r.a.Fragment,null,!Object(l.e)(c)&&r.a.createElement(l.c,{"data-test-subj":"parent-process-draggable-text",grow:!1,component:"span"},c),!Object(l.e)(i)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"process.parent.name",isDraggable:a,value:i,fieldType:"keyword",isAggregatable:!0})),!Object(l.e)(t)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"endgame.parent_process_name",isDraggable:a,value:t,fieldType:"keyword",isAggregatable:!0})),!Object(l.e)(o)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"process.parent.pid",isDraggable:a,queryValue:String(o),value:`(${String(o)})`,fieldType:"keyword",isAggregatable:!0})),!Object(l.e)(s)&&r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:e,eventId:n,field:"process.ppid",isDraggable:a,queryValue:String(s),value:`(${String(s)})`,fieldType:"keyword",isAggregatable:!0})))));ge.displayName="ParentProcessDraggable";const be=pe()(s.EuiFlexGroup).withConfig({displayName:"HashFlexGroup",componentId:"sc-joyfnh-0"})(["margin:",";"],(({theme:e})=>e.eui.euiSizeXS)),ye=r.a.memo((({contextId:e,eventId:t,isDraggable:n,processHashSha256:a})=>Object(l.e)(a)?null:r.a.createElement(be,{alignItems:"center",direction:"column",gutterSize:"none"},r.a.createElement(l.c,{grow:!1,component:"div"},r.a.createElement(u.c,{contextId:e,eventId:t,field:"process.hash.sha256",iconType:"number",isDraggable:n,value:a,fieldType:"keyword",isAggregatable:!0})))));ye.displayName="ProcessHash";const he=r.a.memo((({args:e,contextId:t,endgameExitCode:n,endgameFileName:a,endgameFilePath:i,endgameParentProcessName:o,endgamePid:c,endgameProcessName:p,eventAction:f,fileExtOriginalPath:g,fileHashSha256:b,fileName:y,filePath:h,hostName:v,id:E,isDraggable:x,message:j,outcome:O,packageName:S,processParentName:k,processParentPid:w,processExitCode:I,packageSummary:T,packageVersion:C,processExecutable:M,processHashSha256:A,processName:_,processPid:F,processPpid:D,processTitle:N,showMessage:P,skipRedundantFileDetails:R=!1,skipRedundantProcessDetails:L=!1,sshSignature:q,sshMethod:B,text:z,userDomain:$,userName:V,workingDirectory:U})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(m,{eventId:E,contextId:t,isDraggable:x,userDomain:$,userName:V,workingDirectory:U,hostName:v}),r.a.createElement(l.c,{grow:!1,component:"span"},z),!R&&r.a.createElement(ue,{contextId:t,endgameFileName:a,endgameFilePath:i,eventId:E,fileExtOriginalPath:g,fileName:y,filePath:h,isDraggable:x}),Object(l.g)(f)&&r.a.createElement(l.c,{"data-test-subj":"via",grow:!1,component:"span"},te.L),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(d.b,{contextId:t,endgamePid:c,endgameProcessName:p,eventId:E,isDraggable:x,processPid:F,processName:_,processExecutable:M})),r.a.createElement(se.a,{args:e,contextId:t,eventId:E,processTitle:N,isDraggable:x}),r.a.createElement(le,{contextId:t,endgameExitCode:n,eventId:E,isDraggable:x,processExitCode:I,text:te.V}),!Object(l.f)(f)&&r.a.createElement(ge,{contextId:t,endgameParentProcessName:o,eventId:E,isDraggable:x,processParentName:k,processParentPid:w,processPpid:D,text:te.M}),null!=O&&r.a.createElement(l.c,{grow:!1,component:"span"},te.W),r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(u.c,{contextId:t,eventId:E,field:"event.outcome",isDraggable:x,queryValue:O,value:O,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(ae,{contextId:t,eventId:E,isDraggable:x,sshSignature:q,sshMethod:B}),r.a.createElement(ne,{contextId:t,eventId:E,isDraggable:x,packageName:S,packageSummary:T,packageVersion:C})),!R&&r.a.createElement(fe,{contextId:t,eventId:E,fileHashSha256:b,isDraggable:x}),!L&&r.a.createElement(ye,{contextId:t,eventId:E,isDraggable:x,processHashSha256:A}),null!=j&&P&&r.a.createElement(r.a.Fragment,null,r.a.createElement(s.EuiSpacer,{size:"xs"}),r.a.createElement(s.EuiFlexGroup,{justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(l.c,{grow:!1,component:"span"},r.a.createElement(ie.b,{iconType:"editorComment",color:"hollow",title:""},r.a.createElement(ee.a,{value:j}))))))));he.displayName="SystemGenericFileLine";const ve=r.a.memo((({contextId:e,data:t,isDraggable:n,showMessage:i=!0,skipRedundantFileDetails:o=!1,skipRedundantProcessDetails:u=!1,text:d,timelineId:p})=>{const m=t._id,f=null!=t.message?t.message[0]:null,g=Object(a.get)("host.name[0]",t),b=Object(a.get)("endgame.exit_code[0]",t),y=Object(a.get)("endgame.file_name[0]",t),h=Object(a.get)("endgame.file_path[0]",t),v=Object(a.get)("endgame.parent_process_name[0]",t),E=Object(a.get)("endgame.pid[0]",t),x=Object(a.get)("endgame.process_name[0]",t),j=Object(a.get)("event.action[0]",t),O=Object(a.get)("file.Ext.original.path[0]",t),S=Object(a.get)("file.hash.sha256[0]",t),k=Object(a.get)("file.name[0]",t),w=Object(a.get)("file.path[0]",t),I=Object(a.get)("user.domain[0]",t),T=Object(a.get)("user.name[0]",t),C=Object(a.get)("event.outcome[0]",t),M=Object(a.get)("system.audit.package.name[0]",t),A=Object(a.get)("system.audit.package.summary[0]",t),_=Object(a.get)("system.audit.package.version[0]",t),F=Object(a.get)("process.exit_code[0]",t),D=Object(a.get)("process.parent.name[0]",t),N=Object(a.get)("process.parent.pid[0]",t),P=Object(a.get)("process.hash.sha256[0]",t),R=Object(a.get)("process.pid[0]",t),L=Object(a.get)("process.ppid[0]",t),q=Object(a.get)("process.name[0]",t),B=Object(a.get)("system.auth.ssh.signature[0]",t),z=Object(a.get)("system.auth.ssh.method[0]",t),$=Object(a.get)("process.executable[0]",t),V=Object(a.get)("process.title[0]",t),U=Object(a.get)("process.working_directory[0]",t),G=Object(a.get)("process.args",t);return r.a.createElement(l.b,null,r.a.createElement(he,{id:m,contextId:e,text:d,hostName:g,endgameExitCode:b,endgameFileName:y,endgameFilePath:h,endgameParentProcessName:v,endgamePid:E,endgameProcessName:x,eventAction:j,fileExtOriginalPath:O,fileHashSha256:S,fileName:k,filePath:w,userDomain:I,userName:T,message:f,processExitCode:F,processParentName:D,processParentPid:N,processTitle:V,workingDirectory:U,args:G,packageName:M,packageSummary:A,packageVersion:_,processHashSha256:P,processName:q,processPid:R,processPpid:L,processExecutable:$,showMessage:i,skipRedundantFileDetails:o,skipRedundantProcessDetails:u,sshSignature:B,sshMethod:z,outcome:C,isDraggable:n}),r.a.createElement(s.EuiSpacer,{size:"s"}),r.a.createElement(c.a,{data:t,isDraggable:n,timelineId:p}))}));ve.displayName="SystemGenericFileDetails";const Ee=({actionName:e,text:t})=>({id:o.d.system,isInstance:t=>{const n=Object(a.get)("event.module[0]",t),i=Object(a.get)("event.action[0]",t);return null!=n&&"system"===n.toLowerCase()&&null!=i&&i.toLowerCase()===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(oe,{contextId:`${e}-${i}`,data:n,isDraggable:a,text:t,timelineId:i}))}),xe=({actionName:e,text:t})=>({id:o.d.system_file,isInstance:t=>{const n=Object(a.get)("event.action[0]",t),i=Object(a.get)("event.category[0]",t),r=Object(a.get)("event.dataset[0]",t);return("process"===(null==i?void 0:i.toLowerCase())||"endpoint.events.process"===(null==r?void 0:r.toLowerCase()))&&(null==n?void 0:n.toLowerCase())===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{data:n,contextId:`endgame-process-${e}-${i}`,isDraggable:a,showMessage:!1,text:t,timelineId:i}))}),je=({actionName:e,text:t})=>({id:o.d.system_fim,isInstance:t=>{const n=Object(a.get)("event.action[0]",t),i=Object(a.get)("event.category[0]",t),r=Object(a.get)("event.dataset[0]",t);return Object(l.d)({eventCategory:i,eventDataset:r})&&(null==n?void 0:n.toLowerCase())===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{data:n,contextId:`fim-${e}-${i}`,isDraggable:a,showMessage:!1,text:t,timelineId:i}))}),Oe=({eventAction:e,eventCategory:t,eventType:n,skipRedundantFileDetails:i=!1,skipRedundantProcessDetails:s=!1,text:l})=>({id:o.d.alerts,isInstance:i=>{var r,o,s;const l=Object(a.get)("event.action",i),c=Object(a.get)("event.category",i),u=Object(a.get)("event.dataset[0]",i),d=Object(a.get)("event.type",i),p=null!==(r=null==l?void 0:l.includes(e))&&void 0!==r&&r,m=null!==(o=null==c?void 0:c.includes(t))&&void 0!==o&&o,f=null!==(s=null==d?void 0:d.includes(n))&&void 0!==s&&s;return"endpoint.alerts"===(null==u?void 0:u.toLowerCase())&&f&&m&&p},renderRow:({data:a,isDraggable:o,scopeId:c})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{contextId:`endpoint-alerts-row-renderer-${e}-${t}-${n}-${c}`,data:a,isDraggable:o,showMessage:!1,skipRedundantFileDetails:i,skipRedundantProcessDetails:s,text:l,timelineId:c}))}),Se=({actionName:e,text:t})=>({id:o.d.library,isInstance:t=>{const n=Object(a.get)("event.action[0]",t),i=Object(a.get)("event.dataset[0]",t);return"endpoint.events.library"===(null==i?void 0:i.toLowerCase())&&(null==n?void 0:n.toLowerCase())===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{contextId:`library-row-renderer-${e}-${i}`,data:n,isDraggable:a,showMessage:!1,text:t,timelineId:i}))}),ke=({actionName:e,text:t})=>({id:o.d.system_file,isInstance:t=>{const n=Object(a.get)("event.module[0]",t),i=Object(a.get)("event.action[0]",t);return null!=n&&"system"===n.toLowerCase()&&null!=i&&i.toLowerCase()===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{contextId:`${e}-${i}`,data:n,isDraggable:a,text:t,timelineId:i}))}),we=({actionName:e,text:t})=>({id:o.d.system_socket,isInstance:t=>{const n=Object(a.get)("event.action[0]",t);return null!=n&&n.toLowerCase()===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(Z.a,null,r.a.createElement(ve,{contextId:`socket-${e}-${i}`,data:n,isDraggable:a,text:t,timelineId:i}))}),Ie=({actionName:e})=>({id:o.d.system_security_event,isInstance:t=>{const n=Object(a.get)("event.category[0]",t),i=Object(a.get)("event.action[0]",t),r=Object(a.get)("event.dataset[0]",t);return("authentication"===(null==n?void 0:n.toLowerCase())||"endpoint.events.security"===(null==r?void 0:r.toLowerCase()))&&(null==i?void 0:i.toLowerCase())===e},renderRow:({data:t,isDraggable:n,scopeId:a})=>r.a.createElement(Z.a,null,r.a.createElement(H,{contextId:`authentication-${e}-${a}`,data:t,isDraggable:n,timelineId:a}))}),Te=()=>({id:o.d.system_dns,isInstance:e=>{const t=Object(a.get)("dns.question.type[0]",e),n=Object(a.get)("dns.question.name[0]",e);return!Object(l.e)(t)&&!Object(l.e)(n)},renderRow:({data:e,isDraggable:t,scopeId:n})=>r.a.createElement(Z.a,null,r.a.createElement(x,{contextId:`dns-request-${n}`,data:e,isDraggable:t,timelineId:n}))}),Ce=({actionName:e,text:t})=>({id:o.d.registry,isInstance:t=>{const n=Object(a.get)("event.action[0]",t),i=Object(a.get)("event.dataset[0]",t);return"endpoint.events.registry"===(null==i?void 0:i.toLowerCase())&&(null==n?void 0:n.toLowerCase())===e},renderRow:({data:e,isDraggable:n,scopeId:a})=>r.a.createElement(Z.a,null,r.a.createElement(J,{contextId:`registry-event-${a}`,data:e,isDraggable:n,text:t}))}),Me=Ee({actionName:"user_login",text:te.c}),Ae=ke({actionName:"process_started",text:te.A}),_e=xe({actionName:"creation_event",text:te.A}),Fe=xe({actionName:"start",text:te.A}),De=Ce({actionName:"modification",text:te.u}),Ne=ke({actionName:"process_stopped",text:te.B}),Pe=xe({actionName:"termination_event",text:te.H}),Re=xe({actionName:"end",text:te.H}),Le=je({actionName:"file_create_event",text:te.e}),qe=je({actionName:"creation",text:te.e}),Be=je({actionName:"created",text:te.e}),ze=je({actionName:"file_delete_event",text:te.f}),$e=je({actionName:"deletion",text:te.f}),Ve=je({actionName:"modification",text:te.t}),Ue=je({actionName:"overwrite",text:te.v}),Ge=je({actionName:"rename",text:te.E}),He=je({actionName:"deleted",text:te.f}),We=ke({actionName:"existing_process",text:te.k}),Qe=[{eventAction:"creation",eventCategory:"file",eventType:"denied",skipRedundantProcessDetails:!0,text:te.R},{eventAction:"creation",eventCategory:"file",eventType:"allowed",skipRedundantProcessDetails:!0,text:te.N},{eventAction:"files-encrypted",eventCategory:"file",eventType:"denied",skipRedundantFileDetails:!0,text:te.D},{eventAction:"files-encrypted",eventCategory:"file",eventType:"allowed",skipRedundantFileDetails:!0,text:te.C},{eventAction:"modification",eventCategory:"file",eventType:"denied",skipRedundantProcessDetails:!0,text:te.T},{eventAction:"modification",eventCategory:"file",eventType:"allowed",skipRedundantProcessDetails:!0,text:te.P},{eventAction:"rename",eventCategory:"file",eventType:"denied",skipRedundantProcessDetails:!0,text:te.U},{eventAction:"rename",eventCategory:"file",eventType:"allowed",skipRedundantProcessDetails:!0,text:te.Q},{eventAction:"execution",eventCategory:"process",eventType:"denied",skipRedundantFileDetails:!0,text:te.S},{eventAction:"execution",eventCategory:"process",eventType:"allowed",skipRedundantFileDetails:!0,text:te.O}].map((e=>Oe(e))),Ye=Se({actionName:"load",text:te.q}),Ke=we({actionName:"socket_opened",text:te.G}),Xe=we({actionName:"socket_closed",text:te.F}),Je=we({actionName:"ipv4_connection_accept_event",text:te.b}),Ze=we({actionName:"connection_accepted",text:te.b}),et=we({actionName:"http_request",text:te.s}),tt=xe({actionName:"exec",text:te.i}),nt=xe({actionName:"fork",text:te.n}),at=we({actionName:"ipv6_connection_accept_event",text:te.b}),it=we({actionName:"ipv4_disconnect_received_event",text:te.g}),rt=we({actionName:"disconnect_received",text:te.g}),ot=we({actionName:"ipv6_disconnect_received_event",text:te.g}),st=Ie({actionName:"admin_logon"}),lt=Ie({actionName:"explicit_user_logon"}),ct=Ie({actionName:"user_logoff"}),ut=Ie({actionName:"user_logon"}),dt=Ie({actionName:"log_on"}),pt=Te(),mt=Ee({actionName:"existing_user",text:te.m}),ft=ke({actionName:"existing_socket",text:te.l}),gt=Ee({actionName:"existing_package",text:te.j}),bt=ke({actionName:"invalid",text:te.p}),yt=Ee({actionName:"user_changed",text:te.J}),ht=Ee({actionName:"host",text:te.o}),vt=Ee({actionName:"user_added",text:te.I}),Et=Ee({actionName:"user_logout",text:te.r}),xt=Ie({actionName:"log_off"}),jt=ke({actionName:"process_error",text:te.z}),Ot=Ee({actionName:"error:",text:te.h}),St=Ee({actionName:"error",text:te.h}),kt=Ee({actionName:"package_installed",text:te.w}),wt=Ee({actionName:"boot",text:te.d}),It=[pt,st,lt,Le,qe,ze,$e,Ue,Ge,...Qe,Ye,Ve,De,Je,Ze,et,tt,nt,at,it,rt,ot,_e,Fe,Pe,Re,ct,ut,dt,Be,He,Ee({actionName:"accepted",text:te.a}),wt,St,Ot,gt,We,ft,mt,ht,bt,Me,Et,xt,kt,Ee({actionName:"package_updated",text:te.y}),Ee({actionName:"package_removed",text:te.x}),jt,Ae,Ne,Xe,Ke,vt,yt,Ee({actionName:"user_removed",text:te.K})]},function(e,t,n){"use strict";n.d(t,"D",(function(){return s})),n.d(t,"I",(function(){return l})),n.d(t,"B",(function(){return c})),n.d(t,"w",(function(){return u})),n.d(t,"L",(function(){return d})),n.d(t,"n",(function(){return p})),n.d(t,"m",(function(){return m})),n.d(t,"J",(function(){return f})),n.d(t,"A",(function(){return g})),n.d(t,"z",(function(){return b})),n.d(t,"t",(function(){return y})),n.d(t,"x",(function(){return h})),n.d(t,"v",(function(){return v})),n.d(t,"G",(function(){return E})),n.d(t,"l",(function(){return x})),n.d(t,"P",(function(){return j})),n.d(t,"e",(function(){return O})),n.d(t,"c",(function(){return S})),n.d(t,"i",(function(){return w})),n.d(t,"p",(function(){return I})),n.d(t,"R",(function(){return T})),n.d(t,"k",(function(){return C})),n.d(t,"g",(function(){return M})),n.d(t,"F",(function(){return A})),n.d(t,"y",(function(){return _})),n.d(t,"C",(function(){return F})),n.d(t,"X",(function(){return D})),n.d(t,"Y",(function(){return N})),n.d(t,"s",(function(){return R})),n.d(t,"U",(function(){return L})),n.d(t,"V",(function(){return q})),n.d(t,"O",(function(){return B})),n.d(t,"N",(function(){return z})),n.d(t,"M",(function(){return $})),n.d(t,"r",(function(){return U})),n.d(t,"h",(function(){return G})),n.d(t,"W",(function(){return H})),n.d(t,"T",(function(){return W})),n.d(t,"q",(function(){return Y})),n.d(t,"j",(function(){return K})),n.d(t,"b",(function(){return X})),n.d(t,"f",(function(){return Z})),n.d(t,"a",(function(){return ne})),n.d(t,"ab",(function(){return ae})),n.d(t,"S",(function(){return se})),n.d(t,"d",(function(){return ve})),n.d(t,"Q",(function(){return Ee})),n.d(t,"o",(function(){return ke})),n.d(t,"Z",(function(){return De})),n.d(t,"u",(function(){return Re})),n.d(t,"K",(function(){return Le})),n.d(t,"E",(function(){return qe})),n.d(t,"H",(function(){return Be})),n.d(t,"bb",(function(){return fe}));var a=n(43),i=n(120),r=n(112),o=n(193);const s=r.r,l=a.string,c=r.k,u=r.k,d=r.y,p=a.boolean,m=a.boolean,f=a.array(a.string),g=a.object,b=a.string,y=a.array(a.string),h=a.array(a.string),v=a.array(r.k),E=a.array(a.string),x=a.string,j=a.string,O=a.string,S=a.string,k=a.string,w=i.y,I=o.u,T=a.array(o.v),C=a.array(a.string),M=a.string,A=a.string,_=a.array(a.unknown),F=a.string,D=a.string,N=a.boolean,P=a.exact(a.type({name:r.k,type:r.k,ecs:a.boolean})),R=a.array(P),L=a.string,q=a.string,B=a.union([a.literal("exactMatch"),a.literal("aliasMatch"),a.literal("conflict")]),z=a.string,$=a.union([a.literal("savedObjectConversion"),a.literal("savedObjectImport")]),V=a.exact(a.intersection([a.type({package:r.k,version:r.k}),a.partial({integration:r.k})])),U=a.array(V),G=a.string,H=a.string,W=a.string;var Q=n(4);const Y=Object(r.i)({codec:a.string,minSize:1,maxSize:Q.Kb}),K=r.k;let X;!function(e){e.DoNotSuppress="doNotSuppress",e.Suppress="suppress"}(X||(X={}));const J=Object(r.u)("AlertSuppressionMissingFields",X),Z=X.Suppress,ee=Object(r.i)({codec:a.string,minSize:1,maxSize:3}),te=a.type({value:r.o,unit:a.keyof({s:null,m:null,h:null})}),ne=a.intersection([a.exact(a.type({group_by:ee})),a.exact(a.partial({duration:te,missing_fields_strategy:J}))]),ae=(a.intersection([a.exact(a.type({groupBy:ee})),a.exact(a.partial({duration:te,missingFieldsStrategy:J}))]),"platinum"),ie=a.exact(a.type({field:a.union([a.string,a.array(a.string)]),value:r.o})),re=a.exact(a.type({field:a.array(a.string),value:r.o})),oe=a.exact(a.type({field:a.string,value:r.n})),se=a.intersection([ie,a.exact(a.partial({cardinality:a.array(oe)}))]);a.intersection([re,a.exact(a.partial({cardinality:a.array(oe)}))]),a.intersection([re,a.exact(a.type({cardinality:a.array(oe)}))]);var le=n(546),ce=n(238),ue=n(433);const de=e=>({...e,create:pe(e.required,e.optional,e.defaultable),patch:me(e.required,e.optional,e.defaultable),response:ge(e.required,e.optional,e.defaultable)}),pe=(e,t,n)=>a.intersection([a.exact(a.type(e)),a.exact(a.partial(t)),a.exact(a.partial(n))]),me=(e,t,n)=>a.intersection([a.partial(e),a.partial(t),a.partial(n)]),fe=e=>Object.keys(e).reduce(((t,n)=>(t[n]=a.union([e[n],a[void 0]]),t)),{}),ge=(e,t,n)=>{const i=fe(t);return a.intersection([a.exact(a.type(e)),a.exact(a.type(i)),a.exact(a.type(n))])},be=de({required:{name:c,description:u,risk_score:o.d,severity:o.p},optional:{rule_name_override:F,timestamp_override:D,timestamp_override_fallback_disabled:N,timeline_id:L,timeline_title:q,outcome:B,alias_target_id:z,alias_purpose:$,license:b,note:x,building_block_type:O,output_index:S,namespace:k,meta:g,investigation_fields:v,throttle:o.l},defaultable:{version:d,tags:f,enabled:m,risk_score_mapping:o.e,severity_mapping:o.q,interval:o.m,from:o.n,to:o.o,actions:o.g,exceptions_list:w,author:y,false_positives:h,references:E,max_signals:I,threat:T}}),ye={id:s,rule_id:l,immutable:p,updated_at:ue.r,updated_by:ue.s,created_at:ue.e,created_by:ue.f,revision:ue.j,related_integrations:U,required_fields:R,setup:j},he={execution_summary:le.c},ve=be.create,Ee=a.intersection([be.create,a.exact(a.partial({rule_id:l}))]),xe=a.intersection([be.create,a.exact(a.partial({rule_id:l})),a.exact(a.partial({id:s}))]),je=a.intersection([be.patch,a.exact(a.partial({rule_id:l,id:s}))]),Oe=a.intersection([be.response,a.exact(a.type(ye)),a.exact(a.partial(he))]);let Se;!function(e){e.kuery="kuery",e.lucene="lucene",e.eql="eql"}(Se||(Se={}));const ke=a.keyof({kuery:null,lucene:null}),we=a.literal("eql"),Ie=de({required:{type:a.literal("eql"),language:we,query:A},optional:{index:C,data_view_id:M,filters:_,timestamp_field:H,event_category_override:G,tiebreaker_field:W},defaultable:{}}),Te=(a.intersection([Oe,Ie.response]),a.intersection([Ee,Ie.create]),a.intersection([xe,Ie.create]),a.intersection([je,Ie.patch]),Ie.patch,de({required:{type:a.literal("threat_match"),query:A,threat_query:o.C,threat_mapping:o.B,threat_index:o.y},optional:{index:C,data_view_id:M,filters:_,saved_id:ue.k,threat_filters:o.x,threat_indicator_path:o.z,threat_language:ke,concurrent_searches:o.r,items_per_search:o.s},defaultable:{language:ke}})),Ce=(a.intersection([Oe,Te.response]),a.intersection([Ee,Te.create]),a.intersection([xe,Te.create]),a.intersection([je,Te.patch]),Te.patch,de({required:{type:a.literal("query")},optional:{index:C,data_view_id:M,filters:_,saved_id:ue.k,response_actions:ce.b,alert_suppression:ne},defaultable:{query:A,language:ke}})),Me=(a.intersection([Oe,Ce.response]),a.intersection([Ee,Ce.create]),a.intersection([xe,Ce.create]),a.intersection([je,Ce.patch]),Ce.patch,de({required:{type:a.literal("saved_query"),saved_id:ue.k},optional:{index:C,data_view_id:M,query:A,filters:_,response_actions:ce.b,alert_suppression:ne},defaultable:{language:ke}})),Ae=(a.intersection([Oe,Me.response]),a.intersection([Ee,Me.create]),a.intersection([xe,Me.create]),a.intersection([je,Me.patch]),Me.patch,de({required:{type:a.literal("threshold"),query:A,threshold:se},optional:{index:C,data_view_id:M,filters:_,saved_id:ue.k},defaultable:{language:ke}})),_e=(a.intersection([Oe,Ae.response]),a.intersection([Ee,Ae.create]),a.intersection([xe,Ae.create]),a.intersection([je,Ae.patch]),Ae.patch,de({required:{type:a.literal("machine_learning"),anomaly_threshold:ue.c,machine_learning_job_id:o.t},optional:{},defaultable:{}})),Fe=(a.intersection([Oe,_e.response]),a.intersection([Ee,_e.create]),a.intersection([xe,_e.create]),a.intersection([je,_e.patch]),_e.patch,de({required:{type:a.literal("new_terms"),query:A,new_terms_fields:Y,history_window_start:K},optional:{index:C,data_view_id:M,filters:_},defaultable:{language:ke}})),De=(a.intersection([Oe,Fe.response]),a.intersection([Ee,Fe.create]),a.intersection([xe,Fe.create]),a.intersection([je,Fe.patch]),Fe.patch,a.union([Ie.create,Te.create,Ce.create,Me.create,Ae.create,_e.create,Fe.create])),Ne=a.union([Ie.patch,Te.patch,Ce.patch,Me.patch,Ae.patch,_e.patch,Fe.patch]),Pe=a.union([Ie.response,Te.response,Ce.response,Me.response,Ae.response,_e.response,Fe.response]),Re=a.intersection([De,Ee]),Le=a.intersection([De,xe]),qe=a.intersection([Ne,je]),Be=a.intersection([Oe,Pe])},,function(e,t,n){"use strict";n.d(t,"h",(function(){return g})),n.d(t,"e",(function(){return b})),n.d(t,"b",(function(){return y})),n.d(t,"f",(function(){return v})),n.d(t,"i",(function(){return E})),n.d(t,"d",(function(){return x})),n.d(t,"c",(function(){return j})),n.d(t,"g",(function(){return O})),n.d(t,"a",(function(){return S}));var a=n(512),i=n(324),r=n(538),o=n(8),s=n(63),l=n(106),c=n(4),u=n(102),d=n(531);const p=e=>new d.c([e]),m=e=>Object(r.pipe)(l.i.decode(e),Object(a.fold)(Object(s.throwErrors)(p),i.identity)),f=async({timelineId:e,timeline:t,version:n})=>{let o=null,d=null;try{d=JSON.stringify({timeline:t,timelineId:e,version:n})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}try{o=await u.b.get().http.patch(c.Gc,{method:"PATCH",body:d})}catch(e){return Promise.resolve((f=e.body,Object(r.pipe)(l.h.decode(f),Object(a.fold)(Object(s.throwErrors)(p),i.identity))))}var f;return m(o)},g=async({timelineId:e,timeline:t,version:n})=>{try{if(Object(o.isEmpty)(e)&&t.status===l.k.draft&&t){var a,i,r,s,d;const e=await h({timelineType:t.timelineType,templateTimelineId:null!==(a=t.templateTimelineId)&&void 0!==a?a:void 0,templateTimelineVersion:null!==(i=t.templateTimelineVersion)&&void 0!==i?i:void 0}),n=m(e),o=t.timelineType===l.l.template?{templateTimelineId:null!==(r=n.data.persistTimeline.timeline.templateTimelineId)&&void 0!==r?r:t.templateTimelineId,templateTimelineVersion:null!==(s=n.data.persistTimeline.timeline.templateTimelineVersion)&&void 0!==s?s:t.templateTimelineVersion}:{};return f({timelineId:n.data.persistTimeline.timeline.savedObjectId,timeline:{...t,...o},version:null!==(d=n.data.persistTimeline.timeline.version)&&void 0!==d?d:""})}return Object(o.isEmpty)(e)?(async({timeline:e})=>{let t;try{t=JSON.stringify({timeline:e})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}const n=await u.b.get().http.post(c.Gc,{method:"POST",body:t});return m(n)})({timeline:t}):f({timelineId:null!=e?e:"-1",timeline:t,version:null!=n?n:""})}catch(e){return 403===e.status_code||403===e.body.status_code?Promise.resolve({data:{persistTimeline:{code:403,message:e.message||e.body.message,timeline:{...t,savedObjectId:"",version:""}}}}):Promise.resolve(e)}},b=async({fileToImport:e,signal:t})=>{const n=new FormData;return n.append("file",e),u.b.get().http.fetch(`${c.Dc}`,{method:"POST",headers:{"Content-Type":void 0},body:n,signal:t})},y=({filename:e="timelines_export.ndjson",ids:t=[],signal:n})=>{let a;try{a=t.length>0?JSON.stringify({ids:t}):void 0}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}return u.b.get().http.fetch(`${c.Bc}`,{method:"POST",body:a,query:{file_name:e},signal:n})},h=async({timelineType:e,templateTimelineId:t,templateTimelineVersion:n})=>{let a;const i=e===l.l.template?{templateTimelineId:t,templateTimelineVersion:n}:{};try{a=JSON.stringify({timelineType:e,...i})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}const r=await u.b.get().http.post(c.Ac,{body:a});return m(r)},v=async()=>{return e=await u.b.get().http.post(c.Ec,{}),Object(r.pipe)(l.n.decode(e),Object(a.fold)(Object(s.throwErrors)(p),i.identity));var e},E=async e=>{return t=await u.b.get().http.get(c.Fc,{query:{id:e}}),Object(r.pipe)(l.c.decode(t),Object(a.fold)(Object(s.throwErrors)(p),i.identity));var t},x=async e=>{const t=await u.b.get().http.get(c.Gc,{query:{template_timeline_id:e}});return n=t,Object(r.pipe)(l.e.decode(n),Object(a.fold)(Object(s.throwErrors)(p),i.identity));var n},j=async(e,t)=>{var n,o,d,m,f,g;return b=await u.b.get().http.fetch(c.zc,{method:"GET",query:{...e.onlyUserFavorite?{only_user_favorite:e.onlyUserFavorite}:{},...null!=e&&null!==(n=e.pageInfo)&&void 0!==n&&n.pageSize?{page_size:e.pageInfo.pageSize}:{},...null!=e&&null!==(o=e.pageInfo)&&void 0!==o&&o.pageIndex?{page_index:e.pageInfo.pageIndex}:{},...e.search?{search:e.search}:{},...null!=e&&null!==(d=e.sort)&&void 0!==d&&d.sortField?{sort_field:null==e||null===(m=e.sort)||void 0===m?void 0:m.sortField}:{},...null!=e&&null!==(f=e.sort)&&void 0!==f&&f.sortOrder?{sort_order:null==e||null===(g=e.sort)||void 0===g?void 0:g.sortOrder}:{},...e.status?{status:e.status}:{},...e.timelineType?{timeline_type:e.timelineType}:{}},signal:t}),Object(r.pipe)(l.m.decode(b),Object(a.fold)(Object(s.throwErrors)(p),i.identity));var b},O=async({timelineId:e,templateTimelineId:t,templateTimelineVersion:n,timelineType:o})=>{let d;try{d=JSON.stringify({timelineId:e,templateTimelineId:t,templateTimelineVersion:n,timelineType:o})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}return m=await u.b.get().http.patch(c.Cc,{method:"PATCH",body:d}),Object(r.pipe)(l.o.decode(m),Object(a.fold)(Object(s.throwErrors)(p),i.identity));var m},S=async e=>{let t;try{t=JSON.stringify({savedObjectIds:e})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}return await u.b.get().http.delete(c.Gc,{method:"DELETE",body:t})}},function(e,t,n){"use strict";n.d(t,"q",(function(){return r})),n.d(t,"o",(function(){return o})),n.d(t,"p",(function(){return s})),n.d(t,"g",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"b",(function(){return g})),n.d(t,"a",(function(){return b})),n.d(t,"h",(function(){return O})),n.d(t,"i",(function(){return S})),n.d(t,"m",(function(){return j})),n.d(t,"n",(function(){return k})),n.d(t,"c",(function(){return T})),n.d(t,"k",(function(){return C})),n.d(t,"l",(function(){return M})),n.d(t,"d",(function(){return A})),n.d(t,"e",(function(){return _})),n.d(t,"j",(function(){return D}));var a=n(5),i=n(120);const r={message:a.i18n.translate("lists.exceptions.isOperatorLabel",{defaultMessage:"is"}),operator:i.c.INCLUDED,type:i.d.MATCH,value:"is"},o={message:a.i18n.translate("lists.exceptions.isNotOperatorLabel",{defaultMessage:"is not"}),operator:i.c.EXCLUDED,type:i.d.MATCH,value:"is_not"},s={message:a.i18n.translate("lists.exceptions.isOneOfOperatorLabel",{defaultMessage:"is one of"}),operator:i.c.INCLUDED,type:i.d.MATCH_ANY,value:"is_one_of"},l={message:a.i18n.translate("lists.exceptions.isNotOneOfOperatorLabel",{defaultMessage:"is not one of"}),operator:i.c.EXCLUDED,type:i.d.MATCH_ANY,value:"is_not_one_of"},c={message:a.i18n.translate("lists.exceptions.existsOperatorLabel",{defaultMessage:"exists"}),operator:i.c.INCLUDED,type:i.d.EXISTS,value:"exists"},u={message:a.i18n.translate("lists.exceptions.doesNotExistOperatorLabel",{defaultMessage:"does not exist"}),operator:i.c.EXCLUDED,type:i.d.EXISTS,value:"does_not_exist"},d={message:a.i18n.translate("lists.exceptions.isInListOperatorLabel",{defaultMessage:"is in list"}),operator:i.c.INCLUDED,type:i.d.LIST,value:"is_in_list"},p={message:a.i18n.translate("lists.exceptions.isNotInListOperatorLabel",{defaultMessage:"is not in list"}),operator:i.c.EXCLUDED,type:i.d.LIST,value:"is_not_in_list"},m={message:a.i18n.translate("lists.exceptions.matchesOperatorLabel",{defaultMessage:"matches"}),operator:i.c.INCLUDED,type:i.d.WILDCARD,value:"matches"},f={message:a.i18n.translate("lists.exceptions.doesNotMatchOperatorLabel",{defaultMessage:"does not match"}),operator:i.c.EXCLUDED,type:i.d.WILDCARD,value:"does_not_match"},g=[r,o,s,l,m],b=[r,o,s,l,c,u,d,p,m,f];var y=n(163);const h=y.r,v=y.s;var E=n(8),x=n(42);const j=({namespaceType:e})=>e.map((e=>(({namespaceType:e})=>"agnostic"===e?v:h)({namespaceType:e}))),O=({filters:e,namespaceTypes:t,hideLists:n})=>{const a=j({namespaceType:t}),i=((e,t)=>Object.keys(e).map((n=>{const a=Object(x.get)(n,e);return Object(E.isArray)(a)||null!=a&&""!==a.trim()?`(${t.map((e=>{const t="name"===n?"name.text":"types"===n?"type":n;return Object(E.isArray)(a)?a.map((n=>`${e}.attributes.${t}:${n}`)).join(" OR "):`${e}.attributes.${t}:${a}`})).join(" OR ")})`:null})).filter((e=>null!=e)).join(" AND "))(e,a);return[i,...n.map((e=>`(${a.map((t=>`not ${t}.attributes.list_id: ${e}*`)).join(" AND ")})`))].filter((e=>""!==e.trim())).join(" AND ")},S=({lists:e,showDetection:t,showEndpoint:n})=>e.filter((e=>t?"detection"===e.type:!n||"endpoint"===e.type)).reduce(((e,{listId:t,namespaceType:n})=>({ids:[...e.ids,t],namespaces:[...e.namespaces,n]})),{ids:[],namespaces:[]}),k=e=>e.filter((({type:e})=>"list"===e)).length>0;var w=n(47),I=n(174);n(421),n(49),n(374);const T=e=>e.map((e=>"nested"===e.type?Object(I.d)({...e,entries:e.entries.map((e=>Object(I.d)(e)))}):Object(I.d)(e))),C=({listId:e,namespaceType:t,name:n})=>({comments:[],description:"Exception list item",entries:T([{field:"",operator:"included",type:"match",value:""}]),item_id:void 0,list_id:e,meta:{temporaryUuid:Object(w.v4)()},name:n,namespace_type:t,tags:[],type:"simple"}),M=e=>{switch(e.type){case"match":return i.d.MATCH;case"match_any":return i.d.MATCH_ANY;case"wildcard":return i.d.WILDCARD;case"list":return i.d.LIST;default:return i.d.EXISTS}},A=e=>{const t=(new Date).toISOString();return e.map((e=>`${e}.attributes.expire_time > "${t}" OR NOT ${e}.attributes.expire_time: *`)).join(",")},_=e=>{const t=(new Date).toISOString();return e.map((e=>`${e}.attributes.expire_time <= "${t}"`)).join(",")},F=e=>{let t=e.match(/.ds-(.*?)-[0-9]{4}\.[0-9]{2}\.[0-9]{2}-[0-9]{6}/);return t&&2===t.length?t[1]:(t=e.match(/.siem-(.*?)-[0-9]{6}/),t&&2===t.length?`.siem-${t[1]}`:e)},D=e=>{if(!e.conflictDescriptions)return null;const t=[];for(const[n,a]of Object.entries(e.conflictDescriptions)){const e=[],i={};a.forEach((e=>{const t=F(e);i[t]||(i[t]=0),i[t]++}));for(const[t,n]of Object.entries(i))e.push({name:t,count:n});e.sort(((e,t)=>t.count-e.count)),t.push({type:n,totalIndexCount:a.length,groupedIndices:e})}return t}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"g",(function(){return p}));var a=n(4);const i="histogram-actions-trigger",r={[a.wc.hosts]:"host",[a.wc.users]:"user"},o=(e,t)=>{const n=r[e];return n&&t?[{meta:{alias:null,negate:!1,disabled:!1,type:"phrase",key:`${n}.name`,params:{query:t}},query:{match_phrase:{[`${n}.name`]:t}}}]:[]},s=e=>{const t=r[e];return t&&e?[{query:{bool:{should:[{exists:{field:`${t}.name`}}],minimum_should_match:1}},meta:{alias:"",disabled:!1,key:"bool",negate:!1,type:"custom",value:`{"query": {"bool": {"filter": [{"bool": {"should": [{"exists": {"field": "${t}.name"}}],"minimum_should_match": 1}}]}}}`}}]:[]},l=e=>e?[{meta:{alias:null,negate:!1,disabled:!1,type:"phrase",key:"source.ip",params:{query:e}},query:{bool:{should:[{match_phrase:{"source.ip":e}},{match_phrase:{"destination.ip":e}}],minimum_should_match:1}}}]:[],c=[{query:{bool:{should:[{exists:{field:"source.ip"}},{exists:{field:"destination.ip"}}],minimum_should_match:1}},meta:{alias:"",disabled:!1,key:"bool",negate:!1,type:"custom",value:'{"bool":{"filter":[{"bool":{"should":[{"bool":{"should":[{"exists":{"field": "source.ip"}}],"minimum_should_match":1}},{"bool":{"should":[{"exists":{"field": "destination.ip"}}],"minimum_should_match":1}}],"minimum_should_match":1}}]}}'}}],u=e=>e.length>=1?[{meta:{type:"phrases",key:"_index",params:e,alias:null,negate:!1,disabled:!1},query:{bool:{should:e.map((e=>({match_phrase:{_index:e}}))),minimum_should_match:1}}}]:[],d=e=>(null!=e?e:[]).reduce(((e,t)=>{var n,a,i,r,o,s;return{requests:[...e.requests,JSON.stringify({body:null==t?void 0:t.json,index:(null!==(n=null==t||null===(a=t.stats)||void 0===a||null===(i=a.indexFilter)||void 0===i?void 0:i.value)&&void 0!==n?n:"").split(",")},null,2)],responses:[...e.responses,JSON.stringify(null!==(r=null==t||null===(o=t.response)||void 0===o||null===(s=o.json)||void 0===s?void 0:s.rawResponse)&&void 0!==r?r:{},null,2)]}}),{requests:[],responses:[]}),p=e=>e.reduce(((e,t)=>{try{return[...e,JSON.parse(t)]}catch(t){return e}}),[])},function(e,t,n){"use strict";n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return g}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(48),c=n(637),u=n(113),d=n(499);const p={[u.y.unknown]:l.euiLightVars.euiColorMediumShade,[u.y.low]:d.b.low,[u.y.moderate]:d.b.medium,[u.y.high]:d.b.high,[u.y.critical]:d.b.critical},m=s.a.div.withConfig({displayName:"RiskBadge",componentId:"sc-1t9tm5r-0"})(["",""],(({theme:e,$severity:t,$hideBackgroundColor:n})=>Object(o.css)(["width:fit-content;padding-right:",";padding-left:",";",";"],e.eui.euiSizeS,e.eui.euiSizeXS,("Critical"===t||"High"===t)&&!n&&Object(o.css)(["background-color:",";border-radius:999px;"],Object(r.transparentize)(e.eui.euiColorDanger,.2))))),f=s.a.div.withConfig({displayName:"TooltipContainer",componentId:"sc-1t9tm5r-1"})(["padding:",";"],(({theme:e})=>e.eui.euiSizeS)),g=({severity:e,hideBackgroundColor:t=!1,toolTipContent:n})=>{const a=i.a.createElement(m,{color:l.euiLightVars.euiColorDanger,$severity:e,$hideBackgroundColor:t,"data-test-subj":"risk-score"},i.a.createElement(r.EuiHealth,{className:"eui-alignMiddle",color:p[e]},e));return null!=n?i.a.createElement(c.a,{hoverContent:i.a.createElement(f,null,n),render:()=>a}):a}},function(e,t,n){"use strict";let a,i,r;n.d(t,"c",(function(){return a})),n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),function(e){e.defineRule="define-rule",e.aboutRule="about-rule",e.scheduleRule="schedule-rule",e.ruleActions="rule-actions"}(a||(a={})),function(e){e.IndexPatterns="indexPatterns",e.DataView="dataView"}(i||(i={})),function(e){e.PerRuleExecution="per-rule-execution",e.PerTimePeriod="per-time-period"}(r||(r={}))},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return s})),n.d(t,"c",(function(){return p})),n.d(t,"d",(function(){return g})),n.d(t,"e",(function(){return y})),n.d(t,"f",(function(){return v})),n.d(t,"g",(function(){return j})),n.d(t,"h",(function(){return S})),n.d(t,"i",(function(){return w})),n.d(t,"j",(function(){return T})),n.d(t,"k",(function(){return M})),n.d(t,"l",(function(){return _}));var a=n(324),i=n(174);const r=e=>Object(a.flow)(o)(e),o=e=>{const t=e.entries.map((e=>"nested"===e.type?Object(i.d)({...e,entries:e.entries.map((e=>Object(i.d)(e)))}):Object(i.d)(e)));return{...e,entries:t}},s=e=>{const{entries:t}=e,n=t.map((e=>"nested"===e.type?Object(i.g)({...e,entries:e.entries.map((e=>Object(i.g)(e)))}):Object(i.g)(e)));return{...e,entries:n}},l=e=>{const{comments:t}=e;if(!t||!t.length)return e;const n=t.map((({comment:e,id:t})=>({comment:e,id:t})));return{...e,comments:n}};var c=n(2),u=n(156),d=n(210);const p=e=>Object(c.useMemo)((()=>({async addExceptionListItem({listItem:t}){const n=new AbortController,i=(r=t,Object(a.flow)(s)(r));var r;return u.b({http:e,listItem:i,signal:n.signal})},async deleteExceptionItem({id:t,namespaceType:n,onSuccess:a,onError:i}){const r=new AbortController;try{await u.e({http:e,id:t,namespaceType:n,signal:r.signal}),a()}catch(e){i(e)}},async deleteExceptionList({id:t,namespaceType:n,onSuccess:a,onError:i}){const r=new AbortController;try{await u.d({http:e,id:t,namespaceType:n,signal:r.signal}),a()}catch(e){i(e)}},async duplicateExceptionList({includeExpiredExceptions:t,listId:n,namespaceType:a,onError:i,onSuccess:r}){const o=new AbortController;try{r(await u.g({http:e,includeExpiredExceptions:t,listId:n,namespaceType:a,signal:o.signal}))}catch(e){i(e)}},async exportExceptionList({id:t,includeExpiredExceptions:n,listId:a,namespaceType:i,onError:r,onSuccess:o}){const s=new AbortController;try{o(await u.h({http:e,id:t,includeExpiredExceptions:n,listId:a,namespaceType:i,signal:s.signal}))}catch(e){r(e)}},async getExceptionItem({id:t,namespaceType:n,onSuccess:a,onError:i}){const o=new AbortController;try{a(r(await u.k({http:e,id:t,namespaceType:n,signal:o.signal})))}catch(e){i(e)}},async getExceptionList({id:t,namespaceType:n,onSuccess:a,onError:i}){const r=new AbortController;try{a(await u.j({http:e,id:t,namespaceType:n,signal:r.signal}))}catch(e){i(e)}},async getExceptionListsItems({lists:t,filter:n,pagination:a,showDetectionsListsOnly:i,showEndpointListsOnly:o,onSuccess:s,onError:l}){const c=new AbortController,{ids:p,namespaces:m}=Object(d.i)({lists:t,showDetection:i,showEndpoint:o});try{if(p.length>0&&m.length>0){const{data:t,page:i,per_page:o,total:l}=await u.m({filter:n,http:e,listIds:p,namespaceTypes:m,pagination:a,signal:c.signal});s({exceptions:t.map((e=>r(e))),pagination:{page:i,perPage:o,total:l}})}else s({exceptions:[],pagination:{page:0,perPage:null!=a.perPage?a.perPage:0,total:0}})}catch(e){l(e)}},async getExceptionFilterFromIds({exceptionListIds:t,chunkSize:n,alias:a,excludeExceptions:i,onSuccess:r,onError:o}){const s=new AbortController;try{const{filter:o}=await u.p({http:e,exceptionListIds:t,signal:s.signal,chunkSize:n,alias:a,excludeExceptions:i});r(o)}catch(e){o(e)}},async getExceptionFilterFromExceptions({exceptions:t,chunkSize:n,alias:a,excludeExceptions:i,onSuccess:r,onError:o}){const s=new AbortController;try{const{filter:o}=await u.q({http:e,exceptions:t,signal:s.signal,chunkSize:n,alias:a,excludeExceptions:i});r(o)}catch(e){o(e)}},async updateExceptionListItem({listItem:t}){const n=new AbortController,i=(r=t,Object(a.flow)(l,s)(r));var r;return u.v({http:e,listItem:i,signal:n.signal})}})),[e]);var m=n(141);const f=Object(m.d)(u.c),g=()=>Object(m.a)(f),b=e=>JSON.stringify(e),y=({pageIndex:e,pageSize:t})=>{const[n,a]=Object(c.useState)({}),i=Object(c.useCallback)((i=>{a({...n,[b({pageIndex:e+1,pageSize:t})]:i})}),[e,t]);let r;for(let a=e;a>=0&&(r=n[b({pageIndex:a,pageSize:t})],!r);a--);return[r,i]},h=Object(m.d)(u.f),v=()=>Object(m.a)(h),E={page:1,perPage:20,total:0},x={field:"created_at",order:"desc"},j=({errorMessage:e,http:t,initialPagination:n=E,filterOptions:a={},namespaceTypes:i,notifications:r,hideLists:o=[],initialSort:s=x})=>{const[l,p]=Object(c.useState)([]),[m,f]=Object(c.useState)(n),[g,b]=Object(c.useState)(s),[y,h]=Object(c.useState)(!0),v=Object(c.useRef)(),j=Object(c.useMemo)((()=>i.join(",")),[i]),O=Object(c.useMemo)((()=>Object(d.h)({filters:a,namespaceTypes:i,hideLists:o})),[i,a,o]),S=Object(c.useCallback)((async()=>{try{h(!0),v.current=new AbortController;const{page:e,per_page:n,total:a,data:i}=await Object(u.l)({filters:O,http:t,namespaceTypes:j,pagination:{page:m.page,perPage:m.perPage},sort:g,signal:v.current.signal});f({page:e,perPage:n,total:a}),p(i),h(!1)}catch(t){"AbortError"!==t.name&&(r.toasts.addError(t,{title:e}),p([]),f(E),h(!1))}}),[e,O,t,j,r.toasts,m.page,m.perPage,g]);return Object(c.useEffect)((()=>(S(),()=>{var e;null===(e=v.current)||void 0===e||e.abort()})),[S]),[y,l,m,f,S,g,b]},O=(Object(m.d)(u.i),Object(m.d)(u.n)),S=()=>Object(m.a)(O),k=Object(m.d)(u.o),w=()=>Object(m.a)(k),I=Object(m.d)(u.r),T=()=>Object(m.a)(I),C=Object(m.d)(u.s),M=()=>Object(m.a)(C),A=Object(m.d)(u.t),_=()=>Object(m.a)(A)},function(e,t,n){"use strict";n.d(t,"z",(function(){return r})),n.d(t,"A",(function(){return o})),n.d(t,"B",(function(){return s})),n.d(t,"u",(function(){return l})),n.d(t,"q",(function(){return u})),n.d(t,"p",(function(){return d})),n.d(t,"t",(function(){return p})),n.d(t,"g",(function(){return m})),n.d(t,"v",(function(){return f})),n.d(t,"f",(function(){return g})),n.d(t,"r",(function(){return b})),n.d(t,"x",(function(){return y})),n.d(t,"o",(function(){return h})),n.d(t,"s",(function(){return v})),n.d(t,"w",(function(){return E})),n.d(t,"n",(function(){return x})),n.d(t,"m",(function(){return j})),n.d(t,"y",(function(){return O})),n.d(t,"e",(function(){return S})),n.d(t,"c",(function(){return k})),n.d(t,"b",(function(){return w})),n.d(t,"a",(function(){return I})),n.d(t,"d",(function(){return T})),n.d(t,"i",(function(){return C})),n.d(t,"h",(function(){return M})),n.d(t,"j",(function(){return A})),n.d(t,"k",(function(){return _})),n.d(t,"l",(function(){return F}));var a=n(65),i=n(185);const r="logs-endpoint.events.*",o="metrics-endpoint.metadata_current_*",s="endpoint.metadata_current-default",l=".metrics-endpoint.metadata_united_default",c=(Object(a.getFileMetadataIndexName)("endpoint"),Object(a.getFileDataIndexName)("endpoint"),"/api/endpoint"),u=`${c}/metadata`,d=`${u}/{id}`,p=`${c}/metadata/transforms`,m=`${c}/policy_response`,f=`${c}/suggestions/{suggestion_type}`,g=`${c}/action`,b=`${g}/isolate`,y=`${g}/unisolate`,h=`${g}/running_procs`,v=`${g}/kill_process`,E=`${g}/suspend_process`,x=`${g}/get_file`,j=`${g}/execute`,O=`${g}/upload`,S=`${c}/action_status`,k=`${g}/{action_id}`,w=`${g}/{action_id}/file/{file_id}`,I=`${g}/{action_id}/file/{file_id}/download`,T=`${g}/state`,C=i.a.ENROLLED_AT,M="desc",A={ES_CONNECTION_ERROR:-272,OUTPUT_SERVER_ERROR:-273},_="endpointFields",F="endpointSearchStrategy"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(42);const i=e=>Object(a.isString)(e)?e:JSON.stringify(e)},function(e,t,n){"use strict";n.d(t,"g",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"a",(function(){return u})),n.d(t,"f",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"e",(function(){return g}));var a=n(42),i=n(59),r=n(155),o=n(188);const s={box:{incremental:!0,placeholder:r.w,schema:!0,"data-test-subj":"search-input"}},l=e=>Object(a.isEmpty)(e)?"":`Example: ${e}`,c=e=>{switch(e){case"string":case"keyword":return"string";case"number":case"long":case"float":return"number";case"date":return"clock";case"ip":case"geo_point":return"globe";default:return"questionInCircle"}},u="event-fields-table",d=e=>Object(i.elementOrChildrenHasFocus)(null==e?void 0:e.querySelector(`.${u}`)),p=({containerElement:e,keyboardEvent:t,onSkipFocusBeforeEventsTable:n,onSkipFocusAfterEventsTable:a})=>{const{shiftKey:r}=t,o=Object(i.getTableSkipFocus)({containerElement:e,getFocusedCell:i.getFocusedDataColindexCell,shiftKey:r,tableHasFocus:d,tableClassName:u});"SKIP_FOCUS_NOOP"!==o&&(Object(i.stopPropagationAndPreventDefault)(t),Object(i.handleSkipFocus)({onSkipFocusBackwards:n,onSkipFocusForward:a,skipFocus:o}))};function m({browserFields:e,contextId:t,eventId:n,field:i,item:r,linkValueField:o,scopeId:s}){var l,c,u,d;const p={contextId:t,eventId:n,fieldType:"string",linkValue:void 0,scopeId:s},m=Object(a.getOr)(null,"originalValue.0",o),f=null!==(l=r.category)&&void 0!==l?l:"",g=null!==(c=r.field)&&void 0!==c?c:"",b=Object(a.get)([f,"fields",g],e),y=null==i?void 0:i.overrideField;return{...p,data:{field:null!=y?y:g,format:null!==(u=null==b?void 0:b.format)&&void 0!==u?u:"",type:null!==(d=null==b?void 0:b.type)&&void 0!==d?d:"",isObjectArray:r.isObjectArray},values:r.values,linkValue:null!=m?m:void 0,fieldFromBrowserField:b}}const f={[o.a]:!0,[o.j]:!0};function g(e){return!f[e]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return s}));var a=n(42),i=n(2),r=n.n(i);function o(e){var t;const n=t=>{const{deleteQuery:n,id:i,inspect:o=null,loading:l,refetch:c,setQuery:u,session:d}=t;s({deleteQuery:n,inspect:o,loading:l,queryId:i,refetch:c,session:d,setQuery:u});const p=Object(a.omit)(["refetch","setQuery"],t);return r.a.createElement(e,p)};return n.displayName=`ManageQuery (${null!==(t=null==e?void 0:e.displayName)&&void 0!==t?t:"Unknown"})`,n}const s=({setQuery:e,deleteQuery:t,refetch:n,inspect:a,loading:r,queryId:o,session:s})=>{Object(i.useEffect)((()=>{e({id:o,inspect:null!=a?a:null,loading:r,refetch:n,searchSessionId:null==s?void 0:s.current.start()})}),[t,e,o,n,a,r,s]),Object(i.useEffect)((()=>()=>{t&&t({id:o})}),[t,o])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n(45),r=n(130),o=n.n(r),s=n(8),l=n(175);const c=Object(a.memo)((({location:{pathname:e,search:t},history:n,match:{params:{detailName:i,tabName:r,flowTarget:c}},pageName:u,state:d})=>{const[p,m]=Object(a.useState)(!0),[f,g]=Object(l.a)();return Object(a.useEffect)((()=>{p&&""!==t?(g({type:"updateSearch",search:t}),m(!1)):""!==t&&t!==f.search&&g({type:"updateSearch",search:t})}),[t]),Object(a.useEffect)((()=>{if(!u||f.pathName===e&&o()(d,f.state))return;const a={detailName:i,flowTarget:c,history:n,pageName:u,pathName:e,search:t,state:d,tabName:r};if(p&&null==i)return g({type:"updateRouteWithOutSearch",route:Object(s.omit)(a,"search")}),void m(!1);g({type:"updateRoute",route:a})}),[e,t,u,i,r,c,d]),null}));c.displayName="SpyRouteComponent";const u=Object(i.withRouter)(c)},function(e,t,n){"use strict";n.d(t,"d",(function(){return a.a})),n.d(t,"c",(function(){return Mt})),n.d(t,"a",(function(){return It})),n.d(t,"f",(function(){return Nt})),n.d(t,"g",(function(){return Lt})),n.d(t,"j",(function(){return _t})),n.d(t,"i",(function(){return _.a})),n.d(t,"b",(function(){return le})),n.d(t,"e",(function(){return T.c})),n.d(t,"h",(function(){return T.d}));var a=n(136),i=n(2),r=n.n(i),o=n(40),s=n(447),l=n.n(s),c=n(41),u=n.n(c),d=n(64),p=n(21),m=n(66),f=n(355),g=n(777);var b=n(306),y=n(356),h=n(305);const v=({allowSet:e,allowReplacementSet:t,currentReplacements:n,field:a,getAnonymizedValue:i,rawData:r})=>{var o;return(null!==(o=r[a])&&void 0!==o?o:[]).reduce(((r,o)=>{if(Object(h.b)({allowSet:e,field:a})&&Object(h.c)({allowReplacementSet:t,field:a})){const e=i({currentReplacements:n,rawValue:o});return{anonymizedValues:[...r.anonymizedValues,e],replacements:{...r.replacements,[e]:o}}}return Object(h.b)({allowSet:e,field:a})?{anonymizedValues:[...r.anonymizedValues,o],replacements:{...r.replacements}}:r}),{anonymizedValues:[],replacements:{}})};var E=n(42),x=n(47);const j=({currentReplacements:e,rawValue:t})=>{if(null!=e){const n=Object(E.invert)(e)[t];return null!=n?n:Object(x.v4)()}return Object(x.v4)()};var O=n(5);const S=O.i18n.translate("xpack.elasticAssistant.securityAssistant.content.prompts.welcome.welcomeGeneralPrompt",{defaultMessage:"Welcome to your Elastic AI Assistant! I am your 100% open-code portal into your Elastic life. In time, I will be able to answer questions and provide assistance across all your information in Elastic, and oh-so much more. Till then, I hope this early preview will open your mind to the possibilities of what we can create when we work together, in the open. Cheers!"}),k=O.i18n.translate("xpack.elasticAssistant.securityAssistant.content.prompts.welcome.welcomeGeneral2Prompt",{defaultMessage:"First things first, we'll need to set up a Generative AI Connector to get this chat experience going! With the Generative AI Connector, you'll be able to configure access to either an Azure OpenAI Service or OpenAI API account, but you better believe you'll be able to deploy your own models within your Elastic Cloud instance and use those here in the future... 😉"}),w=O.i18n.translate("xpack.elasticAssistant.securityAssistant.content.prompts.welcome.welcomeGeneral3Prompt",{defaultMessage:"Go ahead and click the add connector button below to continue the conversation!"}),I=O.i18n.translate("xpack.elasticAssistant.securityAssistant.content.prompts.welcome.enterprisePrompt",{defaultMessage:"Elastic AI Assistant is available to Enterprise users only. Please upgrade your license to use this feature."});var T=n(234);const C={id:T.d,theme:{title:T.c,titleIcon:"logoSecurity",assistant:{name:T.b,icon:"logoSecurity"},system:{icon:"logoElastic"},user:{}},messages:[{role:"assistant",content:S,timestamp:"",presentation:{delay:2e3,stream:!0}},{role:"assistant",content:k,timestamp:"",presentation:{delay:1e3,stream:!0}},{role:"assistant",content:w,timestamp:"",presentation:{delay:1e3,stream:!0}}],apiConfig:{}},M=[{role:"assistant",content:I,timestamp:"",presentation:{delay:2e3,stream:!0}}],A=e=>1===(null==e?void 0:e.length)?e[0]:void 0;var _=n(307);const F=({allSystemPrompts:e,currentConversation:t,editingSystemPromptId:n,http:a,selectedPromptContexts:r,setEditingSystemPromptId:o,setPromptTextPreview:s,setSelectedPromptContexts:l,setUserPrompt:c})=>{const{isLoading:u,sendMessages:d}=(()=>{const[e,t]=Object(i.useState)(!1);return{isLoading:e,sendMessages:Object(i.useCallback)((async({apiConfig:e,http:n,messages:a})=>{t(!0);try{return await(async({http:e,messages:t,apiConfig:n,signal:a})=>{var i;const r=t.map((e=>({role:e.role,content:e.content}))),o=(null==n?void 0:n.provider)===m.OpenAiProviderType.OpenAi?{model:null!==(i=n.model)&&void 0!==i?i:g.a,messages:r,n:1,stop:null,temperature:.2}:{messages:r},s={params:{subActionParams:{body:JSON.stringify(o)},subAction:"test"}};try{const t=await e.fetch(`/api/actions/connector/${null==n?void 0:n.connectorId}/_execute`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s),signal:a}),i=t.data;return"ok"!==t.status?f.a:i.choices&&i.choices.length>0&&i.choices[0].message.content?i.choices[0].message.content.trim():f.a}catch(e){return f.a}})({http:n,messages:a,apiConfig:e})}finally{t(!1)}}),[])}})(),{appendMessage:p,appendReplacements:E,clearConversation:x}=Object(b.a)(),O=Object(i.useCallback)((async i=>{const o=e.find((e=>e.id===n)),c=await async function({currentReplacements:e,getAnonymizedValue:t=j,isNewChat:n,onNewReplacements:a,promptText:i,selectedPromptContexts:r,selectedSystemPrompt:o}){var s;const l=Object.keys(r).sort().map((n=>{const i=(({currentReplacements:e,getAnonymizedValue:t,onNewReplacements:n,selectedPromptContext:a})=>{if("string"==typeof a.rawData)return a.rawData;const i=(({allow:e,allowReplacement:t,currentReplacements:n,getAnonymizedValue:a,getAnonymizedValues:i,rawData:r})=>Object.keys(r).reduce(((o,s)=>{const l=new Set(t),c=new Set(e);if(Object(h.b)({allowSet:c,field:s})){const{anonymizedValues:e,replacements:t}=i({allowReplacementSet:l,allowSet:c,currentReplacements:n,field:s,getAnonymizedValue:a,rawData:r});return{anonymizedData:{...o.anonymizedData,[s]:e},replacements:{...o.replacements,...t}}}return o}),{anonymizedData:{},replacements:{}}))({allow:a.allow,allowReplacement:a.allowReplacement,currentReplacements:e,rawData:a.rawData,getAnonymizedValue:t,getAnonymizedValues:v});return null!=n&&n(i.replacements),r=i.anonymizedData,Object.keys(r).sort().map((e=>`${e},${r[e].join(",")}`)).join("\n");var r})({currentReplacements:e,getAnonymizedValue:t,onNewReplacements:a,selectedPromptContext:r[n]});return`${Object(y.e)(i)}`}));return{content:`${n?`${null!==(s=null==o?void 0:o.content)&&void 0!==s?s:""}\n\n`:""}${l}\n\n${i}`,role:"user",timestamp:(new Date).toLocaleString()}}({isNewChat:0===t.messages.length,currentReplacements:t.replacements,onNewReplacements:e=>E({conversationId:t.id,replacements:e}),promptText:i,selectedPromptContexts:r,selectedSystemPrompt:o}),u=p({conversationId:t.id,message:c});l({}),s("");const m=(e=>{const t=(new Date).toLocaleString();return e?{role:"assistant",content:e,timestamp:t}:{role:"assistant",content:"Error: Response from LLM API is empty or undefined.",timestamp:t}})(await d({http:a,apiConfig:t.apiConfig,messages:u}));p({conversationId:t.id,message:m})}),[e,t,r,p,l,s,d,a,E,n]);return{handleButtonSendMessage:Object(i.useCallback)((e=>{O(e),c("")}),[O,c]),handleOnChatCleared:Object(i.useCallback)((()=>{var n;const a=null===(n=Object(_.b)({allSystemPrompts:e,conversation:t}))||void 0===n?void 0:n.id;s(""),c(""),l({}),x(t.id),o(a)}),[e,x,t,o,s,l,c]),handlePromptChange:e=>{s(e),c(e)},handleSendMessage:O,isLoading:u}};var D={name:"a4hmbt",styles:"position:absolute"};const N=({isDisabled:e,isLoading:t,onChatCleared:n,onSendMessage:a})=>Object(p.jsx)(o.EuiFlexGroup,{css:D,direction:"column",gutterSize:"xs"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiToolTip,{position:"right",content:f.b},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":f.b,color:"danger","data-test-subj":"clear-chat",display:"base",iconType:"cross",isDisabled:e,onClick:n}))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiToolTip,{position:"right",content:f.g},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":f.g,"data-test-subj":"submit-chat",color:"primary",display:"base",iconType:"returnKey",isDisabled:e,isLoading:t,onClick:a})))),P=O.i18n.translate("xpack.elasticAssistant.assistant.promptPlaceholder",{defaultMessage:"Ask me anything from 'summarize this alert' to 'help me build a query...'"}),R=u()(o.EuiTextArea)`
  min-height: 125px;
  padding-right: 42px;
`,L=Object(i.forwardRef)((({isDisabled:e=!1,value:t,onPromptSubmit:n,handlePromptChange:a,...r},o)=>{const s=Object(i.useCallback)((e=>{a(e.target.value)}),[a]),l=Object(i.useCallback)((e=>{var i;"Enter"===e.key&&!e.shiftKey&&t.trim().length>0?(e.preventDefault(),n(null===(i=e.target.value)||void 0===i?void 0:i.trim()),a("")):"Enter"!==e.key||e.shiftKey||0!==t.trim().length||(e.preventDefault(),e.stopPropagation())}),[t,n,a]);return Object(i.useEffect)((()=>{a(t)}),[a,t]),Object(p.jsx)(R,{className:"eui-scrollBar",inputRef:o,id:"prompt-textarea","data-test-subj":"prompt-textarea",fullWidth:!0,autoFocus:!0,disabled:e,placeholder:P,value:t,onChange:s,onKeyDown:l})}));L.displayName="PromptTextArea";var q={name:"zyunh5",styles:"left:-34px;position:relative;top:11px"},B={name:"1d3w5wq",styles:"width:100%"};const z=({isDisabled:e,userPrompt:t,shouldRefocusPrompt:n,...a})=>{const{handleButtonSendMessage:r,handleOnChatCleared:s,handlePromptChange:l,handleSendMessage:c,isLoading:u}=F(a),d=Object(i.useRef)(null);Object(i.useEffect)((()=>{n&&d.current&&(null==d||d.current.focus())}),[n]);const m=Object(i.useMemo)((()=>e?"":null!=t?t:""),[e,t]),f=Object(i.useCallback)((()=>{var e,t,n;r(null!==(e=null===(t=d.current)||void 0===t||null===(n=t.value)||void 0===n?void 0:n.trim())&&void 0!==e?e:"")}),[r,d]);return Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"none",css:B},Object(p.jsx)(o.EuiFlexItem,null,Object(p.jsx)(L,{onPromptSubmit:c,ref:d,handlePromptChange:l,value:m,isDisabled:e})),Object(p.jsx)(o.EuiFlexItem,{css:q,grow:!1},Object(p.jsx)(N,{onChatCleared:s,isDisabled:e,isLoading:u,onSendMessage:f})))},$=O.i18n.translate("xpack.elasticAssistant.components.upgrade.upgradeTitle",{defaultMessage:"Manage license"}),V=O.i18n.translate("xpack.elasticAssistant.components.upgrade.upgradeButtonLabel",{defaultMessage:"Subscription plans"}),U=({basePath:e})=>Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"s",wrap:!0,"data-test-subj":"upgrade-buttons"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiButton,{href:"https://www.elastic.co/subscriptions",iconType:"popout",iconSide:"right",target:"_blank"},V)),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiButton,{href:`${e}/app/management/stack/license_management`,iconType:"gear",target:"_blank"},$))),G=r.a.memo(U);G.displayName="UpgradeButtons";var H={name:"1d3w5wq",styles:"width:100%"},W={name:"1d3w5wq",styles:"width:100%"};const Q=({connectorPrompt:e,http:t,isAssistantEnabled:n,isWelcomeSetup:a})=>{const i=t.basePath.get();return n?a?Object(p.jsx)(o.EuiFlexGroup,{css:H},Object(p.jsx)(o.EuiFlexItem,{"data-test-subj":"connector-prompt"},e)):null:Object(p.jsx)(o.EuiFlexGroup,{justifyContent:"spaceAround",css:W},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(G,{basePath:i})))};var Y=n(44),K=n(68),X=n(180),J=n(358),Z=n(269),ee=n(554),te=n(444);const ne="ADD_NEW_CONNECTOR",ae=X.css`
  height: 32px;

  .euiSuperSelect {
    width: 400px;
  }

  .euiSuperSelectControl {
    border: none;
    box-shadow: none;
    background: none;
    padding-left: 0;
  }

  .euiFormControlLayoutIcons {
    right: 14px;
    top: 2px;
  }
`,ie=X.css`
  overflow: hidden;
  text-overflow: ellipsis;
  max-width: 400px;
`,re=X.css`
  overflow: hidden;
  text-overflow: ellipsis;
  max-width: 400px;
  font-weight: normal;
  padding-bottom: 5px;
  padding-left: 0;
  padding-top: 2px;
`,oe=r.a.memo((({isDisabled:e=!1,onConnectorModalVisibilityChange:t,selectedConnectorId:n,selectedConversation:s})=>{var l,c,u;const[d,f]=Object(i.useState)(!1),{actionTypeRegistry:g,assistantAvailability:y,http:h}=Object(a.b)(),{setApiConfig:v}=Object(b.a)(),[E,x]=Object(i.useState)(!1),{data:j}=Object(ee.a)({http:h}),O=null!==(l=null==j?void 0:j.find((e=>e.id===m.GEN_AI_CONNECTOR_ID)))&&void 0!==l?l:{enabledInConfig:!0,enabledInLicense:!0,minimumLicenseRequired:"platinum",supportedFeatureIds:["general"],isSystemActionType:!1,id:".gen-ai",name:"Generative AI",enabled:!0},{data:S,isLoading:k,isFetching:w,refetch:I}=Object(J.a)({http:h}),T=k||w,C=null!==(c=null==S||null===(u=S.find((e=>e.id===n)))||void 0===u?void 0:u.name)&&void 0!==c?c:Z.l,M=e||!y.hasConnectorsReadPrivilege,A=Object(i.useMemo)((()=>({value:ne,inputDisplay:Z.e,dropdownDisplay:Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"none",key:ne},Object(p.jsx)(o.EuiFlexItem,{grow:!0},Object(p.jsx)(o.EuiButtonEmpty,{"data-test-subj":"addNewConnectorButton",iconType:"plus",size:"xs"},Z.e)),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)("div",{style:{width:"24px"}})))})),[]),_=Object(i.useMemo)((()=>{var e;return null!==(e=null==S?void 0:S.map((e=>{var t;const n=null===(t=Object(te.a)(e))||void 0===t?void 0:t.apiProvider,a=e.isPreconfigured?Z.q:n;return{value:e.id,inputDisplay:Object(p.jsx)(o.EuiText,{className:ie,size:"xs"},e.name),dropdownDisplay:Object(p.jsx)(r.a.Fragment,{key:e.id},Object(p.jsx)("strong",null,e.name),a&&Object(p.jsx)(o.EuiText,{size:"xs",color:"subdued"},Object(p.jsx)("p",null,a)))}})))&&void 0!==e?e:[]}),[S]),F=Object(i.useMemo)((()=>y.hasConnectorsAllPrivilege?[..._,A]:[..._]),[A,y.hasConnectorsAllPrivilege,_]),D=Object(i.useCallback)((()=>{null==t||t(!1),x(!1)}),[t]),N=Object(i.useCallback)((()=>{f(!d)}),[d]),P=Object(i.useCallback)((()=>f(!1)),[]),R=Object(i.useCallback)(((e,n,a)=>{if(f(!1),e===ne)return null==t||t(!0),void x(!0);const i=null==S?void 0:S.find((t=>t.id===e)),r=Object(te.a)(i);null!=s&&v({conversationId:s.id,apiConfig:{...s.apiConfig,connectorId:e,provider:null!=n?n:null==r?void 0:r.apiProvider,model:null!=a?a:null==r?void 0:r.defaultModel}})}),[S,s,t,v]),L=Object(i.useMemo)((()=>Object(p.jsx)(o.EuiText,{color:"default",size:"xs"},Z.l)),[]);return Object(p.jsx)(o.EuiFlexGroup,{alignItems:"center",className:ae,direction:"row",gutterSize:"xs",justifyContent:"flexStart",responsive:!1},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiText,{size:"xs",color:"subdued"},Z.k)),Object(p.jsx)(o.EuiFlexItem,null,d?Object(p.jsx)(o.EuiSuperSelect,{"aria-label":Z.f,compressed:!0,disabled:M,hasDividers:!0,isLoading:T,isOpen:d,onBlur:P,onChange:R,options:F,placeholder:L,valueOfSelected:n}):Object(p.jsx)("span",null,Object(p.jsx)(o.EuiButtonEmpty,{className:re,color:"text","data-test-subj":"connectorSelectorPlaceholderButton",iconSide:"right",iconType:"arrowDown",isDisabled:M,onClick:N,size:"xs"},C)),E&&Object(p.jsx)(K.ConnectorAddModal,{actionType:O,onClose:D,postSaveEventHandler:e=>{const t=Object(te.a)(e);R(e.id,null==t?void 0:t.apiProvider,null==t?void 0:t.defaultModel),null==I||I(),D()},actionTypeRegistry:g})))}));oe.displayName="ConnectorSelectorInline";const se={xl:64,l:48,m:32,s:24,xs:16},le=({size:e="s"})=>Object(p.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:se[e],height:se[e],viewBox:"0 0 64 64",fill:"none"},Object(p.jsx)("path",{fill:"#F04E98",d:"M36 28h24v36H36V28Z"}),Object(p.jsx)("path",{fill:"#00BFB3",d:"M4 46c0-9.941 8.059-18 18-18h6v36h-6c-9.941 0-18-8.059-18-18Z"}),Object(p.jsx)("path",{fill:"#343741",d:"M60 12c0 6.627-5.373 12-12 12s-12-5.373-12-12S41.373 0 48 0s12 5.373 12 12Z"}),Object(p.jsx)("path",{fill:"#FA744E",d:"M6 23C6 10.85 15.85 1 28 1v22H6Z"}));var ce={name:"1y0ex1",styles:"max-width:400px"};const ue=({isDisabled:e=!1,title:t,docLinks:n,selectedConversation:a})=>{var r;const s=null==a||null===(r=a.apiConfig)||void 0===r?void 0:r.connectorId,{ELASTIC_WEBSITE_URL:l,DOC_LINK_VERSION:c}=n,u=`${l}guide/en/security/${c}/security-assistant.html`,d=Object(i.useMemo)((()=>Object(p.jsx)(o.EuiLink,{"aria-label":f.h,"data-test-subj":"externalDocumentationLink",external:!0,href:u,target:"_blank"},f.d)),[u]),m=Object(i.useMemo)((()=>Object(p.jsx)(Y.FormattedMessage,{defaultMessage:"Responses from AI systems may not always be entirely accurate. For more information on the assistant feature and its usage, please reference the {documentationLink}.",id:"xpack.elasticAssistant.assistant.technicalPreview.tooltipContent",values:{documentationLink:d}})),[d]),[g,b]=Object(i.useState)(!1),y=Object(i.useCallback)((()=>b((e=>!e))),[]),h=Object(i.useCallback)((()=>b(!1)),[]);return Object(p.jsx)(o.EuiModalHeaderTitle,null,Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"m"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(le,{"data-test-subj":"titleIcon",size:"m"})),Object(p.jsx)(o.EuiFlexGroup,{direction:"column",gutterSize:"none",justifyContent:"center"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"xs",alignItems:"center"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiTitle,{size:"s"},Object(p.jsx)("h3",null,t))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiPopover,{button:Object(p.jsx)(o.EuiButtonIcon,{"aria-label":f.h,"data-test-subj":"tooltipIcon",iconType:"iInCircle",onClick:y}),isOpen:g,closePopover:h,anchorPosition:"rightUp"},Object(p.jsx)(o.EuiText,{"data-test-subj":"tooltipContent",grow:!1,css:ce},Object(p.jsx)(o.EuiText,{size:"s"},Object(p.jsx)("p",null,m))))))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(oe,{isDisabled:e||void 0===a,onConnectorModalVisibilityChange:()=>{},selectedConnectorId:s,selectedConversation:a})))))},de=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.defaultConversationTitle",{defaultMessage:"Conversations"}),pe=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.ariaLabel",{defaultMessage:"Conversation selector"}),me=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.placeholderTitle",{defaultMessage:"Select or type to create new..."}),fe=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.CustomOptionTextTitle",{defaultMessage:"Create new conversation:"}),ge=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.previousConversationTitle",{defaultMessage:"Previous conversation"}),be=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.nextConversationTitle",{defaultMessage:"Next conversation"}),ye=O.i18n.translate("xpack.elasticAssistant.assistant.conversationSelector.deleteConversationTitle",{defaultMessage:"Delete conversation"}),he=navigator.platform.toLowerCase().indexOf("mac")>=0,ve=(e,t)=>0===e.indexOf(t)?e[e.length-1]:e[e.indexOf(t)-1];var Ee={name:"1v0pok0",styles:"min-width:300px"},xe={name:"4109g5",styles:"visibility:hidden;.parentFlexGroup:hover &{visibility:visible;}"},je={name:"1gz2b5f",styles:"overflow:hidden;text-overflow:ellipsis"},Oe={name:"1e5733u",styles:"width:calc(100% - 60px)"};const Se=r.a.memo((({selectedConversationId:e=T.a,defaultConnectorId:t,defaultProvider:n,onConversationSelected:r,shouldDisableKeyboardShortcut:s=(()=>!1),isDisabled:c=!1})=>{const{allSystemPrompts:u}=Object(a.b)(),{deleteConversation:d,setConversation:m}=Object(b.a)(),{conversations:f}=Object(a.b)(),g=Object(i.useMemo)((()=>Object.keys(f)),[f]),y=Object(i.useMemo)((()=>Object.values(f).map((e=>{var t;return{value:{isDefault:null!==(t=e.isDefault)&&void 0!==t&&t},label:e.id}}))),[f]),[h,v]=Object(i.useState)((()=>{var t;return null!==(t=y.filter((t=>t.label===e)))&&void 0!==t?t:[]})),E=Object(i.useCallback)(((e,a=[])=>{if(!e||!e.trim().toLowerCase())return;const i=e.trim().toLowerCase(),o=u.find((e=>e.isNewConversationDefault));if(-1===a.findIndex((e=>e.label.trim().toLowerCase()===i))){const a={id:e,messages:[],apiConfig:{connectorId:t,provider:n,defaultSystemPromptId:null==o?void 0:o.id}};m({conversation:a})}r(e)}),[u,t,n,m,r]),x=Object(i.useCallback)((t=>{e===t&&r(ve(g,t)),setTimeout((()=>{d(t)}),0)}),[g,d,e,r]),j=Object(i.useCallback)((e=>{0===e.length?v([]):-1!==y.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&r(null==e?void 0:e[0].label)}),[y,r]),O=Object(i.useCallback)((()=>{const t=ve(g,e);r(t)}),[g,e,r]),S=Object(i.useCallback)((()=>{const t=((e,t)=>e.indexOf(t)+1>=e.length?e[0]:e[e.indexOf(t)+1])(g,e);r(t)}),[g,e,r]),k=Object(i.useCallback)((e=>{c||g.length<=1||("ArrowLeft"===e.key&&(he?e.metaKey:e.ctrlKey)&&!s()&&(e.preventDefault(),O()),"ArrowRight"===e.key&&(he?e.metaKey:e.ctrlKey)&&!s()&&(e.preventDefault(),S()))}),[g.length,c,O,S,s]);return l()("keydown",k),Object(i.useEffect)((()=>{v(y.filter((t=>t.label===e)))}),[y,e]),Object(p.jsx)(o.EuiFormRow,{label:de,display:"rowCompressed",css:Ee},Object(p.jsx)(o.EuiComboBox,{"aria-label":pe,customOptionText:`${fe} {searchValue}`,placeholder:me,singleSelection:{asPlainText:!0},options:y,selectedOptions:h,onChange:j,onCreateOption:E,renderOption:(e,t,n)=>{const{label:a,value:i}=e;return Object(p.jsx)(o.EuiFlexGroup,{alignItems:"center",className:"parentFlexGroup",component:"span",justifyContent:"spaceBetween"},Object(p.jsx)(o.EuiFlexItem,{component:"span",grow:!1,css:Oe},Object(p.jsx)(o.EuiHighlight,{search:t,css:je},a)),!(null!=i&&i.isDefault)&&Object(p.jsx)(o.EuiFlexItem,{grow:!1,component:"span"},Object(p.jsx)(o.EuiToolTip,{position:"right",content:ye},Object(p.jsx)(o.EuiButtonIcon,{iconType:"cross","aria-label":ye,color:"danger",onClick:e=>{e.stopPropagation(),x(a)},css:xe}))))},compressed:!0,isDisabled:c,prepend:Object(p.jsx)(o.EuiToolTip,{content:`${ge} (⌘ + ←)`,display:"block"},Object(p.jsx)(o.EuiButtonIcon,{iconType:"arrowLeft","aria-label":ge,onClick:O,disabled:c||g.length<=1})),append:Object(p.jsx)(o.EuiToolTip,{content:`${be} (⌘ + →)`,display:"block"},Object(p.jsx)(o.EuiButtonIcon,{iconType:"arrowRight","aria-label":be,onClick:S,disabled:c||g.length<=1}))}))}));Se.displayName="ConversationSelector";var ke=n(372),we=n(775);const Ie=r.a.memo((({defaultConnectorId:e,defaultProvider:t,isDisabled:n=!1,isSettingsModalVisible:s,setIsSettingsModalVisible:l,selectedConversation:c,setSelectedConversationId:u})=>{const{setSelectedSettingsTab:d}=Object(a.b)(),m=Object(i.useCallback)((()=>{l(!1)}),[l]),f=Object(i.useCallback)((()=>{m()}),[m]),g=Object(i.useCallback)((()=>{m()}),[m]),b=Object(i.useCallback)((()=>{d(ke.b),l(!0)}),[l,d]);return Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiToolTip,{position:"right",content:we.g},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":we.f,"data-test-subj":"settings",onClick:b,isDisabled:n,iconType:"gear",size:"xs"})),s&&Object(p.jsx)(ke.a,{defaultConnectorId:e,defaultProvider:t,selectedConversation:c,setSelectedConversationId:u,onClose:f,onSave:g}))}));Ie.displayName="AssistantSettingsButton";var Te={name:"1h6p4mk",styles:"width:335px"},Ce={name:"1d3w5wq",styles:"width:100%"};const Me=({currentConversation:e,defaultConnectorId:t,defaultProvider:n,docLinks:a,isDisabled:s,isSettingsModalVisible:l,onConversationSelected:c,onToggleShowAnonymizedValues:u,selectedConversationId:d,setIsSettingsModalVisible:m,setSelectedConversationId:g,shouldDisableKeyboardShortcut:b,showAnonymizedValues:y,title:h})=>{const v=Object(i.useMemo)((()=>null!=e.replacements&&Object.keys(e.replacements).length>0&&y),[e.replacements,y]);return Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiFlexGroup,{css:Ce,alignItems:"center",justifyContent:"spaceBetween"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(ue,{isDisabled:s,docLinks:a,selectedConversation:e,title:h})),Object(p.jsx)(o.EuiFlexItem,{grow:!1,css:Te},Object(p.jsx)(Se,{defaultConnectorId:t,defaultProvider:n,selectedConversationId:d,onConversationSelected:c,shouldDisableKeyboardShortcut:b,isDisabled:s}),Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiSpacer,{size:"s"}),Object(p.jsx)(o.EuiFlexGroup,{alignItems:"center",gutterSize:"none",justifyContent:"spaceBetween"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiToolTip,{content:f.f,position:"left",repositionOnScroll:!0},Object(p.jsx)(o.EuiSwitch,{"data-test-subj":"showAnonymizedValues",checked:v,compressed:!0,disabled:null==e.replacements,label:f.e,onChange:u}))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(Ie,{defaultConnectorId:t,defaultProvider:n,isDisabled:s,isSettingsModalVisible:l,selectedConversation:e,setIsSettingsModalVisible:m,setSelectedConversationId:g})))))),Object(p.jsx)(o.EuiHorizontalRule,{margin:"m"}))};async function Ae({defaultAllow:e,defaultAllowReplacement:t,promptContext:n}){const a=await n.getPromptContext();return"string"==typeof a?{allow:[],allowReplacement:[],promptContextId:n.id,rawData:a}:{allow:[...e],allowReplacement:[...t],promptContextId:n.id,rawData:a}}const _e=u()(o.EuiButton)`
  margin-right: ${({theme:e})=>e.eui.euiSizeXS};
`,Fe=({defaultAllow:e,defaultAllowReplacement:t,promptContexts:n,selectedPromptContexts:a,setSelectedPromptContexts:r})=>{const s=Object(i.useMemo)((()=>Object(E.sortBy)("description",Object.values(n))),[n]),l=Object(i.useCallback)((async i=>{if(null==a[i]&&null!=n[i]){const a=await Ae({defaultAllow:e,defaultAllowReplacement:t,promptContext:n[i]});r((e=>({...e,[i]:a})))}}),[e,t,n,a,r]);return Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"none",wrap:!0},s.map((({description:e,id:t,getPromptContext:n,tooltip:i})=>Object(p.jsx)(o.EuiFlexItem,{grow:!1,key:t},Object(p.jsx)(o.EuiToolTip,{content:i},Object(p.jsx)(_e,{"data-test-subj":`pillButton-${t}`,disabled:null!=a[t],iconSide:"left",iconType:"plus",onClick:()=>l(t)},e))))))},De=r.a.memo(Fe);var Ne=n(555),Pe=n(898),Re={name:"1m5oqbf",styles:"white-space:pre-line;&:hover{cursor:pointer;text-decoration:underline;}"};const Le=({conversation:e,editingSystemPromptId:t,isSettingsModalVisible:n,onSystemPromptSelectionChange:s,setIsSettingsModalVisible:l})=>{const{allSystemPrompts:c}=Object(a.b)(),u=Object(i.useMemo)((()=>{var n;return void 0!==t?null!==(n=null==c?void 0:c.find((e=>e.id===t)))&&void 0!==n?n:null==c?void 0:c.find((t=>t.id===(null==e?void 0:e.apiConfig.defaultSystemPromptId))):void 0}),[c,null==e?void 0:e.apiConfig.defaultSystemPromptId,t]),[d,m]=r.a.useState(!1),f=Object(i.useCallback)((()=>{e&&s(void 0)}),[e,s]),g=Object(i.useCallback)((()=>m(!0)),[]);return Object(p.jsx)("div",null,null==u||d?Object(p.jsx)(Pe.a,{allSystemPrompts:c,clearSelectedSystemPrompt:f,conversation:e,"data-test-subj":"systemPrompt",isClearable:!0,isEditing:d,isOpen:d,isSettingsModalVisible:n,onSystemPromptSelectionChange:s,selectedPrompt:u,setIsEditing:m,setIsSettingsModalVisible:l}):Object(p.jsx)(o.EuiFlexGroup,{alignItems:"flexStart",gutterSize:"none"},Object(p.jsx)(o.EuiFlexItem,{grow:!0},Object(p.jsx)(o.EuiText,{color:"subdued","data-test-subj":"systemPromptText",onClick:g,css:Re},Object(E.isEmpty)(null==u?void 0:u.content)?Ne.d:null==u?void 0:u.content)),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"none"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiToolTip,{content:Ne.e},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":Ne.e,"data-test-subj":"edit",iconType:"documentEdit",onClick:g}))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiToolTip,{content:Ne.c},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":Ne.c,"data-test-subj":"clear",iconType:"cross",onClick:f})))))))};Le.displayName="SystemPromptComponent";const qe=r.a.memo(Le),Be=O.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.commentsListAriaLabel",{defaultMessage:"List of comments"}),ze=O.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.editingPromptLabel",{defaultMessage:"editing prompt"}),$e=O.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.youLabel",{defaultMessage:"You"});var Ve=n(869);const Ue=({rawData:e})=>Object(p.jsx)(o.EuiCodeBlock,{"data-test-subj":"readOnlyContextViewer",isCopyable:!0},Object(y.e)(e));Ue.displayName="ReadOnlyContextViewerComponent";const Ge=r.a.memo(Ue);var He=n(897),We=n(885),Qe=n(553);const Ye=O.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.availableStat.availableDescription",{defaultMessage:"Available"}),Ke=({total:e})=>{const t=Object(i.useMemo)((()=>(e=>O.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.availableStat.availableTooltip",{values:{total:e},defaultMessage:"{total} fields in this context are available to be included in the conversation"}))(e)),[e]);return Object(p.jsx)(o.EuiToolTip,{content:t},Object(p.jsx)(o.EuiStat,{"data-test-subj":"availableStat",description:Ye,reverse:!0,title:e,titleSize:Qe.a}))};Ke.displayName="AvailableStatComponent";const Xe=r.a.memo(Ke),Je=u()(o.EuiFlexItem)`
  margin-right: ${({theme:e})=>e.eui.euiSizeL};
`,Ze=({isDataAnonymizable:e,selectedPromptContext:t})=>{const{allowed:n,anonymized:a,total:r}=Object(i.useMemo)((()=>(({allow:e,allowReplacement:t,rawData:n})=>{const a={allowed:0,anonymized:0,denied:0,total:0};if("string"==typeof n)return a;{const i=Object.keys(n),r=new Set(t),o=new Set(e);return i.reduce(((e,t)=>({allowed:e.allowed+(Object(h.b)({allowSet:o,field:t})?1:0),anonymized:e.anonymized+(Object(h.b)({allowSet:o,field:t})&&Object(h.c)({allowReplacementSet:r,field:t})?1:0),denied:e.denied+(Object(h.d)({allowSet:o,field:t})?1:0),total:e.total+1})),a)}})(t)),[t]);return Object(p.jsx)(o.EuiFlexGroup,{alignItems:"center","data-test-subj":"stats",gutterSize:"none"},e&&Object(p.jsx)(Je,{grow:!1},Object(p.jsx)(He.a,{allowed:n,total:r})),Object(p.jsx)(Je,{grow:!1},Object(p.jsx)(We.a,{anonymized:a,isDataAnonymizable:e})),e&&Object(p.jsx)(Je,{grow:!1},Object(p.jsx)(Xe,{total:r})))};Ze.displayName="StatsComponent";const et=r.a.memo(Ze),tt=u.a.div`
  overflow-x: auto;
`,nt=({selectedPromptContext:e,setSelectedPromptContexts:t})=>{const{defaultAllow:n,defaultAllowReplacement:r,setDefaultAllow:s,setDefaultAllowReplacement:l}=Object(a.b)(),c=Object(i.useMemo)((()=>Object(h.a)(e.rawData)),[e]),u=Object(i.useCallback)((a=>{const i=a.reduce(((e,{field:t,operation:n,update:a})=>Object(h.f)({field:t,operation:n,selectedPromptContext:e,update:a})),e);t((t=>({...t,[e.promptContextId]:i}))),Object(h.e)({defaultAllow:n,defaultAllowReplacement:r,setDefaultAllow:s,setDefaultAllowReplacement:l,updates:a})}),[n,r,e,s,l,t]);return Object(p.jsx)(tt,{"data-test-subj":"dataAnonymizationEditor"},Object(p.jsx)(et,{isDataAnonymizable:c,selectedPromptContext:e}),Object(p.jsx)(o.EuiSpacer,{size:"s"}),"string"==typeof e.rawData?Object(p.jsx)(Ge,{rawData:e.rawData}):Object(p.jsx)(Ve.a,{allow:e.allow,allowReplacement:e.allowReplacement,onListUpdated:u,rawData:e.rawData}))},at=r.a.memo(nt),it=O.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.selectedPromotContexts.removeContextTooltip",{defaultMessage:"Remove context"}),rt=u.a.div`
  ${({$accordionState:e})=>"closed"===e?"height: 0px;":""}
  ${({$accordionState:e})=>"closed"===e?"overflow: hidden;":""}
  ${({$accordionState:e})=>"closed"===e?"position: absolute;":""}
`,ot=({isNewConversation:e,promptContexts:t,selectedPromptContexts:n,setSelectedPromptContexts:a})=>{const[s,l]=r.a.useState("closed"),c=Object(i.useCallback)((()=>l((e=>"open"===e?"closed":"open"))),[]),u=Object(i.useCallback)((e=>{a((t=>Object(E.omit)(e,t)))}),[a]);return Object(E.isEmpty)(t)?null:Object(p.jsx)(o.EuiFlexGroup,{"data-test-subj":"selectedPromptContexts",direction:"column",gutterSize:"none"},Object.keys(n).sort().map((i=>{var r;return Object(p.jsx)(o.EuiFlexItem,{"data-test-subj":`selectedPromptContext-${i}`,grow:!1,key:i},e||Object.keys(n).length>1?Object(p.jsx)(o.EuiSpacer,{"data-test-subj":"spacer"}):null,Object(p.jsx)(o.EuiAccordion,{buttonContent:null===(r=t[i])||void 0===r?void 0:r.description,forceState:s,extraAction:Object(p.jsx)(o.EuiToolTip,{content:it},Object(p.jsx)(o.EuiButtonIcon,{"aria-label":it,"data-test-subj":`removePromptContext-${i}`,iconType:"cross",onClick:()=>u(i)})),id:i,onToggle:c,paddingSize:"s"},Object(p.jsx)(rt,{$accordionState:s},Object(p.jsx)(at,{selectedPromptContext:n[i],setSelectedPromptContexts:a}))))})))},st=r.a.memo(ot),lt=u()(o.EuiText)`
  white-space: pre-line;
`,ct=({conversation:e,editingSystemPromptId:t,isNewConversation:n,isSettingsModalVisible:a,promptContexts:s,promptTextPreview:l,onSystemPromptSelectionChange:c,selectedPromptContexts:u,setIsSettingsModalVisible:d,setSelectedPromptContexts:m})=>{const f=Object(i.useMemo)((()=>Object(p.jsx)(r.a.Fragment,null,n&&Object(p.jsx)(qe,{conversation:e,editingSystemPromptId:t,onSystemPromptSelectionChange:c,isSettingsModalVisible:a,setIsSettingsModalVisible:d}),Object(p.jsx)(st,{isNewConversation:n,promptContexts:s,selectedPromptContexts:u,setSelectedPromptContexts:m}),Object(p.jsx)(lt,{color:"subdued","data-test-subj":"previewText"},l))),[e,t,n,a,c,s,l,u,d,m]),g=Object(i.useMemo)((()=>[{children:f,event:Object(p.jsx)(o.EuiText,{"data-test-subj":"eventText",size:"xs"},Object(p.jsx)("i",null,ze)),timelineAvatar:Object(p.jsx)(o.EuiAvatar,{"data-test-subj":"userAvatar",name:"user",size:"l",color:"subdued",iconType:"userAvatar"}),timelineAvatarAriaLabel:$e,username:$e}]),[f]);return Object(p.jsx)(o.EuiCommentList,{"aria-label":Be,comments:g})};ct.displayName="PromptEditorComponent";const ut=r.a.memo(ct),dt=O.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.addQuickPromptTitle",{defaultMessage:"Add quick prompt..."}),pt=O.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.overflowAriaTitle",{defaultMessage:"Show overflow Quick Prompts"}),mt=(O.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.modalCancelButtonTitle",{defaultMessage:"Cancel"}),O.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.modalSaveButtonTitle",{defaultMessage:"Save"}),u()(o.EuiFlexGroup)`
  margin: 16px;
`),ft=r.a.memo((({setInput:e,setIsSettingsModalVisible:t,trackPrompt:n})=>{const{allQuickPrompts:r,promptContexts:s,setSelectedSettingsTab:l}=Object(a.b)(),c=Object(i.useMemo)((()=>{const e=Object.values(s).map((e=>e.category));return r.filter((t=>null==t.categories||0===t.categories.length||t.categories.some((t=>e.includes(t)))))}),[r,s]),[u,d]=Object(i.useState)(!1),m=Object(i.useCallback)((()=>d(!u)),[u]),f=Object(i.useCallback)((()=>d(!1)),[]),g=Object(i.useCallback)((t=>{e(t.prompt),t.isDefault?n(t.title):n("Custom")}),[e,n]),b=Object(i.useCallback)((e=>{g(e),f()}),[f,g]),y=Object(i.useCallback)((()=>{t(!0),l(ke.c)}),[t,l]);return Object(p.jsx)(mt,{gutterSize:"s",alignItems:"center"},c.slice(0,5).map(((e,t)=>Object(p.jsx)(o.EuiFlexItem,{key:t,grow:!1},Object(p.jsx)(o.EuiBadge,{color:e.color,onClick:()=>g(e),onClickAriaLabel:e.title},e.title)))),c.length>5&&Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiPopover,{button:Object(p.jsx)(o.EuiBadge,{color:"hollow",iconType:"boxesHorizontal",onClick:m,onClickAriaLabel:pt}),isOpen:u,closePopover:f,anchorPosition:"rightUp"},Object(p.jsx)(o.EuiFlexGroup,{direction:"column",gutterSize:"s"},c.slice(5).map(((e,t)=>Object(p.jsx)(o.EuiFlexItem,{key:t,grow:!1},Object(p.jsx)(o.EuiBadge,{color:e.color,onClick:()=>b(e),onClickAriaLabel:e.title},e.title))))))),Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiButtonEmpty,{"data-test-subj":"addQuickPrompt",onClick:y,iconType:"plus",size:"xs"},dt)))}));ft.displayName="QuickPrompts";const gt=r.a.memo((({text:e,children:t,chunkSize:n=5,delay:a=100,onStreamingComplete:r})=>{const[o,s]=Object(i.useState)(a>0?"":e),[l,c]=Object(i.useState)(null==a||0===a);return Object(i.useEffect)((()=>{0===a&&(null==r||r())}),[]),Object(i.useEffect)((()=>{if(l||0===a)return void s(e);let t=0;c(!1);const i=setInterval((()=>{if(t>=e.length)return null==r||r(),c(!0),void clearInterval(i);const a=e.substring(t,t+n);s((e=>e+a)),t+=n}),a);return()=>{clearInterval(i)}}),[e,n,a,r,l]),t?Object(p.jsx)("div",null,t(o,l)):Object(p.jsx)("div",null,o)}));gt.displayName="StreamingText";const bt=r.a.memo((({setIsConnectorModalVisible:e})=>{const{assistantAvailability:t}=Object(a.b)(),n=t.hasConnectorsAllPrivilege?Z.d:Z.c,r=t.hasConnectorsAllPrivilege?Z.a:Z.b,s=Object(i.useCallback)((()=>{null==e||e(!0)}),[e]);return Object(p.jsx)(o.EuiFlexGroup,{gutterSize:"l",justifyContent:"spaceAround"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(o.EuiCard,{"data-test-subj":"connectorButton",layout:"horizontal",icon:Object(p.jsx)(o.EuiIcon,{size:"xl",type:m.GenAiLogo}),title:n,description:r,onClick:t.hasConnectorsAllPrivilege?s:void 0})))}));bt.displayName="ConnectorButton";const yt=e=>{const{messages:t,...n}=e;return{...n,messages:t.map((e=>{const{presentation:t,...n}=e;return{...n,presentation:void 0}}))}},ht=e=>!e.messages.some((e=>void 0!==e.presentation)),vt=u.a.div`
  margin-bottom: 10px;
`,Et=u()(o.EuiText)`
  margin-top: 20px;
`,xt=r.a.memo((({isConnectorConfigured:e,isSettingsModalVisible:t,setIsSettingsModalVisible:n})=>{const{assistantAvailability:s,setSelectedSettingsTab:l}=Object(a.b)(),c=Object(i.useCallback)((()=>{t||(n(!0),l(ke.b))}),[t,n,l]),u=s.hasConnectorsAllPrivilege||s.hasConnectorsReadPrivilege&&e;return Object(p.jsx)(r.a.Fragment,null,u?Object(p.jsx)(o.EuiCallOut,{"data-test-subj":"connectorMissingCallout",color:"danger",iconType:"controlsVertical",size:"m",title:Z.o},Object(p.jsx)("p",null," ",Object(p.jsx)(Y.FormattedMessage,{defaultMessage:"Select a connector above or from the {link} to continue",id:"xpack.elasticAssistant.assistant.connectors.connectorMissingCallout.calloutDescription",values:{link:Object(p.jsx)(o.EuiLink,{onClick:c},Z.p)}}))):Object(p.jsx)(bt,null))}));xt.displayName="ConnectorMissingCallout";var jt={name:"hbng6e",styles:"align-items:flex-start;flex-direction:column"},Ot={name:"hbng6e",styles:"align-items:flex-start;flex-direction:column"},St={name:"r5hahk",styles:"margin-right:20px"},kt={name:"r5hahk",styles:"margin-right:20px"};const wt=({conversationId:e,isAssistantEnabled:t,promptContextId:n="",shouldRefocusPrompt:s=!1,showTitle:l=!0,setConversationId:c})=>{var u,f,g;const{assistantTelemetry:y,augmentMessageCodeBlocks:h,conversations:v,defaultAllow:E,defaultAllowReplacement:x,docLinks:j,getComments:O,http:S,promptContexts:k,setLastConversationId:w,localStorageLastConversationId:I,title:F,allSystemPrompts:D}=Object(a.b)(),[N,P]=Object(i.useState)({}),R=Object(i.useMemo)((()=>Object.keys(N).length),[N]),{createConversation:L}=Object(b.a)(),{data:q,isSuccess:B}=Object(J.a)({http:S}),$=Object(i.useMemo)((()=>{var e;return null===(e=A(q))||void 0===e?void 0:e.id}),[q]),V=Object(i.useMemo)((()=>{var e,t;return null===(e=A(q))||void 0===e||null===(t=e.config)||void 0===t?void 0:t.apiProvider}),[q]),[U,G]=Object(i.useState)(t&&null!==(u=null!=e?e:I)&&void 0!==u?u:T.d);Object(i.useEffect)((()=>{c&&c(U)}),[U,c]);const H=Object(i.useMemo)((()=>{var e;return null!==(e=v[U])&&void 0!==e?e:L({conversationId:U})}),[v,L,U]),W=Object(i.useMemo)((()=>{var e;return!Object.keys(v).some((e=>null!=v[e].apiConfig.connectorId))&&0===(null!==(e=null==q?void 0:q.length)&&void 0!==e?e:0)}),[null==q?void 0:q.length,v]),Y=W||!t,X=Object(i.useMemo)((()=>((e,t)=>t?{...e,messages:[...e.messages,...C.messages]}:0===e.messages.length||e.messages[e.messages.length-1].content!==M[0].content?{...e,messages:[...e.messages,...M]}:e)(H,t)),[H,t]),[ne,ae]=Object(i.useState)(!1);Object(i.useEffect)((()=>{if(B&&(null==q||!q.length))return w(T.d);H.excludeFromLastConversationStorage||w(H.id)}),[B,null==q?void 0:q.length,H,w]);const{comments:ie,prompt:re}=(({conversation:e=C,onSetupComplete:t})=>{var n,r,s,l;const{appendMessage:c,setApiConfig:u,setConversation:d}=Object(b.a)(),f=Object(i.useRef)(null),{actionTypeRegistry:g,conversations:y,http:h}=Object(a.b)(),{data:v,isSuccess:E,refetch:x}=Object(J.a)({http:h}),j=E&&!(null==v||!v.length),[O,S]=Object(i.useState)(!1),[k,w]=Object(i.useState)((()=>ht(e))),{data:I}=Object(ee.a)({http:h}),T=Object(i.useMemo)((()=>{var e;return null!==(e=null==I?void 0:I.find((e=>e.id===m.GEN_AI_CONNECTOR_ID)))&&void 0!==e?e:{enabledInConfig:!0,enabledInLicense:!0,isSystemActionType:!1,minimumLicenseRequired:"platinum",supportedFeatureIds:["general"],id:".gen-ai",name:"Generative AI",enabled:!0}}),[I]),M=Object(i.useMemo)((()=>{var t,n,a;return null!==(t=null===(n=e.theme)||void 0===n||null===(a=n.user)||void 0===a?void 0:a.name)&&void 0!==t?t:Z.j}),[null===(n=e.theme)||void 0===n||null===(r=n.user)||void 0===r?void 0:r.name]),A=Object(i.useMemo)((()=>{var t,n,a;return null!==(t=null===(n=e.theme)||void 0===n||null===(a=n.assistant)||void 0===a?void 0:a.name)&&void 0!==t?t:Z.i}),[null===(s=e.theme)||void 0===s||null===(l=s.assistant)||void 0===l?void 0:l.name]),_=Object(i.useMemo)((()=>e.messages.length-1),[e.messages.length]),[F,D]=Object(i.useState)(j||ht(e)?_:0),N=Object(i.useRef)(void 0),P=Object(i.useCallback)((()=>{var t,n,a;if(F!==_)return N.current=window.setTimeout((()=>{var e;return null===(e=f.current)||void 0===e||e.scrollIntoView({block:"end"}),D(F+1)}),null!==(t=null===(n=e.messages[F])||void 0===n||null===(a=n.presentation)||void 0===a?void 0:a.delay)&&void 0!==t?t:0),()=>clearTimeout(N.current);clearTimeout(N.current)}),[e.messages,F,_]),R=Object(i.useCallback)((()=>{var n;w(!0),null===(n=f.current)||void 0===n||n.scrollIntoView({block:"end"}),null==t||t(),d({conversation:yt(e)})}),[e,t,d]),L=Object(i.useCallback)((()=>{D(_)}),[_]),q=Object(i.useCallback)(((t,n,a)=>{var i,r;null!=e.messages[n].timestamp&&0!==e.messages[n].timestamp.length||(e.messages[n].timestamp=(new Date).toLocaleString());const s=n===a-1,l=null!==(i=null==t||null===(r=t.presentation)||void 0===r?void 0:r.stream)&&void 0!==i&&i&&F!==a-1;return Object(p.jsx)(gt,{text:t.content,delay:l?50:0,onStreamingComplete:s?R:P},((e,t)=>Object(p.jsx)(o.EuiText,null,Object(p.jsx)(o.EuiMarkdownFormat,{className:`message-${n}`},e),Object(p.jsx)("span",{ref:f}))))}),[e.messages,F,R,P]);return{comments:Object(i.useMemo)((()=>e.messages.slice(0,F+1).map(((t,n)=>({username:"user"===t.role?M:A,children:q(t,n,e.messages.length),timelineAvatar:Object(p.jsx)(o.EuiAvatar,{name:Z.i,size:"l",color:"subdued",iconType:le}),timestamp:`${Z.h}: ${t.timestamp}`})))),[A,q,e.messages,F,M]),prompt:Object(p.jsx)("div",{"data-test-subj":"prompt"},k&&Object(p.jsx)(vt,null,Object(p.jsx)(bt,{setIsConnectorModalVisible:S})),!k&&Object(p.jsx)(Et,{color:"subdued",size:"xs"},Object(p.jsx)(o.EuiTextAlign,{textAlign:"center"},Object(p.jsx)(o.EuiBadge,{color:"hollow",onClick:L,onClickAriaLabel:Z.g},Z.g))),O&&Object(p.jsx)(K.ConnectorAddModal,{actionType:T,onClose:()=>S(!1),postSaveEventHandler:t=>{const n=Object(te.a)(t);Object.values(y).forEach((e=>{u({conversationId:e.id,apiConfig:{...e.apiConfig,connectorId:t.id,provider:null==n?void 0:n.apiProvider,model:null==n?void 0:n.defaultModel}})})),null==x||x(),S(!1),c({conversationId:e.id,message:{role:"assistant",content:"Connector setup complete!",timestamp:(new Date).toLocaleString()}})},actionTypeRegistry:g}))}})({conversation:X,onSetupComplete:()=>{var e;null===(e=se.current)||void 0===e||e.scrollIntoView({behavior:"auto"})}}),oe=W&&null!==(f=X.theme)&&void 0!==f&&f.title?null===(g=X.theme)||void 0===g?void 0:g.title:F,se=Object(i.useRef)(null),ce=Object(i.useRef)(null),[ue,de]=Object(i.useState)(""),[pe,me]=Object(i.useState)(!1),[fe,ge]=Object(i.useState)(null),[be,ye]=Object(i.useState)(!1),[he,ve]=Object(i.useState)(!1),[Ee,xe]=Object(i.useState)(),[je,Oe]=Object(i.useState)(!1);Object(i.useLayoutEffect)((()=>{xe(h(H))}),[h,H]);const Se=Object(i.useMemo)((()=>Y||be),[be,Y]);Object(i.useEffect)((()=>{const e=()=>{const e=document.querySelectorAll(".euiCodeBlock__controls");Oe(e.length>0)};e();const t=new MutationObserver(e);return t.observe(document.body,{subtree:!0,childList:!0}),()=>{t.disconnect()}}),[]),Object(i.useEffect)((()=>{var e;null===(e=se.current)||void 0===e||e.scrollIntoView({behavior:"auto"})}),[]),Object(i.useEffect)((()=>{setTimeout((()=>{var e;null===(e=se.current)||void 0===e||e.scrollIntoView({behavior:"auto"})}),0)}),[H.messages.length,R]);const ke=Object(i.useMemo)((()=>Object(_.b)({allSystemPrompts:D,conversation:H})),[D,H]),[we,Ie]=Object(i.useState)(null==ke?void 0:ke.id),Te=Object(i.useCallback)((e=>{var t;G(e),Ie(null===(t=Object(_.b)({allSystemPrompts:D,conversation:v[e]}))||void 0===t?void 0:t.id)}),[D,v]),Ce=Object(i.useCallback)((e=>{Ie(e)}),[]);[...document.getElementsByClassName("euiCodeBlock")].forEach((e=>e.style.minHeight="75px"));const _e=Object(i.useCallback)((e=>{null!=ve&&ve(e.target.checked)}),[ve]);Object(i.useEffect)((()=>{if(H.messages.length||e!==U)return;if(pe)return;const t=k[n];null!=t&&(me(!0),Object.keys(N).includes(t.id)||(async()=>{const e=await Ae({defaultAllow:E,defaultAllowReplacement:x,promptContext:t});P((n=>({...n,[t.id]:e})))})(),null!=t.suggestedUserPrompt&&ge(t.suggestedUserPrompt))}),[H.messages,k,n,e,U,N,pe,E,x]),Object(i.useEffect)((()=>{var e;const t=null!==(e=null==q?void 0:q.some((e=>{var t;return e.id===(null===(t=H.apiConfig)||void 0===t?void 0:t.connectorId)})))&&void 0!==e&&e;ye(!t)}),[q,H]);const Fe=Object(i.useCallback)((()=>null==Ee?void 0:Ee.map((e=>e.map((e=>{const t=e.getControlContainer,n=null==t?void 0:t();return n?Object(d.createPortal)(e.button,n):Object(p.jsx)(r.a.Fragment,null)}))))),[Ee]),Ne=Object(i.useMemo)((()=>Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiCommentList,{comments:O({currentConversation:H,lastCommentRef:ce,showAnonymizedValues:he}),css:kt}),0!==H.messages.length&&R>0&&Object(p.jsx)(o.EuiSpacer,{size:"m"}),(0===H.messages.length||R>0)&&Object(p.jsx)(ut,{conversation:H,editingSystemPromptId:we,isNewConversation:0===H.messages.length,isSettingsModalVisible:ne,promptContexts:k,promptTextPreview:ue,onSystemPromptSelectionChange:Ce,selectedPromptContexts:N,setIsSettingsModalVisible:ae,setSelectedPromptContexts:P}),Object(p.jsx)("div",{ref:se}))),[H,we,O,Ce,ne,k,ue,N,R,he]),Pe=Object(i.useMemo)((()=>Y?Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiCommentList,{comments:ie,css:St}),Object(p.jsx)("span",{ref:se})):Ne),[ie,Y,Ne]),Re=Object(i.useCallback)((e=>{null==y||y.reportAssistantQuickPrompt({conversationId:U,promptTitle:e})}),[y,U]);return Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiModalHeader,{css:Ot},l&&Object(p.jsx)(Me,{currentConversation:H,defaultConnectorId:$,defaultProvider:V,docLinks:j,isDisabled:Y,isSettingsModalVisible:ne,onConversationSelected:Te,onToggleShowAnonymizedValues:_e,selectedConversationId:U,setIsSettingsModalVisible:ae,setSelectedConversationId:G,showAnonymizedValues:he,title:oe}),Fe(),!Y&&Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(De,{defaultAllow:E,defaultAllowReplacement:x,promptContexts:k,selectedPromptContexts:N,setSelectedPromptContexts:P}),Object.keys(k).length>0&&Object(p.jsx)(o.EuiSpacer,{size:"s"}))),Object(p.jsx)(o.EuiModalBody,null,Pe,!Y&&be&&B&&Object(p.jsx)(r.a.Fragment,null,Object(p.jsx)(o.EuiSpacer,null),Object(p.jsx)(o.EuiFlexGroup,{justifyContent:"spaceAround"},Object(p.jsx)(o.EuiFlexItem,{grow:!1},Object(p.jsx)(xt,{isConnectorConfigured:(null==q?void 0:q.length)>0,isSettingsModalVisible:ne,setIsSettingsModalVisible:ae}))))),Object(p.jsx)(o.EuiModalFooter,{css:jt},Object(p.jsx)(Q,{connectorPrompt:re,http:S,isAssistantEnabled:t,isWelcomeSetup:W}),Object(p.jsx)(z,{allSystemPrompts:D,currentConversation:H,isDisabled:Se,shouldRefocusPrompt:s,setPromptTextPreview:de,userPrompt:fe,setUserPrompt:ge,editingSystemPromptId:we,http:S,setEditingSystemPromptId:Ie,selectedPromptContexts:N,setSelectedPromptContexts:P}),!Y&&Object(p.jsx)(ft,{setInput:ge,setIsSettingsModalVisible:ae,trackPrompt:Re})))};wt.displayName="AssistantComponent";const It=r.a.memo(wt),Tt=navigator.platform.toLowerCase().indexOf("mac")>=0,Ct=u()(o.EuiModal)`
  ${({theme:e})=>`margin-top: ${e.eui.euiSizeXXL};`}
  min-width: 95vw;
  min-height: 25vh;
`,Mt=r.a.memo((({isAssistantEnabled:e})=>{const[t,n]=Object(i.useState)(!1),[o,s]=Object(i.useState)(T.d),[c,u]=Object(i.useState)(),{assistantTelemetry:d,setShowAssistantOverlay:m,localStorageLastConversationId:f}=Object(a.b)(),g=Object(i.useCallback)((()=>({showOverlay:e,promptContextId:t,conversationId:a})=>{e&&(null==d||d.reportAssistantInvoked({conversationId:null!=a?a:"unknown",invokedBy:"click"})),n(e),u(t),s(a)}),[d]);Object(i.useEffect)((()=>{m(g)}),[m,g]);const b=Object(i.useCallback)((()=>{t||(s(null!=f?f:T.d),null==d||d.reportAssistantInvoked({invokedBy:"shortcut",conversationId:null!=f?f:T.d})),n(!t)}),[d,t,f]),y=Object(i.useCallback)((e=>{";"===e.key&&(Tt?e.metaKey:e.ctrlKey)&&(e.preventDefault(),b())}),[b]);l()("keydown",y);const h=Object(i.useCallback)((()=>{n(!1),u(void 0),s(o)}),[o]),v=Object(i.useCallback)((()=>{h()}),[h]);return Object(p.jsx)(r.a.Fragment,null,t&&Object(p.jsx)(Ct,{onClose:v,"data-test-subj":"ai-assistant-modal"},Object(p.jsx)(It,{isAssistantEnabled:e,conversationId:o,promptContextId:c})))}));Mt.displayName="AssistantOverlay";var At=n(774);const _t=(e,t,n,r,o,s,l)=>{const c=Object(i.useMemo)((()=>e),[e]),u=Object(i.useMemo)((()=>n),[n]),d=Object(i.useMemo)((()=>r),[r]),p=Object(i.useMemo)((()=>null!=o?o:Object(At.a)()),[o]),m=Object(i.useMemo)((()=>null!=s?s:void 0),[s]),f=Object(i.useMemo)((()=>l),[l]),{registerPromptContext:g,showAssistantOverlay:b,unRegisterPromptContext:y}=Object(a.b)(),h=Object(i.useCallback)((e=>{null!=p&&b({showOverlay:e,promptContextId:p,conversationId:null!=t?t:void 0})}),[b,t,p]);return Object(i.useEffect)((()=>(y(p),g({category:c,description:u,getPromptContext:d,id:p,suggestedUserPrompt:m,tooltip:f}),()=>y(p))),[c,u,d,m,f,p,g,y]),{promptContextId:p,showAssistantOverlay:h}},Ft=O.i18n.translate("xpack.elasticAssistant.assistant.newChat.newChatButton",{defaultMessage:"Chat"}),Dt=({category:e,children:t=Ft,conversationId:n,description:a,getPromptContext:r,iconType:s,promptContextId:l,suggestedUserPrompt:c,tooltip:u})=>{const{showAssistantOverlay:d}=_t(e,null!=n?n:null,a,r,null!=l?l:null,c,u),m=Object(i.useCallback)((()=>{d(!0)}),[d]),f=Object(i.useMemo)((()=>{if(null!==s)return null!=s?s:"discuss"}),[s]);return Object(i.useMemo)((()=>Object(p.jsx)(o.EuiButtonEmpty,{"data-test-subj":"newChat",onClick:m,iconType:f},t)),[t,f,m])};Dt.displayName="NewChatComponent";const Nt=r.a.memo(Dt),Pt=O.i18n.translate("xpack.elasticAssistant.assistant.newChatById.newChatByIdButton",{defaultMessage:"Chat"}),Rt=({children:e=Pt,conversationId:t,iconType:n,promptContextId:r})=>{const{showAssistantOverlay:s}=Object(a.b)(),l=Object(i.useCallback)((()=>s({conversationId:t,promptContextId:r,showOverlay:!0})),[t,r,s]),c=Object(i.useMemo)((()=>{if(null!==n)return null!=n?n:"discuss"}),[n]);return Object(i.useMemo)((()=>Object(p.jsx)(o.EuiButtonEmpty,{"data-test-subj":"newChatById",iconType:c,onClick:l},e)),[e,c,l])};Rt.displayName="NewChatByIdComponent";const Lt=r.a.memo(Rt);O.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.user.thenSummarizeSuggestedKqlAndEqlQueries",{defaultMessage:"Evaluate the event from the context above and format your output neatly in markdown syntax for my Elastic Security case."}),O.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.user.finallySuggestInvestigationGuideAndFormatAsMarkdown",{defaultMessage:"Add your description, recommended actions and bulleted triage steps. Use the MITRE ATT&CK data provided to add more context and recommendations from MITRE, and hyperlink to the relevant pages on MITRE's website. Be sure to include the user and host risk score data from the context. Your response should include steps that point to Elastic Security specific features, including endpoint response actions, the Elastic Agent OSQuery manager integration (with example osquery queries), timelines and entity analytics and link to all the relevant Elastic Security documentation."})},function(e,t,n){"use strict";n.d(t,"b",(function(){return I})),n.d(t,"a",(function(){return T}));var a=n(160),i=n(103),r=n(2),o=n(114),s=n(102),l=n(122),c=n(138),u=n(42),d=n(124),p=n(387),m=n(378);var f=n(246),g=n.n(f),b=n(254),y=n(175);var h=n(164),v=n(111),E=n(142),x=n(105),j=n(45),O=n(56);const S=({search:e,urlKey:t})=>Object(b.b)(Object(b.c)(e),t);var k=n(119),w=n(4);const I=()=>{Object(a.c)(),(()=>{const e=Object(i.useDispatch)(),{filterManager:t,savedQueries:n}=Object(s.j)().services.data.query,u=Object(r.useMemo)((()=>l.d.globalFiltersQuerySelector()),[]),d=Object(i.useSelector)(u),p=Object(r.useCallback)((t=>{null!=t&&e(c.b.setFilterQuery({id:o.a.global,query:t.query,language:t.language}))}),[e]),m=Object(r.useCallback)((n=>{null!=n?(t.setFilters(n),e(c.b.setSearchBarFilter({id:o.a.global,filters:n}))):(t.setAppFilters(d),e(c.b.setSearchBarFilter({id:o.a.global,filters:t.getFilters()})))}),[t,e,d]),f=Object(r.useCallback)((a=>{null!=a&&""!==a&&n.getSavedQuery(a).then((n=>{const a=n.attributes.filters||[],i=n.attributes.query;t.setFilters(a),e(c.b.setSearchBarFilter({id:o.a.global,filters:a})),e(c.b.setFilterQuery({id:o.a.global,...i})),e(c.b.setSavedQuery({id:o.a.global,savedQuery:n}))}))}),[e,t,n]);Object(a.b)(T.appQuery,p),Object(a.b)(T.filters,m),Object(a.b)(T.savedQuery,f)})(),(()=>{const e=Object(i.useDispatch)(),t=Object(d.a)("socTrendsEnabled"),n=Object(r.useCallback)((n=>((e,t,n)=>{if(null!=e){const a={linkTo:Object(u.get)("global.linkTo",e)},i=Object(u.get)("global.timerange.kind",e),r={linkTo:Object(u.get)("timeline.linkTo",e)},s=Object(u.get)("timeline.timerange.kind",e),l={linkTo:Object(u.get)("socTrends.linkTo",e)},d=Object(u.get)("socTrends.timerange.kind",e);if(n&&(Object(u.isEmpty)(l.linkTo)?t(c.b.removeLinkTo([o.a.global,o.a.socTrends])):t(c.b.addLinkTo([o.a.global,o.a.socTrends]))),Object(u.isEmpty)(a.linkTo)?(t(c.b.removeLinkTo([o.a.global,o.a.timeline])),n&&t(c.b.removeLinkTo([o.a.global,o.a.socTrends]))):(t(c.b.addLinkTo([o.a.global,o.a.timeline])),n&&t(c.b.addLinkTo([o.a.global,o.a.socTrends]))),Object(u.isEmpty)(r.linkTo)?t(c.b.removeLinkTo([o.a.global,o.a.timeline])):t(c.b.addLinkTo([o.a.global,o.a.timeline])),s){if("absolute"===s){const n=Object(p.a)(Object(u.get)("timeline.timerange",e));t(c.b.setAbsoluteRangeDatePicker({...n,id:o.a.timeline}))}if("relative"===s){const n=Object(p.a)(Object(u.get)("timeline.timerange",e));n.from=Object(m.c)(n.fromStr),n.to=Object(m.c)(n.toStr,{roundUp:!0}),t(c.b.setRelativeRangeDatePicker({...n,id:o.a.timeline}))}}if(i){if("absolute"===i){const n=Object(p.a)(Object(u.get)("global.timerange",e));t(c.b.setAbsoluteRangeDatePicker({...n,id:o.a.global}))}if("relative"===i){const n=Object(p.a)(Object(u.get)("global.timerange",e));n.from=Object(m.c)(n.fromStr),n.to=Object(m.c)(n.toStr,{roundUp:!0}),t(c.b.setRelativeRangeDatePicker({...n,id:o.a.global}))}}if(n&&d){if("absolute"===d){const n=Object(p.a)(Object(u.get)("socTrends.timerange",e));t(c.b.setAbsoluteRangeDatePicker({...n,id:o.a.socTrends}))}if("relative"===d){const n=Object(p.a)(Object(u.get)("socTrends.timerange",e));n.from=Object(m.c)(n.fromStr),n.to=Object(m.c)(n.toStr,{roundUp:!0}),t(c.b.setRelativeRangeDatePicker({...n,id:o.a.socTrends}))}}}})(n,e,t)),[e,t]);Object(a.b)(T.timerange,n)})(),(()=>{const[{pageName:e}]=Object(y.a)(),t=Object(i.useDispatch)(),n=g()(e),a=Object(r.useMemo)((()=>l.d.inputsSelector()),[]),s=Object(i.useSelector)(a),{timerange:u}=s.global,{timerange:d}=s.timeline;Object(r.useEffect)((()=>{((e,t)=>e&&t&&t!==e&&Object(b.d)(e))(e,n)&&("relative"===d.kind&&t(c.b.setRelativeRangeDatePicker({...d,from:Object(m.c)(d.fromStr),to:Object(m.c)(d.toStr,{roundUp:!0}),id:o.a.timeline})),"relative"===u.kind&&t(c.b.setRelativeRangeDatePicker({...u,from:Object(m.c)(u.fromStr),to:Object(m.c)(u.toStr,{roundUp:!0}),id:o.a.global})))}),[e,n,t,d,u])})(),(()=>{const e=Object(i.useDispatch)(),t=Object(r.useCallback)((t=>{null!=t&&Object(h.h)({activeTimelineTab:t.activeTab,duplicate:!1,graphEventId:t.graphEventId,timelineId:t.id,openTimeline:t.isOpen,updateIsLoading:t=>e(v.a.updateIsLoading(t)),updateTimeline:Object(h.b)(e)})}),[e]);Object(a.b)(T.timeline,t)})(),(()=>{const e=Object(a.d)(T.timeline),t=Object(r.useMemo)((()=>v.b.getTimelineByIdSelector()),[]),{activeTab:n,graphEventId:i,show:o,savedObjectId:s}=Object(x.b)((e=>{var n;return null!==(n=t(e,E.f.active))&&void 0!==n?n:{}}));Object(r.useEffect)((()=>{const t={...s?{id:s}:{},isOpen:o,activeTab:n,graphEventId:null!=i?i:""};e(t)}),[n,i,s,o,e])})(),(()=>{var e;const t=Object(r.useMemo)((()=>v.b.getTimelineByIdSelector()),[]),n=Object(x.b)((e=>t(e,E.f.active))),{search:a}=Object(j.useLocation)(),o=g()(a),s=null!==(e=null==n?void 0:n.savedObjectId)&&void 0!==e?e:"",l=Object(i.useDispatch)(),[c,u]=Object(r.useMemo)((()=>{const e=S({urlKey:T.timeline,search:null!=o?o:""}),t=S({urlKey:T.timeline,search:a});return null!=e&&null!=t?[Object(O.safeDecode)(e),Object(O.safeDecode)(t)]:[null,null]}),[o,a]),d=null==c?void 0:c.id,{id:p,activeTab:m,graphEventId:f}=u||{};Object(r.useEffect)((()=>{p&&p!==d&&p!==s&&Object(h.h)({activeTimelineTab:null!=m?m:E.g.query,duplicate:!1,graphEventId:f,timelineId:p,openTimeline:!0,updateIsLoading:e=>l(v.a.updateIsLoading(e)),updateTimeline:Object(h.b)(l)})}),[s,l,d,p,m,f])})(),(()=>{const[e]=Object(s.p)(w.lb),[t,n]=Object(r.useState)(null),[o,l]=Object(r.useState)(!1),c=Object(i.useDispatch)(),u=k.j.getTableByIdSelector(),d=Object(x.b)((e=>{var t;return null!==(t=u(e,k.e.alertsOnAlertsPage))&&void 0!==t?t:k.q})),p=Object(r.useCallback)((t=>{!e&&null!=t&&t.panelView&&n(t)}),[e]),m=Object(r.useCallback)((()=>{const{initialized:n,isLoading:a,totalCount:i,additionalFilters:r}=d,o=n&&!a&&i>0;!e&&t&&(r&&r.showBuildingBlockAlerts||c(k.h.updateShowBuildingBlockAlertsFilter({id:k.e.alertsOnAlertsPage,showBuildingBlockAlerts:!0})),o&&(l(!0),c(k.h.toggleDetailPanel({id:k.e.alertsOnAlertsPage,...t}))))}),[d,c,e,t]);Object(r.useEffect)((()=>{o||m()}),[o,m]);const f=e?"":T.eventFlyout;Object(a.b)(f,p)})(),(()=>{const e=Object(a.d)(T.eventFlyout),{pathname:t}=Object(j.useLocation)(),n=Object(i.useDispatch)(),o=k.j.getTableByIdSelector(),{expandedDetail:s}=Object(x.b)((e=>{var t;return null!==(t=o(e,k.e.alertsOnAlertsPage))&&void 0!==t?t:k.q}));Object(r.useEffect)((()=>{var a;const i=t===w.d;i&&null!=s&&null!=s&&s.query?e(s.query.panelView?s.query:null):!i&&null!=s&&null!==(a=s.query)&&void 0!==a&&a.panelView&&(n(k.h.toggleDetailPanel({id:k.e.alertsOnAlertsPage})),e(null))}),[n,s,t,e])})()};let T;!function(e){e.appQuery="query",e.eventFlyout="eventFlyout",e.filters="filters",e.savedQuery="savedQuery",e.sourcerer="sourcerer",e.timeline="timeline",e.timerange="timerange",e.pageFilter="pageFilters",e.rulesTable="rulesTable"}(T||(T={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(104),i=n.n(a),r=n(220),o=n(53),s=n.n(o),l=n(2),c=n.n(l),u=n(41),d=n.n(u),p=n(309),m=n(178),f=n(168);const g=d.a.div.withConfig({displayName:"Wrapper",componentId:"sc-1kulm59-0"})(["&.securitySolutionWrapper--fullHeight{height:100%;display:flex;flex-direction:column;flex:1 1 auto;}&.securitySolutionWrapper--noPadding{padding:0;display:flex;flex-direction:column;flex:1 1 auto;}"]);g.displayName="Wrapper";const b=({children:e,className:t,style:n,noPadding:a,noTimeline:o,...u})=>{const{isAssistantEnabled:d,hasAssistantPrivilege:b}=Object(p.a)(),{globalFullScreen:y,setGlobalFullScreen:h}=Object(m.a)();Object(l.useEffect)((()=>{h(!1)}),[h]);const v=s()(t,{securitySolutionWrapper:!0,"securitySolutionWrapper--noPadding":a,"securitySolutionWrapper--withTimeline":!o,"securitySolutionWrapper--fullHeight":y});return c.a.createElement(g,i()({className:v,style:n},u),e,c.a.createElement(f.a,null),b&&c.a.createElement(r.c,{isAssistantEnabled:d}))},y=c.a.memo(b)},function(e,t,n){"use strict";n.d(t,"j",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"K",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"N",(function(){return l})),n.d(t,"M",(function(){return c})),n.d(t,"L",(function(){return u})),n.d(t,"E",(function(){return d})),n.d(t,"D",(function(){return p})),n.d(t,"F",(function(){return m})),n.d(t,"C",(function(){return f})),n.d(t,"B",(function(){return g})),n.d(t,"m",(function(){return b})),n.d(t,"l",(function(){return y})),n.d(t,"k",(function(){return h})),n.d(t,"H",(function(){return v})),n.d(t,"G",(function(){return E})),n.d(t,"I",(function(){return x})),n.d(t,"n",(function(){return j})),n.d(t,"o",(function(){return O})),n.d(t,"u",(function(){return S})),n.d(t,"w",(function(){return k})),n.d(t,"p",(function(){return w})),n.d(t,"q",(function(){return I})),n.d(t,"s",(function(){return T})),n.d(t,"t",(function(){return C})),n.d(t,"r",(function(){return M})),n.d(t,"v",(function(){return A})),n.d(t,"J",(function(){return _})),n.d(t,"i",(function(){return F})),n.d(t,"g",(function(){return D})),n.d(t,"f",(function(){return N})),n.d(t,"h",(function(){return P})),n.d(t,"c",(function(){return R})),n.d(t,"b",(function(){return L})),n.d(t,"d",(function(){return q})),n.d(t,"x",(function(){return B})),n.d(t,"z",(function(){return z})),n.d(t,"y",(function(){return $})),n.d(t,"A",(function(){return V}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.flyout.entitiesNoDataMessage",{defaultMessage:"Host and user information are unavailable for this alert."}),r=a.i18n.translate("xpack.securitySolution.flyout.analyzerErrorMessage",{defaultMessage:"analyzer"}),o=a.i18n.translate("xpack.securitySolution.flyout.sessionViewErrorMessage",{defaultMessage:"session view"}),s=a.i18n.translate("xpack.securitySolution.flyout.correlationsErrorMessage",{defaultMessage:"No correlations data available"}),l=a.i18n.translate("xpack.securitySolution.flyout.entities.userTitle",{defaultMessage:"User"}),c=a.i18n.translate("xpack.securitySolution.flyout.entities.userPrevalenceColumTitleTooltip",{defaultMessage:"Percentage of unique users with identical field value pairs"}),u=a.i18n.translate("xpack.securitySolution.flyout.entities.usersInfoTitle",{defaultMessage:"User information"}),d=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedHostsTitle",{defaultMessage:"Related hosts"}),p=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedHostsTableNoData",{defaultMessage:"No hosts identified"}),m=e=>a.i18n.translate("xpack.securitySolution.flyout.entities.relatedHostsToolTip",{defaultMessage:"After this alert was generated, {userName} logged into these hosts. Check if this activity is normal.",values:{userName:e}}),f=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedEntitiesNameColumn",{defaultMessage:"Name"}),g=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedEntitiesIpColumn",{defaultMessage:"Ip addresses"}),b=a.i18n.translate("xpack.securitySolution.flyout.entities.hostTitle",{defaultMessage:"Host"}),y=a.i18n.translate("xpack.securitySolution.flyout.entities.hostPrevalenceColumTitleTooltip",{defaultMessage:"Percentage of unique hosts with identical field value pairs"}),h=a.i18n.translate("xpack.securitySolution.flyout.entities.hostsInfoTitle",{defaultMessage:"Host information"}),v=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedUsersTitle",{defaultMessage:"Related users"}),E=a.i18n.translate("xpack.securitySolution.flyout.entities.relatedUsersTableNoData",{defaultMessage:"No users identified"}),x=e=>a.i18n.translate("xpack.securitySolution.flyout.entities.relatedUsersToolTip",{defaultMessage:"After this alert was generated, these users logged into {hostName}. Check if this activity is normal.",values:{hostName:e}}),j=a.i18n.translate("xpack.securitySolution.flyout.prevalenceErrorMessage",{defaultMessage:"prevalence"}),O=a.i18n.translate("xpack.securitySolution.flyout.prevalenceNoDataMessage",{defaultMessage:"No prevalence data available"}),S=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableFieldColumnTitle",{defaultMessage:"Field"}),k=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableValueColumnTitle",{defaultMessage:"Value"}),w=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableAlertCountColumnTitle",{defaultMessage:"Alert"}),I=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableAlertCountColumnTitleTooltip",{defaultMessage:"Total number of alerts with identical field value pairs"}),T=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableDocCountColumnTitle",{defaultMessage:"Document"}),C=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableDocCountColumnTitleTooltip",{defaultMessage:"Total number of event documents with identical field value pairs"}),M=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTableCountColumnTitle",{defaultMessage:"count"}),A=a.i18n.translate("xpack.securitySolution.flyout.prevalenceTablePrevalenceColumnTitle",{defaultMessage:"prevalence"}),_=a.i18n.translate("xpack.securitySolution.flyout.response.title",{defaultMessage:"Responses"}),F=a.i18n.translate("xpack.securitySolution.flyout.correlations.timestampColumnTitle",{defaultMessage:"Timestamp"}),D=a.i18n.translate("xpack.securitySolution.flyout.correlations.ruleColumnTitle",{defaultMessage:"Rule"}),N=a.i18n.translate("xpack.securitySolution.flyout.correlations.reasonColumnTitle",{defaultMessage:"Reason"}),P=a.i18n.translate("xpack.securitySolution.flyout.correlations.severityColumnTitle",{defaultMessage:"Severity"}),R=a.i18n.translate("xpack.securitySolution.flyout.correlations.statusColumnTitle",{defaultMessage:"Status"}),L=a.i18n.translate("xpack.securitySolution.flyout.correlations.caseNameColumnTitle",{defaultMessage:"Name"}),q=a.i18n.translate("xpack.securitySolution.flyout.correlations.correlationsDetailsTableFilter",{defaultMessage:"Correlations Details Table Alert IDs"}),B=a.i18n.translate("xpack.securitySolution.flyout.correlations.relatedAlertsByAncestryNoData",{defaultMessage:"No alerts related by ancestry"}),z=a.i18n.translate("xpack.securitySolution.flyout.correlations.relatedAlertsBySourceEventNoData",{defaultMessage:"No related source events"}),$=a.i18n.translate("xpack.securitySolution.flyout.correlations.relatedAlertsBySessionNoData",{defaultMessage:"No alerts related by session"}),V=a.i18n.translate("xpack.securitySolution.flyout.correlations.relatedCasesNoData",{defaultMessage:"No related cases"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return E})),n.d(t,"g",(function(){return x})),n.d(t,"d",(function(){return j})),n.d(t,"e",(function(){return O})),n.d(t,"f",(function(){return S})),n.d(t,"i",(function(){return k})),n.d(t,"h",(function(){return w})),n.d(t,"a",(function(){return T})),n.d(t,"c",(function(){return C}));var a=n(40),i=n(44),r=n(42),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(165),d=n(153),p=n(121),m=n(117),f=(n(132),n(123)),g=n(168),b=n(364),y=n(110),h=n(658);const v=c()(a.EuiFlexGroup).withConfig({displayName:"DraggableContainerFlexGroup",componentId:"sc-17s23cb-0"})(["flex-grow:unset;"]),E="ip-overview",x=(e,t,n,i)=>e.length>0&&e.every((e=>Object(r.getOr)(null,e,t)))?s.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},e.map(((e,l)=>{const c=Object(r.getOr)("",e,t);return s.a.createElement(o.Fragment,{key:`${E}-${e}`},l?", ":"",s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(p.b,{id:`location-renderer-default-draggable-${E}-${n?`${n}-`:""}${e}`,isDraggable:null!=i&&i,field:e,value:c,isAggregatable:!0,fieldType:"keyword"})))}))):Object(m.d)(),j=(e,t,n,i)=>e&&e.organization&&e.organization.name&&e.number?s.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(p.b,{id:`autonomous-system-renderer-default-draggable-${E}-${n?`${n}-`:""}${t}.as.organization.name`,isDraggable:null!=i&&i,field:`${t}.as.organization.name`,value:e.organization.name})),s.a.createElement(a.EuiFlexItem,{grow:!1},"/"),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(p.b,{id:`autonomous-system-renderer-default-draggable-${E}-${n?`${n}-`:""}${t}.as.number`,isDraggable:!1,field:`${t}.as.number`,value:`${e.number}`,isAggregatable:!0,fieldType:"number"}))):Object(m.d)(),O=({contextID:e,host:t,isDraggable:n=!1,ipFilter:a,noLink:i})=>t.id&&t.ip&&(null==a||t.ip.includes(a))?s.a.createElement(s.a.Fragment,null,t.name&&null!=t.name[0]?s.a.createElement(p.b,{id:`host-id-renderer-default-draggable-${E}-${e?`${e}-`:""}host-id`,isDraggable:n,field:"host.id",value:t.id[0],isAggregatable:!0,fieldType:"keyword"},i?s.a.createElement(s.a.Fragment,null,t.id):s.a.createElement(f.d,{hostName:t.name[0]},t.id)):s.a.createElement(s.a.Fragment,null,t.id)):Object(m.d)(),S=(e,t,n,a)=>e&&e.name&&e.name[0]&&e.ip&&(null==t||e.ip.includes(t))?s.a.createElement(p.b,{id:`host-name-renderer-default-draggable-${E}-${n?`${n}-`:""}host-name`,isDraggable:null!=a&&a,field:"host.name",value:e.name[0],isAggregatable:!0,fieldType:"keyword"},s.a.createElement(f.d,{hostName:e.name[0]},e.name?e.name:Object(m.d)())):Object(m.d)(),k=e=>s.a.createElement(f.n,{domain:e},b.n),w=e=>s.a.createElement(f.j,{domain:e,direction:"column"}),I=({attrName:e,displayCount:t=1,idPrefix:n,isDraggable:i=!1,moreMaxHeight:r="200px",render:o,rowItems:l,sourcererScopeId:c})=>{if(null!=l&&l.length>0){const u=l.slice(0,t).map(((t,r)=>{const l=Object(d.i)(`default-field-renderer-default-draggable-${n}-${e}-${t}`);return s.a.createElement(a.EuiFlexItem,{key:l,grow:!1},0!==r&&s.a.createElement(s.a.Fragment,null,",",s.a.createElement(g.i,null)),"string"==typeof t&&s.a.createElement(p.b,{id:l,isDraggable:i,field:e,value:t,isAggregatable:!0,fieldType:"keyword"},o?o(t):t))}));return u.length>0?s.a.createElement(v,{alignItems:"center",gutterSize:"none",component:"span","data-test-subj":"DefaultFieldRendererComponent"},s.a.createElement(a.EuiFlexItem,{grow:!1},u," "),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(M,{attrName:e,idPrefix:n,moreMaxHeight:r,overflowIndexStart:t,render:o,rowItems:l,sourcererScopeId:c}))):Object(m.d)()}return Object(m.d)()},T=s.a.memo(I);T.displayName="DefaultFieldRenderer";const C=s.a.memo((({fieldName:e,idPrefix:t,moreMaxHeight:n,overflowIndexStart:i,render:r,values:l,sourcererScopeId:c})=>{const{timelineId:p}=Object(o.useContext)(h.b),f=Object(o.useMemo)((()=>l.slice(i).reduce(((n,i,o)=>{const l=Object(d.i)(`${t}-${e}-${i}-${o}`);return"string"==typeof i&&null!=e&&n.push(s.a.createElement(a.EuiFlexItem,{key:l},s.a.createElement(u.c,{key:l,mode:u.a.HOVER_DOWN,visibleCellActions:5,showActionTooltips:!0,triggerId:u.d.DEFAULT,data:{value:i,field:e},sourcererScopeId:null!=c?c:y.SourcererScopeName.default,metadata:{scopeId:null!=p?p:void 0}},s.a.createElement(s.a.Fragment,null,r?r(i):Object(m.a)(i))))),n}),[])),[l,i,t,e,p,r,c]);return s.a.createElement("div",{"data-test-subj":"more-container",className:"eui-yScroll",style:{maxHeight:n,paddingRight:"2px"}},s.a.createElement(a.EuiFlexGroup,{gutterSize:"s",direction:"column","data-test-subj":"overflow-items"},f))}));C.displayName="MoreContainer";const M=s.a.memo((({attrName:e,idPrefix:t,moreMaxHeight:n,overflowIndexStart:r=5,render:l,rowItems:c,sourcererScopeId:u})=>{const[d,p]=Object(o.useState)(!1),m=Object(o.useCallback)((()=>p((e=>!e))),[]),f=Object(o.useMemo)((()=>s.a.createElement(s.a.Fragment,null," ,",s.a.createElement(a.EuiButtonEmpty,{size:"xs",onClick:m,"data-test-subj":"DefaultFieldRendererOverflow-button"},`+${c.length-r} `,s.a.createElement(i.FormattedMessage,{id:"xpack.securitySolution.fieldRenderers.moreLabel",defaultMessage:"More"})))),[m,r,c.length]);return s.a.createElement(a.EuiFlexItem,{grow:!1},c.length>r&&s.a.createElement(a.EuiPopover,{id:"popover",button:f,isOpen:d,closePopover:m,repositionOnScroll:!0,panelClassName:"withHoverActions__popover"},s.a.createElement(C,{fieldName:e,idPrefix:t,render:l,values:c,moreMaxHeight:n,overflowIndexStart:r,sourcererScopeId:u})))}));M.displayName="DefaultFieldRendererOverflow"},function(e,t,n){"use strict";n.d(t,"c",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"d",(function(){return d})),n.d(t,"a",(function(){return p}));var a=n(5),i=n(113);const r=a.i18n.translate("xpack.securitySolution.riskScore.overview.hostTitle",{defaultMessage:"Host"}),o=a.i18n.translate("xpack.securitySolution.riskScore.overview.hosts",{defaultMessage:"Hosts"}),s=a.i18n.translate("xpack.securitySolution.riskScore.overview.userTitle",{defaultMessage:"User"}),l=a.i18n.translate("xpack.securitySolution.riskScore.overview.users",{defaultMessage:"Users"}),c=e=>a.i18n.translate("xpack.securitySolution.riskScore.overview.riskScoreTitle",{defaultMessage:"{riskEntity} Risk Score",values:{riskEntity:d(e)}}),u=e=>a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.riskClassificationTitle",{defaultMessage:"{riskEntity} risk classification",values:{riskEntity:d(e)}}),d=(e,t=!1,n=!1)=>t?n?(e===i.w.host?o:l).toLowerCase():(e===i.w.host?r:s).toLowerCase():n?e===i.w.host?o:l:e===i.w.host?r:s,p=a.i18n.translate("xpack.securitySolution.riskScore.overview.alerts",{defaultMessage:"Alerts"})},,function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"c",(function(){return i})),n.d(t,"d",(function(){return g})),n.d(t,"b",(function(){return h}));var a={};n.r(a),n.d(a,"registerProvider",(function(){return s})),n.d(a,"unRegisterProvider",(function(){return l})),n.d(a,"noProviderFound",(function(){return c}));var i={};n.r(i),n.d(i,"getDataProvidersSelector",(function(){return p}));var r=n(22);const o=n.n(r)()("x-pack/security_solution/local/drag_and_drop"),s=o("REGISTER_PROVIDER"),l=o("UNREGISTER_PROVIDER"),c=o("NO_PROVIDER_FOUND");var u=n(139);const d=e=>e.dragAndDrop.dataProviders,p=()=>Object(u.createSelector)(d,(e=>e));var m=n(42),f=n(208);const g={dataProviders:{}},b=({provider:e,dataProviders:t})=>({...t,[e.id]:e}),y=({id:e,dataProviders:t})=>Object(m.omit)(e,t),h=Object(f.reducerWithInitialState)(g).case(s,((e,{provider:t})=>({...e,dataProviders:b({provider:t,dataProviders:e.dataProviders})}))).case(l,((e,{id:t})=>({...e,dataProviders:y({id:t,dataProviders:e.dataProviders})}))).build()},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(42);const i=e=>{var t;return Boolean(null===(t=e.Endpoint.state)||void 0===t?void 0:t.isolation)},r=["http:","https:"],o=e=>{try{if(null!=e){if(""===e)return!1;{const t=new URL(e);if(r.includes(t.protocol)&&e.startsWith(`${t.protocol}//`))return!1}}}catch(e){}return!0};function s(e){return Object(a.isNumber)(e)||!Object(a.isEmpty)(e)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(40),o=n(41);const s=n.n(o)()(r.EuiText).withConfig({displayName:"CodeBlock",componentId:"sc-s548fn-0"})(["font-family:",";"],(e=>e.theme.eui.euiCodeFontFamily)),l=Object(a.memo)((({children:e,inline:t=!1,textColor:n="default",bold:a=!1})=>i.a.createElement(s,{size:"relative",color:n,className:t?"eui-displayInline":""},a?i.a.createElement("strong",null,e):e)));l.displayName="ConsoleCodeBlock"},function(e,t,n){"use strict";n.d(t,"k",(function(){return i})),n.d(t,"j",(function(){return r})),n.d(t,"l",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"m",(function(){return u})),n.d(t,"h",(function(){return d})),n.d(t,"n",(function(){return p})),n.d(t,"e",(function(){return m})),n.d(t,"i",(function(){return f})),n.d(t,"d",(function(){return g})),n.d(t,"p",(function(){return b})),n.d(t,"o",(function(){return y})),n.d(t,"f",(function(){return h})),n.d(t,"g",(function(){return v}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.visualizationActions.moreActions",{defaultMessage:"More actions"}),r=a.i18n.translate("xpack.securitySolution.visualizationActions.inspect",{defaultMessage:"Inspect"}),o=a.i18n.translate("xpack.securitySolution.visualizationActions.openInLens",{defaultMessage:"Open in Lens"}),s=a.i18n.translate("xpack.securitySolution.visualizationActions.addToNewCase",{defaultMessage:"Add to new case"}),l=a.i18n.translate("xpack.securitySolution.visualizationActions.addToExistingCase",{defaultMessage:"Add to existing case"}),c=a.i18n.translate("xpack.securitySolution.visualizationActions.addToCaseSuccessContent",{defaultMessage:"Successfully added visualization to the case"}),u=a.i18n.translate("xpack.securitySolution.visualizationActions.uniqueIps.sourceChartLabel",{defaultMessage:"Src."}),d=a.i18n.translate("xpack.securitySolution.visualizationActions.uniqueIps.destinationChartLabel",{defaultMessage:"Dest."}),p=a.i18n.translate("xpack.securitySolution.visualizationActions.userAuthentications.successChartLabel",{defaultMessage:"Succ."}),m=a.i18n.translate("xpack.securitySolution.visualizationActions.userAuthentications.authentication.successChartLabel",{defaultMessage:"Success"}),f=a.i18n.translate("xpack.securitySolution.visualizationActions.userAuthentications.failChartLabel",{defaultMessage:"Fail"}),g=a.i18n.translate("xpack.securitySolution.visualizationActions.userAuthentications.authentication.failureChartLabel",{defaultMessage:"Failure"}),b=e=>a.i18n.translate("xpack.securitySolution.visualizationActions.uniqueCountLabel",{values:{field:e},defaultMessage:"Unique count of {field}"}),y=e=>a.i18n.translate("xpack.securitySolution.visualizationActions.topValueLabel",{values:{field:e},defaultMessage:"Top values of {field}"}),h=a.i18n.translate("xpack.securitySolution.visualizationActions.countLabel",{defaultMessage:"Count of records"}),v=e=>a.i18n.translate("xpack.securitySolution.visualizationActions.countOfFieldLabel",{values:{field:e},defaultMessage:"Count of {field}"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>e.capabilities.canGetJobs&&e.capabilities.canGetDatafeeds&&e.capabilities.canGetCalendars},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(4);const i={ADD_EXCEPTION_FLYOUT:`${a.l} fetchAlerts addExceptionFlyout`,ALERTS_COUNT_BY_STATUS:`${a.l} fetchAlerts byRulebyCount`,ALERTS_GROUPING:`${a.l} fetchAlerts grouping`,BY_ID:`${a.l} fetchAlerts byId`,BY_RULE_BY_STATUS:`${a.l} fetchAlerts byRulebyStatus`,BY_RULE_ID:`${a.l} fetchAlerts byRuleId`,BY_SEVERITY:`${a.l} fetchAlerts bySeverity`,BY_STATUS:`${a.l} fetchAlerts byStatus`,CASES:`${a.l} fetchAlerts cases`,COUNT:`${a.l} fetchAlerts count`,HISTOGRAM:`${a.l} fetchAlerts histogram`,PREVALENCE:`${a.l} fetchAlerts prevalence`,SOC_TRENDS:`${a.l} fetchAlerts socTrends`,TREE_MAP:`${a.l} fetchAlerts treeMap`,VULNERABLE_HOSTS:`${a.l} fetchAlerts vulnerableHosts`,VULNERABLE_USERS:`${a.l} fetchAlerts vulnerableUsers`}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(8),i=n(2),r=n(239),o=n(303);const s=({fetchMethod:e=r.e,query:t,indexName:n,skip:s,queryName:l})=>{const[c,u]=Object(i.useState)(t),[d,p]=Object(i.useState)({data:null,response:"",request:"",setQuery:u,refetch:null}),[m,f]=Object(i.useState)(!1),g=((e,t)=>{const{startTracking:n}=Object(o.a)();return Object(i.useMemo)((()=>async a=>{const{endTracking:i}=n({name:t});let r;try{r=await e(a),i("success")}catch(e){throw i(a.signal.aborted?"aborted":"error"),e}return r}),[e,t,n])})(e,l);return Object(i.useEffect)((()=>{let e=!0;const t=new AbortController,i=async()=>{try{f(!0);const r=await g({query:c,signal:t.signal});var a;e&&p({data:r,response:JSON.stringify(r,null,2),request:JSON.stringify({index:null!==(a=[n])&&void 0!==a?a:[""],body:c},null,2),setQuery:u,refetch:i})}catch(t){e&&p({data:null,response:"",request:"",setQuery:u,refetch:i})}e&&f(!1)};return Object(a.isEmpty)(c)||s||i(),s&&(f(!1),e=!1,t.abort()),()=>{e=!1,t.abort()}}),[c,n,s,g]),{loading:m,...d}}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"b",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.assistant.useConversation.welcomeConversationTitle",{defaultMessage:"Welcome"}),r=a.i18n.translate("xpack.elasticAssistant.assistant.useConversation.defaultConversationTitle",{defaultMessage:"Default"}),o=a.i18n.translate("xpack.elasticAssistant.assistant.useConversation.elasticAiAssistantTitle",{defaultMessage:"Elastic AI Assistant"}),s=a.i18n.translate("xpack.elasticAssistant.assistant.useConversation.elasticAiAssistantName",{defaultMessage:"Assistant"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return h})),n.d(t,"b",(function(){return v}));var a=n(41),i=n.n(a),r=(n(21),n(2)),o=n.n(r),s=n(40),l=n(1072),c=n(348),u=n(186),d=n(266),p=n(175),m=n(4),f=n(110),g=n(116),b=n(282);const y=Object(r.createContext)(void 0),h=({id:e,indexName:t,scopeId:n,children:a})=>{var i;const h=Object(d.a)(),v=t?null!==(i=Object(u.a)(t,h))&&void 0!==i?i:t:"",[{pageName:x}]=Object(p.a)(),j=x===m.wc.detections?f.SourcererScopeName.detections:f.SourcererScopeName.default,O=Object(g.d)(j),[S,k,w,I]=Object(c.a)({indexName:v,eventId:null!=e?e:"",runtimeMappings:O.runtimeMappings,skip:!e}),T=Object(l.a)(null==w?void 0:w.fields),{ruleId:C}=Object(u.b)(k),{rule:M}=Object(b.a)(C),A=Object(r.useMemo)((()=>{var a;return e&&t&&n?{eventId:e,indexName:t,scopeId:n,browserFields:O.browserFields,dataAsNestedObject:I,dataFormattedForFieldBrowser:k,searchHit:w,investigationFields:null!==(a=null==M?void 0:M.investigation_fields)&&void 0!==a?a:[],getFieldsData:T}:void 0}),[e,t,n,O.browserFields,I,k,w,null==M?void 0:M.investigation_fields,T]);return S?o.a.createElement(E,null,o.a.createElement(s.EuiLoadingSpinner,{size:"xxl"})):o.a.createElement(y.Provider,{value:A},a)},v=()=>{const e=Object(r.useContext)(y);if(!e)throw new Error("LeftPanelContext can only be used within LeftPanelContext provider");return e};var E=i()(s.EuiFlexItem).withConfig({displayName:"_StyledEuiFlexItem",componentId:"sc-1xv2erz-0"})(["align-items:center;justify-content:center;"])},function(e,t,n){"use strict";n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){return o})),n.d(t,"i",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"k",(function(){return u})),n.d(t,"l",(function(){return d})),n.d(t,"j",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"n",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"a",(function(){return y})),n.d(t,"m",(function(){return h})),n.d(t,"o",(function(){return v}));var a=n(5),i=n(225);n.d(t,"p",(function(){return i.c}));const r=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.feedNamePreposition",{defaultMessage:"from"}),o=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.indicatorEnrichmentTitle",{defaultMessage:"Threat match detected"}),s=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.investigationEnrichmentTitle",{defaultMessage:"Enriched with threat intelligence"}),l=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.indicatorEnrichmentTooltipContent",{defaultMessage:"Shows available threat indicator matches."}),c=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.informationAriaLabel",{defaultMessage:"Information"}),u=a.i18n.translate("xpack.securitySolution.eventDetails.ctiSummary.investigationEnrichmentTooltipContent",{defaultMessage:"Shows additional threat intelligence for the alert. The past 30 days were queried by default."}),d=(a.i18n.translate("xpack.securitySolution.alertDetails.noInvestigationEnrichmentsDescription",{defaultMessage:"This alert does not have supplemental threat intelligence data."}),a.i18n.translate("xpack.securitySolution.alertDetails.noEnrichmentsFoundDescription",{defaultMessage:"This alert does not have threat intelligence."})),p=a.i18n.translate("xpack.securitySolution.alertDetails.investigationTimeQueryTitle",{defaultMessage:"Enrichment with Threat Intelligence"}),m=a.i18n.translate("xpack.securitySolution.alertDetails.enrichmentQueryStartDate",{defaultMessage:"Start date"}),f=a.i18n.translate("xpack.securitySolution.alertDetails.enrichmentQueryEndDate",{defaultMessage:"End date"}),g=a.i18n.translate("xpack.securitySolution.alertDetails.refresh",{defaultMessage:"Refresh"}),b=a.i18n.translate("xpack.securitySolution.alertDetails.overview.enrichedDataTitle",{defaultMessage:"Enriched data"}),y=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.hostRiskClassification",{defaultMessage:"Current {riskEntity} risk classification",values:{riskEntity:Object(i.d)(e,!0)}}),h=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.originalHostRiskClassification",{defaultMessage:"Original {riskEntity} risk classification",values:{riskEntity:Object(i.d)(e,!0)}}),v=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.hostRiskDataTitle",{defaultMessage:"{riskEntity} Risk Data",values:{riskEntity:Object(i.d)(e)}})},function(e,t,n){"use strict";e.exports=function(e){return-2===e||-1===e||32===e}},function(e,t,n){"use strict";n.d(t,"a",(function(){return M})),n.d(t,"c",(function(){return A})),n.d(t,"b",(function(){return L}));var a=n(43),i=n(493);const r=a.type({command:a.keyof((o=i.a,Object.fromEntries(o.map((e=>[e,null]))))),comment:a.union([a.string,a[void 0]])});var o;const s=a.string,l=(a.union([s,a[void 0]]),a.type({agents:a.array(a.string),allAgentsSelected:a.boolean,platformsSelected:a.array(a.string),policiesSelected:a.array(a.string)})),c=(a.union([l,a[void 0]]),a.string),u=(a.union([c,a[void 0]]),a.string),d=a.union([u,a[void 0]]),p=a.string,m=(a.union([p,a[void 0]]),a.string),f=a.union([m,a[void 0]]),g=a.string,b=(a.union([g,a[void 0]]),a.boolean),y=a.union([b,a[void 0]]),h=a.boolean,v=a.union([h,a[void 0]]),E=a.string,x=a.union([E,a[void 0]]),j=a.string,O=(a.union([j,a[void 0]]),a.type({name:a.union([a.string,a[void 0]]),url:a.union([a.string,a[void 0]])})),S=(a.union([O,a[void 0]]),a.record(a.string,a.partial({field:a.string,value:a.union([a.string,a.array(a.string)])}))),k=a.union([S,a[void 0]]),w=(a.union([a.array(a.string),a[void 0]]),a.array(a.type({id:s,query:p,ecs_mapping:k,version:f,platform:d,removed:v,snapshot:y}))),I=a.record(a.string,a.type({query:p,id:s,ecs_mapping:k,version:f,platform:d,saved_query_id:x,removed:v,snapshot:y})),T=(a.union([w,I]),a.union([w,a[void 0]]),a.type({query:a.union([a.string,a[void 0]]),ecs_mapping:a.union([S,a[void 0]]),queries:a.union([w,a[void 0]]),pack_id:a.union([a.string,a[void 0]]),saved_query_id:a.union([a.string,a[void 0]])})),C=a.type({query:a.union([a.string,a[void 0]]),ecsMapping:a.union([S,a[void 0]]),queries:a.union([w,a[void 0]]),packId:a.union([a.string,a[void 0]]),savedQueryId:a.union([a.string,a[void 0]])});let M;!function(e){e.OSQUERY=".osquery",e.ENDPOINT=".endpoint"}(M||(M={}));const A=Object.values(M),_=a.strict({actionTypeId:a.literal(M.OSQUERY),params:C}),F=a.strict({actionTypeId:a.literal(M.ENDPOINT),params:r}),D=a.union([_,F]),N=(a.union([a.array(D),a[void 0]]),a.strict({action_type_id:a.literal(M.OSQUERY),params:T})),P=a.strict({action_type_id:a.literal(M.ENDPOINT),params:r}),R=a.union([N,P]),L=a.array(R)},function(e,t,n){"use strict";n.d(t,"e",(function(){return c})),n.d(t,"k",(function(){return u})),n.d(t,"j",(function(){return d})),n.d(t,"h",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"i",(function(){return f})),n.d(t,"d",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"c",(function(){return y})),n.d(t,"f",(function(){return h})),n.d(t,"g",(function(){return v}));var a=n(63),i=n(4),r=n(215),o=n(102),s=n(759),l=n(706);const c=async({query:e,signal:t})=>o.b.get().http.fetch(i.db,{method:"POST",body:JSON.stringify(e),signal:t}),u=async({query:e,status:t,signal:n})=>o.b.get().http.fetch(i.ib,{method:"POST",body:JSON.stringify({conflicts:"proceed",status:t,query:e}),signal:n}),d=async({signalIds:e,status:t,signal:n})=>o.b.get().http.fetch(i.ib,{method:"POST",body:JSON.stringify({status:t,signal_ids:e}),signal:n}),p=async({signal:e})=>o.b.get().http.fetch(i.bb,{method:"GET",signal:e}),m=async({signal:e})=>o.b.get().http.fetch(i.Z,{method:"GET",signal:e}),f=async({signal:e})=>o.b.get().http.fetch(i.cb,{method:"GET",signal:e}),g=async({signal:e})=>o.b.get().http.fetch(i.bb,{method:"POST",signal:e}),b=async({endpointId:e,comment:t="",caseIds:n})=>Object(s.a)({endpoint_ids:[e],comment:t,case_ids:n}),y=async({endpointId:e,comment:t="",caseIds:n})=>Object(s.b)({endpoint_ids:[e],comment:t,case_ids:n}),h=async({alertId:e,owner:t})=>o.b.get().http.fetch(Object(a.getCasesFromAlertsUrl)(e),{method:"get",query:{...t.length>0?{owner:t}:{}}}),v=async({agentId:e,signal:t})=>o.b.get().http.fetch(Object(l.a)(r.p,{id:e}),{method:"GET",signal:t,version:"2023-10-31"})},function(e,t,n){"use strict";var a=Number.isNaN||function(e){return"number"==typeof e&&e!=e};function i(e,t){if(e.length!==t.length)return!1;for(var n=0;n<e.length;n++)if(!((i=e[n])===(r=t[n])||a(i)&&a(r)))return!1;var i,r;return!0}e.exports=function(e,t){void 0===t&&(t=i);var n=null;function a(){for(var a=[],i=0;i<arguments.length;i++)a[i]=arguments[i];if(n&&n.lastThis===this&&t(a,n.lastArgs))return n.lastResult;var r=e.apply(this,a);return n={lastResult:r,lastArgs:a,lastThis:this},r}return a.clear=function(){n=null},a}},function(e,t,n){"use strict";n.r(t),n.d(t,"updateNote",(function(){return r})),n.d(t,"addNotes",(function(){return o})),n.d(t,"deleteNote",(function(){return s})),n.d(t,"addError",(function(){return l})),n.d(t,"removeError",(function(){return c})),n.d(t,"addErrorHash",(function(){return u}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/app"),r=i("UPDATE_NOTE"),o=i("ADD_NOTE"),s=i("DELETE_NOTE"),l=i("ADD_ERRORS"),c=i("REMOVE_ERRORS"),u=i("ADD_ERROR_HASH")},function(e,t,n){"use strict";n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return x}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(103),l=n(40),c=n(114),u=n(190),d=n(111),p=n(178),m=n(118),f=n(106),g=n(105),b=n(138),y=n(158),h=n(110),v=n(179);const E=({timelineId:e,timelineType:t,closeGearMenu:n})=>{const a=Object(s.useDispatch)(),i=Object(r.useMemo)((()=>y.d.defaultDataViewSelector()),[]),{id:o,patternList:l}=Object(g.a)(i),{timelineFullScreen:f,setTimelineFullScreen:E}=Object(p.c)(),x=Object(g.a)(b.d.globalTimeRangeSelector),j=Object(r.useCallback)((({id:e,show:n,timeRange:i})=>{const r=null!=i?i:x;e===m.c.active&&f&&E(!1),a(y.a.setSelectedDataView({id:h.SourcererScopeName.timeline,selectedDataViewId:o,selectedPatterns:l})),a(d.a.createTimeline({columns:u.b,dataViewId:o,id:e,indexNames:l,show:n,timelineType:t})),a(d.a.setTimelineUpdatedAt({id:m.c.active,updated:void 0})),a(b.b.addLinkTo([c.a.global,c.a.timeline])),a(v.a.addNotes({notes:[]})),i&&a(b.b.removeLinkTo([c.a.timeline,c.a.global])),"absolute"===r.kind?a(b.b.setAbsoluteRangeDatePicker({...r,id:c.a.timeline})):"relative"===r.kind&&a(b.b.setRelativeRangeDatePicker({...r,id:c.a.timeline}))}),[a,x,o,l,E,f,t]);return Object(r.useCallback)((a=>{j({id:e,show:!0,timelineType:t,timeRange:null==a?void 0:a.timeRange}),"function"==typeof n&&n()}),[j,e,t,n])},x=({timelineId:e,timelineType:t,closeGearMenu:n})=>{const a=E({timelineId:e,timelineType:t,closeGearMenu:n});return{getButton:Object(r.useCallback)((({outline:e,title:n,iconType:r="plusInCircle",fill:s=!0,isDisabled:c=!1})=>{const u={iconType:r,onClick:()=>a(),fill:s},d=t===f.l.template?"template-timeline-new":"timeline-new",{fill:p,...m}=u;return e?o.a.createElement(l.EuiButton,i()({"data-test-subj":`${d}-with-border`},u),n):o.a.createElement(l.EuiButtonEmpty,i()({"data-test-subj":d,color:"text"},m),n)}),[a,t])}}},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"g",(function(){return r})),n.d(t,"h",(function(){return o})),n.d(t,"j",(function(){return s})),n.d(t,"k",(function(){return l})),n.d(t,"i",(function(){return c})),n.d(t,"o",(function(){return u})),n.d(t,"n",(function(){return d})),n.d(t,"m",(function(){return p})),n.d(t,"l",(function(){return m})),n.d(t,"u",(function(){return f})),n.d(t,"t",(function(){return g})),n.d(t,"s",(function(){return b})),n.d(t,"r",(function(){return y})),n.d(t,"d",(function(){return h})),n.d(t,"b",(function(){return v})),n.d(t,"a",(function(){return E})),n.d(t,"c",(function(){return x})),n.d(t,"p",(function(){return j})),n.d(t,"q",(function(){return O})),n.d(t,"f",(function(){return S})),n.d(t,"v",(function(){return k})),n.d(t,"w",(function(){return w}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights",{defaultMessage:"Insights"}),r=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_process_ancestry",{defaultMessage:"Related alerts by process ancestry"}),o=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_process_ancestry_count",{defaultMessage:"{count} {count, plural, =1 {alert} other {alerts}} by process ancestry",values:{count:e}}),s=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_process_ancestry_error",{defaultMessage:"Failed to fetch alerts."}),l=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.processAncestryFilter",{defaultMessage:"Process Ancestry Alert IDs"}),c=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_process_ancestry_empty",{defaultMessage:"There are no related alerts by process ancestry."}),u=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_source_event_loading",{defaultMessage:"Loading related alerts by source event"}),d=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_session_error",{defaultMessage:"Failed to load related alerts by session"}),p=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_session_empty",{defaultMessage:"There are no related alerts by session"}),m=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_session_count",{defaultMessage:"{count} {count, plural, =1 {alert} other {alerts}} related by session",values:{count:e}}),f=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_source_event_loading",{defaultMessage:"Loading related alerts by source event"}),g=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_source_event_error",{defaultMessage:"Failed to load related alerts by source event"}),b=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_alerts_by_source_event_empty",{defaultMessage:"There are no related alerts by source event"}),y=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights_related_alerts_by_source_event_count",{defaultMessage:"{count} {count, plural, =1 {alert} other {alerts}} related by source event",values:{count:e}}),h=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_cases_loading",{defaultMessage:"Loading related cases"}),v=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_cases_error",{defaultMessage:"Failed to load related cases"}),E=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.related_cases_count",{defaultMessage:"{count} {count, plural, =1 {case} other {cases}} related to this alert",values:{count:e}}),x=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.relatedCasesFailure",{defaultMessage:'Unable to load related cases: "{error}"',values:{error:e}}),j=a.i18n.translate("xpack.securitySolution.alertDetails.overview.simpleAlertTable.error",{defaultMessage:"Failed to load the alerts."}),O=a.i18n.translate("xpack.securitySolution.alertDetails.overview.limitedAlerts",{defaultMessage:"Showing only the latest 10 alerts. View the rest of alerts in timeline."}),S=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.alertUpsellTitle",{defaultMessage:"Get more insights with a platinum subscription"}),k=e=>a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.suppressedAlertsCount",{defaultMessage:"{count} suppressed {count, plural, =1 {alert} other {alerts}}",values:{count:e}}),w=a.i18n.translate("xpack.securitySolution.alertDetails.overview.insights.suppressedAlertsCountTechnicalPreview",{defaultMessage:"Technical Preview"})},function(e,t,n){"use strict";n.d(t,"g",(function(){return c})),n.d(t,"a",(function(){return L})),n.d(t,"f",(function(){return B})),n.d(t,"c",(function(){return V})),n.d(t,"b",(function(){return Ve})),n.d(t,"h",(function(){return He})),n.d(t,"i",(function(){return d})),n.d(t,"d",(function(){return st})),n.d(t,"e",(function(){return Ae})),n.d(t,"j",(function(){return Re}));var a=n(2),i=n.n(a),r=n(40),o=n(21);const s={strict:!0,fields:{created_by:{type:"string"},description:{type:"string"},id:{type:"string"},item_id:{type:"string"},list_id:{type:"string"},name:{type:"string"},os_types:{type:"string"},tags:{type:"string"}}},l=({addExceptionButtonText:e,placeholdertext:t,canAddException:n,listType:i,isSearching:l,dataTestSubj:c,filters:u=[],isButtonFilled:d=!0,buttonIconType:p,onSearch:m,onAddExceptionClick:f})=>{const g=Object(a.useCallback)((({queryText:e})=>{m({search:e})}),[m]),b=Object(a.useCallback)((()=>{f(i)}),[f,i]);return Object(o.jsx)(r.EuiFlexGroup,{alignItems:"center"},Object(o.jsx)(r.EuiFlexItem,{grow:!0},Object(o.jsx)(r.EuiSearchBar,{box:{placeholder:t,incremental:!1,schema:s,"data-test-subj":`${c||""}searchBar`},filters:u,onChange:g})),!n&&Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(r.EuiButton,{"data-test-subj":`${c||""}Button`,onClick:b,isDisabled:l,fill:d,iconType:p},e)))};l.displayName="SearchBarComponent";const c=i.a.memo(l);c.displayName="SearchBar";var u=n(48);let d,p;!function(e){e.ERROR="error",e.EMPTY="empty",e.EMPTY_SEARCH="empty_search",e.LOADING="loading",e.SEARCHING="searching",e.DELETING="deleting"}(d||(d={})),function(e){e.ENDPOINT="endpoint",e.DETECTION="empty",e.RULE_DEFAULT="empty_search"}(p||(p={}));var m=n(5);const f=m.i18n.translate("exceptionList-components.empty.viewer.state.empty.title",{defaultMessage:"Add exceptions to this list"}),g=m.i18n.translate("exceptionList-components.empty.viewer.state.empty.body",{defaultMessage:"There is no exception in your list. Create your first exception."}),b=m.i18n.translate("exceptionList-components.empty.viewer.state.empty_search.search.title",{defaultMessage:"No results match your search criteria"}),y=m.i18n.translate("exceptionList-components.empty.viewer.state.empty_search.body",{defaultMessage:"Try modifying your search"}),h=m.i18n.translate("exceptionList-components.empty.viewer.state.error_title",{defaultMessage:"Unable to load exception items"}),v=m.i18n.translate("exceptionList-components.empty.viewer.state.error_body",{defaultMessage:"There was an error loading the exception items. Contact your administrator for help."}),E=m.i18n.translate("exceptionList-components.exception_list_header_export_action",{defaultMessage:"Export exception list"}),x=m.i18n.translate("exceptionList-components.exception_list_header_delete_action",{defaultMessage:"Delete exception list"}),j=m.i18n.translate("exceptionList-components.exception_list_header_duplicate_action",{defaultMessage:"Duplicate exception list"}),O=m.i18n.translate("exceptionList-components.exception_list_header_link_rules_button",{defaultMessage:"Link rules"}),S=e=>m.i18n.translate("exceptionList-components.exception_list_header_linked_rules",{values:{noOfRules:e},defaultMessage:"Linked to {noOfRules} rules"}),k=m.i18n.translate("exceptionList-components.exception_list_header_breadcrumb",{defaultMessage:"Shared Exception Lists"}),w=m.i18n.translate("exceptionList-components.exception_list_header_list_id",{defaultMessage:"List ID"}),I=m.i18n.translate("exceptionList-components.exception_list_header_name",{defaultMessage:"Add a name"}),T=m.i18n.translate("exceptionList-components.exception_list_header_description",{defaultMessage:"Add a description"}),C=m.i18n.translate("exceptionList-components.exception_list_header_edit_modal_save_button",{defaultMessage:"Save"}),M=m.i18n.translate("exceptionList-components.exception_list_header_edit_modal_cancel_button",{defaultMessage:"Cancel"}),A=m.i18n.translate("exceptionList-components.exception_list_header_Name_textbox",{defaultMessage:"Name"}),_=m.i18n.translate("exceptionList-components.exception_list_header_description_textbox",{defaultMessage:"Description (optional)"}),F=m.i18n.translate("exceptionList-components.exception_list_header_description_textboxexceptionList-components.exception_list_header_name_required_eror",{defaultMessage:"List name cannot be empty"});var D=n(1267),N=n.n(D);const P=Object(o.css)("margin:",u.euiThemeVars.euiSizeL," 0;padding:",u.euiThemeVars.euiSizeL," 0;",""),R=({title:e,body:t,buttonText:n,listType:i,isReadOnly:s,viewerStatus:l,onEmptyButtonStateClick:c})=>{const{euiTheme:u}=Object(r.useEuiTheme)(),p=Object(a.useMemo)((()=>{switch(l){case d.ERROR:return{color:"danger",iconType:"error",title:Object(o.jsx)("h2",{"data-test-subj":"errorTitle"},e||h),body:Object(o.jsx)("p",{"data-test-subj":"errorBody"},t||v),"data-test-subj":"errorViewerState"};case d.EMPTY:return{color:"subdued",iconType:"plusInCircle",iconColor:u.colors.darkestShade,title:Object(o.jsx)("h2",{"data-test-subj":"emptyTitle"},e||f),body:Object(o.jsx)("p",{"data-test-subj":"emptyBody"},t||g),"data-test-subj":"emptyViewerState",actions:[Object(o.jsx)(r.EuiButton,{"data-test-subj":"emptyStateButton",onClick:c,iconType:"plusInCircle",color:"primary",isDisabled:s,fill:!0},n||(a=i||"rule",m.i18n.translate("exceptionList-components.empty.viewer.state.empty.viewer_button",{values:{exceptionType:a},defaultMessage:"Create {exceptionType} exception"})))]};case d.EMPTY_SEARCH:return{color:"plain",layout:"horizontal",hasBorder:!0,hasShadow:!1,icon:Object(o.jsx)(r.EuiImage,{size:"fullWidth",alt:"",src:N.a}),title:Object(o.jsx)("h3",{"data-test-subj":"emptySearchTitle"},e||b),body:Object(o.jsx)("p",{"data-test-subj":"emptySearchBody"},t||y),"data-test-subj":"emptySearchViewerState"}}var a}),[l,u.colors.darkestShade,e,t,c,s,n,i]);return Object(o.jsx)(r.EuiSkeletonText,{lines:4,"data-test-subj":"loadingViewerState",isLoading:l===d.LOADING||l===d.SEARCHING},Object(o.jsx)(r.EuiPanel,{css:P,color:"empty_search"===l?"subdued":"transparent"},Object(o.jsx)(r.EuiEmptyPrompt,p)))},L=i.a.memo(R);L.displayName="EmptyViewerState";const q=({dataTestSubj:e,ariaLabel:t,pagination:n,onPaginationChange:i})=>{const{pageIndex:s,pageCount:l,pageSize:c,pageSizeOptions:u,handleItemsPerPageChange:d,handlePageIndexChange:p}=(({pagination:e,onPaginationChange:t})=>{const{pageIndex:n,totalItemCount:i,pageSize:r,pageSizeOptions:o}=e,s=Object(a.useMemo)((()=>isFinite(i/r)?Math.ceil(i/r):0),[r,i]),l=Object(a.useCallback)((e=>{t({pagination:{pageIndex:n,pageSize:e,totalItemCount:i}})}),[n,i,t]),c=Object(a.useCallback)((e=>{t({pagination:{pageIndex:e,pageSize:r,totalItemCount:i}})}),[r,i,t]);return{pageCount:s,pageIndex:n,pageSize:r,pageSizeOptions:o,handleItemsPerPageChange:l,handlePageIndexChange:c}})({pagination:n,onPaginationChange:i});return Object(o.jsx)(r.EuiTablePagination,{"data-test-subj":e,"aria-label":t,pageCount:l,activePage:s,itemsPerPage:c,onChangePage:p,onChangeItemsPerPage:d,itemsPerPageOptions:u})};q.displayName="PaginationComponent";const B=i.a.memo(q);B.displayName="Pagination";const z=Object(o.css)("margin:",u.euiThemeVars.euiSize," 0;&div:first-child{margin:",u.euiThemeVars.euiSizeXS," 0 ",u.euiThemeVars.euiSize,";}",""),$=({lastUpdated:e,viewerStatus:t,isReadOnly:n,exceptions:a,listType:s,ruleReferences:l,emptyViewerTitle:c,emptyViewerBody:u,emptyViewerButtonText:d,pagination:p,dataTestSubj:m,editActionLabel:f,deleteActionLabel:g,securityLinkAnchorComponent:b,exceptionsUtilityComponent:y,formattedDateComponent:h,getFormattedComments:v,onPaginationChange:E,onDeleteException:x,onEditExceptionItem:j,onCreateExceptionListItem:O})=>{const S=y;return!a.length||t?Object(o.jsx)(L,{isReadOnly:n,title:c,viewerStatus:t,buttonText:d,body:u,onEmptyButtonStateClick:O}):Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(S,{pagination:p,lastUpdated:e}),Object(o.jsx)(r.EuiFlexGroup,{direction:"column",gutterSize:"none",className:"eui-yScrollWithShadows"},Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(r.EuiFlexGroup,{css:z,"data-test-subj":`${m||""}exceptionsContainer`,direction:"column",gutterSize:"s"},a.map((e=>Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":`${m||""}exceptionItemContainer`,grow:!1,key:e.id},Object(o.jsx)(Ve,{key:`${e.id}exceptionItemCardKey`,dataTestSubj:`${m||""}exceptionItemCard`,disableActions:n,exceptionItem:e,listType:s,ruleReferences:Object.keys(l).length&&l[e.list_id]?l[e.list_id].referenced_rules:[],editActionLabel:f,deleteActionLabel:g,onDeleteException:x,onEditException:j,securityLinkAnchorComponent:b,formattedDateComponent:h,getFormattedComments:v}))))))),Object(o.jsx)(B,{dataTestSubj:`${m||""}pagination`,pagination:p,onPaginationChange:E}))};$.displayName="ExceptionItemsComponent";const V=i.a.memo($);V.displayName="ExceptionsItems";var U=n(180);const G=Object(o.css)("margin-left:",u.euiThemeVars.euiSizeXL,";margin-bottom:",u.euiThemeVars.euiSizeXS,";padding-top:",u.euiThemeVars.euiSizeXS,";",""),H=Object(U.cx)("eui-xScroll","\n  border: 1px;\n  border-color: #d3dae6;\n  border-style: solid;\n"),W=Object(o.css)("display:flex;align-items:center;margin-left:",u.euiThemeVars.euiSizeS,";",""),Q={name:"s5xdrg",styles:"display:flex;align-items:center"},Y=e=>m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.editItemButton",{values:{listType:e},defaultMessage:"Edit {listType} exception"}),K=e=>m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.deleteItemButton",{values:{listType:e},defaultMessage:"Delete {listType} exception"}),X=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.createdLabel",{defaultMessage:"Created"}),J=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.updatedLabel",{defaultMessage:"Updated"}),Z=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.expiresLabel",{defaultMessage:"Expires at"}),ee=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.expiredLabel",{defaultMessage:"Expired at"}),te=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.metaDetailsBy",{defaultMessage:"by"}),ne=e=>m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.showCommentsLabel",{values:{comments:e},defaultMessage:"Show {comments, plural, =1 {comment} other {comments}} ({comments})"}),ae=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.matchOperator",{defaultMessage:"IS"}),ie=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.matchOperator.not",{defaultMessage:"IS NOT"}),re=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.wildcardMatchesOperator",{defaultMessage:"MATCHES"}),oe=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.wildcardDoesNotMatchOperator",{defaultMessage:"DOES NOT MATCH"}),se=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.nestedOperator",{defaultMessage:"has"}),le=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.matchAnyOperator",{defaultMessage:"is one of"}),ce=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.matchAnyOperator.not",{defaultMessage:"is not one of"}),ue=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.existsOperator",{defaultMessage:"exists"}),de=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.existsOperator.not",{defaultMessage:"does not exist"}),pe=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.listOperator",{defaultMessage:"included in"}),me=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.listOperator.not",{defaultMessage:"is not included in"}),fe=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.and",{defaultMessage:"AND"}),ge=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.os",{defaultMessage:"OS"}),be=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.windows",{defaultMessage:"Windows"}),ye=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.linux",{defaultMessage:"Linux"}),he=m.i18n.translate("exceptionList-components.exceptions.exceptionItem.card.conditions.macos",{defaultMessage:"Mac"});var ve=n(120);const Ee=Object.freeze({linux:ye,mac:he,macos:he,windows:be}),xe=Object.freeze({[ve.d.NESTED]:se,[ve.d.MATCH_ANY]:le,[ve.d.MATCH]:ae,[ve.d.WILDCARD]:re,[ve.d.EXISTS]:ue,[ve.d.LIST]:pe}),je=Object.freeze({[ve.d.MATCH_ANY]:ce,[ve.d.MATCH]:ie,[ve.d.WILDCARD]:oe,[ve.d.EXISTS]:de,[ve.d.LIST]:me}),Oe=(e,t)=>"match_any"===e&&Array.isArray(t)?t.map(((e,t)=>Object(o.jsx)(r.EuiBadge,{key:t,"data-test-subj":`matchAnyBadge${t}`,color:"hollow"},e))):null!=t?t:"",Se=(e,t)=>{var n,a;return"nested"===e?"":"included"===t?null!==(n=xe[e])&&void 0!==n?n:e:null!==(a=je[e])&&void 0!==a?a:e},ke=(e,t,n)=>Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(r.EuiExpression,{description:Se(e,t),value:Oe(e,n),"data-test-subj":"entryValueExpression"}),Object(o.jsx)(He,{value:n})),we=Object(a.memo)((({entry:e,index:t,isNestedEntry:n=!1,dataTestSubj:a})=>{const{field:s,type:l}=e,c=(e=>"list"===e.type?e.list.id:"value"in e?e.value:"")(e),u="operator"in e?e.operator:"",d=`${s}${l}${c}${t}`;return Object(o.jsx)("div",{"data-test-subj":`${a||""}${d}EntryContent`,key:d},Object(o.jsx)("div",{css:Q},n?Object(o.jsx)(r.EuiFlexGroup,{responsive:!0,css:G,direction:"row",alignItems:"center",gutterSize:"m","data-test-subj":`${a||""}NestedEntry`},Object(o.jsx)(r.EuiToken,{"data-test-subj":"nstedEntryIcon",iconType:"tokenNested",size:"s"}),Object(o.jsx)("div",{css:W},Object(o.jsx)(r.EuiExpression,{description:"",value:s,color:"subdued"}),ke(l,u,c))):Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(r.EuiExpression,{description:0===t?"":fe,value:s,color:0===t?"primary":"subdued","data-test-subj":`${a||""}SingleEntry`}),ke(l,u,c))))}));we.displayName="EntryContent";const Ie=Object(a.memo)((({os:e,dataTestSubj:t})=>{const n=Object(a.useMemo)((()=>e.map((e=>{var t;return null!==(t=Ee[e])&&void 0!==t?t:e})).join(", ")),[e]);return n?Object(o.jsx)("div",{"data-test-subj":`${t||""}Os`},Object(o.jsx)("strong",null,Object(o.jsx)(r.EuiExpression,{"data-test-subj":"osLabel",description:"",value:ge}),Object(o.jsx)(r.EuiExpression,{"data-test-subj":"osValue",description:ae,value:n}))):null}));Ie.displayName="OsCondition";const Te=Object(a.memo)((({os:e,entries:t,dataTestSubj:n})=>Object(o.jsx)(r.EuiPanel,{color:"subdued",hasBorder:!0,hasShadow:!1,"data-test-subj":n,className:H},null!=e&&e.length?Object(o.jsx)(Ie,{os:e,dataTestSubj:n}):null,t.map(((e,t)=>{const a="entries"in e?e.entries:[];return Object(o.jsx)("div",{key:`ExceptionItemCardConditionsContainer${t}`},Object(o.jsx)(we,{key:`entry${t}`,entry:e,index:t,dataTestSubj:n}),null!=a&&a.length?a.map(((e,a)=>Object(o.jsx)(we,{key:`nestedEntry${t}${a}`,entry:e,index:a,isNestedEntry:!0,dataTestSubj:n}))):null)})))));Te.displayName="ExceptionItemCardConditions";const Ce={name:"qeawqx",styles:"max-height:300px;height:100%;overflow-x:hidden;overflow-y:auto"},Me=({text:e,dataTestSubj:t,actions:n,disableActions:i,emptyButton:s,useCustomActions:l,iconType:c,iconSide:u="left",anchorPosition:d="downCenter",panelPaddingSize:p="s"})=>{const[m,f]=Object(a.useState)(!1),g=()=>f((e=>!e)),b=()=>f(!1),y=Object(a.useMemo)((()=>l||null===n?n:n.map((e=>Object(o.jsx)(r.EuiContextMenuItem,{"data-test-subj":`${t||""}ActionItem${e.key}`,key:e.key,icon:e.icon,disabled:e.disabled,layoutAlign:"center",onClick:t=>{b(),"function"==typeof e.onClick&&e.onClick(t)}},e.label)))),[n,t,l]);return Object(o.jsx)(r.EuiFlexGroup,{responsive:!0},Object(o.jsx)(r.EuiPopover,{button:s?Object(o.jsx)(r.EuiButtonEmpty,{isDisabled:i,onClick:g,iconType:c||void 0,iconSide:u,"data-test-subj":`${t||""}EmptyButton`,"aria-label":"Header menu Button Empty"},e):Object(o.jsx)(r.EuiButtonIcon,{isDisabled:i,onClick:g,iconType:c||"boxesHorizontal","data-test-subj":`${t||""}ButtonIcon`,"aria-label":"Header menu Button Icon"},e),onClick:e=>e.stopPropagation(),panelPaddingSize:p,isOpen:m,closePopover:b,anchorPosition:d,"data-test-subj":`${t||""}Items`},y?Object(o.jsx)(r.EuiContextMenuPanel,{css:Ce,className:"eui-scrollBar","data-test-subj":`${t||""}MenuPanel`,size:"s",items:y}):null))};Me.displayName="HeaderMenuComponent";const Ae=i.a.memo(Me);Ae.displayName="HeaderMenu";const _e=Object(a.memo)((({item:e,actions:t,disableActions:n=!1,dataTestSubj:a})=>Object(o.jsx)(r.EuiFlexGroup,{responsive:!0,"data-test-subj":a,justifyContent:"spaceBetween"},Object(o.jsx)(r.EuiFlexItem,{grow:9},Object(o.jsx)(r.EuiTitle,{size:"xs",textTransform:"uppercase","data-test-subj":`${a}Title`},Object(o.jsx)("h3",null,e.name))),Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(Ae,{iconType:"boxesHorizontal",disableActions:n,actions:t,"aria-label":"Exception item actions menu",dataTestSubj:a,anchorPosition:"downCenter"})))));_e.displayName="ExceptionItemCardHeader";const Fe=Object(o.css)("font-family:",u.euiThemeVars.euiFontFamily,";",""),De=Object(a.memo)((({label:e,lastUpdate:t,lastUpdateValue:n,dataTestSubj:a})=>Object(o.jsx)(r.EuiFlexGroup,{"data-test-subj":`${a||""}metaInfoDetails`,alignItems:"center",gutterSize:"s",wrap:!0,responsive:!0},Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(r.EuiText,{size:"xs",css:Fe},e)),Object(o.jsx)(r.EuiFlexItem,{grow:!1,"data-test-subj":`${a||""}lastUpdate`},Object(o.jsx)(r.EuiBadge,{color:"default",css:Fe},t)),null!=n&&Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(r.EuiText,{size:"xs",css:Fe},te)),Object(o.jsx)(r.EuiFlexItem,{grow:!1,"data-test-subj":`${a||""}lastUpdateValue`},Object(o.jsx)(r.EuiFlexGroup,{responsive:!0,gutterSize:"xs",alignItems:"center"},Object(o.jsx)(r.EuiFlexItem,{grow:!1},Object(o.jsx)(r.EuiBadge,{color:"hollow",css:Fe},n))))))));De.displayName="MetaInfoDetails";const Ne=Object(o.css)("border-bottom:1px solid ",u.euiThemeVars.euiColorLightShade,";",""),Pe=Object(o.css)("color:",u.euiThemeVars.euiColorPrimary,";flex-basis:content;",""),Re=({dataTestSubj:e,linkedRules:t,securityLinkAnchorComponent:n,leftIcon:a=""})=>{if(!t.length||null===n)return null;const i=n;return t.map((n=>Object(o.jsx)(r.EuiContextMenuItem,{css:t.length>1?Ne:"","data-test-subj":`${e||""}ActionItem${n.id}`,key:n.id},Object(o.jsx)(r.EuiFlexGroup,{gutterSize:"s",css:Pe},a?Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":`${e||""}LeftIcon`,grow:!1},Object(o.jsx)(r.EuiIcon,{type:a})):null,Object(o.jsx)(r.EuiFlexItem,{css:Pe},Object(o.jsx)(i,{external:!0,referenceName:n.name,referenceId:n.id}))))))},Le=Object(o.css)("border-right:1px solid #d3dae6;padding:",u.euiThemeVars.euiSizeS," ",u.euiThemeVars.euiSizeM," ",u.euiThemeVars.euiSizeS," 0;",""),qe=Object(a.memo)((({item:e,rules:t,dataTestSubj:n,securityLinkAnchorComponent:s,formattedDateComponent:l})=>{const c=l,u=Object(a.useMemo)((()=>Re({dataTestSubj:n,linkedRules:t,securityLinkAnchorComponent:s})),[n,t,s]),d=Object(a.useMemo)((()=>!!e.expire_time&&new Date(e.expire_time)<=new Date),[e]);return Object(o.jsx)(r.EuiFlexGroup,{alignItems:"center",responsive:!0,gutterSize:"s","data-test-subj":n},null!==c&&Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(r.EuiFlexItem,{css:Le,grow:!1},Object(o.jsx)(De,{label:X,lastUpdate:Object(o.jsx)(c,{"data-test-subj":"{dataTestSubj||''}formattedDateComponentCreatedBy",fieldName:"created_at",value:e.created_at}),lastUpdateValue:e.created_by,dataTestSubj:`${n||""}CreatedBy`})),Object(o.jsx)(r.EuiFlexItem,{css:Le,grow:!1},Object(o.jsx)(De,{label:J,lastUpdate:Object(o.jsx)(c,{"data-test-subj":"{dataTestSubj||''}formattedDateComponentUpdatedBy",fieldName:"updated_at",value:e.updated_at}),lastUpdateValue:e.updated_by,dataTestSubj:`${n||""}UpdatedBy`})),null!=e.expire_time&&Object(o.jsx)(i.a.Fragment,null,Object(o.jsx)(r.EuiFlexItem,{css:Le,grow:!1},Object(o.jsx)(De,{label:d?ee:Z,lastUpdate:Object(o.jsx)(c,{"data-test-subj":"{dataTestSubj||''}formattedDateComponentExpireTime",fieldName:"expire_time",value:e.expire_time}),dataTestSubj:`${n||""}ExpireTime`})))),Object(o.jsx)(r.EuiFlexItem,null,Object(o.jsx)(Ae,{emptyButton:!0,useCustomActions:!0,iconType:"list",actions:u,disableActions:!1,text:(p=t.length,m.i18n.translate("exceptionList-components.exceptions.card.exceptionItem.affectedRules",{values:{numRules:p},defaultMessage:"Affects {numRules} {numRules, plural, =1 {rule} other {rules}}"})),dataTestSubj:n})));var p}));qe.displayName="ExceptionItemCardMetaInfo";const Be=Object(o.css)("color:",u.euiThemeVars.euiColorPrimary,";",""),ze=Object(a.memo)((({comments:e,dataTestSubj:t})=>e.length?Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":t},Object(o.jsx)(r.EuiAccordion,{id:"exceptionItemCardComments",buttonContent:Object(o.jsx)(r.EuiText,{size:"s",css:Be,"data-test-subj":`${t||""}TextButton`},ne(e.length)),arrowDisplay:"none","data-test-subj":"exceptionItemCardComments"},Object(o.jsx)(r.EuiPanel,{"data-test-subj":"accordionContentPanel",hasBorder:!0,hasShadow:!0,paddingSize:"m"},Object(o.jsx)(r.EuiCommentList,{"data-test-subj":"accordionCommentList",comments:e})))):null));ze.displayName="ExceptionItemCardComments";const $e=({disableActions:e=!1,exceptionItem:t,listType:n,ruleReferences:i,dataTestSubj:s,editActionLabel:l,deleteActionLabel:c,securityLinkAnchorComponent:u,formattedDateComponent:d,getFormattedComments:p,onDeleteException:m,onEditException:f})=>{const{actions:g,formattedComments:b}=(({listType:e,editActionLabel:t,deleteActionLabel:n,exceptionItem:i,getFormattedComments:r,onEditException:o,onDeleteException:s})=>{const l=Object(a.useCallback)((()=>{s({id:i.id,name:i.name,namespaceType:i.namespace_type})}),[s,i.id,i.name,i.namespace_type]),c=Object(a.useCallback)((()=>{o(i)}),[o,i]),u=Object(a.useMemo)((()=>r(i.comments)),[i.comments,r]);return{actions:Object(a.useMemo)((()=>[{key:"edit",icon:"controlsHorizontal",label:t||Y(e),onClick:c},{key:"delete",icon:"trash",label:n||K(e),onClick:l}]),[t,e,n,l,c]),formattedComments:u}})({listType:n,editActionLabel:l,deleteActionLabel:c,exceptionItem:t,getFormattedComments:p,onEditException:f,onDeleteException:m});return Object(o.jsx)(r.EuiPanel,{key:`${t.id}exceptionItemPanel`,paddingSize:"l","data-test-subj":s||"",hasBorder:!0,hasShadow:!1},Object(o.jsx)(r.EuiFlexGroup,{responsive:!0,gutterSize:"m",direction:"column"},Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":"exceptionItemCardHeaderContainer"},Object(o.jsx)(_e,{item:t,actions:g,disableActions:e,dataTestSubj:"exceptionItemCardHeader"})),Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":"exceptionItemCardMeta"},Object(o.jsx)(qe,{item:t,rules:i,dataTestSubj:"exceptionItemCardMetaInfo",securityLinkAnchorComponent:u,formattedDateComponent:d})),Object(o.jsx)(r.EuiFlexItem,{"data-test-subj":"exceptionItemCardCondition"},Object(o.jsx)(Te,{os:t.os_types,entries:t.entries,dataTestSubj:"exceptionItemCardConditions"})),b.length>0&&Object(o.jsx)(ze,{dataTestSubj:"exceptionsItemCommentAccordion",comments:b})))};$e.displayName="ExceptionItemCardComponent";const Ve=i.a.memo($e);Ve.displayName="ExceptionItemCard";var Ue=n(316);const Ge=Object(U.css)("display:inline;margin-left:",u.euiThemeVars.euiSizeXS,";",""),He=({value:e,tooltipIconType:t="iInCircle",tooltipIconText:n})=>{const{showSpaceWarningIcon:a,warningText:i}=(({value:e,tooltipIconText:t})=>({showSpaceWarningIcon:!!(Array.isArray(e)?e.find(Ue.d):Object(Ue.d)(e)),warningText:t||Ue.c.FIELD_SPACE_WARNING}))({value:e,tooltipIconText:n});return a&&e?Object(o.jsx)("div",{className:Ge},Object(o.jsx)(r.EuiToolTip,{position:"top",content:i},Object(o.jsx)(r.EuiIcon,{"data-test-subj":"valueWithSpaceWarningTooltip",type:t,color:"warning"}))):null},We=Object(o.css)("border-right:1px solid #d3dae6;padding:",u.euiThemeVars.euiSizeXS," ",u.euiThemeVars.euiSizeL," ",u.euiThemeVars.euiSizeXS," 0;",""),Qe={name:"95qvyx",styles:"width:max-content"},Ye=Object(o.css)("font-size:",u.euiThemeVars.euiFontSize,";color:",u.euiThemeVars.euiTextSubduedColor,";margin-left:",u.euiThemeVars.euiSizeXS,";",""),Ke=Object(o.css)("margin-top:-",u.euiThemeVars.euiSizeL,";margin-bottom:-",u.euiThemeVars.euiSizeL,";",""),Xe=Object(o.css)("font-size:",u.euiThemeVars.euiFontSizeXS,";",""),Je=({dataTestSubj:e,linkedRules:t,securityLinkAnchorComponent:n,isReadonly:i,canUserEditList:s=!0,onDeleteList:l,onManageRules:c,onExportList:u,onDuplicateList:d})=>{const p=Object(a.useMemo)((()=>Re({leftIcon:"check",dataTestSubj:e,linkedRules:t,securityLinkAnchorComponent:n})),[e,t,n]);return Object(o.jsx)(r.EuiFlexGroup,{direction:"row",alignItems:"baseline",justifyContent:"center",responsive:!0,"data-test-subj":`${e||""}Container`,gutterSize:"l"},Object(o.jsx)(r.EuiFlexItem,{css:We},t.length?Object(o.jsx)(Ae,{dataTestSubj:`${e||""}LinkedRulesMenu`,emptyButton:!0,useCustomActions:!0,text:S(t.length),actions:p,disableActions:!1,iconType:"arrowDown",iconSide:"right",panelPaddingSize:"none"}):Object(o.jsx)(r.EuiTextColor,{"data-test-subj":"noLinkedRules",css:Qe,color:"subdued"},S(t.length))),s&&Object(o.jsx)(r.EuiFlexItem,null,Object(o.jsx)(r.EuiButton,{"data-test-subj":`${e||""}LinkRulesButton`,fill:!0,onClick:()=>{"function"==typeof c&&c()}},O)),Object(o.jsx)(r.EuiFlexItem,null,Object(o.jsx)(Ae,{iconType:"boxesHorizontal",dataTestSubj:`${e||""}MenuActions`,actions:[{key:"1",icon:"exportAction",label:E,onClick:()=>{"function"==typeof u&&u()}},{key:"2",icon:"copy",label:j,onClick:()=>{"function"==typeof d&&d()},disabled:!s},{key:"3",icon:"trash",label:x,onClick:()=>{"function"==typeof l&&l()},disabled:!s}],disableActions:i,anchorPosition:"downCenter"})))};Je.displayName="MenuItemsComponent";const Ze=i.a.memo(Je);Ze.displayName="MenuItems";const et=Object(o.css)("display:flex;width:fit-content;align-items:baseline;padding-bottom:",u.euiThemeVars.euiSizeS,";h1{margin-bottom:0;}",""),tt=Object(o.css)("button{margin-left:-",u.euiThemeVars.euiSizeM,";}",""),nt=({isReadonly:e,dataTestSubj:t,text:n,onEdit:a,textCss:i})=>Object(o.jsx)(r.EuiFlexGroup,{css:et},Object(o.jsx)(r.EuiFlexItem,{grow:10},Object(o.jsx)("span",{css:i,"data-test-subj":`${t||""}Text`},n)),Object(o.jsx)(r.EuiFlexItem,{grow:!1,css:tt},e?null:Object(o.jsx)(r.EuiButtonIcon,{"data-test-subj":`${t||""}EditIcon`,"aria-label":"Edit Text List Header",iconType:"pencil",onClick:()=>"function"==typeof a?a():null})));nt.displayName="TextWithEditComponent";const at=i.a.memo(nt);at.displayName="TextWithEdit";const it=({listDetails:e,onSave:t,onCancel:n})=>{const{error:i,modalFormId:s,newListDetails:l,showProgress:c,onBlur:u,onSubmit:d,onChange:p}=(({listDetails:e,onSave:t})=>{const n=Object(r.useGeneratedHtmlId)({prefix:"modalForm"}),[i,o]=Object(a.useState)(e),[s,l]=Object(a.useState)(!1),[c,u]=Object(a.useState)(void 0),d=Object(a.useCallback)((({target:e})=>{const{name:t,value:n}=e,a=n.trim();o({...i,[t]:a}),"name"===t&&u(a?void 0:F)}),[i]);return{error:c,modalFormId:n,newListDetails:i,showProgress:s,onBlur:d,onChange:({target:e})=>{const{name:t,value:n}=e;o({...i,[t]:n})},onSubmit:e=>{c||(l(!0),t(i),null==e||e.preventDefault())}}})({listDetails:e,onSave:t});return Object(o.jsx)(r.EuiModal,{"data-test-subj":"EditModal",onClose:n,initialFocus:"[name=popswitch]"},c&&Object(o.jsx)(r.EuiProgress,{"data-test-subj":"editModalProgess",size:"xs",position:"absolute"}),Object(o.jsx)(r.EuiModalHeader,null,Object(o.jsx)(r.EuiModalHeaderTitle,{"data-test-subj":"editModalTitle"},(f=e.name,m.i18n.translate("exceptionList-components.exception_list_header_edit_modal_name",{defaultMessage:"Edit {listName}",values:{listName:f}})))),Object(o.jsx)(r.EuiModalBody,null,Object(o.jsx)(r.EuiForm,{id:s,"data-test-subj":"editModalForm",component:"form",onSubmit:d},Object(o.jsx)(r.EuiFormRow,{error:i,isInvalid:!!i,fullWidth:!0,label:A},Object(o.jsx)(r.EuiFieldText,{fullWidth:!0,isInvalid:!!i,onBlur:u,"data-test-subj":"editModalNameTextField",name:"name",value:l.name,onChange:p})),Object(o.jsx)(r.EuiFormRow,{fullWidth:!0,label:_},Object(o.jsx)(r.EuiTextArea,{fullWidth:!0,"data-test-subj":"editModalDescriptionTextField",name:"description",value:l.description,onChange:p,onBlur:u})))),Object(o.jsx)(r.EuiModalFooter,null,Object(o.jsx)(r.EuiButtonEmpty,{"data-test-subj":"editModalCancelBtn",onClick:n},M),Object(o.jsx)(r.EuiButton,{"data-test-subj":"editModalSaveBtn",type:"submit",form:s,onClick:d,fill:!0},C)));var f};it.displayName="EditModalComponent";const rt=i.a.memo(it);rt.displayName="EditModal";const ot=({name:e,description:t,listId:n,linkedRules:i,isReadonly:s,dataTestSubj:l,securityLinkAnchorComponent:c,backOptions:u,canUserEditList:d=!0,onEditListDetails:p,onDeleteList:m,onManageRules:f,onExportList:g,onDuplicateList:b})=>{const{isModalVisible:y,listDetails:h,onEdit:v,onSave:E,onCancel:x}=(({name:e,description:t,onEditListDetails:n})=>{const[i,r]=Object(a.useState)(!1),[o,s]=Object(a.useState)({name:e,description:t});return{isModalVisible:i,listDetails:o,onEdit:()=>{r(!0)},onSave:e=>{s(e),"function"==typeof n&&n(e),setTimeout((()=>{r(!1)}),200)},onCancel:()=>{r(!1)}}})({name:e,description:t,onEditListDetails:p});return Object(o.jsx)("div",null,Object(o.jsx)(r.EuiPageHeader,{bottomBorder:!0,paddingSize:"none",pageTitle:Object(o.jsx)(at,{dataTestSubj:`${l||""}Title`,text:h.name||I,isReadonly:s||!d,onEdit:v}),responsive:!0,"data-test-subj":`${l||""}PageHeader`,description:Object(o.jsx)("div",{css:Ke},Object(o.jsx)(at,{dataTestSubj:`${l||""}Description`,textCss:Ye,isReadonly:s||!d,text:h.description||T,onEdit:v}),Object(o.jsx)("div",{css:et,"data-test-subj":`${l||""}ListID`},Object(o.jsx)(r.EuiText,{css:Ye},w,":"),Object(o.jsx)(r.EuiText,{css:Ye},n))),rightSideItems:[Object(o.jsx)(Ze,{dataTestSubj:`${l||""}RightSideMenuItems`,linkedRules:i,isReadonly:s,canUserEditList:d,securityLinkAnchorComponent:c,onDeleteList:m,onManageRules:f,onExportList:g,onDuplicateList:b})],breadcrumbs:[{text:Object(o.jsx)("div",{"data-test-subj":`${l||""}Breadcrumb`,css:Xe},Object(o.jsx)(r.EuiIcon,{size:"s",type:"arrowLeft"}),k),color:"primary","aria-current":!1,href:u.path,onClick:e=>{e.preventDefault(),u.onNavigate(u.path)}}]}),y&&Object(o.jsx)(rt,{listDetails:h,onSave:E,onCancel:x}))};ot.displayName="ExceptionListHeaderComponent";const st=i.a.memo(ot);st.displayName="ExceptionListHeader"},,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){var t=a.useRef();return a.useEffect((function(){t.current=e})),t.current}},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return u})),n.d(t,"a",(function(){return B})),n.d(t,"j",(function(){return V})),n.d(t,"g",(function(){return ie})),n.d(t,"h",(function(){return ue})),n.d(t,"i",(function(){return me})),n.d(t,"d",(function(){return de})),n.d(t,"e",(function(){return fe})),n.d(t,"f",(function(){return Y}));const a="cellAction-filter";let i;!function(e){e.HOVER_DOWN="hover-down",e.HOVER_RIGHT="hover-right",e.INLINE="inline"}(i||(i={}));var r=n(42),o=n(2),s=n.n(o),l=n(21);const c=Object(o.createContext)(null),u=({children:e,getTriggerCompatibleActions:t})=>{const n=Object(o.useMemo)((()=>({getActions:e=>t(e.trigger.id,e).then((e=>Object(r.orderBy)(["order","id"],["asc","asc"],e)))})),[t]);return Object(l.jsx)(c.Provider,{value:n},e)},d=()=>{const e=Object(o.useContext)(c);if(!e)throw new Error("No CellActionsContext found. Please wrap the application with CellActionsProvider");return e};var p=n(40),m=n(104),f=n.n(m);const g=({action:e,actionContext:t,showTooltip:n,onClick:a})=>{const i=Object(o.useMemo)((()=>({iconType:e.getIconType(t),onClick:()=>{e.execute(t),a&&a()},"data-test-subj":`actionItem-${e.id}`,"aria-label":e.getDisplayName(t)})),[e,t,a]);return i.iconType?n?Object(l.jsx)(p.EuiToolTip,{content:e.getDisplayNameTooltip?e.getDisplayNameTooltip(t):""},Object(l.jsx)(p.EuiButtonIcon,f()({},i,{iconSize:"s"}))):Object(l.jsx)(p.EuiButtonIcon,f()({},i,{iconSize:"s"})):null},b=(e,t)=>t<=1?{extraActions:e,visibleActions:[]}:e.length<=t?{extraActions:[],visibleActions:e}:{visibleActions:e.slice(0,t-1),extraActions:e.slice(t-1,e.length)};var y=n(48),h=n(5);const v=e=>h.i18n.translate("cellActions.youAreInADialogContainingOptionsScreenReaderOnly",{values:{fieldName:e},defaultMessage:"You are in a dialog, containing options for field {fieldName}. Press tab to navigate options. Press escape to exit."}),E=h.i18n.translate("cellActions.extraActionsAriaLabel",{defaultMessage:"Extra actions"}),x=h.i18n.translate("cellActions.showMoreActionsLabel",{defaultMessage:"More actions"}),j=h.i18n.translate("cellActions.actionsAriaLabel",{defaultMessage:"Actions"}),O=Object(l.css)("color:",y.euiThemeVars.euiColorPrimaryText,";",""),S=({anchorPosition:e,actions:t,actionContext:n,isOpen:a,closePopOver:i,button:r})=>Object(l.jsx)(p.EuiPopover,{button:r,isOpen:a,closePopover:i,panelPaddingSize:"xs",anchorPosition:e,hasArrow:!0,repositionOnScroll:!0,ownFocus:!0,"data-test-subj":"extraActionsPopOver","aria-label":E},Object(l.jsx)(w,{actions:t,actionContext:n,closePopOver:i})),k=({anchorPosition:e,anchorRef:t,actionContext:n,isOpen:a,closePopOver:i,actions:r})=>t.current?Object(l.jsx)(p.EuiWrappingPopover,{"aria-label":E,button:t.current,isOpen:a,closePopover:i,panelPaddingSize:"xs",anchorPosition:e,hasArrow:!1,repositionOnScroll:!0,ownFocus:!0,attachToAnchor:!1,"data-test-subj":"extraActionsPopOverWithAnchor"},Object(l.jsx)(w,{actions:r,actionContext:n,closePopOver:i})):null,w=({actionContext:e,actions:t,closePopOver:n})=>{const a=Object(o.useMemo)((()=>t.map((t=>Object(l.jsx)(p.EuiContextMenuItem,{css:O,key:t.id,icon:t.getIconType(e),"aria-label":t.getDisplayName(e),"data-test-subj":`actionItem-${t.id}`,onClick:()=>{n(),t.execute(e)}},t.getDisplayName(e))))),[e,t,n]);return Object(l.jsx)(s.a.Fragment,null,Object(l.jsx)(p.EuiScreenReaderOnly,null,Object(l.jsx)("p",null,v(e.data.map((({field:e})=>e.name)).join(", ")))),Object(l.jsx)(p.EuiContextMenuPanel,{size:"s",items:a}))},I=({onClick:e,showTooltip:t})=>t?Object(l.jsx)(p.EuiToolTip,{content:x},Object(l.jsx)(p.EuiButtonIcon,{"data-test-subj":"showExtraActionsButton","aria-label":x,iconType:"boxesHorizontal",onClick:e})):Object(l.jsx)(p.EuiButtonIcon,{"data-test-subj":"showExtraActionsButton","aria-label":x,iconType:"boxesHorizontal",onClick:e});var T=n(544),C=n.n(T),M=n(545),A=n.n(M);const _=e=>{if(e)throw e},F=(e,t)=>Object(o.useMemo)((()=>D(e,t)),[e,t]),D=(e,t=[])=>e?e.filter((({type:e})=>!(null!=t&&t.includes(e)))):void 0,N=({actionContext:e,anchorPosition:t,showActionTooltips:n,visibleCellActions:a,disabledActionTypes:i})=>{const{value:r}=((e,t={})=>{const{getActions:n}=d(),{error:a,value:i,loading:r}=C()((()=>n(e)),[]),o=F(i,t.disabledActionTypes);return _(a),{value:o,loading:r}})(e,{disabledActionTypes:i}),{extraActions:s,visibleActions:c}=((e,t)=>Object(o.useMemo)((()=>b(null!=e?e:[],t)),[e,t]))(null!=r?r:[],a),[u,m]=Object(o.useState)(!1),f=Object(o.useCallback)((()=>m((e=>!e))),[]),y=Object(o.useCallback)((()=>m(!1)),[]),h=Object(o.useMemo)((()=>Object(l.jsx)(I,{onClick:f,showTooltip:n})),[f,n]);return Object(l.jsx)(p.EuiFlexGroup,{responsive:!1,alignItems:"flexStart",gutterSize:"none","data-test-subj":"inlineActions",className:"inlineActions "+(u?"inlineActions-popoverOpen":"")},c.map((t=>Object(l.jsx)(p.EuiFlexItem,{grow:!1,key:`action-item-${t.id}`},Object(l.jsx)(g,{action:t,actionContext:e,showTooltip:n})))),s.length>0?Object(l.jsx)(p.EuiFlexItem,{grow:!1},Object(l.jsx)(S,{actions:s,actionContext:e,anchorPosition:t,button:h,closePopOver:y,isOpen:u})):null)};var P=n(8);const R={minWidth:"24px"},L=Object(l.css)("padding:0 ",y.euiThemeVars.euiSizeS,";",""),q=({anchorPosition:e,children:t,visibleCellActions:n,actionContext:a,showActionTooltips:i,disabledActionTypes:r})=>{const c=Object(o.useRef)(null),[u,m]=Object(o.useState)(!1),[f,h]=Object(o.useState)(!1),[{value:E},x]=((e={})=>{const{getActions:t}=d(),[{error:n,value:a,loading:i},r]=A()(t,[]),o=F(a,e.disabledActionTypes);return _(n),[{value:o,loading:i},r]})({disabledActionTypes:r}),{visibleActions:O,extraActions:S}=Object(o.useMemo)((()=>b(null!=E?E:[],n)),[E,n]),w=Object(o.useMemo)((()=>Object(P.debounce)((()=>{document.body.classList.contains("is-dragging")||h(!0)}),100)),[]);Object(o.useEffect)((()=>()=>{w.cancel()}),[w]);const T=Object(o.useCallback)((()=>{w.cancel(),h(!1)}),[w]),C=Object(o.useCallback)((()=>m(!1)),[m]),M=Object(o.useCallback)((()=>{m(!0),T()}),[T,m]),D=Object(o.useCallback)((async()=>{u||(void 0===E&&x(a),w())}),[u,E,w,x,a]),N=Object(o.useMemo)((()=>Object(l.jsx)("div",{ref:c,onMouseEnter:D,onClick:C},t)),[D,C,t]),q=Object(o.useMemo)((()=>"rightCenter"===e?{marginTop:y.euiThemeVars.euiSizeS}:{}),[e]);return Object(l.jsx)(s.a.Fragment,null,Object(l.jsx)("div",{onMouseLeave:T},Object(l.jsx)(p.EuiPopover,{panelStyle:{...R,...q},anchorPosition:e,button:N,closePopover:T,hasArrow:!1,isOpen:f,panelPaddingSize:"none",repositionOnScroll:!0,ownFocus:!1,"data-test-subj":"hoverActionsPopover","aria-label":j},f&&Object(l.jsx)("div",{css:L},Object(l.jsx)(p.EuiScreenReaderOnly,null,Object(l.jsx)("p",null,v(a.data.map((({field:e})=>e.name)).join(", ")))),O.map((e=>Object(l.jsx)(g,{key:e.id,action:e,actionContext:a,showTooltip:i,onClick:T}))),S.length>0&&Object(l.jsx)(I,{onClick:M,showTooltip:i})))),Object(l.jsx)(k,{anchorPosition:e,actions:S,anchorRef:c,actionContext:a,closePopOver:C,isOpen:u}))},B=({data:e,triggerId:t,children:n,mode:a,showActionTooltips:s=!0,visibleCellActions:c=3,disabledActionTypes:u=[],metadata:d,className:m})=>{const f=Object(o.useRef)(null),g=Object(o.useMemo)((()=>Object(r.isArray)(e)?e:[e]),[e]),b=Object(o.useMemo)((()=>({data:g,trigger:{id:t},nodeRef:f,metadata:d})),[g,t,d]),y=Object(o.useMemo)((()=>a===i.HOVER_DOWN?"downCenter":"rightCenter"),[a]),h=`cellActions-renderContent-${g.map((({field:e})=>e.name)).join("-")}`;return a===i.HOVER_DOWN||a===i.HOVER_RIGHT?Object(l.jsx)("div",{className:m,ref:f,"data-test-subj":h},Object(l.jsx)(q,{anchorPosition:y,actionContext:b,showActionTooltips:s,visibleCellActions:c,disabledActionTypes:u},n)):Object(l.jsx)(p.EuiFlexGroup,{responsive:!1,alignItems:"center",ref:f,gutterSize:"none",justifyContent:"flexStart",className:m,"data-test-subj":h},Object(l.jsx)(p.EuiFlexItem,{grow:!1},n),Object(l.jsx)(p.EuiFlexItem,{grow:!1},Object(l.jsx)(N,{anchorPosition:y,actionContext:b,showActionTooltips:s,visibleCellActions:c,disabledActionTypes:u})))},z=[()=>Object(l.jsx)(p.EuiLoadingSpinner,{size:"s","data-test-subj":"dataGridColumnCellAction-loading"})],$=[],V=({fields:e,getCellValue:t,triggerId:n,metadata:a,dataGridRef:i,disabledActionTypes:r=[]})=>{const s=Object(o.useMemo)((()=>{if(n&&null!=e&&e.length)return e.map((e=>({data:[{field:e}],trigger:{id:n},metadata:a})))}),[e,n,a]),{loading:l,value:c}=((e,t={})=>{const{getActions:n}=d(),{error:a,...i}=C()((()=>{var a;return Promise.all(null!==(a=null==e?void 0:e.map((e=>n(e).then((e=>{var n;return null!==(n=D(e,t.disabledActionTypes))&&void 0!==n?n:[]})))))&&void 0!==a?a:[])}),[e]);return _(a),i})(s,{disabledActionTypes:r});return Object(o.useMemo)((()=>l?null!=e&&e.length?e.map((()=>z)):$:n&&null!=c&&c.length&&null!=e&&e.length?c.length!==e.length?$:c.map(((r,o)=>r.map((r=>U({action:r,field:e[o],getCellValue:t,metadata:a,triggerId:n,dataGridRef:i}))))):$),[c,e,t,l,a,n,i])},U=({action:e,field:t,getCellValue:n,metadata:a,triggerId:i,dataGridRef:r})=>function({Component:s,rowIndex:c,isExpanded:u}){const d=Object(o.useRef)(null),p=Object(o.useRef)(null),m=Object(o.useMemo)((()=>{const{name:e}=t,r=n(e,c);return{data:[{field:t,value:r}],trigger:{id:i},nodeRef:d,metadata:a}}),[c]),f=Object(o.useCallback)((async()=>{m.nodeRef.current=await G({dataGrid:r.current,isExpanded:u,buttonRef:p}),e.execute(m)}),[m,u]);return Object(l.jsx)(s,{buttonRef:p,"aria-label":e.getDisplayName(m),title:e.getDisplayName(m),"data-test-subj":`dataGridColumnCellAction-${e.id}`,iconType:e.getIconType(m),onClick:f},e.getDisplayName(m))},G=({dataGrid:e,isExpanded:t,buttonRef:n})=>new Promise((a=>{const i=t?document.querySelector('div[role="gridcell"].euiDataGridRowCell--open'):H(n.current);null==e||e.closeCellPopover(),setTimeout((()=>{var e;a(null!==(e=null==i?void 0:i.firstElementChild)&&void 0!==e?e:null)}))})),H=e=>null==e?null:"DIV"===e.nodeName&&"gridcell"===e.getAttribute("role")?e:H(e.parentElement);var W=n(516),Q=n.n(W);const Y=e=>t=>{const n=e(t);return K(n)},K=e=>{const t=t=>J(e,t);return t.combine=t=>{const n=X(e,t);return K(n)},t},X=(e,t)=>Z(e,t),J=(e,t)=>Z(e,t),Z=(e,t)=>{const{isCompatible:n,execute:a,...i}=t;let r=e.isCompatible;n&&(r=a?n:async t=>await e.isCompatible(t)&&await n(t));const o=null!=a?a:e.execute;return{...e,isCompatible:r,execute:o,...i}};var ee=n(427),te=n(428);const ne=h.i18n.translate("cellActions.actions.copyToClipboard.displayName",{defaultMessage:"Copy to Clipboard"}),ae=h.i18n.translate("cellActions.actions.copyToClipboard.successMessage",{defaultMessage:"Copied to the clipboard"}),ie=Y((({notifications:e})=>({type:"cellAction-copy",getIconType:()=>"copyClipboard",getDisplayName:()=>ne,getDisplayNameTooltip:()=>ne,isCompatible:async({data:e})=>{var t;const n=null===(t=e[0])||void 0===t?void 0:t.field;return 1===e.length&&null!=n.name&&Object(ee.b)(n.type)},execute:async({data:t})=>{var n,a;const i=null===(n=t[0])||void 0===n?void 0:n.field,o=null===(a=t[0])||void 0===a?void 0:a.value,s=Object(ee.a)(Object(ee.d)(o));if(!Object(ee.c)(s))return void e.toasts.addWarning({title:te.a});const l=s.map((e=>Object(r.isString)(e)?`"${(e=>e.replace(/"/g,'\\"'))(e)}"`:e)).join(" AND "),c=""!==l?`${i.name}: ${l}`:i.name;Q()(c,{debug:!0})&&e.toasts.addSuccess({title:ae},{toastLifeTimeMs:800})}})));var re=n(49);const oe=e=>0===e.length||e.every((e=>""===e)),se=({key:e,negate:t,value:n})=>({meta:{key:e,negate:t,type:re.FILTERS.PHRASE,params:{query:n.toString()}},query:{match_phrase:{[e]:{query:n.toString()}}}}),le=({key:e,value:t,negate:n})=>0===t.length?(({key:e,negate:t})=>({meta:{key:e,negate:t,type:re.FILTERS.EXISTS,value:"exists"},query:{exists:{field:e}}}))({key:e,negate:n}):t.length>1?(({values:e,key:t,negate:n})=>({meta:{key:t,negate:n,type:re.FILTERS.COMBINED,relation:re.BooleanRelation.AND,params:e.map((e=>se({key:t,value:e})))}}))({key:e,negate:n,values:t}):se({key:e,negate:n,value:t[0]}),ce=h.i18n.translate("cellActions.actions.filterIn",{defaultMessage:"Filter In"}),ue=Y((({filterManager:e,notifications:{toasts:t}})=>({type:a,getIconType:()=>"plusInCircle",getDisplayName:()=>ce,getDisplayNameTooltip:()=>ce,isCompatible:async({data:e})=>{var t;const n=null===(t=e[0])||void 0===t?void 0:t.field;return 1===e.length&&!!n.name&&Object(ee.b)(n.type)},execute:async({data:n})=>{var a,i;const r=null===(a=n[0])||void 0===a?void 0:a.field,o=null===(i=n[0])||void 0===i?void 0:i.value,s=Object(ee.a)(Object(ee.d)(o));Object(ee.c)(s)?de({filterManager:e,fieldName:r.name,value:s}):t.addWarning({title:te.a})}}))),de=({filterManager:e,fieldName:t,value:n})=>{if(null!=e){const a=le({key:t,value:n,negate:oe(n)});e.addFilters(a)}},pe=h.i18n.translate("cellActions.actions.filterOut",{defaultMessage:"Filter Out"}),me=Y((({filterManager:e,notifications:{toasts:t}})=>({type:a,getIconType:()=>"minusInCircle",getDisplayName:()=>pe,getDisplayNameTooltip:()=>pe,isCompatible:async({data:e})=>{var t;const n=null===(t=e[0])||void 0===t?void 0:t.field;return 1===e.length&&!!n.name&&Object(ee.b)(n.type)},execute:async({data:n})=>{var a,i;const r=null===(a=n[0])||void 0===a?void 0:a.field,o=null===(i=n[0])||void 0===i?void 0:i.value,s=Object(ee.a)(Object(ee.d)(o));Object(ee.c)(s)?fe({filterManager:e,fieldName:r.name,value:s}):t.addWarning({title:te.a})}}))),fe=({filterManager:e,fieldName:t,value:n})=>{if(null!=e){const a=le({key:t,value:n,negate:!oe(n)});e.addFilters(a)}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"j",(function(){return r})),n.d(t,"l",(function(){return o})),n.d(t,"k",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"i",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"g",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"c",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"d",(function(){return g}));var a=n(5);a.i18n.translate("xpack.securitySolution.timeline.properties.timelineDescription",{defaultMessage:"Timeline Description"});const i=a.i18n.translate("xpack.securitySolution.timeline.properties.addToFavoriteButtonLabel",{defaultMessage:"Add to favorites"}),r=a.i18n.translate("xpack.securitySolution.timeline.properties.removeFromFavoritesButtonLabel",{defaultMessage:"Remove from favorites"}),o=a.i18n.translate("xpack.securitySolution.timeline.properties.untitledTimelinePlaceholder",{defaultMessage:"Untitled timeline"}),s=a.i18n.translate("xpack.securitySolution.timeline.properties.untitledTemplatePlaceholder",{defaultMessage:"Untitled template"}),l=a.i18n.translate("xpack.securitySolution.timeline.properties.descriptionPlaceholder",{defaultMessage:"Add a description"}),c=a.i18n.translate("xpack.securitySolution.timeline.properties.notesButtonLabel",{defaultMessage:"Notes"}),u=a.i18n.translate("xpack.securitySolution.timeline.properties.newTimelineButtonLabel",{defaultMessage:"Create new timeline"}),d=a.i18n.translate("xpack.securitySolution.timeline.properties.newTemplateTimelineButtonLabel",{defaultMessage:"Create new timeline template"}),p=a.i18n.translate("xpack.securitySolution.timeline.properties.addTimelineButtonLabel",{defaultMessage:"Add new timeline or template"}),m=a.i18n.translate("xpack.securitySolution.timeline.properties.attachToCaseButtonLabel",{defaultMessage:"Attach to case"}),f=a.i18n.translate("xpack.securitySolution.timeline.properties.attachToNewCaseButtonLabel",{defaultMessage:"Attach to new case"}),g=a.i18n.translate("xpack.securitySolution.timeline.properties.attachToExistingCaseButtonLabel",{defaultMessage:"Attach to existing case"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(41),i=n.n(a),r=n(2),o=n.n(r),s=n(40);n(21);const l=({header:{title:e,callback:t,iconType:n,headerContent:a},content:{loading:i,error:l}={loading:!1,error:!1},expand:{expandable:p,expandedOnFirstRender:m}={expandable:!1,expandedOnFirstRender:!1},"data-test-subj":f,children:g})=>{const[b,y]=Object(r.useState)(m),h=Object(r.useCallback)((()=>{y(!b)}),[y,b]),v=Object(r.useMemo)((()=>o.a.createElement(s.EuiButtonIcon,{"data-test-subj":`${f}ToggleIcon`,"aria-label":"entity-toggle",color:"text",display:"empty",iconType:b?"arrowDown":"arrowRight",onClick:h,size:"xs"})),[f,b,h]),{euiTheme:E}=Object(s.useEuiTheme)(),x=Object(r.useMemo)((()=>o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"s","data-test-subj":`${f}LeftSection`},o.a.createElement(s.EuiFlexItem,{grow:!1},p&&g&&v),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(c,{color:t?"primary":"text",type:n,"data-test-subj":`${f}TitleIcon`,$_css:E.size.s})),o.a.createElement(s.EuiFlexItem,{grow:!1},t?o.a.createElement(u,{"data-test-subj":`${f}TitleLink`,onClick:t},e):o.a.createElement(s.EuiTitle,{size:"xxxs"},o.a.createElement(s.EuiText,{"data-test-subj":`${f}TitleText`},e)))))),[f,p,g,v,t,n,E.size.s,e]),j=Object(r.useMemo)((()=>a&&o.a.createElement(d,{grow:!1,"data-test-subj":`${f}RightSection`,$_css2:E.size.m},a)),[f,E.size.m,a]),O=Object(r.useMemo)((()=>!!g&&(!p||p&&b)),[g,p,b]),S=i?o.a.createElement(s.EuiFlexGroup,{justifyContent:"center"},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiLoadingSpinner,{"data-test-subj":`${f}Loading`}))):l?null:g;return o.a.createElement(s.EuiSplitPanel.Outer,{grow:!0,hasBorder:!0},o.a.createElement(s.EuiSplitPanel.Inner,{grow:!1,color:"subdued",paddingSize:"xs"},o.a.createElement(s.EuiFlexGroup,{justifyContent:"spaceBetween",alignItems:"center"},x,j)),O&&o.a.createElement(s.EuiSplitPanel.Inner,{paddingSize:"none"},o.a.createElement(s.EuiPanel,{"data-test-subj":`${f}Content`},S)))};l.displayName="ExpandablePanel";var c=i()(s.EuiIcon).withConfig({displayName:"_StyledEuiIcon",componentId:"sc-6xxggh-0"})(["margin:"," 0;"],(e=>e.$_css)),u=i()(s.EuiLink).withConfig({displayName:"_StyledEuiLink",componentId:"sc-6xxggh-1"})(["font-size:12px;font-weight:700;"]),d=i()(s.EuiFlexItem).withConfig({displayName:"_StyledEuiFlexItem",componentId:"sc-6xxggh-2"})(["margin-right:",";"],(e=>e.$_css2))},function(e,t,n){"use strict";n.d(t,"a",(function(){return h}));var a=n(42),i=n(2),r=n.n(i),o=n(449),s=n(607),l=n(485),c=n(569),u=n(395),d=n(608),p=n(868),m=n(571),f=n(380),g=n(570),b=n(532),y=n(460);const h=r.a.memo((({data:e,timelineId:t,isDraggable:n})=>r.a.createElement(p.a,{contextId:`netflow-renderer-${t}-${e._id}`,destinationBytes:Object(o.a)(Object(a.get)(b.a,e)),destinationGeoContinentName:Object(o.a)(Object(a.get)(g.b,e)),destinationGeoCountryName:Object(o.a)(Object(a.get)(g.d,e)),destinationGeoCountryIsoCode:Object(o.a)(Object(a.get)(g.c,e)),destinationGeoRegionName:Object(o.a)(Object(a.get)(g.e,e)),destinationGeoCityName:Object(o.a)(Object(a.get)(g.a,e)),destinationIp:Object(o.a)(Object(a.get)(u.a,e)),destinationPackets:Object(o.a)(Object(a.get)(b.b,e)),destinationPort:Object(o.a)(Object(a.get)(f.a,e)),eventDuration:Object(o.a)(Object(a.get)(l.b,e)),eventId:Object(a.get)(c.a,e),eventEnd:Object(o.a)(Object(a.get)(m.b,e)),eventStart:Object(o.a)(Object(a.get)(m.c,e)),isDraggable:n,networkBytes:Object(o.a)(Object(a.get)(y.a,e)),networkCommunityId:Object(o.a)(Object(a.get)(y.b,e)),networkDirection:Object(o.a)(Object(a.get)(y.c,e)),networkPackets:Object(o.a)(Object(a.get)(y.d,e)),networkProtocol:Object(o.a)(Object(a.get)(y.e,e)),sourceBytes:Object(o.a)(Object(a.get)(b.c,e)),sourceGeoContinentName:Object(o.a)(Object(a.get)(g.h,e)),sourceGeoCountryName:Object(o.a)(Object(a.get)(g.j,e)),sourceGeoCountryIsoCode:Object(o.a)(Object(a.get)(g.i,e)),sourceGeoRegionName:Object(o.a)(Object(a.get)(g.k,e)),sourceGeoCityName:Object(o.a)(Object(a.get)(g.g,e)),sourceIp:Object(o.a)(Object(a.get)(u.d,e)),sourcePackets:Object(o.a)(Object(a.get)(b.d,e)),sourcePort:Object(o.a)(Object(a.get)(f.c,e)),tlsClientCertificateFingerprintSha1:Object(o.a)(Object(a.get)(s.b,e)),tlsFingerprintsJa3Hash:Object(o.a)(Object(a.get)(d.a,e)),tlsServerCertificateFingerprintSha1:Object(o.a)(Object(a.get)(s.c,e)),transport:Object(o.a)(Object(a.get)(y.f,e)),userName:void 0})));h.displayName="NetflowRenderer"},function(e,t,n){"use strict";var a=n(1321);e.exports=function(e,t,n,i){var r,o=e.length,s=0;if(t=t<0?-t>o?0:o+t:t>o?o:t,n=n>0?n:0,i.length<1e4)(r=Array.from(i)).unshift(t,n),a.apply(e,r);else for(n&&a.apply(e,[t,n]);s<i.length;)(r=i.slice(s,s+1e4)).unshift(t,0),a.apply(e,r),s+=1e4,t+=1e4}},function(e,t,n){"use strict";e.exports=function(e){return e<0||32===e}},function(e,t,n){"use strict";var a=n(465);e.exports=function(e){return function(t){return e.test(a(t))}}},function(e,t,n){"use strict";n.d(t,"d",(function(){return c})),n.d(t,"c",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"f",(function(){return f}));var a=n(56),i=n(478),r=n(14),o=n(45),s=n(2),l=n(131);const c=e=>e===l.a.alerts||e===l.a.rules||e===l.a.rulesAdd||e===l.a.rulesCreate||e===l.a.exceptions,u=e=>e.substring(1),d=(e,t)=>{const n=Object(i.parse)(e,{sort:!1})[t];return Array.isArray(n)?n[0]:n},p=e=>Object(s.useCallback)((()=>{const t=d(u(window.location.search),e);return Object(a.safeDecode)(null!=t?t:"")}),[e]),m=e=>Object(i.stringify)(r.url.encodeQuery(e),{sort:!1,encode:!1}),f=()=>{const e=Object(o.useHistory)();return Object(s.useCallback)((t=>{const n=window.location.search,r=Object(i.parse)(n,{sort:!1});Object.keys(t).forEach((e=>{const n=t[e];if(null!=n&&""!==n)try{r[e]=Object(a.encode)(n)}catch{console.error("Unable to encode url param value")}else delete r[e]}));const o=m(r);u(n)!==o&&e.replace({search:o})}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(8);const i=(e,t=!1)=>{if(Array.isArray(e))return e;const n={};return Object.entries(e).forEach((([e,i])=>{const r=t&&Array.isArray(i)&&1===i.length;Object(a.merge)(n,Object(a.setWith)({},e,r?i[0]:i,Object))})),n}},function(e,t,n){"use strict";var a,i=function(){var e={};return function(t){if(void 0===e[t]){var n=document.querySelector(t);if(window.HTMLIFrameElement&&n instanceof window.HTMLIFrameElement)try{n=n.contentDocument.head}catch(e){n=null}e[t]=n}return e[t]}}(),r=[];function o(e){for(var t=-1,n=0;n<r.length;n++)if(r[n].identifier===e){t=n;break}return t}function s(e,t){for(var n={},a=[],i=0;i<e.length;i++){var s=e[i],l=t.base?s[0]+t.base:s[0],c=n[l]||0,u="".concat(l," ").concat(c);n[l]=c+1;var d=o(u),p={css:s[1],media:s[2],sourceMap:s[3]};-1!==d?(r[d].references++,r[d].updater(p)):r.push({identifier:u,updater:g(p,t),references:1}),a.push(u)}return a}function l(e){var t=document.createElement("style"),a=e.attributes||{};if(void 0===a.nonce){var r=n.nc;r&&(a.nonce=r)}if(Object.keys(a).forEach((function(e){t.setAttribute(e,a[e])})),"function"==typeof e.insert)e.insert(t);else{var o=i(e.insert||"head");if(!o)throw new Error("Couldn't find a style target. This probably means that the value for the 'insert' parameter is invalid.");o.appendChild(t)}return t}var c,u=(c=[],function(e,t){return c[e]=t,c.filter(Boolean).join("\n")});function d(e,t,n,a){var i=n?"":a.media?"@media ".concat(a.media," {").concat(a.css,"}"):a.css;if(e.styleSheet)e.styleSheet.cssText=u(t,i);else{var r=document.createTextNode(i),o=e.childNodes;o[t]&&e.removeChild(o[t]),o.length?e.insertBefore(r,o[t]):e.appendChild(r)}}function p(e,t,n){var a=n.css,i=n.media,r=n.sourceMap;if(i?e.setAttribute("media",i):e.removeAttribute("media"),r&&"undefined"!=typeof btoa&&(a+="\n/*# sourceMappingURL=data:application/json;base64,".concat(btoa(unescape(encodeURIComponent(JSON.stringify(r))))," */")),e.styleSheet)e.styleSheet.cssText=a;else{for(;e.firstChild;)e.removeChild(e.firstChild);e.appendChild(document.createTextNode(a))}}var m=null,f=0;function g(e,t){var n,a,i;if(t.singleton){var r=f++;n=m||(m=l(t)),a=d.bind(null,n,r,!1),i=d.bind(null,n,r,!0)}else n=l(t),a=p.bind(null,n,t),i=function(){!function(e){if(null===e.parentNode)return!1;e.parentNode.removeChild(e)}(n)};return a(e),function(t){if(t){if(t.css===e.css&&t.media===e.media&&t.sourceMap===e.sourceMap)return;a(e=t)}else i()}}e.exports=function(e,t){(t=t||{}).singleton||"boolean"==typeof t.singleton||(t.singleton=(void 0===a&&(a=Boolean(window&&document&&document.all&&!window.atob)),a));var n=s(e=e||[],t);return function(e){if(e=e||[],"[object Array]"===Object.prototype.toString.call(e)){for(var a=0;a<n.length;a++){var i=o(n[a]);r[i].references--}for(var l=s(e,t),c=0;c<n.length;c++){var u=o(n[c]);0===r[u].references&&(r[u].updater(),r.splice(u,1))}n=l}}}},function(e,t,n){"use strict";e.exports=function(e){var t=[];return t.toString=function(){return this.map((function(t){var n=function(e,t){var n,a,i,r=e[1]||"",o=e[3];if(!o)return r;if(t&&"function"==typeof btoa){var s=(n=o,a=btoa(unescape(encodeURIComponent(JSON.stringify(n)))),i="sourceMappingURL=data:application/json;charset=utf-8;base64,".concat(a),"/*# ".concat(i," */")),l=o.sources.map((function(e){return"/*# sourceURL=".concat(o.sourceRoot||"").concat(e," */")}));return[r].concat(l).concat([s]).join("\n")}return[r].join("\n")}(t,e);return t[2]?"@media ".concat(t[2]," {").concat(n,"}"):n})).join("")},t.i=function(e,n,a){"string"==typeof e&&(e=[[null,e,""]]);var i={};if(a)for(var r=0;r<this.length;r++){var o=this[r][0];null!=o&&(i[o]=!0)}for(var s=0;s<e.length;s++){var l=[].concat(e[s]);a&&i[l[0]]||(n&&(l[2]?l[2]="".concat(n," and ").concat(l[2]):l[2]=n),t.push(l))}},t}},function(e,t,n){e.exports=n(33)(284)},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o})),n(4);var a=n(195);const i=(e,t)=>`/${e}${Object(a.a)(t)}`,r=(e,t)=>`/name/${e}${Object(a.a)(t)}`,o=(e,t,n)=>`/name/${e}/${t}${Object(a.a)(n)}`},function(e,t,n){"use strict";n.d(t,"d",(function(){return ce})),n.d(t,"f",(function(){return ue})),n.d(t,"b",(function(){return de})),n.d(t,"c",(function(){return pe})),n.d(t,"e",(function(){return me})),n.d(t,"a",(function(){return fe}));var a=n(41),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=(n(21),n(171)),c=n(235),u=n(223),d=n(191),p=n(924),m=n(498),f=n(202),g=n(115);const b="analyze_graph",y=()=>{const{eventId:e}=Object(c.b)(),t="flyout",{from:n,to:a,shouldUpdate:i,selectedPatterns:l}=Object(m.a)(Object(g.isActiveTimeline)(t)),b=Object(r.useMemo)((()=>({from:n,to:a})),[n,a]);return e?o.a.createElement("div",{"data-test-subj":d.a},o.a.createElement(p.a,{databaseDocumentID:e,resolverComponentInstanceID:t,indices:l,shouldUpdate:i,filters:b})):o.a.createElement(s.EuiEmptyPrompt,{iconType:"error",color:"danger",title:o.a.createElement("h2",null,Object(f.g)(u.a)),body:o.a.createElement("p",null,Object(f.f)(u.a)),"data-test-subj":d.b})};y.displayName="AnalyzeGraph";var h=n(5);const v=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.visualizeOptions",{defaultMessage:"Visualize options"}),E=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionViewButton",{defaultMessage:"Session View"}),x=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.analyzerGraphButton",{defaultMessage:"Analyzer Graph"}),j=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.insightsOptions",{defaultMessage:"Insights options"}),O=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.entitiesButton",{defaultMessage:"Entities"}),S=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.threatIntelligenceButton",{defaultMessage:"Threat intelligence"}),k=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.prevalenceButton",{defaultMessage:"Prevalence"}),w=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlationsButton",{defaultMessage:"Correlations"});var I=n(366),T=n(261),C=n(102);const M="session-view",A=()=>{const{sessionView:e}=Object(C.j)().services,{getFieldsData:t,indexName:n}=Object(c.b)(),a=Object(T.a)(t(I.b)),i=Object(T.a)(t(I.c)),r=Object(T.a)(t(I.d)),l=a||n;return l&&i&&r?o.a.createElement("div",{"data-test-subj":d.E},e.getSessionView({index:l,sessionEntityId:i,sessionStartTime:r,isFullScreen:!0})):o.a.createElement(s.EuiEmptyPrompt,{iconType:"error",color:"danger",title:o.a.createElement("h2",null,Object(f.g)(u.K)),body:o.a.createElement("p",null,Object(f.f)(u.K)),"data-test-subj":d.D})};A.displayName="SessionView";var _=n(196),F=n(159);const D=[{id:M,label:E,"data-test-subj":"securitySolutionDocumentDetailsFlyoutVisualizeTabSessionViewButton"},{id:b,label:x,"data-test-subj":"securitySolutionDocumentDetailsFlyoutVisualizeTabGraphAnalyzerButton"}],N=Object(r.memo)((()=>{var e,t,n,a,i;const{eventId:u,indexName:d,scopeId:p}=Object(c.b)(),{panels:m,openLeftPanel:f}=Object(l.c)(),[g,h]=Object(r.useState)(null!==(e=null===(t=m.left)||void 0===t||null===(n=t.path)||void 0===n?void 0:n.subTab)&&void 0!==e?e:M),{startTransaction:E}=Object(F.b)(),x=Object(r.useCallback)((e=>{h(e),e===b&&E({name:_.a.OPEN_ANALYZER}),f({id:ce,path:{tab:ue,subTab:e},params:{id:u,indexName:d,scopeId:p}})}),[E,u,d,p,f]);return Object(r.useEffect)((()=>{var e,t,n,a;null!==(e=m.left)&&void 0!==e&&null!==(t=e.path)&&void 0!==t&&t.subTab&&h(null===(n=m.left)||void 0===n||null===(a=n.path)||void 0===a?void 0:a.subTab)}),[null===(a=m.left)||void 0===a||null===(i=a.path)||void 0===i?void 0:i.subTab]),o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiButtonGroup,{color:"primary",name:"coarsness",legend:v,options:D,idSelected:g,onChange:e=>x(e),buttonSize:"compressed",isFullWidth:!0,"data-test-subj":"securitySolutionDocumentDetailsFlyoutVisualizeTabButtonGroup"}),o.a.createElement(s.EuiSpacer,{size:"m"}),g===M&&o.a.createElement(A,null),g===b&&o.a.createElement(y,null))}));N.displayName="VisualizeTab";var P=n(44),R=n(1077),L=n(402);const q=()=>{const{dataFormattedForFieldBrowser:e}=Object(c.b)(),{loading:t,error:n,basicAlertData:a,ruleNote:i}=Object(R.a)({dataFormattedForFieldBrowser:e});return!e||n?null:t?o.a.createElement(s.EuiFlexGroup,{justifyContent:"spaceAround","data-test-subj":d.n},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiLoadingSpinner,{size:"m"}))):o.a.createElement(o.a.Fragment,null,a.ruleId&&i?o.a.createElement(L.b,{basicData:a,ruleNote:i,showTitle:!1,showFullView:!0}):o.a.createElement("div",{"data-test-subj":d.o},o.a.createElement(P.FormattedMessage,{id:"xpack.securitySolution.flyout.investigationGuideNoData",defaultMessage:"There’s no investigation guide for this rule. {documentation} to add one.",values:{documentation:o.a.createElement(s.EuiLink,{href:"https://www.elastic.co/guide/en/security/current/rules-ui-management.html#edit-rules-settings",target:"_blank"},o.a.createElement(P.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.investigationGuideDocumentationLink",defaultMessage:"Edit the rule's settings"}))}})))};q.displayName="InvestigationGuide";const B=Object(r.memo)((()=>{const{dataFormattedForFieldBrowser:e}=Object(c.b)();return null==e?null:o.a.createElement(s.EuiPanel,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutInvestigationsTabContent",hasShadow:!1},o.a.createElement(q,null))}));B.displayName="InvestigationTab";const z=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.visualizeTab",{defaultMessage:"Visualize"}),$=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.insightsTab",{defaultMessage:"Insights"}),V=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.investigationsTab",{defaultMessage:"Investigation"}),U=h.i18n.translate("xpack.securitySolution.flyout.documentDetails.responseTab",{defaultMessage:"Response"});var G=n(507),H=n(1129),W=n(1082),Q=n(1122);const Y=[{id:G.a,label:O,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTabEntitiesButton"},{id:H.a,label:S,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTabThreatIntelligenceButton"},{id:W.a,label:k,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTabPrevalenceButton"},{id:Q.a,label:w,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTabCorrelationsButton"}],K=Object(r.memo)((()=>{var e,t,n,a,i;const{eventId:u,indexName:d,scopeId:p}=Object(c.b)(),{panels:m,openLeftPanel:f}=Object(l.c)(),[g,b]=Object(r.useState)(null!==(e=null===(t=m.left)||void 0===t||null===(n=t.path)||void 0===n?void 0:n.subTab)&&void 0!==e?e:G.a),y=Object(r.useCallback)((e=>{b(e),f({id:ce,path:{tab:de,subTab:e},params:{id:u,indexName:d,scopeId:p}})}),[u,d,p,f]);return Object(r.useEffect)((()=>{var e,t,n,a;null!==(e=m.left)&&void 0!==e&&null!==(t=e.path)&&void 0!==t&&t.subTab&&b(null===(n=m.left)||void 0===n||null===(a=n.path)||void 0===a?void 0:a.subTab)}),[null===(a=m.left)||void 0===a||null===(i=a.path)||void 0===i?void 0:i.subTab]),o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiButtonGroup,{color:"primary",name:"coarsness",legend:j,options:Y,idSelected:g,onChange:y,buttonSize:"compressed",isFullWidth:!0,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTabButtonGroup"}),o.a.createElement(s.EuiSpacer,{size:"m"}),g===G.a&&o.a.createElement(G.b,null),g===H.a&&o.a.createElement(H.b,null),g===W.a&&o.a.createElement(W.b,null),g===Q.a&&o.a.createElement(Q.b,null))}));K.displayName="InsightsTab";var X=n(255),J=n(124),Z=n(931),ee=n(944);const te=i.a.div.withConfig({displayName:"ExtendedFlyoutWrapper",componentId:"sc-1anotmt-0"})(["figure{background-color:white"]),ne=i.a.div.withConfig({displayName:"InlineBlock",componentId:"sc-1anotmt-1"})(["display:inline-block;line-height:1.7em;"]),ae=()=>{var e,t,n,a;const{searchHit:i,dataAsNestedObject:r}=Object(c.b)(),l=Object(J.a)("endpointResponseActionsEnabled"),p=i?Object(X.a)(i.fields):void 0,m=null==p||null===(e=p.kibana)||void 0===e||null===(t=e.alert)||void 0===t||null===(n=t.rule)||void 0===n||null===(a=n.parameters)||void 0===a?void 0:a[0].response_actions,f=Object(ee.a)({rawEventData:i,ecsData:r}),g=Object(Z.a)({rawEventData:i,ecsData:r});return o.a.createElement("div",{"data-test-subj":d.B},o.a.createElement(s.EuiTitle,{size:"xxxs"},o.a.createElement("h5",null,u.J)),o.a.createElement(s.EuiSpacer,{size:"s"}),m?o.a.createElement(te,null,l?null==f?void 0:f.content:null==g?void 0:g.content):o.a.createElement(ne,{"data-test-subj":d.C},o.a.createElement(P.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.response.emptyMessage",defaultMessage:"There are no response actions defined for this event. To add some, edit the rule’s settings and set up {link}.",values:{link:o.a.createElement(s.EuiLink,{href:"https://www.elastic.co/guide/en/security/current/rules-ui-create.html#rule-response-action",target:"_blank"},o.a.createElement(P.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.response.responseActionLink",defaultMessage:"response actions"}))}})))};ae.displayName="ResponseDetails";const ie=Object(r.memo)((()=>o.a.createElement(s.EuiPanel,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutResponseTabContent",hasShadow:!1},o.a.createElement(ae,null))));ie.displayName="ResponseTab";const re=[{id:"visualize","data-test-subj":"securitySolutionDocumentDetailsFlyoutVisualizeTab",name:z,content:o.a.createElement(N,null),visible:!1},{id:"insights","data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsTab",name:$,content:o.a.createElement(K,null),visible:!0},{id:"investigation","data-test-subj":"securitySolutionDocumentDetailsFlyoutInvestigationTab",name:V,content:o.a.createElement(B,null),visible:!0},{id:"response","data-test-subj":"securitySolutionDocumentDetailsFlyoutResponseTab",name:U,content:o.a.createElement(ie,null),visible:!0}],oe=Object(r.memo)((({selectedTabId:e,setSelectedTabId:t})=>{const n=re.filter((e=>e.visible)).map(((n,a)=>o.a.createElement(s.EuiTab,{onClick:()=>{return e=n.id,t(e);var e},isSelected:n.id===e,key:a,"data-test-subj":n["data-test-subj"]},n.name)));return o.a.createElement(s.EuiFlyoutHeader,{hasBorder:!0},o.a.createElement(se,{size:"l",expand:!0},n))}));oe.displayName="PanelHeader";var se=i()(s.EuiTabs).withConfig({displayName:"_StyledEuiTabs",componentId:"sc-5ez8i1-0"})(["margin-bottom:-25px;"]);const le=({selectedTabId:e})=>{const t=Object(r.useMemo)((()=>{var t;return null===(t=re.filter((e=>e.visible)).find((t=>t.id===e)))||void 0===t?void 0:t.content}),[e]);return o.a.createElement(s.EuiFlyoutBody,null,t)};le.displayName="PanelContent";const ce="document-details-left",ue="visualize",de="insights",pe="investigation",me="response",fe=Object(r.memo)((({path:e})=>{const{openLeftPanel:t}=Object(l.c)(),{eventId:n,indexName:a,scopeId:i}=Object(c.b)(),u=Object(r.useMemo)((()=>{var t;const n=re.filter((e=>e.visible)),a=n[0].id;return e&&null!==(t=n.map((e=>e.id)).find((t=>t===e.tab)))&&void 0!==t?t:a}),[e]);return o.a.createElement(ge,{$_css:Object(s.useEuiBackgroundColor)("subdued")},o.a.createElement(oe,{selectedTabId:u,setSelectedTabId:e=>{t({id:ce,path:{tab:e},params:{id:n,indexName:a,scopeId:i}})}}),o.a.createElement(le,{selectedTabId:u}))}));fe.displayName="LeftPanel";var ge=i()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-49975n-0"})(["height:100%;background:",";"],(e=>e.$_css))},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=(e,t)=>"string"==typeof e?e:Array.isArray(e)&&e.length>0&&"string"==typeof e[0]?e[0]:null!=t?t:null},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(112);let i;n(145),function(e){e["going to run"]="going to run",e.running="running",e["partial failure"]="partial failure",e.failed="failed",e.succeeded="succeeded"}(i||(i={}));const r=Object(a.u)("RuleExecutionStatus",i),o=(Object.values(i),a.n)},function(e,t,n){"use strict";let a,i,r,o,s,l,c,u,d,p;n.d(t,"c",(function(){return a})),n.d(t,"i",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"j",(function(){return d})),n.d(t,"g",(function(){return p})),function(e){e.inbound="inbound",e.outbound="outbound",e.internal="internal",e.external="external",e.incoming="incoming",e.outgoing="outgoing",e.listening="listening",e.unknown="unknown"}(a||(a={})),function(e){e.bytes_in="bytes_in",e.bytes_out="bytes_out",e.flows="flows",e.destination_ips="destination_ips",e.source_ips="source_ips"}(i||(i={})),function(e){e.client="client",e.destination="destination",e.server="server",e.source="source"}(r||(r={})),function(e){e.destination="destination",e.source="source"}(o||(o={})),function(e){e.dnsName="dnsName",e.queryCount="queryCount",e.uniqueDomains="uniqueDomains",e.dnsBytesIn="dnsBytesIn",e.dnsBytesOut="dnsBytesOut"}(s||(s={})),function(e){e.domains="domains",e.lastHost="lastHost",e.lastSourceIp="lastSourceIp",e.methods="methods",e.path="path",e.requestCount="requestCount",e.statuses="statuses"}(l||(l={})),function(e){e.dns="networkKpiDns",e.networkEvents="networkKpiNetworkEvents",e.tlsHandshakes="networkKpiTlsHandshakes",e.uniqueFlows="networkKpiUniqueFlows",e.uniquePrivateIps="networkKpiUniquePrivateIps"}(c||(c={})),function(e){e._id="_id"}(u||(u={})),function(e){e.name="name",e.count="count"}(d||(d={})),function(e){e.details="networkDetails",e.dns="dns",e.http="http",e.overview="overviewNetwork",e.tls="tls",e.topCountries="topCountries",e.topNFlow="topNFlow",e.users="users"}(p||(p={}))},,function(e,t,n){"use strict";n.d(t,"a",(function(){return h})),n.d(t,"b",(function(){return v})),n.d(t,"c",(function(){return E}));var a=n(8),i=n(2),r=n.n(i),o=n(470),s=n(4),l=n(587),c=n(221),u=n(102),d=n(254),p=n(853),m=n(588),f=n(1106),g=n(738),b=n(421);const y=Object(i.createContext)(null),h=({children:e})=>{var t,n,a,l,h,v,E,j,O;const[S]=Object(u.p)(s.R),{sessionStorage:k}=Object(u.j)().services,{filter:w,sorting:I,pagination:T}=function(){const e=Object(d.e)(c.a.rulesTable),{services:{sessionStorage:t}}=Object(u.j)(),n=e(),a=function(e){try{return e.get(m.c)}catch{return null}}(t);if(!n&&!a)return{};const[i,r,o]=function(e,t){var n,a,i,r,o,l,c,u;const[d]=Object(b.d)(e,g.b),[p]=Object(b.d)(t,g.b),m={searchTerm:null!==(n=null==d?void 0:d.searchTerm)&&void 0!==n?n:null==p?void 0:p.searchTerm,source:null!==(a=null==d?void 0:d.source)&&void 0!==a?a:null==p?void 0:p.source,tags:null!==(i=null==d?void 0:d.tags)&&void 0!==i?i:null==p?void 0:p.tags,enabled:null!==(r=null==d?void 0:d.enabled)&&void 0!==r?r:null==p?void 0:p.enabled,ruleExecutionStatus:null!==(o=null==d?void 0:d.ruleExecutionStatus)&&void 0!==o?o:null==p?void 0:p.ruleExecutionStatus},[f]=Object(b.d)(e,g.c),[y]=Object(b.d)(t,g.c),h={field:null!==(l=null==f?void 0:f.field)&&void 0!==l?l:null==y?void 0:y.field,order:null!==(c=null==f?void 0:f.order)&&void 0!==c?c:null==y?void 0:y.order},[v]=Object(b.d)(e,g.e),[E]=Object(b.d)(t,g.d),x={page:null==v?void 0:v.page,perPage:null!==(u=null==v?void 0:v.perPage)&&void 0!==u?u:null==E?void 0:E.perPage};return x.perPage&&(x.perPage<0||x.perPage>s.nc)&&delete x.perPage,[m,h,x]}(n,a);return{filter:i,sorting:r,pagination:o}}(),[C,M]=Object(i.useState)({filter:null!==(t=null==w?void 0:w.searchTerm)&&void 0!==t?t:f.a.filter,tags:null!==(n=null==w?void 0:w.tags)&&void 0!==n?n:f.a.tags,showCustomRules:null!==(a=(null==w?void 0:w.source)===g.a.Custom)&&void 0!==a?a:f.a.showCustomRules,showElasticRules:null!==(l=(null==w?void 0:w.source)===g.a.Prebuilt)&&void 0!==l?l:f.a.showElasticRules,enabled:null==w?void 0:w.enabled,ruleExecutionStatus:null!==(h=null==w?void 0:w.ruleExecutionStatus)&&void 0!==h?h:f.a.ruleExecutionStatus}),[A,_]=Object(i.useState)({field:null!==(v=null==I?void 0:I.field)&&void 0!==v?v:f.d.field,order:null!==(E=null==I?void 0:I.order)&&void 0!==E?E:f.d.order}),[F,D]=Object(i.useState)(!1),[N,P]=Object(i.useState)(S.on),[R,L]=Object(i.useState)({ids:[],action:null}),[q,B]=Object(i.useState)(!1),[z,$]=Object(i.useState)(null!==(j=null==T?void 0:T.page)&&void 0!==j?j:f.b),[V,U]=Object(i.useState)(null!==(O=null==T?void 0:T.perPage)&&void 0!==O?O:f.c),[G,H]=Object(i.useState)([]),W=Object(i.useRef)(null),Q=R.ids.length>0,Y=Object(i.useMemo)((()=>({page:z,perPage:V})),[z,V]),K=Object(i.useCallback)((e=>{M((t=>({...t,...e}))),$(1),H([]),D(!1)}),[]),X=Object(i.useCallback)((()=>{H([]),D(!1)}),[]),J=Object(d.f)(),Z=Object(i.useCallback)((()=>{M({filter:f.a.filter,showElasticRules:f.a.showElasticRules,showCustomRules:f.a.showCustomRules,tags:f.a.tags,enabled:void 0,ruleExecutionStatus:f.a.ruleExecutionStatus}),_({field:f.d.field,order:f.d.order}),$(f.b),U(f.c),J({[c.a.rulesTable]:null}),k.remove(m.c)}),[M,_,$,U,J,k]);Object(i.useEffect)((()=>{var e;G.length>0?(P(!1),null==W.current&&(W.current=N)):(P(null!==(e=W.current)&&void 0!==e?e:N),W.current=null)}),[G,N]);const{data:{rules:ee,total:te}={rules:[],total:0},refetch:ne,dataUpdatedAt:ae,isFetched:ie,isFetching:re,isLoading:oe,isRefetching:se}=Object(p.a)({filterOptions:C,sortingOptions:A,pagination:Y},{refetchInterval:N&&!Q&&S.value,keepPreviousData:!0}),{data:le,isLoading:ce,isFetching:ue,isError:de,refetch:pe}=Object(o.a)(ee.map((e=>e.id)),{enabled:ee.length>0}),me=Object(i.useCallback)((async()=>{const e=await ne();return await pe(),e}),[ne,pe]),fe=Object(i.useMemo)((()=>({reFetchRules:me,setFilterOptions:K,setIsAllSelected:D,setIsRefreshOn:P,setLoadingRules:L,setPage:$,setPerPage:U,setSelectedRuleIds:H,setSortingOptions:_,clearRulesSelection:X,setIsPreflightInProgress:B,clearFilters:Z})),[me,K,D,P,L,$,U,H,_,X,B,Z]),ge=Object(i.useMemo)((()=>({state:{rules:ee,rulesSnoozeSettings:{data:null!=le?le:{},isLoading:ce,isFetching:ue,isError:de},pagination:{page:z,perPage:V,total:te},filterOptions:C,isPreflightInProgress:q,isActionInProgress:Q,isAllSelected:F,isFetched:ie,isFetching:re,isLoading:oe,isRefetching:se,isRefreshOn:N,lastUpdated:ae,loadingRuleIds:R.ids,loadingRulesAction:R.action,selectedRuleIds:G,sortingOptions:A,isDefault:x(C,A,{page:z,perPage:V,total:te})},actions:fe})),[ee,le,ce,ue,de,z,V,te,C,q,Q,F,ie,re,oe,se,N,ae,R.ids,R.action,G,A,fe]);return r.a.createElement(y.Provider,{value:ge},e)},v=()=>{const e=Object(i.useContext)(y);return Object(l.a)(e,"useRulesTableContext should be used inside RulesTableContextProvider"),e},E=()=>Object(i.useContext)(y);function x(e,t,n){return Object(a.isEqual)(e,f.a)&&Object(a.isEqual)(t,f.d)&&n.page===f.b&&n.perPage===f.c}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(102);const r=()=>{const{spaces:e}=Object(i.j)().services,[t,n]=Object(a.useState)();return Object(a.useEffect)((()=>{e&&e.getActiveSpace().then((e=>n(e.id)))}),[e]),t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(){var e=a.useRef(!1),t=a.useCallback((function(){return e.current}),[]);return a.useEffect((function(){return e.current=!0,function(){e.current=!1}})),t}},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"d",(function(){return u}));var a=n(5),i=n(106);const r=a.i18n.translate("xpack.securitySolution.timeline.defaultTimelineTitle",{defaultMessage:"None"}),o=a.i18n.translate("xpack.securitySolution.timeline.defaultTimelineDescription",{defaultMessage:"Timeline offered by default when creating new timeline."}),s=({activePage:e,totalPages:t})=>a.i18n.translate("xpack.securitySolution.timeline.eventsTableAriaLabel",{values:{activePage:e,totalPages:t},defaultMessage:"events; Page {activePage} of {totalPages}"}),l=e=>a.i18n.translate("xpack.securitySolution.timeline.searchBoxPlaceholder",{values:{timeline:e===i.l.template?"Timeline template":"Timeline"},defaultMessage:"e.g. {timeline} name or description"}),c=a.i18n.translate("xpack.securitySolution.timeline.flyoutTimelineTemplateLabel",{defaultMessage:"Timeline template"}),u=a.i18n.translate("xpack.securitySolution.timeline.participantsTitle",{defaultMessage:"Participants"})},function(e,t,n){"use strict";n.d(t,"m",(function(){return i})),n.d(t,"n",(function(){return r})),n.d(t,"q",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"k",(function(){return c})),n.d(t,"l",(function(){return u})),n.d(t,"d",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"c",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"j",(function(){return g})),n.d(t,"i",(function(){return b})),n.d(t,"h",(function(){return y})),n.d(t,"g",(function(){return h})),n.d(t,"o",(function(){return v})),n.d(t,"p",(function(){return E}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.connectors.useLoadActionTypes.errorMessage",{defaultMessage:"Welcome to your Elastic AI Assistant! I am your 100% open-source portal into your Elastic Life. "}),r=a.i18n.translate("xpack.elasticAssistant.connectors.useLoadConnectors.errorMessage",{defaultMessage:"Welcome to your Elastic AI Assistant! I am your 100% open-source portal into your Elastic Life. "}),o=(a.i18n.translate("xpack.elasticAssistant.content.prompts.welcome.welcomeSecurityPrompt",{defaultMessage:"Welcome to your Elastic AI Assistant! I am your 100% open-source portal into Elastic Security. "}),a.i18n.translate("xpack.elasticAssistant.assistant.connectors.preconfiguredTitle",{defaultMessage:"Preconfigured"})),s=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorSelector.ariaLabel",{defaultMessage:"Conversation Selector"}),l=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorSelector.newConnectorOptions",{defaultMessage:"Add new Connector..."}),c=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorSelectorInline.connectorLabel",{defaultMessage:"Connector:"}),u=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorSelectorInline.connectorPlaceholder",{defaultMessage:"Select a Connector"}),d=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.addConnectorButton.title",{defaultMessage:"Add Generative AI Connector"}),p=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.addConnectorButton.description",{defaultMessage:"Configure a connector to continue the conversation"}),m=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.addConnectorButton.missingPrivilegesTitle",{defaultMessage:"Generative AI Connector Required"}),f=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.addConnectorButton.missingPrivilegesDescription",{defaultMessage:"Please contact your administrator to enable a Generative AI Connector."}),g=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.setup.userYouTitle",{defaultMessage:"You"}),b=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.setup.userAssistantTitle",{defaultMessage:"Assistant"}),y=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.setup.timestampAtTitle",{defaultMessage:"at"}),h=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.setup.skipTitle",{defaultMessage:"Click to skip..."}),v=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorMissingCallout.calloutTitle",{defaultMessage:"The current conversation is missing a connector configuration"}),E=a.i18n.translate("xpack.elasticAssistant.assistant.connectors.connectorMissingCallout.conversationSettingsLink",{defaultMessage:"Conversation Settings"})},function(e,t,n){"use strict";let a,i,r;n.r(t),n.d(t,"NetworkType",(function(){return a})),n.d(t,"NetworkTableType",(function(){return i})),n.d(t,"NetworkDetailsTableType",(function(){return r})),function(e){e.page="page",e.details="details"}(a||(a={})),function(e){e.alerts="alerts",e.dns="dns",e.http="http",e.topCountriesDestination="topCountriesDestination",e.topCountriesSource="topCountriesSource",e.topNFlowDestination="topNFlowDestination",e.topNFlowSource="topNFlowSource",e.tls="tls",e.anomalies="anomalies"}(i||(i={})),function(e){e.http="http",e.tls="tls",e.topCountriesDestination="topCountriesDestination",e.topCountriesSource="topCountriesSource",e.topNFlowDestination="topNFlowDestination",e.topNFlowSource="topNFlowSource",e.users="users",e.anomalies="anomalies"}(r||(r={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return E}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(103),c=n(122),u=n(114),d=n(138),p=n(12),m=n(182),f=n(110),g=n(118),b=n(106),y=n(242),h=n(135),v=n(105);const E=({asEmptyButton:e,children:t,dataProviders:n,filters:a,timeRange:E,keepDataView:x,iconType:j,...O})=>{const S=Object(l.useDispatch)(),k=Object(r.useMemo)((()=>c.e.getSourcererDataViewsSelector()),[]),{defaultDataView:w,signalIndexName:I}=Object(v.a)((e=>k(e))),T=n&&n.find((e=>"template"===e.type)),C=Object(y.a)({timelineId:g.c.active,timelineType:T?b.l.template:b.l.default}),M=Object(r.useCallback)((()=>{(n||a)&&(E?C({timeRange:E}):C(),n&&S(Object(p.updateProviders)({id:g.c.active,providers:n})),a&&S(Object(p.setFilters)({id:g.c.active,filters:a})),x||S(m.d.setSelectedDataView({id:f.SourcererScopeName.timeline,selectedDataViewId:w.id,selectedPatterns:[I||""]})),S(d.b.removeLinkTo([u.a.timeline,u.a.global])))}),[n,C,S,w.id,I,a,E,x]);return e?o.a.createElement(s.EuiButtonEmpty,{"aria-label":h.h,onClick:M,flush:"right",size:"xs",iconType:j},t):o.a.createElement(s.EuiButton,i()({"aria-label":h.h,onClick:M},O),t)};E.displayName="InvestigateInTimelineButton"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"d",(function(){return y})),n.d(t,"b",(function(){return h}));var a=n(129),i=n(119),r=n(118),o=n(110),s=n(641);const l=[i.e.alertsOnAlertsPage,i.e.alertsOnRuleDetailsPage,i.e.alertsOnCasePage,r.c.casePage],c=[{value:"all",inputDisplay:s.b,"data-test-subj":"option-all"}],u=[{value:"raw",inputDisplay:s.d,"data-test-subj":"option-raw"}],d=[{value:"alert",inputDisplay:s.a,"data-test-subj":"option-alert"}],p=[...u,...d],m=e=>{switch(e){case"all":return c;case"raw":return u;case"alert":return d;default:return p}},f=e=>!!e&&l.includes(e),g=[a.a,a.b,a.e,a.f,a.g,a.h,a.l,a.o,a.E,a.t,a.H,a.p,a.q,a.W,a.ib,a.jb,a.lb,a.r,a.u,a.v,a.w,a.x,a.A,a.B,a.C,a.D,a.F,a.G,a.I,a.K,a.L,a.M,a.N,a.O,a.P,a.Q,a.R,a.S,a.s,a.T,a.U,a.V,a.eb,a.hb,"signal.rule.building_block_type","signal.rule.id","signal.rule.name","signal.rule.threat_mapping","signal.status"],b=({tableId:e,view:t})=>"raw"===t&&f(e),y=({filters:e,tableId:t,view:n})=>b({tableId:t,view:n})?e.filter((e=>!g.includes(`${e.meta.key}`))):e,h=({scopeId:e,view:t})=>b({tableId:e,view:t})?o.SourcererScopeName.default:f(e)?o.SourcererScopeName.detections:e===r.c.active?o.SourcererScopeName.timeline:o.SourcererScopeName.default},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n(103),r=n(122),o=n(179),s=n(108),l=n(105);const c=({id:e,filterQuery:t,kqlError:n,query:c,startDate:u,endDate:d})=>{const{addError:p}=Object(s.a)(),m=Object(i.useDispatch)(),f=Object(a.useMemo)((()=>r.a.errorsSelector()),[]),g=Object(l.a)(f),b=null==n?void 0:n.name,y=null==n?void 0:n.message;Object(a.useEffect)((()=>{if(!t&&y&&b){const t=y.split("").reduce(((e,t)=>(e<<5)-e+t.charCodeAt(0)|0),0).toString();m(o.a.addErrorHash({id:e,hash:t,title:b,message:[y]}))}}),[e,t,p,c,u,d,m,y,b]),Object(a.useEffect)((()=>{const t=g.find((t=>t.id===e));null!=t&&t.displayError&&null!=n&&(delete n.stack,p(n,{title:n.name}))}),[p,g,e,n])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(40),i=n(287),r=n(2),o=n.n(r),s=n(41),l=n.n(s);const c=l.a.aside.withConfig({displayName:"Aside",componentId:"sc-tazcmx-0"})(["padding:",";",""],(({theme:e})=>e.eui.euiSizeM),(({overlay:e,overlayBackground:t,theme:n})=>e&&Object(s.css)(["background:",";bottom:0;left:0;position:absolute;right:0;top:0;z-index:",";"],t?Object(i.rgba)(t,.9):Object(i.rgba)(n.eui.euiColorEmptyShade,.9),n.eui.euiZLevel1)));c.displayName="Aside";const u=l()(a.EuiFlexGroup).attrs((()=>({alignItems:"center",direction:"column",gutterSize:"s",justifyContent:"center"}))).withConfig({displayName:"FlexGroup",componentId:"sc-tazcmx-1"})(["",""],(({overlay:e})=>e&&Object(s.css)(["height:100%;"])));u.displayName="FlexGroup";const d=o.a.memo((({children:e,overlay:t,overlayBackground:n,size:i})=>o.a.createElement(c,{overlay:t,overlayBackground:n},o.a.createElement(u,{overlay:{overlay:t}},o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(a.EuiLoadingSpinner,{"data-test-subj":"loading-spinner",size:i})),e&&o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(a.EuiText,{color:"subdued",size:"s"},o.a.createElement("p",null,e)))))));d.displayName="Loader"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n.n(a),r=n(170);const o=i.a.memo((({children:e})=>i.a.createElement(r.w,{className:"siemEventsTable__trSupplement--summary"},e)));o.displayName="RowRendererContainer"},function(e,t,n){"use strict";n.d(t,"Vb",(function(){return i})),n.d(t,"oc",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"eb",(function(){return s})),n.d(t,"Yb",(function(){return l})),n.d(t,"db",(function(){return c})),n.d(t,"m",(function(){return u})),n.d(t,"pc",(function(){return d})),n.d(t,"gb",(function(){return p})),n.d(t,"i",(function(){return m})),n.d(t,"T",(function(){return f})),n.d(t,"kc",(function(){return g})),n.d(t,"Db",(function(){return b})),n.d(t,"y",(function(){return y})),n.d(t,"A",(function(){return h})),n.d(t,"z",(function(){return v})),n.d(t,"ob",(function(){return E})),n.d(t,"gc",(function(){return x})),n.d(t,"V",(function(){return j})),n.d(t,"Bb",(function(){return O})),n.d(t,"Ob",(function(){return S})),n.d(t,"S",(function(){return k})),n.d(t,"Q",(function(){return w})),n.d(t,"dc",(function(){return I})),n.d(t,"ic",(function(){return T})),n.d(t,"Z",(function(){return C})),n.d(t,"N",(function(){return M})),n.d(t,"mb",(function(){return A})),n.d(t,"t",(function(){return _})),n.d(t,"Hb",(function(){return F})),n.d(t,"Ub",(function(){return D})),n.d(t,"lb",(function(){return N})),n.d(t,"D",(function(){return P})),n.d(t,"M",(function(){return R})),n.d(t,"ub",(function(){return L})),n.d(t,"L",(function(){return q})),n.d(t,"h",(function(){return B})),n.d(t,"Rb",(function(){return z})),n.d(t,"g",(function(){return $})),n.d(t,"u",(function(){return V})),n.d(t,"nb",(function(){return U})),n.d(t,"H",(function(){return G})),n.d(t,"rb",(function(){return H})),n.d(t,"hc",(function(){return W})),n.d(t,"f",(function(){return Q})),n.d(t,"U",(function(){return Y})),n.d(t,"hb",(function(){return K})),n.d(t,"jc",(function(){return X})),n.d(t,"ib",(function(){return J})),n.d(t,"o",(function(){return Z})),n.d(t,"Eb",(function(){return ee})),n.d(t,"n",(function(){return te})),n.d(t,"ec",(function(){return ne})),n.d(t,"nc",(function(){return ae})),n.d(t,"lc",(function(){return ie})),n.d(t,"B",(function(){return re})),n.d(t,"P",(function(){return oe})),n.d(t,"v",(function(){return se})),n.d(t,"Jb",(function(){return le})),n.d(t,"Cb",(function(){return ce})),n.d(t,"X",(function(){return ue})),n.d(t,"Y",(function(){return de})),n.d(t,"ac",(function(){return pe})),n.d(t,"d",(function(){return me})),n.d(t,"a",(function(){return fe})),n.d(t,"Lb",(function(){return ge})),n.d(t,"Mb",(function(){return be})),n.d(t,"Wb",(function(){return ye})),n.d(t,"p",(function(){return he})),n.d(t,"Ib",(function(){return ve})),n.d(t,"Pb",(function(){return Ee})),n.d(t,"Qb",(function(){return xe})),n.d(t,"Zb",(function(){return je})),n.d(t,"ab",(function(){return Oe})),n.d(t,"bb",(function(){return Se})),n.d(t,"w",(function(){return ke})),n.d(t,"Kb",(function(){return we})),n.d(t,"q",(function(){return Ie})),n.d(t,"C",(function(){return Te})),n.d(t,"xb",(function(){return Ce})),n.d(t,"jb",(function(){return Me})),n.d(t,"yb",(function(){return Ae})),n.d(t,"Fb",(function(){return _e})),n.d(t,"E",(function(){return Fe})),n.d(t,"tb",(function(){return De})),n.d(t,"J",(function(){return Ne})),n.d(t,"qb",(function(){return Pe})),n.d(t,"K",(function(){return Re})),n.d(t,"j",(function(){return Le})),n.d(t,"zb",(function(){return qe})),n.d(t,"Nb",(function(){return Be})),n.d(t,"mc",(function(){return ze})),n.d(t,"bc",(function(){return $e})),n.d(t,"cc",(function(){return Ve})),n.d(t,"s",(function(){return Ue})),n.d(t,"O",(function(){return Ge})),n.d(t,"Xb",(function(){return He})),n.d(t,"Tb",(function(){return We})),n.d(t,"fc",(function(){return Qe})),n.d(t,"Sb",(function(){return Ye})),n.d(t,"c",(function(){return Ke})),n.d(t,"r",(function(){return Xe})),n.d(t,"G",(function(){return Je})),n.d(t,"Gb",(function(){return Ze})),n.d(t,"fb",(function(){return et})),n.d(t,"sb",(function(){return tt})),n.d(t,"F",(function(){return nt})),n.d(t,"pb",(function(){return at})),n.d(t,"Ab",(function(){return it})),n.d(t,"I",(function(){return rt})),n.d(t,"b",(function(){return ot})),n.d(t,"x",(function(){return st})),n.d(t,"kb",(function(){return lt})),n.d(t,"W",(function(){return ct})),n.d(t,"cb",(function(){return ut})),n.d(t,"R",(function(){return dt})),n.d(t,"k",(function(){return pt})),n.d(t,"vb",(function(){return mt})),n.d(t,"wb",(function(){return ft})),n.d(t,"l",(function(){return gt}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.auditd.sessionDescription",{defaultMessage:"Session"}),r=a.i18n.translate("xpack.securitySolution.auditd.wasAuthorizedToUseDescription",{defaultMessage:"was authorized to use"}),o=a.i18n.translate("xpack.securitySolution.auditd.acquiredCredentialsDescription",{defaultMessage:"acquired credentials to"}),s=a.i18n.translate("xpack.securitySolution.auditd.endedFromDescription",{defaultMessage:"ended from"}),l=a.i18n.translate("xpack.securitySolution.auditd.startedAtDescription",{defaultMessage:"started"}),c=a.i18n.translate("xpack.securitySolution.auditd.disposedCredentialsDescription",{defaultMessage:"disposed credentials to"}),u=a.i18n.translate("xpack.securitySolution.auditd.attemptedLoginDescription",{defaultMessage:"attempted a login via"}),d=a.i18n.translate("xpack.securitySolution.auditd.withResultDescription",{defaultMessage:"with result"}),p=a.i18n.translate("xpack.securitySolution.auditd.executedDescription",{defaultMessage:"executed"}),m=a.i18n.translate("xpack.securitySolution.auditd.asDescription",{defaultMessage:"as"}),f=a.i18n.translate("xpack.securitySolution.auditd.connectedUsingDescription",{defaultMessage:"connected using"}),g=a.i18n.translate("xpack.securitySolution.auditd.usingDescription",{defaultMessage:"using"}),b=a.i18n.translate("xpack.securitySolution.auditd.OpenedFileDescription",{defaultMessage:"opened file"}),y=a.i18n.translate("xpack.securitySolution.auditd.ChangedFileAttributesOfDescription",{defaultMessage:"changed file attributes of"}),h=a.i18n.translate("xpack.securitySolution.auditd.changedFilePermissionOfDescription",{defaultMessage:"changed file permissions of"}),v=a.i18n.translate("xpack.securitySolution.auditd.changeidleOwernshipOfDescription",{defaultMessage:"changed file ownership of"}),E=a.i18n.translate("xpack.securitySolution.auditd.loaedKernelModuleOfDescription",{defaultMessage:"loaded kernel module of"}),x=a.i18n.translate("xpack.securitySolution.auditd.unloadedKernelModuleOfDescription",{defaultMessage:"unloaded kernel module of"}),j=a.i18n.translate("xpack.securitySolution.auditd.createdDirectoryDescription",{defaultMessage:"created directory"}),O=a.i18n.translate("xpack.securitySolution.auditd.mountedDescription",{defaultMessage:"mounted"}),S=a.i18n.translate("xpack.securitySolution.auditd.renamedDescription",{defaultMessage:"renamed"}),k=a.i18n.translate("xpack.securitySolution.auditd.chedckedMetaDataOfDescription",{defaultMessage:"checked metadata of"}),w=a.i18n.translate("xpack.securitySolution.auditd.checkedFileSystemMetadataOfDescription",{defaultMessage:"checked filesystem metadata of"}),I=a.i18n.translate("xpack.securitySolution.auditd.symLinkedDescription",{defaultMessage:"symbolically linked"}),T=a.i18n.translate("xpack.securitySolution.auditd.unmountedDescription",{defaultMessage:"unmounted"}),C=a.i18n.translate("xpack.securitySolution.auditd.deletedDescription",{defaultMessage:"deleted"}),M=a.i18n.translate("xpack.securitySolution.auditd.changedTimeStampOfDescription",{defaultMessage:"changed time stamp of"}),A=a.i18n.translate("xpack.securitySolution.auditd.ListeningForConnectionsUsingDescription",{defaultMessage:"listening for connections using"}),_=a.i18n.translate("xpack.securitySolution.auditd.boundSocketFromDescription",{defaultMessage:"bound socket from"}),F=a.i18n.translate("xpack.securitySolution.auditd.receivedFromDescription",{defaultMessage:"received from"}),D=a.i18n.translate("xpack.securitySolution.auditd.sentToDescription",{defaultMessage:"sent to"}),N=a.i18n.translate("xpack.securitySolution.auditd.killedProcessIdDescription",{defaultMessage:"killed process id of"}),P=a.i18n.translate("xpack.securitySolution.auditd.changedIdentityUsingDescription",{defaultMessage:"changed identity using"}),R=a.i18n.translate("xpack.securitySolution.auditd.changedSystemTimeWithDescription",{defaultMessage:"changed system time with"}),L=a.i18n.translate("xpack.securitySolution.auditd.madeDeviceWithDescription",{defaultMessage:"made device with"}),q=a.i18n.translate("xpack.securitySolution.auditd.changedSystemNameDescription",{defaultMessage:"changed system name"}),B=a.i18n.translate("xpack.securitySolution.auditd.allocatedMemoryForDescription",{defaultMessage:"allocated memory for"}),z=a.i18n.translate("xpack.securitySolution.auditd.scheduledPolicyOFDescription",{defaultMessage:"scheduled policy of"}),$=a.i18n.translate("xpack.securitySolution.auditd.addedUserAccountDescription",{defaultMessage:"added user account"}),V=a.i18n.translate("xpack.securitySolution.auditd.causedMacPolicyErrorDescription",{defaultMessage:"caused mac policy error"}),U=a.i18n.translate("xpack.securitySolution.auditd.loadedFirewallRuleDescription",{defaultMessage:"loaded firewall rule"}),G=a.i18n.translate("xpack.securitySolution.auditd.promiscuousModeDescription",{defaultMessage:"changed promiscuous mode on the device using"}),H=a.i18n.translate("xpack.securitySolution.auditd.lockedAccountDescription",{defaultMessage:"locked account"}),W=a.i18n.translate("xpack.securitySolution.auditd.unlockedAccountDescription",{defaultMessage:"unlocked account"}),Q=a.i18n.translate("xpack.securitySolution.auditd.adddedGroupAccountUsingDescription",{defaultMessage:"added group account using"}),Y=a.i18n.translate("xpack.securitySolution.auditd.crashedProgramDescription",{defaultMessage:"crashed program"}),K=a.i18n.translate("xpack.securitySolution.auditd.executionOfForbiddenProgramDescription",{defaultMessage:"execution of forbidden program"}),X=a.i18n.translate("xpack.securitySolution.auditd.suspiciousProgramDescription",{defaultMessage:"used suspicious program"}),J=a.i18n.translate("xpack.securitySolution.auditd.failedLoginTooManyTimesDescription",{defaultMessage:"failed login due to logging in too many times"}),Z=a.i18n.translate("xpack.securitySolution.auditd.attemptedLoginFromUnusalPlaceDescription",{defaultMessage:"attempted login from unusual place"}),ee=a.i18n.translate("xpack.securitySolution.auditd.openedTooManySessionsDescription",{defaultMessage:"opened too many sessions"}),te=a.i18n.translate("xpack.securitySolution.auditd.attemptedLoginFromUnusualHourDescription",{defaultMessage:"attempted login from unusual hour"}),ne=a.i18n.translate("xpack.securitySolution.auditd.testedFileSystemIntegrityDescription",{defaultMessage:"tested file system integrity"}),ae=a.i18n.translate("xpack.securitySolution.auditd.violatedSeLinuxPolicyDescription",{defaultMessage:"violated selinux policy"}),ie=a.i18n.translate("xpack.securitySolution.auditd.violatedAppArmorPolicyFromDescription",{defaultMessage:"violated app armor policy from"}),re=a.i18n.translate("xpack.securitySolution.auditd.changedGroupDescription",{defaultMessage:"changed group"}),oe=a.i18n.translate("xpack.securitySolution.auditd.changedUserIdDescription",{defaultMessage:"changed user id"}),se=a.i18n.translate("xpack.securitySolution.auditd.changedAuditConfigurationDescription",{defaultMessage:"changed audit configuration"}),le=a.i18n.translate("xpack.securitySolution.auditd.refreshedCredentialsForDescription",{defaultMessage:"refreshed credentials for"}),ce=a.i18n.translate("xpack.securitySolution.auditd.negotiatedCryptoKeyDescription",{defaultMessage:"negotiated crypto key"}),ue=a.i18n.translate("xpack.securitySolution.auditd.cryptoOfficerLoggedInDescription",{defaultMessage:"crypto officer logged in"}),de=a.i18n.translate("xpack.securitySolution.auditd.cryptoOfficerLoggedOutDescription",{defaultMessage:"crypto officer logged out"}),pe=a.i18n.translate("xpack.securitySolution.auditd.startedCryptoSessionDescription",{defaultMessage:"started crypto session"}),me=a.i18n.translate("xpack.securitySolution.auditd.accessResultDescription",{defaultMessage:"access result"}),fe=a.i18n.translate("xpack.securitySolution.auditd.abortedAuditStartupDescription",{defaultMessage:"aborted audit startup"}),ge=a.i18n.translate("xpack.securitySolution.auditd.remoteAuditConnectedDescription",{defaultMessage:"remote audit connected"}),be=a.i18n.translate("xpack.securitySolution.auditd.remoteAuditDisconnectedDescription",{defaultMessage:"remote audit disconnected"}),ye=a.i18n.translate("xpack.securitySolution.auditd.shutDownAuditDescription",{defaultMessage:"shutdown audit"}),he=a.i18n.translate("xpack.securitySolution.auditd.auditErrorDescription",{defaultMessage:"audit error"}),ve=a.i18n.translate("xpack.securitySolution.auditd.reconfiguredAuditDescription",{defaultMessage:"reconfigured audit"}),Ee=a.i18n.translate("xpack.securitySolution.auditd.resumedAuditLoggingDescription",{defaultMessage:"resumed audit logging"}),xe=a.i18n.translate("xpack.securitySolution.auditd.rotatedAuditLogsDescription",{defaultMessage:"rotated-audit-logs"}),je=a.i18n.translate("xpack.securitySolution.auditd.startedAuditDescription",{defaultMessage:"started audit"}),Oe=a.i18n.translate("xpack.securitySolution.auditd.deletedGroupAccountUsingDescription",{defaultMessage:"deleted group account using"}),Se=a.i18n.translate("xpack.securitySolution.auditd.deletedUserAccountUsingDescription",{defaultMessage:"deleted user account using"}),ke=a.i18n.translate("xpack.securitySolution.auditd.changedAuditFeatureDescription",{defaultMessage:"changed audit feature"}),we=a.i18n.translate("xpack.securitySolution.auditd.relabeledFileSystemDescription",{defaultMessage:"relabeled filesystem"}),Ie=a.i18n.translate("xpack.securitySolution.auditd.authenticatedToGroupDescription",{defaultMessage:"authenticated to group"}),Te=a.i18n.translate("xpack.securitySolution.auditd.changedGroupPasswordDescription",{defaultMessage:"changed group password"}),Ce=a.i18n.translate("xpack.securitySolution.auditd.modifiedGroupAccountDescription",{defaultMessage:"modified group account"}),Me=a.i18n.translate("xpack.securitySolution.auditd.initializedAuditSubsystemDescription",{defaultMessage:"initialized audit subsystem"}),Ae=a.i18n.translate("xpack.securitySolution.auditd.modifiedLevelOfDescription",{defaultMessage:"modified level of"}),_e=a.i18n.translate("xpack.securitySolution.auditd.overrodeLabelOfDescription",{defaultMessage:"overrode label of"}),Fe=a.i18n.translate("xpack.securitySolution.auditd.changedLoginIdToDescription",{defaultMessage:"changed login id to"}),De=a.i18n.translate("xpack.securitySolution.auditd.macPermissionDescription",{defaultMessage:"mac permission"}),Ne=a.i18n.translate("xpack.securitySolution.auditd.changedSeLinuxBooleanDescription",{defaultMessage:"changed selinux boolean"}),Pe=a.i18n.translate("xpack.securitySolution.auditd.loadedSeLinuxPolicyDescription",{defaultMessage:"loaded selinux policy"}),Re=a.i18n.translate("xpack.securitySolution.auditd.changedSelinuxEnforcementDescription",{defaultMessage:"changed selinux enforcement"}),Le=a.i18n.translate("xpack.securitySolution.auditd.assignedUserRoleToDescription",{defaultMessage:"assigned user role to"}),qe=a.i18n.translate("xpack.securitySolution.auditd.modifiedRoleDescription",{defaultMessage:"modified role"}),Be=a.i18n.translate("xpack.securitySolution.auditd.removedUserRoleFromDescription",{defaultMessage:"removed user role from"}),ze=a.i18n.translate("xpack.securitySolution.auditd.violatedSeccompPolicyWithDescription",{defaultMessage:"violated seccomp policy with"}),$e=a.i18n.translate("xpack.securitySolution.auditd.startedServiceDescription",{defaultMessage:"started service"}),Ve=a.i18n.translate("xpack.securitySolution.auditd.stoppedServiceDescription",{defaultMessage:"stopped service"}),Ue=a.i18n.translate("xpack.securitySolution.auditd.bootedSystemDescription",{defaultMessage:"booted system"}),Ge=a.i18n.translate("xpack.securitySolution.auditd.changedToRunLevelWithDescription",{defaultMessage:"changed to run level with"}),He=a.i18n.translate("xpack.securitySolution.auditd.shutdownSystemDescription",{defaultMessage:"shutdown system"}),We=a.i18n.translate("xpack.securitySolution.auditd.sentTestDescription",{defaultMessage:"sent test"}),Qe=a.i18n.translate("xpack.securitySolution.auditd.unknownDescription",{defaultMessage:"unknown"}),Ye=a.i18n.translate("xpack.securitySolution.auditd.sentMessageDescription",{defaultMessage:"sent message"}),Ke=a.i18n.translate("xpack.securitySolution.auditd.accessPermissionDescription",{defaultMessage:"access permission"}),Xe=a.i18n.translate("xpack.securitySolution.auditd.authenticatedUsingDescription",{defaultMessage:"authenticated using"}),Je=a.i18n.translate("xpack.securitySolution.auditd.changedPasswordWithDescription",{defaultMessage:"changed password with"}),Ze=a.i18n.translate("xpack.securitySolution.auditd.ranCommandDescription",{defaultMessage:"ran command"}),et=a.i18n.translate("xpack.securitySolution.auditd.errorFromDescription",{defaultMessage:"error from"}),tt=a.i18n.translate("xpack.securitySolution.auditd.loggedOutDescription",{defaultMessage:"logged out"}),nt=a.i18n.translate("xpack.securitySolution.auditd.changedMacConfigurationDescription",{defaultMessage:"changed mac configuration"}),at=a.i18n.translate("xpack.securitySolution.auditd.loadedMacPolicyDescription",{defaultMessage:"loaded mac policy"}),it=a.i18n.translate("xpack.securitySolution.auditd.modifiedUserAccountDescription",{defaultMessage:"modified user account"}),rt=a.i18n.translate("xpack.securitySolution.auditd.changedRoleUsingDescription",{defaultMessage:"changed role using"}),ot=a.i18n.translate("xpack.securitySolution.auditd.accessErrorDescription",{defaultMessage:"access error"}),st=a.i18n.translate("xpack.securitySolution.auditd.changedConfigurationWIthDescription",{defaultMessage:"changed configuration with"}),lt=a.i18n.translate("xpack.securitySolution.auditd.issuedVmControlDescription",{defaultMessage:"issued vm control"}),ct=a.i18n.translate("xpack.securitySolution.auditd.createdVmImageDescription",{defaultMessage:"created vm image"}),ut=a.i18n.translate("xpack.securitySolution.auditd.deletedVmImageDescription",{defaultMessage:"deleted vm image"}),dt=a.i18n.translate("xpack.securitySolution.auditd.checkedIntegrityOfDescription",{defaultMessage:"checked integrity of"}),pt=a.i18n.translate("xpack.securitySolution.auditd.assignedVmIdDescription",{defaultMessage:"assigned vm id"}),mt=a.i18n.translate("xpack.securitySolution.auditd.migratedVmFromDescription",{defaultMessage:"migrated vm from"}),ft=a.i18n.translate("xpack.securitySolution.auditd.migratedVmToDescription",{defaultMessage:"migrated vm to"}),gt=a.i18n.translate("xpack.securitySolution.auditd.assignedVMResourceDescription",{defaultMessage:"assigned vm resource"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(40),i=n(2),r=n.n(i),o=n(121),s=n(127),l=n(392);const c=r.a.memo((({contextId:e,endgamePid:t,endgameProcessName:n,eventId:i,processExecutable:l,processName:c,processPid:u,isDraggable:d})=>Object(s.e)(c)&&Object(s.e)(l)&&Object(s.e)(n)&&Object(s.e)(u)&&Object(s.e)(t)?null:r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},Object(s.e)(c)?Object(s.e)(l)?Object(s.e)(n)?null:r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(o.c,{contextId:e,eventId:i,field:"endgame.process_name",value:n,iconType:"console",isDraggable:d,fieldType:"keyword",isAggregatable:!0})):r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(o.c,{contextId:e,eventId:i,field:"process.executable",value:l,iconType:"console",isDraggable:d,fieldType:"keyword",isAggregatable:!0})):r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(o.c,{contextId:e,eventId:i,field:"process.name",value:c,iconType:"console",isDraggable:d,fieldType:"keyword",isAggregatable:!0})),Object(s.e)(u)?Object(s.e)(t)?null:r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(o.c,{contextId:e,eventId:i,field:"endgame.pid",queryValue:String(t),value:`(${String(t)})`,isDraggable:d,fieldType:"keyword",isAggregatable:!0})):r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(o.c,{contextId:e,eventId:i,field:"process.pid",queryValue:String(u),value:`(${String(u)})`,isDraggable:d,fieldType:"keyword",isAggregatable:!0})))));c.displayName="ProcessDraggable";const u=r.a.memo((({contextId:e,endgamePid:t,endgameProcessName:n,eventId:a,processExecutable:i,processName:o,processPid:s,isDraggable:u})=>null==t&&null==n&&null==i&&null==o&&null==s?r.a.createElement(r.a.Fragment,null,l.g):r.a.createElement(c,{contextId:e,endgamePid:t,endgameProcessName:n,eventId:a,processExecutable:i,processName:o,processPid:s,isDraggable:u})));u.displayName="ProcessDraggableWithNonExistentProcess"},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),function(e){e.updateActiveGroups="UPDATE_ACTIVE_GROUPS",e.updateGroupOptions="UPDATE_GROUP_OPTIONS"}(a||(a={}));const i={},r={activeGroups:["none"],options:[]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return k})),n.d(t,"e",(function(){return Y})),n.d(t,"d",(function(){return K})),n.d(t,"f",(function(){return X})),n.d(t,"c",(function(){return M})),n.d(t,"b",(function(){return A})),n.d(t,"g",(function(){return ae}));var a=n(40),i=n(2),r=n.n(i),o=n(0),s=n.n(o),l=n(5),c=n(21);const u={selectedOptions:[]};class custom_field_panel_CustomFieldPanel extends r.a.PureComponent{constructor(...e){super(...e),s()(this,"state",u),s()(this,"handleSubmit",(()=>{this.props.onSubmit(this.state.selectedOptions[0].label)})),s()(this,"handleFieldSelection",(e=>{this.setState({selectedOptions:e})}))}render(){const{fields:e,currentOptions:t}=this.props,n=e.filter((e=>e.aggregatable&&"string"===e.type&&!(t&&t.some((t=>t.field===e.name))))).map((e=>({label:e.name}))),i=!this.state.selectedOptions.length;return Object(c.jsx)("div",{"data-test-subj":"custom-field-panel",style:{padding:16}},Object(c.jsx)(a.EuiForm,null,Object(c.jsx)(a.EuiFormRow,{label:l.i18n.translate("grouping.groupSelector.customGroupByFieldLabel",{defaultMessage:"Field"}),helpText:l.i18n.translate("grouping.groupSelector.customGroupByHelpText",{defaultMessage:"This is the field used for the terms aggregation"}),display:"rowCompressed",fullWidth:!0},Object(c.jsx)(a.EuiComboBox,{"data-test-subj":"groupByCustomField",placeholder:l.i18n.translate("grouping.groupSelector.customGroupByDropdownPlacehoder",{defaultMessage:"Select one"}),singleSelection:{asPlainText:!0},selectedOptions:this.state.selectedOptions,options:n,onChange:this.handleFieldSelection,fullWidth:!0,isClearable:!1})),Object(c.jsx)(a.EuiButton,{"data-test-subj":"groupByCustomFieldAddButton",disabled:i,type:"submit",size:"s",fill:!0,onClick:this.handleSubmit},l.i18n.translate("grouping.selector.grouping.label.add",{defaultMessage:"Add"}))))}}s()(custom_field_panel_CustomFieldPanel,"displayName","CustomFieldPanel");const d=l.i18n.translate("grouping.additionalActions.takeAction",{defaultMessage:"Take actions"}),p=l.i18n.translate("grouping.alerts.label",{defaultMessage:"Group alerts by"}),m=l.i18n.translate("grouping.customGroupByPanelTitle",{defaultMessage:"Group By Custom Field"}),f=l.i18n.translate("grouping.noneGroupByOptionName",{defaultMessage:"None"}),g=l.i18n.translate("grouping.customGroupByOptionName",{defaultMessage:"Custom field"});var b=n(61),y=n(48);const h=Object(c.css)("font-size:",y.euiThemeVars.euiFontSizeXS,";font-weight:",y.euiThemeVars.euiFontWeightSemiBold,";border-right:",y.euiThemeVars.euiBorderThin,";margin-right:16px;padding-right:16px;",""),v=Object(c.css)("font-size:",y.euiThemeVars.euiFontSizeXS,";font-weight:",y.euiThemeVars.euiFontWeightSemiBold,";border-right:",y.euiThemeVars.euiBorderThin,";margin-right:16px;padding-right:16px;.smallDot{width:3px!important;display:inline-block;}.euiBadge__text{text-align:center;width:100%;}",""),E=Object(c.css)(".groupingAccordionForm .euiAccordion__childWrapper .euiAccordion__children{margin-left:8px;margin-right:8px;border-left:",y.euiThemeVars.euiBorderThin,";border-right:",y.euiThemeVars.euiBorderThin,";border-bottom:",y.euiThemeVars.euiBorderThin,";border-radius:0 0 6px 6px;}.groupingAccordionForm .euiAccordion__triggerWrapper{border-bottom:",y.euiThemeVars.euiBorderThin,";border-left:",y.euiThemeVars.euiBorderThin,";border-right:",y.euiThemeVars.euiBorderThin,";border-radius:6px;min-height:78px;padding-left:16px;padding-right:16px;}.groupingAccordionForm{border-top:",y.euiThemeVars.euiBorderThin,";border-bottom:none;border-radius:6px;min-width:1090px;}.groupingPanelRenderer{display:table;table-layout:fixed;width:100%;padding-right:32px;}",""),x=Object(c.css)(".groupingAccordionFormLevel .euiAccordion__childWrapper .euiAccordion__children{margin-left:8px;margin-right:8px;border-left:none;border-right:none;border-bottom:",y.euiThemeVars.euiBorderThin,";border-radius:0;}.groupingAccordionFormLevel .euiAccordion__triggerWrapper{border-bottom:",y.euiThemeVars.euiBorderThin,";border-left:none;border-right:none;min-height:78px;padding-left:16px;padding-right:16px;border-radius:0;}.groupingAccordionFormLevel{border-top:none;border-bottom:none;border-radius:0;min-width:1090px;}.groupingPanelRenderer{display:table;table-layout:fixed;width:100%;padding-right:32px;}",""),j=Object(b.euiStyled)(a.EuiContextMenu)`
  width: 250px;
  & .euiContextMenuItem__text {
    overflow: hidden;
    text-overflow: ellipsis;
  }
  .euiContextMenuItem {
    border-bottom: ${y.euiThemeVars.euiBorderThin};
  }
  .euiContextMenuItem:last-child {
    border: none;
  }
`,O=Object(b.euiStyled)(a.EuiButtonEmpty)`
  font-weight: 'normal';

  .euiButtonEmpty__text {
    max-width: 300px;
    white-space: nowrap;
    overflow: hidden;
    text-overflow: ellipsis;
  }
`,S=({"data-test-subj":e,fields:t,groupsSelected:n=["none"],onGroupChange:r,options:o,title:s=p,maxGroupingLevels:u=1})=>{const[d,b]=Object(i.useState)(!1),y=Object(i.useCallback)((e=>!!n.find((t=>t===e))),[n]),h=Object(i.useMemo)((()=>{return[{id:"firstPanel",title:(e=u,l.i18n.translate("grouping.groupByPanelTitle",{values:{groupingLevelsCount:e},defaultMessage:"Select up to {groupingLevelsCount} groupings"})),items:[{"data-test-subj":"panel-none",name:f,icon:y("none")?"check":"empty",onClick:()=>r("none")},...o.map((e=>({"data-test-subj":`panel-${e.key}`,disabled:n.length===u&&!y(e.key),name:e.label,onClick:()=>r(e.key),icon:y(e.key)?"check":"empty"}))),{"data-test-subj":"panel-custom",name:g,icon:"empty",disabled:n.length===u,panel:"customPanel",hasPanel:!0}]},{id:"customPanel",title:m,width:685,content:Object(c.jsx)(custom_field_panel_CustomFieldPanel,{currentOptions:o.map((e=>({text:e.label,field:e.key}))),onSubmit:e=>{r(e),b(!1)},fields:t})}];var e}),[t,n.length,y,u,r,o]),v=Object(i.useMemo)((()=>o.filter((e=>y(e.key)))),[y,o]),E=Object(i.useCallback)((()=>b((e=>!e))),[]),x=Object(i.useCallback)((()=>b(!1)),[]),S=Object(i.useMemo)((()=>{const e=y("none")?f:n.reduce(((e,t)=>{const n=v.find((e=>e.key===t));return null==n?e:e?[e,n.label].join(", "):n.label}),"");return Object(c.jsx)(O,{"data-test-subj":"group-selector-dropdown",flush:"both",iconSide:"right",iconSize:"s",iconType:"arrowDown",onClick:E,title:e,size:"xs"},`${s}: ${e}`)}),[n,y,E,v,s]);return Object(c.jsx)(a.EuiPopover,{"data-test-subj":null!=e?e:"groupByPopover",button:S,closePopover:x,isOpen:d,panelPaddingSize:"none"},Object(c.jsx)(j,{"data-test-subj":"groupByContextMenu",initialPanelId:"firstPanel",panels:h}))},k=r.a.memo(S);var w=n(23),I=n(278);const T=e=>{return t=e,l.i18n.translate("grouping.eventsTab.unit",{values:{totalCount:t},defaultMessage:"{totalCount, plural, =1 {event} other {events}}"});var t},C="groups",M=e=>{const t=e.getItem(C);return t?JSON.parse(t):I.b},A=(e,t,n)=>{const a=M(e);e.setItem(C,JSON.stringify({...a,[t]:n}))};var _=n(49);const F=(e,t)=>null!=t&&t.length>0?t.reduce(((t,n)=>[...t,{meta:{alias:null,disabled:!1,key:e,negate:!1,params:{query:n},type:"phrase"},query:{match_phrase:{[e]:{query:n}}}}]),[{meta:{alias:null,disabled:!1,type:_.FILTERS.CUSTOM,negate:!1,key:e},query:{script:{script:{source:"doc[params['field']].size()==params['size']",params:{field:e,size:t.length}}}}}]):[],D=e=>[{meta:{disabled:!1,negate:!0,alias:null,key:e,value:"exists",type:"exists"},query:{exists:{field:e}}}],N=({isNullGroup:e,title:t,nullGroupMessage:n})=>Object(c.jsx)("div",null,Object(c.jsx)(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center",responsive:!1},Object(c.jsx)(a.EuiFlexItem,{grow:!1,className:"eui-textTruncate"},Object(c.jsx)(a.EuiTitle,{size:"xs",className:"euiAccordionForm__title"},Object(c.jsx)("h4",{className:"eui-textTruncate",title:t},t))),e&&n&&Object(c.jsx)(a.EuiFlexItem,{grow:!1,"data-test-subj":"null-group-icon"},Object(c.jsx)(a.EuiIconTip,{content:n,position:"right"})))),P=({customAccordionButtonClassName:e,customAccordionClassName:t="groupingAccordionForm",extraAction:n,forceState:r,groupBucket:o,groupPanelRenderer:s,groupingLevel:l=0,isLoading:u,isNullGroup:d=!1,onGroupClose:p,onToggleGroup:m,renderChildComponent:f,selectedGroup:g,nullGroupMessage:b})=>{const y=Object(i.useRef)(r);Object(i.useEffect)((()=>{"open"===y.current&&"closed"===r?(p(),y.current="closed"):"closed"===y.current&&"open"===r&&(y.current="open")}),[p,r,g]);const h=Object(i.useMemo)((()=>o.selectedGroup===g?{asString:o.key_as_string,asArray:o.key}:{asString:null,asArray:null}),[o.key,o.key_as_string,o.selectedGroup,g]),v=Object(i.useMemo)((()=>d?D(g):F(g,h.asArray)),[h.asArray,d,g]),E=Object(i.useCallback)((e=>{m&&m(e,o)}),[o,m]);return h.asString?Object(c.jsx)(a.EuiAccordion,{buttonClassName:e,buttonContent:Object(c.jsx)("div",{"data-test-subj":"group-panel-toggle",className:"groupingPanelRenderer"},null!=s?s:Object(c.jsx)(N,{title:h.asString,isNullGroup:d,nullGroupMessage:b})),buttonElement:"div",className:l>0?"groupingAccordionFormLevel":t,"data-test-subj":"grouping-accordion",extraAction:n,forceState:r,isLoading:u,id:`group${l}-${h.asString}`,onToggle:E,paddingSize:"m"},Object(c.jsx)("span",{"data-test-subj":"grouping-accordion-content"},f(v))):null},R=r.a.memo(P),L=({bucketKey:e,groupFilter:t,groupNumber:n,onTakeActionsOpen:r,statRenderers:o,takeActionItems:s})=>{const[l,u]=Object(i.useState)(!1),[p,m]=Object(i.useState)([]),f=Object(i.useCallback)((()=>(l||0!==p.length||m(s(t,n)),!l&&r?r():u(!l))),[s,t,n,l,r,p.length]),g=Object(i.useMemo)((()=>null==o?void 0:o.map((e=>{var t,n;const{dataTestSubj:i,component:r}=null!=e.badge?{dataTestSubj:`metric-${e.title}`,component:Object(c.jsx)(a.EuiToolTip,{position:"top",content:e.badge.value},Object(c.jsx)(a.EuiBadge,{style:{marginLeft:10,width:null!==(t=e.badge.width)&&void 0!==t?t:35},color:null!==(n=e.badge.color)&&void 0!==n?n:"hollow"},e.badge.value>99?"99+":e.badge.value.toString()))}:{dataTestSubj:`customMetric-${e.title}`,component:e.renderer};return Object(c.jsx)(a.EuiFlexItem,{grow:!1,key:e.title},Object(c.jsx)("span",{css:v,"data-test-subj":i},e.title,r))}))),[o]),b=Object(i.useMemo)((()=>Object(c.jsx)(a.EuiFlexItem,{grow:!1},Object(c.jsx)(a.EuiPopover,{anchorPosition:"downLeft",button:Object(c.jsx)(a.EuiButtonEmpty,{"data-test-subj":"take-action-button",onClick:f,iconType:"arrowDown",iconSide:"right"},d),closePopover:()=>u(!1),isOpen:l,panelPaddingSize:"none"},Object(c.jsx)(a.EuiContextMenuPanel,{items:p})))),[l,f,p]);return Object(c.jsx)(a.EuiFlexGroup,{"data-test-subj":"group-stats",key:`stats-${e}`,gutterSize:"none",alignItems:"center"},g,b)},q=r.a.memo(L);var B=n(44),z=(n(833),n(834)),$=n.n(z);const V={maxWidth:500},U={tall:490,short:250},G=({height:e="tall"})=>Object(c.jsx)(a.EuiPanel,{color:"subdued","data-test-subj":"empty-results-panel"},Object(c.jsx)(a.EuiFlexGroup,{style:{height:U[e]},alignItems:"center",justifyContent:"center"},Object(c.jsx)(a.EuiFlexItem,{grow:!1},Object(c.jsx)(a.EuiPanel,{hasBorder:!0,style:V},Object(c.jsx)(a.EuiFlexGroup,null,Object(c.jsx)(a.EuiFlexItem,null,Object(c.jsx)(a.EuiText,{size:"s"},Object(c.jsx)(a.EuiTitle,null,Object(c.jsx)("h3",null,Object(c.jsx)(B.FormattedMessage,{id:"grouping.empty.title",defaultMessage:"No grouping results match your selected Group alerts field"}))),Object(c.jsx)("p",null,Object(c.jsx)(B.FormattedMessage,{id:"grouping.empty.description",defaultMessage:"Try searching over a longer period of time or modifying your Group alerts field"})))),Object(c.jsx)(a.EuiFlexItem,{grow:!1},Object(c.jsx)(a.EuiImage,{size:"200px",alt:"",src:$.a})))))));var H=n(735);const W=({activePage:e,data:t,groupPanelRenderer:n,groupSelector:o,groupStatsRenderer:s,groupingId:u,groupingLevel:d=0,inspectButton:p,isLoading:m,itemsPerPage:f,onChangeGroupsItemsPerPage:g,onChangeGroupsPage:b,onGroupClose:y,onGroupToggle:v,renderChildComponent:j,selectedGroup:O,takeActionItems:S,tracker:k,unit:I=T})=>{var C,M,A;const[_,N]=Object(i.useState)({}),P=Object(i.useMemo)((()=>{var e,n;return null!==(e=null==t||null===(n=t.unitsCount)||void 0===n?void 0:n.value)&&void 0!==e?e:0}),[null==t||null===(C=t.unitsCount)||void 0===C?void 0:C.value]),L=Object(i.useMemo)((()=>`${P.toLocaleString()} ${I&&I(P)}`),[P,I]),B=Object(i.useMemo)((()=>{var e,n;return null!==(e=null==t||null===(n=t.groupsCount)||void 0===n?void 0:n.value)&&void 0!==e?e:0}),[null==t||null===(M=t.groupsCount)||void 0===M?void 0:M.value]),z=Object(i.useMemo)((()=>{return`${B.toLocaleString()} ${e=B,l.i18n.translate("grouping.total.unit",{values:{totalCount:e},defaultMessage:"{totalCount, plural, =1 {group} other {groups}}"})}`;var e}),[B]),$=Object(i.useMemo)((()=>{var e,i;return null==t||null===(e=t.groupByFields)||void 0===e||null===(i=e.buckets)||void 0===i?void 0:i.map(((e,t)=>{var i,r;const o=function(e){if(null!==e){if(!Array.isArray(e))return e;for(const t of e)if(null!==t)return t}}(e.key),p=`group-${t}-${o}`,f=null!==(i=e.isNullGroup)&&void 0!==i&&i,g=f?((e,t)=>l.i18n.translate("grouping.nullGroup.title",{values:{selectedGroup:e,unit:t},defaultMessage:"The selected group by field, {selectedGroup}, is missing a value for this group of {unit}."}))(O,I(e.doc_count)):void 0;return Object(c.jsx)("span",{key:p,"data-test-subj":`level-${d}-group-${t}`},Object(c.jsx)(R,{isNullGroup:f,nullGroupMessage:g,onGroupClose:y,extraAction:Object(c.jsx)(q,{bucketKey:p,groupFilter:f?D(O):F(O,Array.isArray(e.key)?e.key:[e.key]),groupNumber:t,statRenderers:s&&s(O,e),takeActionItems:S}),forceState:null!==(r=_[p]&&_[p].state)&&void 0!==r?r:"closed",groupBucket:e,groupPanelRenderer:n&&n(O,e,g),isLoading:m,onToggleGroup:e=>{null==k||k(w.METRIC_TYPE.CLICK,H.a.groupToggled({isOpen:e,groupingId:u,groupNumber:t})),N({[p]:{state:e?"open":"closed"}}),null==v||v({isOpen:e,groupName:o,groupNumber:t,groupingId:u})},renderChildComponent:_[p]&&"open"===_[p].state?j:()=>Object(c.jsx)("span",null),selectedGroup:O,groupingLevel:d}),d>0?null:Object(c.jsx)(a.EuiSpacer,{size:"s"}))}))}),[null==t||null===(A=t.groupByFields)||void 0===A?void 0:A.buckets,n,s,u,d,m,y,v,j,O,S,k,_,I]),V=Object(i.useMemo)((()=>B?Math.ceil(B/f):1),[B,f]);return Object(c.jsx)(r.a.Fragment,null,d>0?null:Object(c.jsx)(a.EuiFlexGroup,{"data-test-subj":"grouping-table",justifyContent:"spaceBetween",alignItems:"center",style:{paddingBottom:20,paddingTop:20}},Object(c.jsx)(a.EuiFlexItem,{grow:!1},B>0&&P>0?Object(c.jsx)(a.EuiFlexGroup,{gutterSize:"none"},Object(c.jsx)(a.EuiFlexItem,{grow:!1},Object(c.jsx)("span",{css:h,"data-test-subj":"unit-count"},L)),Object(c.jsx)(a.EuiFlexItem,null,Object(c.jsx)("span",{css:h,"data-test-subj":"group-count",style:{borderRight:"none"}},z))):null),Object(c.jsx)(a.EuiFlexItem,{grow:!1},Object(c.jsx)(a.EuiFlexGroup,{gutterSize:"xs"},p&&Object(c.jsx)(a.EuiFlexItem,null,p),Object(c.jsx)(a.EuiFlexItem,null,o)))),Object(c.jsx)("div",{css:d>0?x:E,className:"eui-xScroll"},m&&Object(c.jsx)(a.EuiProgress,{"data-test-subj":"is-loading-grouping-table",size:"xs",color:"accent"}),B>0?Object(c.jsx)("span",{"data-test-subj":`grouping-level-${d}`},$,B>0&&Object(c.jsx)(r.a.Fragment,null,Object(c.jsx)(a.EuiSpacer,{size:"m"}),Object(c.jsx)(a.EuiTablePagination,{activePage:e,"data-test-subj":`grouping-level-${d}-pagination`,itemsPerPage:f,itemsPerPageOptions:[10,25,50,100],onChangeItemsPerPage:e=>{g&&g(e)},onChangePage:e=>{b&&b(e)},pageCount:V,showPerPageOptions:!0}))):Object(c.jsx)(G,null)))},Q=r.a.memo(W),Y=e=>!!e.find((e=>"none"===e)),K=({additionalFilters:e=[],from:t,groupByField:n,pageNumber:a,rootAggregations:i,runtimeMappings:r,size:o=10,sort:s,statsAggregations:l,to:c,uniqueValue:u})=>({size:0,runtime_mappings:{...r,groupByField:{type:"keyword",script:{source:"if (doc[params['selectedGroup']].size()==0) { emit(params['uniqueValue']) } else { emit(doc[params['selectedGroup']].join(params['uniqueValue']))}",params:{selectedGroup:n,uniqueValue:u}}}},aggs:{groupByFields:{terms:{field:"groupByField",size:1e4},aggs:{bucket_truncate:{bucket_sort:{sort:s,from:a,size:o}},...l?l.reduce(((e,t)=>Object.assign(e,t)),{}):{}}},unitsCount:{value_count:{field:"groupByField"}},groupsCount:{cardinality:{field:"groupByField"}},...i?i.reduce(((e,t)=>Object.assign(e,t)),{}):{}},query:{bool:{filter:[...e,{range:{"@timestamp":{gte:t,lte:c}}}]}},_source:!1}),X=(e,t,n)=>{var a,i,r,o;if(!n)return{};const s=null==n||null===(a=n.groupByFields)||void 0===a||null===(i=a.buckets)||void 0===i?void 0:i.map((n=>{if(n.key===t)return{...n,key:["—"],selectedGroup:e,key_as_string:"—",isNullGroup:!0};const a=(Array.isArray(n.key)?n.key[0]:n.key).split(t);return{...n,key:a,selectedGroup:e,key_as_string:a.join(", ")}}));return{...n,groupByFields:{buckets:s},groupsCount:{value:null!==(r=null===(o=n.groupsCount)||void 0===o?void 0:o.value)&&void 0!==r?r:0}}};var J=n(104),Z=n.n(J),ee=n(576),te=n(878),ne=n(1100);const ae=({componentProps:e,defaultGroupingOptions:t,fields:n,groupingId:a,maxGroupingLevels:r,onGroupChange:o,onOptionsChange:s,tracker:l})=>{const[u,d]=Object(i.useReducer)(ee.a,ee.b),{activeGroups:p}=Object(i.useMemo)((()=>{var e;return null!==(e=Object(te.b)({groups:u},a))&&void 0!==e?e:I.c}),[a,u]),m=Object(i.useCallback)((e=>{d(te.a.updateActiveGroups({id:a,activeGroups:e}))}),[a]),f=Object(ne.a)({defaultGroupingOptions:t,dispatch:d,fields:n,groupingId:a,groupingState:u,maxGroupingLevels:r,onGroupChange:o,onOptionsChange:s,tracker:l}),g=Object(i.useCallback)((t=>Y([t.selectedGroup])?t.renderChildComponent([]):Object(c.jsx)(Q,Z()({},e,t,{groupSelector:f,groupingId:a,tracker:l}))),[e,f,a,l]);return Object(i.useMemo)((()=>({getGrouping:g,groupSelector:f,selectedGroups:p,setSelectedGroups:m})),[g,f,p,m])}},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"e",(function(){return a})),n.d(t,"a",(function(){return g})),n.d(t,"d",(function(){return b}));var a={};n.r(a),n.d(a,"dnsSelector",(function(){return E})),n.d(a,"topNFlowSelector",(function(){return j})),n.d(a,"tlsSelector",(function(){return S})),n.d(a,"topCountriesSelector",(function(){return w})),n.d(a,"httpSelector",(function(){return T})),n.d(a,"usersSelector",(function(){return C})),n.d(a,"networkAnomaliesJobIdFilterSelector",(function(){return M})),n.d(a,"networkAnomaliesIntervalSelector",(function(){return A}));var i=n(523),r=n(270),o=n(139),s=n(42),l=n(263),c=n(208),u=n(388),d=n(113),p=n(314);const m=e=>({...e.page.queries,[r.NetworkTableType.topCountriesSource]:{...e.page.queries[r.NetworkTableType.topCountriesSource],activePage:p.a},[r.NetworkTableType.topCountriesDestination]:{...e.page.queries[r.NetworkTableType.topCountriesDestination],activePage:p.a},[r.NetworkTableType.topNFlowSource]:{...e.page.queries[r.NetworkTableType.topNFlowSource],activePage:p.a},[r.NetworkTableType.topNFlowDestination]:{...e.page.queries[r.NetworkTableType.topNFlowDestination],activePage:p.a},[r.NetworkTableType.dns]:{...e.page.queries[r.NetworkTableType.dns],activePage:p.a},[r.NetworkTableType.tls]:{...e.page.queries[r.NetworkTableType.tls],activePage:p.a},[r.NetworkTableType.http]:{...e.page.queries[r.NetworkTableType.http],activePage:p.a}}),f=e=>({...e.details.queries,[r.NetworkDetailsTableType.topCountriesSource]:{...e.details.queries[r.NetworkDetailsTableType.topCountriesSource],activePage:p.a},[r.NetworkDetailsTableType.topCountriesDestination]:{...e.details.queries[r.NetworkDetailsTableType.topCountriesDestination],activePage:p.a},[r.NetworkDetailsTableType.topNFlowSource]:{...e.details.queries[r.NetworkDetailsTableType.topNFlowSource],activePage:p.a},[r.NetworkDetailsTableType.topNFlowDestination]:{...e.details.queries[r.NetworkDetailsTableType.topNFlowDestination],activePage:p.a},[r.NetworkDetailsTableType.tls]:{...e.details.queries[r.NetworkDetailsTableType.tls],activePage:p.a},[r.NetworkDetailsTableType.users]:{...e.details.queries[r.NetworkDetailsTableType.users],activePage:p.a},[r.NetworkDetailsTableType.http]:{...e.details.queries[r.NetworkDetailsTableType.http],activePage:p.a}}),g={page:{queries:{[r.NetworkTableType.topNFlowSource]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_out,direction:d.b.desc}},[r.NetworkTableType.topNFlowDestination]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_in,direction:d.b.desc}},[r.NetworkTableType.dns]:{activePage:p.a,limit:p.b,sort:{field:d.o.uniqueDomains,direction:d.b.desc},isPtrIncluded:!1},[r.NetworkTableType.http]:{activePage:p.a,limit:p.b,sort:{direction:d.b.desc}},[r.NetworkTableType.tls]:{activePage:p.a,limit:p.b,sort:{field:d.s._id,direction:d.b.desc}},[r.NetworkTableType.topCountriesSource]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_out,direction:d.b.desc}},[r.NetworkTableType.topCountriesDestination]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_in,direction:d.b.desc}},[r.NetworkTableType.alerts]:{activePage:p.a,limit:p.b},[r.NetworkTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"}}},details:{queries:{[r.NetworkDetailsTableType.http]:{activePage:p.a,limit:p.b,sort:{direction:d.b.desc}},[r.NetworkDetailsTableType.topCountriesSource]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_out,direction:d.b.desc}},[r.NetworkDetailsTableType.topCountriesDestination]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_in,direction:d.b.desc}},[r.NetworkDetailsTableType.topNFlowSource]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_out,direction:d.b.desc}},[r.NetworkDetailsTableType.topNFlowDestination]:{activePage:p.a,limit:p.b,sort:{field:d.t.bytes_in,direction:d.b.desc}},[r.NetworkDetailsTableType.tls]:{activePage:p.a,limit:p.b,sort:{field:d.s._id,direction:d.b.desc}},[r.NetworkDetailsTableType.users]:{activePage:p.a,limit:p.b,sort:{field:d.u.name,direction:d.b.asc}},[r.NetworkDetailsTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"}},flowTarget:d.f.source}},b=Object(c.reducerWithInitialState)(g).case(i.updateNetworkTable,((e,{networkType:t,tableType:n,updates:a})=>({...e,[t]:{...e[t],queries:{...e[t].queries,[n]:{...Object(s.get)([t,"queries",n],e),...a}}}}))).case(i.setNetworkTablesActivePageToZero,(e=>({...e,page:{...e.page,queries:m(e)},details:{...e.details,queries:f(e)}}))).case(i.setNetworkDetailsTablesActivePageToZero,(e=>({...e,details:{...e.details,queries:f(e)}}))).case(i.updateNetworkAnomaliesJobIdFilter,((e,{jobIds:t,networkType:n})=>n===r.NetworkType.page?Object(u.set)("page.queries.anomalies.jobIdSelection",t,e):Object(u.set)("details.queries.anomalies.jobIdSelection",t,e))).case(i.updateNetworkAnomaliesInterval,((e,{interval:t,networkType:n})=>n===r.NetworkType.page?Object(u.set)("page.queries.anomalies.intervalSelection",t,e):Object(u.set)("details.queries.anomalies.intervalSelection",t,e))).build(),y=(e,t)=>Object(s.get)(t,e.network),h=e=>e.network.page,v=e=>e.network.details,E=()=>Object(o.createSelector)(h,(e=>e.queries.dns)),x=(e,t,n)=>{const a=n===l.b.source?"topNFlowSource":"topNFlowDestination",i=t===r.NetworkType.page?r.NetworkTableType[a]:r.NetworkDetailsTableType[a];return Object(s.get)([t,"queries",i],e.network)||Object(s.get)([t,"queries",i],g)},j=()=>Object(o.createSelector)(x,(e=>e)),O=(e,t)=>{const n=t===r.NetworkType.page?r.NetworkTableType.tls:r.NetworkDetailsTableType.tls;return Object(s.get)([t,"queries",n],e.network)||Object(s.get)([t,"queries",n],g)},S=()=>Object(o.createSelector)(O,(e=>e)),k=(e,t,n)=>{const a=n===l.b.source?"topCountriesSource":"topCountriesDestination",i=t===r.NetworkType.page?r.NetworkTableType[a]:r.NetworkDetailsTableType[a];return Object(s.get)([t,"queries",i],e.network)||Object(s.get)([t,"queries",i],g)},w=()=>Object(o.createSelector)(k,(e=>e)),I=(e,t)=>{const n=t===r.NetworkType.page?r.NetworkTableType.http:r.NetworkDetailsTableType.http;return Object(s.get)([t,"queries",n],e.network)||Object(s.get)([t,"queries",n],g)},T=()=>Object(o.createSelector)(I,(e=>e)),C=()=>Object(o.createSelector)(v,(e=>e.queries.users)),M=()=>Object(o.createSelector)(y,(e=>e.queries[r.NetworkTableType.anomalies].jobIdSelection)),A=()=>Object(o.createSelector)(y,(e=>e.queries[r.NetworkTableType.anomalies].intervalSelection))},function(e,t,n){"use strict";n.d(t,"j",(function(){return y})),n.d(t,"i",(function(){return h})),n.d(t,"m",(function(){return v})),n.d(t,"d",(function(){return E})),n.d(t,"e",(function(){return x})),n.d(t,"a",(function(){return j})),n.d(t,"c",(function(){return O})),n.d(t,"n",(function(){return S})),n.d(t,"l",(function(){return k})),n.d(t,"b",(function(){return A})),n.d(t,"f",(function(){return _})),n.d(t,"g",(function(){return F})),n.d(t,"h",(function(){return D})),n.d(t,"k",(function(){return N}));var a=n(2),i=n.n(a),r=n(40),o=n(8),s=n(50),l=n.n(s),c=n(120),u=n(210),d=n(214),p=n(655),m=n(458),f=n(880),g=n(563);const b=["kibana.alert.rule","signal.rule","rule"],y=e=>e.map((e=>({username:e.created_by,timestamp:l()(e.created_at).format("on MMM Do YYYY @ HH:mm:ss"),event:m.b,timelineAvatar:i.a.createElement(r.EuiAvatar,{size:"l",name:e.created_by.toUpperCase()}),children:i.a.createElement(r.EuiText,{size:"s"},e.comment),actions:i.a.createElement(f.a,{"data-test-subj":"copy-to-clipboard",text:e.comment,titleSummary:m.a})}))),h=e=>{const{created_at:t,created_by:n,list_id:a,tie_breaker_id:i,updated_at:r,updated_by:o,...s}=e;return{...s}},v=e=>e.map((e=>{if(void 0!==e.entries){const t=e.entries.map((e=>{const t=Object(o.omit)(e,"id");return{...t,field:t.field.startsWith("event.")?t.field.replace(/^event./,`${g.d}.`):t.field}}));return{...e,entries:t,comments:[]}}return{...e,comments:[]}})),E=(e,t)=>e.map((e=>({...e,comments:t}))),x=(e,t)=>{const n=void 0!==t?t.toISOString():void 0;return e.map((e=>({...e,expire_time:n})))},j=e=>({query:{match:{_id:{query:e||""}}}}),O=(e,t)=>e.map((e=>({...e,os_types:t}))),S=e=>{const t=["windows","macos"];if(null!=e){var n,a,i,r,o,s;const l="endpoint"===(null==e||null===(n=e.agent)||void 0===n?void 0:n.type)?null===(a=e.host)||void 0===a||null===(i=a.os)||void 0===i||null===(r=i.name)||void 0===r?void 0:r.toLowerCase():null===(o=e.host)||void 0===o||null===(s=o.os)||void 0===s?void 0:s.family;if(null!=l)return c.D.is(l)?[l]:t}return t},k=e=>e.map((e=>{const t=e.entries.map((e=>{if(e.field.includes(".hash")){if("match"===e.type)return{...e,value:e.value.toLowerCase()};if("match_any"===e.type)return{...e,value:e.value.map((e=>e.toLowerCase()))}}return e}));return{...e,entries:t}})),w=e=>{if(Array.isArray(e)&&e.length>0)return e.map((e=>{var t,n,a;return{subjectName:null!==(t=null==e?void 0:e.subject_name)&&void 0!==t?t:"",trusted:null!==(n=null==e||null===(a=e.trusted)||void 0===a?void 0:a.toString())&&void 0!==n?n:""}}));{var t,n;const a=Array.isArray(e)?void 0:e;return[{subjectName:null!==(t=null==a?void 0:a.subject_name)&&void 0!==t?t:"",trusted:null!==(n=null==a?void 0:a.trusted)&&void 0!==n?n:""}]}};function I(e){const t=[];for(const n of e)void 0!==n.entries?(n.entries=n.entries.filter((e=>void 0!==e.value&&e.value.length>0)),t.push(n)):void 0!==n.value&&n.value.length>0&&t.push(n);return t}const T=({listId:e,name:t,eventCode:n,listNamespace:a="agnostic",alertEcsData:i})=>{var r,o,s,l,c,d;const{process:p}=i,m=I([{field:"Memory_protection.feature",operator:"included",type:"match",value:null!==(r=null===(o=i.Memory_protection)||void 0===o?void 0:o.feature)&&void 0!==r?r:""},{field:"process.executable.caseless",operator:"included",type:"match",value:null!==(s=null==p?void 0:p.executable)&&void 0!==s?s:""},{field:"process.name.caseless",operator:"included",type:"match",value:null!==(l=null==p?void 0:p.name)&&void 0!==l?l:""},{field:"process.hash.sha256",operator:"included",type:"match",value:null!==(c=null==p||null===(d=p.hash)||void 0===d?void 0:d.sha256)&&void 0!==c?c:""}]);return{...Object(u.k)({listId:e,namespaceType:a,name:t}),entries:Object(u.c)(m)}},C=({listId:e,name:t,eventCode:n,listNamespace:a="agnostic",alertEcsData:i})=>{var r,o,s,l,c,d,p,m,f;const{process:g}=i,b=I([{field:"Memory_protection.feature",operator:"included",type:"match",value:null!==(r=null===(o=i.Memory_protection)||void 0===o?void 0:o.feature)&&void 0!==r?r:""},{field:"Memory_protection.self_injection",operator:"included",type:"match",value:null!==(s=String(null===(l=i.Memory_protection)||void 0===l?void 0:l.self_injection))&&void 0!==s?s:""},{field:"process.executable.caseless",operator:"included",type:"match",value:null!==(c=null==g?void 0:g.executable)&&void 0!==c?c:""},{field:"process.name.caseless",operator:"included",type:"match",value:null!==(d=null==g?void 0:g.name)&&void 0!==d?d:""},{field:"process.Ext.token.integrity_level_name",operator:"included",type:"match",value:null!==(p=null==g||null===(m=g.Ext)||void 0===m||null===(f=m.token)||void 0===f?void 0:f.integrity_level_name)&&void 0!==p?p:""}]);return{...Object(u.k)({listId:e,namespaceType:a,name:t}),entries:Object(u.c)(b)}},M=({listId:e,name:t,eventCode:n,listNamespace:a="agnostic",alertEcsData:i})=>{var r,o,s,l,c,d,p,m,f,g,b,y,h,v,E,x,j,O,S,k,w,T,C,M,A,_,F,D,N,P,R,L,q,B,z,$,V,U,G;const{process:H}=i,W=I([{field:"rule.id",operator:"included",type:"match",value:null!==(r=null===(o=i.rule)||void 0===o?void 0:o.id)&&void 0!==r?r:""},{field:"process.executable.caseless",operator:"included",type:"match",value:null!==(s=null==H?void 0:H.executable)&&void 0!==s?s:""},{field:"process.command_line",operator:"included",type:"match",value:null!==(l=null==H?void 0:H.command_line)&&void 0!==l?l:""},{field:"process.parent.executable",operator:"included",type:"match",value:null!==(c=null==H||null===(d=H.parent)||void 0===d?void 0:d.executable)&&void 0!==c?c:""},{field:"process.code_signature.subject_name",operator:"included",type:"match",value:null!==(p=null==H||null===(m=H.code_signature)||void 0===m?void 0:m.subject_name)&&void 0!==p?p:""},{field:"file.path",operator:"included",type:"match",value:null!==(f=null===(g=i.file)||void 0===g?void 0:g.path)&&void 0!==f?f:""},{field:"file.name",operator:"included",type:"match",value:null!==(b=null===(y=i.file)||void 0===y?void 0:y.name)&&void 0!==b?b:""},{field:"source.ip",operator:"included",type:"match",value:null!==(h=null===(v=i.source)||void 0===v?void 0:v.ip)&&void 0!==h?h:""},{field:"destination.ip",operator:"included",type:"match",value:null!==(E=null===(x=i.destination)||void 0===x?void 0:x.ip)&&void 0!==E?E:""},{field:"registry.path",operator:"included",type:"match",value:null!==(j=null===(O=i.registry)||void 0===O?void 0:O.path)&&void 0!==j?j:""},{field:"registry.value",operator:"included",type:"match",value:null!==(S=null===(k=i.registry)||void 0===k?void 0:k.value)&&void 0!==S?S:""},{field:"registry.data.strings",operator:"included",type:"match",value:null!==(w=null===(T=i.registry)||void 0===T||null===(C=T.data)||void 0===C?void 0:C.strings)&&void 0!==w?w:""},{field:"dll.path",operator:"included",type:"match",value:null!==(M=null===(A=i.dll)||void 0===A?void 0:A.path)&&void 0!==M?M:""},{field:"dll.code_signature.subject_name",operator:"included",type:"match",value:null!==(_=null===(F=i.dll)||void 0===F||null===(D=F.code_signature)||void 0===D?void 0:D.subject_name)&&void 0!==_?_:""},{field:"dll.pe.original_file_name",operator:"included",type:"match",value:null!==(N=null===(P=i.dll)||void 0===P||null===(R=P.pe)||void 0===R?void 0:R.original_file_name)&&void 0!==N?N:""},{field:"dns.question.name",operator:"included",type:"match",value:null!==(L=null===(q=i.dns)||void 0===q||null===(B=q.question)||void 0===B?void 0:B.name)&&void 0!==L?L:""},{field:"dns.question.type",operator:"included",type:"match",value:null!==(z=null===($=i.dns)||void 0===$||null===(V=$.question)||void 0===V?void 0:V.type)&&void 0!==z?z:""},{field:"user.id",operator:"included",type:"match",value:null!==(U=null===(G=i.user)||void 0===G?void 0:G.id)&&void 0!==U?U:""}]);return{...Object(u.k)({listId:e,namespaceType:a,name:t}),entries:Object(u.c)(W)}},A=(e,t,n)=>{var a,i;const r=null!==(a=n["event.code"])&&void 0!==a?a:null===(i=n.event)||void 0===i?void 0:i.code;switch(r){case"behavior":return[M({listId:e,name:t,eventCode:r,alertEcsData:n})];case"memory_signature":return[T({listId:e,name:t,eventCode:r,alertEcsData:n})];case"shellcode_thread":return[C({listId:e,name:t,eventCode:r,alertEcsData:n})];case"ransomware":return(e=>{const{process:t}=e,n=t&&t.Ext&&t.Ext.code_signature;return w(n)})(n).map((a=>(({listId:e,name:t,codeSignature:n,eventCode:a,listNamespace:i="agnostic",alertEcsData:r})=>{var o,s,l,c;const{process:d,Ransomware:p}=r,m=null!==(o=null==d||null===(s=d.hash)||void 0===s?void 0:s.sha256)&&void 0!==o?o:"",f=null!==(l=null==d?void 0:d.executable)&&void 0!==l?l:"",g=null!==(c=null==p?void 0:p.feature)&&void 0!==c?c:"";return{...Object(u.k)({listId:e,namespaceType:i,name:t}),entries:Object(u.c)([{field:"process.Ext.code_signature",type:"nested",entries:[{field:"subject_name",operator:"included",type:"match",value:null!=n?n.subjectName:""},{field:"trusted",operator:"included",type:"match",value:null!=n?n.trusted:""}]},{field:"process.executable",operator:"included",type:"match",value:null!=f?f:""},{field:"process.hash.sha256",operator:"included",type:"match",value:null!=m?m:""},{field:"Ransomware.feature",operator:"included",type:"match",value:null!=g?g:""},{field:"event.code",operator:"included",type:"match",value:null!=a?a:""}])}})({listId:e,name:t,eventCode:r,codeSignature:a,alertEcsData:n})));default:return(e=>{const{file:t}=e,n=t&&t.Ext&&t.Ext.code_signature;return w(n)})(n).map((a=>(({listId:e,name:t,codeSignature:n,eventCode:a,listNamespace:i="agnostic",alertEcsData:r})=>{var o,s,l,c;const{file:d,host:p}=r,m=null!==(o=null==d?void 0:d.path)&&void 0!==o?o:"",f=null!==(s=null==d||null===(l=d.hash)||void 0===l?void 0:l.sha256)&&void 0!==s?s:"",g="Linux"===(null==p||null===(c=p.os)||void 0===c?void 0:c.name),b=[{field:g?"file.path":"file.path.caseless",operator:"included",type:"match",value:null!=m?m:""},{field:"file.hash.sha256",operator:"included",type:"match",value:null!=f?f:""},{field:"event.code",operator:"included",type:"match",value:null!=a?a:""}];return{...Object(u.k)({listId:e,namespaceType:i,name:t}),entries:g?Object(u.c)(b):Object(u.c)([{field:"file.Ext.code_signature",type:"nested",entries:[{field:"subject_name",operator:"included",type:"match",value:null!=n?n.subjectName:""},{field:"trusted",operator:"included",type:"match",value:null!=n?n.trusted:""}]},...b])}})({listId:e,name:t,eventCode:null!=r?r:"",codeSignature:a,alertEcsData:n})))}},_=(e,t)=>e.map((e=>({...e,name:t}))),F=e=>e.map((e=>({...Object(d.a)(e),list_id:void 0,namespace_type:"single"}))),D=(e,t)=>t.flatMap((t=>e.map((e=>({...Object(d.a)(e),list_id:t.list_id,namespace_type:t.namespace_type}))))),N=({alertData:e,exceptionItemName:t,ruleCustomHighlightedFields:n})=>{const a=P(e,n);if(!a.length)return null;const i=(({highlightedFields:e,alertData:t})=>Object.values(e).reduce(((e,n)=>{var a;const i=n.id,r=null!==(a=Object(o.get)(t,i))&&void 0!==a?a:Object(o.get)(t,`kibana.alert.${i}`);if(null!=r){const t=Array.isArray(r)?c.d.MATCH_ANY:c.d.MATCH,n=Array.isArray(r)?r.map(String):r.toString();e.push({field:i,operator:c.c.INCLUDED,type:t,value:n})}return e}),[]))({highlightedFields:a,alertData:e});return i.length?(({name:e,exceptionEntries:t})=>({...Object(u.k)({listId:void 0,namespaceType:"single",name:e}),entries:Object(u.c)(t)}))({name:t,exceptionEntries:i}):null},P=(e,t)=>{const n=Object(o.get)(e,"event.category"),a=Object(o.get)(e,"event.code"),i=Object(o.get)(e,"kibana.alert.rule.type"),r={primaryEventCategory:Array.isArray(n)?n[0]:n,allEventCategories:[n]};return((e,t,n)=>e.filter((({id:e})=>"agent.id"===e?R(n):!t.some((t=>e.startsWith(t))))))(Object(p.b)({eventCategories:r,eventCode:a,eventRuleType:i,highlightedFieldsOverride:t}),b,e)},R=e=>{if(!Object(o.get)(e,"kibana.alert.rule.uuid"))return!1;const t=Object(o.get)(e,"agent.type");return"endpoint"===(Array.isArray(t)?t[0]:t)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(129),i=n(109),r=n(2),o=n(255),s=n(108),l=n(232),c=n(233),u=n(409),d=n(304),p=n(552);const m=e=>({query:{bool:{filter:[{bool:{should:[{match:{"signal.rule.id":e}},{match:{[a.S]:e}}],minimum_should_match:1}}]}},size:1}),f=e=>{const{isFetching:t,data:n,error:a,refetch:o}=Object(p.a)(e,!1),{addError:f}=Object(s.a)(),b=!Object(i.u)(a),{loading:y,data:h}=Object(c.a)({query:m(e),skip:b,queryName:l.a.BY_RULE_ID});Object(r.useEffect)((()=>{null==a||Object(i.u)(a)||f(a,{title:d.b})}),[f,a]);const v=Object(r.useMemo)((()=>{const e=b?n:null==h?void 0:g(h);if(e)return Object(u.a)(e)}),[b,h,n]);return{error:a,loading:t||y,refresh:o,rule:null!=v?v:null,isExistingRule:b}},g=e=>{var t,n,a,i;if(0===e.hits.hits.length)return;const r=e.hits.hits[0],s=null!==(t=null===(n=r._source.signal)||void 0===n?void 0:n.rule)&&void 0!==t?t:null===(a=r._source.kibana)||void 0===a||null===(i=a.alert)||void 0===i?void 0:i.rule;if(null==s){var l,c,u,d,p,m;const e=Object(o.a)(null!==(l=r._source)&&void 0!==l?l:{}),t={...null==e||null===(c=e.kibana)||void 0===c||null===(u=c.alert)||void 0===u?void 0:u.rule,...null==e||null===(d=e.kibana)||void 0===d||null===(p=d.alert)||void 0===p||null===(m=p.rule)||void 0===m?void 0:m.parameters};return delete t.parameters,t}return s}},function(e,t,n){"use strict";n.d(t,"h",(function(){return f})),n.d(t,"i",(function(){return g})),n.d(t,"j",(function(){return b})),n.d(t,"e",(function(){return y.c})),n.d(t,"d",(function(){return y.a})),n.d(t,"c",(function(){return h.a})),n.d(t,"f",(function(){return v.a})),n.d(t,"g",(function(){return E.a})),n.d(t,"b",(function(){return x.b})),n.d(t,"a",(function(){return x.a}));var a=n(43),i=n(112);let r,o;!function(e){e.last_hour="last_hour",e.last_day="last_day",e.last_week="last_week",e.last_month="last_month",e.last_year="last_year",e.custom_range="custom_range"}(r||(r={})),function(e){e.minute="minute",e.hour="hour",e.day="day",e.week="week",e.month="month"}(o||(o={}));const s=a.union([a.exact(a.type({type:a.literal(r.last_hour),granularity:a.literal(o.minute)})),a.exact(a.type({type:a.literal(r.last_day),granularity:a.union([a.literal(o.minute),a.literal(o.hour)])})),a.exact(a.type({type:a.literal(r.last_week),granularity:a.union([a.literal(o.hour),a.literal(o.day)])})),a.exact(a.type({type:a.literal(r.last_month),granularity:a.union([a.literal(o.day),a.literal(o.week)])})),a.exact(a.type({type:a.literal(r.last_year),granularity:a.union([a.literal(o.week),a.literal(o.month)])})),a.exact(a.type({type:a.literal(r.custom_range),granularity:a.union([a.literal(o.minute),a.literal(o.hour),a.literal(o.day),a.literal(o.week),a.literal(o.month)]),from:i.h,to:i.h}))]);a.exact(a.partial({interval:s,debug:a.boolean})),a.exact(a.intersection([a.type({rule_id:i.k}),a.partial({interval:s,debug:a.boolean})])),a.exact(a.partial({interval:s,debug:a.boolean})),a.exact(a.type({}));var l=n(193),c=n(128),u=n(546);a.exact(a.type({ruleId:i.k})),a.exact(a.type({event_types:Object(i.s)(u.f),log_levels:Object(i.s)(u.e),sort_order:c.e,page:l.b,per_page:l.c})),a.exact(a.type({events:a.array(u.a),pagination:c.n}));const d=Object(i.s)(u.g),p=Object(i.t)(u.d,"timestamp","DefaultSortField");a.exact(a.type({ruleId:i.k})),a.exact(a.type({start:i.h,end:i.h,query_text:i.b,status_filters:d,sort_field:p,sort_order:c.e,page:l.b,per_page:l.c})),a.exact(a.type({events:a.array(u.b),total:a.number}));var m=n(4);m.Cb,m.Cb,m.Cb;const f=`${m.Cb}/health/_setup`,g=(m.Cb,e=>`${m.Cb}/rules/${e}/execution/events`),b=(m.Cb,e=>`${m.Cb}/rules/${e}/execution/results`);var y=n(429),h=(n(352),n(430),n(431)),v=n(262),E=n(432),x=n(351)},function(e,t,n){"use strict";n.d(t,"c",(function(){return E})),n.d(t,"d",(function(){return j})),n.d(t,"b",(function(){return O})),n.d(t,"a",(function(){return S}));var a=n(2),i=n(162),r=n(533),o=n(102),s=n(4);const l=async e=>{const{indexName:t,entity:n}=e.query;return o.b.get().http.fetch(s.hc,{method:"GET",query:{indexName:t,entity:n},asSystemRequest:!0,signal:e.signal})};var c=n(414),u=n(216),d=n(113),p=n(5);p.i18n.translate("xpack.securitySolution.riskScore.errorSearchDescription",{defaultMessage:"An error has occurred on risk score search"});const m=p.i18n.translate("xpack.securitySolution.riskScore.failSearchDescription",{defaultMessage:"Failed to run search on risk score"});var f=n(108);const g=e=>{var t,n;return"index_not_found_exception"===(null===(t=e.attributes)||void 0===t||null===(n=t.caused_by)||void 0===n?void 0:n.type)};var b=n(266),y=n(194),h=n(124);const v={totalCount:0,data:void 0},E=({timerange:e,onlyLatest:t=!0,filterQuery:n,sort:o,skip:s=!1,pagination:p,riskEntity:E,includeAlertsCount:x=!1})=>{const j=Object(b.a)(),O=Object(h.a)("riskScoringRoutesEnabled"),S=j?E===d.w.host?Object(d.F)(j,t,O):Object(d.G)(j,t,O):void 0,k=E===d.w.host?d.v.hostsRiskScore:d.v.usersRiskScore,{querySize:w,cursorStart:I}=p||{},{addError:T}=Object(f.a)(),{isDeprecated:C,isEnabled:M,isAuthorized:A,isLoading:_,refetch:F}=((e,t)=>{const{isPlatinumOrTrialLicense:n,capabilitiesFetched:o}=Object(i.a)(),s=Object(c.a)("entity-analytics"),u=n&&s,{fetch:d,data:p,isLoading:m,error:f}=Object(r.b)(r.a.GET_RISK_SCORE_DEPRECATED,l),g=Object(a.useMemo)((()=>p||{isDeprecated:u,isEnabled:u}),[p]),b=Object(a.useCallback)((t=>{u&&d({query:{indexName:t,entity:e}})}),[u,d,e]);return Object(a.useEffect)((()=>{null!=t&&b(t)}),[t,b]),{error:f,isLoading:m||!o||null==t,refetch:b,isAuthorized:u,...g}})(E,S),{loading:D,result:N,search:P,refetch:R,inspect:L,error:q}=Object(y.a)({factoryQueryType:k,initialResult:v,abort:s,showErrorToast:!1}),B=Object(a.useCallback)((()=>{S&&(F(S),R())}),[S,R,F]);Object(a.useEffect)((()=>{B()}),[null==e?void 0:e.to,null==e?void 0:e.from]);const z=Object(a.useMemo)((()=>({data:N.data,inspect:L,refetch:B,totalCount:N.totalCount,isAuthorized:A,isDeprecated:C,isModuleEnabled:M,isInspected:!1})),[L,C,M,A,B,N.data,N.totalCount]),$=Object(a.useMemo)((()=>e?{to:e.to,from:e.from,interval:""}:void 0),[e]),V=Object(a.useMemo)((()=>S?{defaultIndex:[S],factoryQueryType:k,riskScoreEntity:E,includeAlertsCount:x,filterQuery:Object(u.a)(n),pagination:void 0!==I&&void 0!==w?{cursorStart:I,querySize:w}:void 0,sort:o,timerange:t?void 0:$,alertsTimerange:x?$:void 0}:null),[I,S,k,n,w,o,$,t,E,x]);return Object(a.useEffect)((()=>{q&&(g(q)||T(q,{title:m}))}),[T,q]),Object(a.useEffect)((()=>{s||_||null==V||!A||!M||C||P(V)}),[M,C,A,_,V,P,s]),{...z,loading:D||_}},x=p.i18n.translate("xpack.securitySolution.riskScore.kpi.failSearchDescription",{defaultMessage:"Failed to run search on risk score"}),j=({filterQuery:e,skip:t,riskEntity:n,timerange:r})=>{const{addError:o}=Object(f.a)(),s=Object(b.a)(),l=Object(i.a)().isPlatinumOrTrialLicense,c=Object(h.a)("riskScoringRoutesEnabled"),u=s?n===d.w.host?Object(d.F)(s,!0,c):Object(d.G)(s,!0,c):void 0,{loading:p,result:m,search:v,refetch:E,inspect:j,error:O}=Object(y.a)({factoryQueryType:d.v.kpiRiskScore,initialResult:{kpiRiskScore:d.c},abort:t,showErrorToast:!1}),S=!!O&&g(O);Object(a.useEffect)((()=>{!t&&u&&l&&v({filterQuery:e,defaultIndex:[u],entity:n})}),[u,v,e,t,n,l]),Object(a.useEffect)((()=>{E()}),[null==r?void 0:r.to,null==r?void 0:r.from]),Object(a.useEffect)((()=>{O&&(g(O)||o(O,{title:x}))}),[o,O]);const k=Object(a.useMemo)((()=>{var e,t,n,a,i;if(!p&&!O)return{[d.y.unknown]:null!==(e=m.kpiRiskScore[d.y.unknown])&&void 0!==e?e:0,[d.y.low]:null!==(t=m.kpiRiskScore[d.y.low])&&void 0!==t?t:0,[d.y.moderate]:null!==(n=m.kpiRiskScore[d.y.moderate])&&void 0!==n?n:0,[d.y.high]:null!==(a=m.kpiRiskScore[d.y.high])&&void 0!==a?a:0,[d.y.critical]:null!==(i=m.kpiRiskScore[d.y.critical])&&void 0!==i?i:0}}),[m,p,O]);return{error:O,severityCount:k,loading:p,isModuleDisabled:S,refetch:E,inspect:j}};let O,S;!function(e){e.USERS_BY_RISK="UsersByRisk",e.USER_DETAILS_RISK_SCORE="UserDetailsRiskScore"}(O||(O={})),function(e){e.DEFAULT="HostRiskScore",e.HOST_DETAILS_RISK_SCORE="HostDetailsRiskScore",e.OVERVIEW_RISKY_HOSTS="OverviewRiskyHosts",e.HOSTS_BY_RISK="HostsByRisk"}(S||(S={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(126);const r=()=>{const[e,t]=Object(a.useState)({isAuthenticated:null,hasEncryptionKey:null,hasIndexManage:null,hasIndexRead:null,hasIndexWrite:null,hasIndexUpdateDelete:null,hasIndexMaintenance:null,hasKibanaCRUD:!1,hasKibanaREAD:!1}),{detectionEnginePrivileges:n,kibanaSecuritySolutionsPrivileges:{crud:r,read:o}}=Object(i.a)();return Object(a.useEffect)((()=>{null!=n.error&&t({isAuthenticated:!1,hasEncryptionKey:!1,hasIndexManage:!1,hasIndexRead:!1,hasIndexWrite:!1,hasIndexUpdateDelete:!1,hasIndexMaintenance:!1,hasKibanaCRUD:r,hasKibanaREAD:o})}),[n.error,r,o]),Object(a.useEffect)((()=>{if(null!=n.result){const e=n.result;if(null!=e.index&&Object.keys(e.index).length>0){const n=Object.keys(e.index)[0];t({isAuthenticated:e.is_authenticated,hasEncryptionKey:e.has_encryption_key,hasIndexManage:e.index[n].manage&&e.cluster.manage,hasIndexMaintenance:e.index[n].maintenance,hasIndexRead:e.index[n].read,hasIndexWrite:e.index[n].create||e.index[n].create_doc||e.index[n].index||e.index[n].write,hasIndexUpdateDelete:e.index[n].write,hasKibanaCRUD:r,hasKibanaREAD:o})}}}),[n.result,r,o]),{loading:n.loading,...e}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"e",(function(){return g}));var a=n(62),i=n.n(a),r=n(50),o=n.n(r),s=n(42),l=n(769),c=n(4),u=n(102);const d=o()().subtract(24,"hours"),p=o()(),m=(e=!0)=>{const t=e?u.b.get().uiSettings.get(c.z):null,n=Object(s.isString)(null==t?void 0:t.from)&&(null==t?void 0:t.from)||c.G,a=Object(s.isString)(null==t?void 0:t.to)&&(null==t?void 0:t.to)||c.X,i=g(n,d).toISOString(),r=g(a,p,!0).toISOString();return{from:i,fromStr:n,to:r,toStr:a,socTrends:Object(l.b)({to:r,from:i})}},f=(e=!0)=>{const t=e?u.b.get().uiSettings.get(c.y):null,n=Object(s.isNumber)(null==t?void 0:t.value)&&(null==t?void 0:t.value)||c.K;return{kind:!Object(s.isBoolean)(null==t?void 0:t.pause)||null!=t&&t.pause?c.J:"interval",duration:n}},g=(e,t,n=!1,a,r)=>{const o=i.a.parse(e,{roundUp:n,momentInstance:a,forceNow:r});return null!=o&&o.isValid()?o:t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(104),i=n(1156),r=n(1157),o=n(1158),s=n(1159);function l(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var c=l(a),u=l(i),d=l(r),p=l(o),m=l(s);function f(){var e;return(e=arguments.length-1)<0||arguments.length<=e?void 0:arguments[e]}var g={symbols:{"!":{postfix:{symbol:"!",f:function e(t){return t%1||!(+t>=0)?NaN:t>170?1/0:0===t?1:t*e(t-1)},notation:"postfix",precedence:6,rightToLeft:0,argCount:1},symbol:"!",regSymbol:"!"},"^":{infix:{symbol:"^",f:function(e,t){return Math.pow(e,t)},notation:"infix",precedence:5,rightToLeft:1,argCount:2},symbol:"^",regSymbol:"\\^"},"*":{infix:{symbol:"*",f:function(e,t){return e*t},notation:"infix",precedence:4,rightToLeft:0,argCount:2},symbol:"*",regSymbol:"\\*"},"/":{infix:{symbol:"/",f:function(e,t){return e/t},notation:"infix",precedence:4,rightToLeft:0,argCount:2},symbol:"/",regSymbol:"/"},"+":{infix:{symbol:"+",f:function(e,t){return e+t},notation:"infix",precedence:2,rightToLeft:0,argCount:2},prefix:{symbol:"+",f:f,notation:"prefix",precedence:3,rightToLeft:0,argCount:1},symbol:"+",regSymbol:"\\+"},"-":{infix:{symbol:"-",f:function(e,t){return e-t},notation:"infix",precedence:2,rightToLeft:0,argCount:2},prefix:{symbol:"-",f:function(e){return-e},notation:"prefix",precedence:3,rightToLeft:0,argCount:1},symbol:"-",regSymbol:"-"},",":{infix:{symbol:",",f:function(){return Array.of.apply(Array,arguments)},notation:"infix",precedence:1,rightToLeft:0,argCount:2},symbol:",",regSymbol:","},"(":{prefix:{symbol:"(",f:f,notation:"prefix",precedence:0,rightToLeft:0,argCount:1},symbol:"(",regSymbol:"\\("},")":{postfix:{symbol:")",f:void 0,notation:"postfix",precedence:0,rightToLeft:0,argCount:1},symbol:")",regSymbol:"\\)"},min:{func:{symbol:"min",f:function(){return Math.min.apply(Math,arguments)},notation:"func",precedence:0,rightToLeft:0,argCount:1},symbol:"min",regSymbol:"min\\b"},max:{func:{symbol:"max",f:function(){return Math.max.apply(Math,arguments)},notation:"func",precedence:0,rightToLeft:0,argCount:1},symbol:"max",regSymbol:"max\\b"},sqrt:{func:{symbol:"sqrt",f:function(e){return Math.sqrt(e)},notation:"func",precedence:0,rightToLeft:0,argCount:1},symbol:"sqrt",regSymbol:"sqrt\\b"}}},b=function(e){function t(t){var n;return n=e.call(this,"An error occurred. See https://github.com/styled-components/polished/blob/main/src/internalHelpers/errors.md#"+t+" for more information.")||this,u.default(n)}return d.default(t,e),t}(p.default(Error)),y=/((?!\w)a|na|hc|mc|dg|me[r]?|xe|ni(?![a-zA-Z])|mm|cp|tp|xp|q(?!s)|hv|xamv|nimv|wv|sm|s(?!\D|$)|ged|darg?|nrut)/g;function h(e,t){var n,a=e.pop();return t.push(a.f.apply(a,(n=[]).concat.apply(n,t.splice(-a.argCount)))),a.precedence}function v(e){return e.split("").reverse().join("")}var E=/--[\S]*/g;function x(e){return e.charAt(0).toUpperCase()+e.slice(1)}var j=["Top","Right","Bottom","Left"];function O(e,t){if(!e)return t.toLowerCase();var n=e.split("-");if(n.length>1)return n.splice(1,0,t),n.reduce((function(e,t){return""+e+x(t)}));var a=e.replace(/([a-z])([A-Z])/g,"$1"+t+"$2");return e===a?""+e+t:a}function S(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),a=1;a<t;a++)n[a-1]=arguments[a];var i=n[0],r=n[1],o=void 0===r?i:r,s=n[2],l=void 0===s?i:s,c=n[3];return function(e,t){for(var n={},a=0;a<t.length;a+=1)(t[a]||0===t[a])&&(n[O(e,j[a])]=t[a]);return n}(e,[i,o,l,void 0===c?o:c])}function k(e,t){return e.substr(-t.length)===t}var w=/^([+-]?(?:\d+|\d*\.\d+))([a-z]*|%)$/;function I(e,t){if("string"!=typeof e)return t?[e,void 0]:e;var n=e.match(w);return t?(console.warn("stripUnit's unitReturn functionality has been marked for deprecation in polished 4.0. It's functionality has been been moved to getValueAndUnit."),n?[parseFloat(e),n[2]]:[e,void 0]):n?parseFloat(e):e}var T=function(e){return function(t,n){void 0===n&&(n="16px");var a=t,i=n;if("string"==typeof t){if(!k(t,"px"))throw new b(69,e,t);a=I(t)}if("string"==typeof n){if(!k(n,"px"))throw new b(70,e,n);i=I(n)}if("string"==typeof a)throw new b(71,t,e);if("string"==typeof i)throw new b(72,n,e);return""+a/i+e}},C=T("em"),M=/^([+-]?(?:\d+|\d*\.\d+))([a-z]*|%)$/;function A(e){if("string"!=typeof e)return[e,""];var t=e.match(M);return t?[parseFloat(e),t[2]]:[e,void 0]}var _={minorSecond:1.067,majorSecond:1.125,minorThird:1.2,majorThird:1.25,perfectFourth:1.333,augFourth:1.414,perfectFifth:1.5,minorSixth:1.6,goldenSection:1.618,majorSixth:1.667,minorSeventh:1.778,majorSeventh:1.875,octave:2,majorTenth:2.5,majorEleventh:2.667,majorTwelfth:3,doubleOctave:4},F=T("rem");function D(e,t,n,a){void 0===n&&(n="320px"),void 0===a&&(a="1200px");var i=A(e),r=i[0],o=i[1],s=A(t),l=s[0],c=s[1],u=A(n),d=u[0],p=u[1],m=A(a),f=m[0],g=m[1];if("number"!=typeof d||"number"!=typeof f||!p||!g||p!==g)throw new b(47);if("number"!=typeof r||"number"!=typeof l||o!==c)throw new b(48);if(o!==p||c!==g)throw new b(75);var y=(r-l)/(d-f);return"calc("+(l-y*f).toFixed(2)+(o||"")+" + "+(100*y).toFixed(2)+"vw)"}function N(e,t){(null==t||t>e.length)&&(t=e.length);for(var n=0,a=new Array(t);n<t;n++)a[n]=e[n];return a}var P,R,L=/^\s*data:([a-z]+\/[a-z-]+(;[a-z-]+=[a-z-]+)?)?(;charset=[a-z0-9-]+)?(;base64)?,[a-z0-9!$&',()*+,;=\-._~:@/?%\s]*\s*$/i,q={woff:"woff",woff2:"woff2",ttf:"truetype",otf:"opentype",eot:"embedded-opentype",svg:"svg",svgz:"svg"};function B(e,t){return t?' format("'+q[e]+'")':""}function z(e,t,n,a){var i=[];return t&&i.push(function(e){return e.map((function(e){return'local("'+e+'")'})).join(", ")}(t)),e&&i.push(function(e,t,n){return function(e){return!!e.replace(/\s+/g," ").match(L)}(e)?'url("'+e+'")'+B(t[0],n):t.map((function(t){return'url("'+e+"."+t+'")'+B(t,n)})).join(", ")}(e,n,a)),i.join(", ")}function $(e){return void 0===e&&(e=1.3),"\n    @media only screen and (-webkit-min-device-pixel-ratio: "+e+"),\n    only screen and (min--moz-device-pixel-ratio: "+e+"),\n    only screen and (-o-min-device-pixel-ratio: "+e+"/1),\n    only screen and (min-resolution: "+Math.round(96*e)+"dpi),\n    only screen and (min-resolution: "+e+"dppx)\n  "}function V(e){for(var t="",n=arguments.length,a=new Array(n>1?n-1:0),i=1;i<n;i++)a[i-1]=arguments[i];for(var r=0;r<e.length;r+=1)if(t+=e[r],r===a.length-1&&a[r]){var o=a.filter((function(e){return!!e}));o.length>1?(t=t.slice(0,-1),t+=", "+a[r]):1===o.length&&(t+=""+a[r])}else a[r]&&(t+=a[r]+" ");return t.trim()}var U={easeInBack:"cubic-bezier(0.600, -0.280, 0.735, 0.045)",easeInCirc:"cubic-bezier(0.600,  0.040, 0.980, 0.335)",easeInCubic:"cubic-bezier(0.550,  0.055, 0.675, 0.190)",easeInExpo:"cubic-bezier(0.950,  0.050, 0.795, 0.035)",easeInQuad:"cubic-bezier(0.550,  0.085, 0.680, 0.530)",easeInQuart:"cubic-bezier(0.895,  0.030, 0.685, 0.220)",easeInQuint:"cubic-bezier(0.755,  0.050, 0.855, 0.060)",easeInSine:"cubic-bezier(0.470,  0.000, 0.745, 0.715)",easeOutBack:"cubic-bezier(0.175,  0.885, 0.320, 1.275)",easeOutCubic:"cubic-bezier(0.215,  0.610, 0.355, 1.000)",easeOutCirc:"cubic-bezier(0.075,  0.820, 0.165, 1.000)",easeOutExpo:"cubic-bezier(0.190,  1.000, 0.220, 1.000)",easeOutQuad:"cubic-bezier(0.250,  0.460, 0.450, 0.940)",easeOutQuart:"cubic-bezier(0.165,  0.840, 0.440, 1.000)",easeOutQuint:"cubic-bezier(0.230,  1.000, 0.320, 1.000)",easeOutSine:"cubic-bezier(0.390,  0.575, 0.565, 1.000)",easeInOutBack:"cubic-bezier(0.680, -0.550, 0.265, 1.550)",easeInOutCirc:"cubic-bezier(0.785,  0.135, 0.150, 0.860)",easeInOutCubic:"cubic-bezier(0.645,  0.045, 0.355, 1.000)",easeInOutExpo:"cubic-bezier(1.000,  0.000, 0.000, 1.000)",easeInOutQuad:"cubic-bezier(0.455,  0.030, 0.515, 0.955)",easeInOutQuart:"cubic-bezier(0.770,  0.000, 0.175, 1.000)",easeInOutQuint:"cubic-bezier(0.860,  0.000, 0.070, 1.000)",easeInOutSine:"cubic-bezier(0.445,  0.050, 0.550, 0.950)"},G=function(e,t,n){var a=""+n[0]+(n[1]||""),i=""+n[0]/2+(n[1]||""),r=""+t[0]+(t[1]||""),o=""+t[0]/2+(t[1]||"");switch(e){case"top":return"0 "+i+" "+r+" "+i;case"topLeft":return a+" "+r+" 0 0";case"left":return o+" "+a+" "+o+" 0";case"bottomLeft":return a+" 0 0 "+r;case"bottom":return r+" "+i+" 0 "+i;case"bottomRight":return"0 0 "+a+" "+r;case"right":return o+" 0 "+o+" "+a;default:return"0 "+a+" "+r+" 0"}};function H(e){return Math.round(255*e)}function W(e,t,n){return H(e)+","+H(t)+","+H(n)}function Q(e,t,n,a){if(void 0===a&&(a=W),0===t)return a(n,n,n);var i=(e%360+360)%360/60,r=(1-Math.abs(2*n-1))*t,o=r*(1-Math.abs(i%2-1)),s=0,l=0,c=0;i>=0&&i<1?(s=r,l=o):i>=1&&i<2?(s=o,l=r):i>=2&&i<3?(l=r,c=o):i>=3&&i<4?(l=o,c=r):i>=4&&i<5?(s=o,c=r):i>=5&&i<6&&(s=r,c=o);var u=n-r/2;return a(s+u,l+u,c+u)}var Y={aliceblue:"f0f8ff",antiquewhite:"faebd7",aqua:"00ffff",aquamarine:"7fffd4",azure:"f0ffff",beige:"f5f5dc",bisque:"ffe4c4",black:"000",blanchedalmond:"ffebcd",blue:"0000ff",blueviolet:"8a2be2",brown:"a52a2a",burlywood:"deb887",cadetblue:"5f9ea0",chartreuse:"7fff00",chocolate:"d2691e",coral:"ff7f50",cornflowerblue:"6495ed",cornsilk:"fff8dc",crimson:"dc143c",cyan:"00ffff",darkblue:"00008b",darkcyan:"008b8b",darkgoldenrod:"b8860b",darkgray:"a9a9a9",darkgreen:"006400",darkgrey:"a9a9a9",darkkhaki:"bdb76b",darkmagenta:"8b008b",darkolivegreen:"556b2f",darkorange:"ff8c00",darkorchid:"9932cc",darkred:"8b0000",darksalmon:"e9967a",darkseagreen:"8fbc8f",darkslateblue:"483d8b",darkslategray:"2f4f4f",darkslategrey:"2f4f4f",darkturquoise:"00ced1",darkviolet:"9400d3",deeppink:"ff1493",deepskyblue:"00bfff",dimgray:"696969",dimgrey:"696969",dodgerblue:"1e90ff",firebrick:"b22222",floralwhite:"fffaf0",forestgreen:"228b22",fuchsia:"ff00ff",gainsboro:"dcdcdc",ghostwhite:"f8f8ff",gold:"ffd700",goldenrod:"daa520",gray:"808080",green:"008000",greenyellow:"adff2f",grey:"808080",honeydew:"f0fff0",hotpink:"ff69b4",indianred:"cd5c5c",indigo:"4b0082",ivory:"fffff0",khaki:"f0e68c",lavender:"e6e6fa",lavenderblush:"fff0f5",lawngreen:"7cfc00",lemonchiffon:"fffacd",lightblue:"add8e6",lightcoral:"f08080",lightcyan:"e0ffff",lightgoldenrodyellow:"fafad2",lightgray:"d3d3d3",lightgreen:"90ee90",lightgrey:"d3d3d3",lightpink:"ffb6c1",lightsalmon:"ffa07a",lightseagreen:"20b2aa",lightskyblue:"87cefa",lightslategray:"789",lightslategrey:"789",lightsteelblue:"b0c4de",lightyellow:"ffffe0",lime:"0f0",limegreen:"32cd32",linen:"faf0e6",magenta:"f0f",maroon:"800000",mediumaquamarine:"66cdaa",mediumblue:"0000cd",mediumorchid:"ba55d3",mediumpurple:"9370db",mediumseagreen:"3cb371",mediumslateblue:"7b68ee",mediumspringgreen:"00fa9a",mediumturquoise:"48d1cc",mediumvioletred:"c71585",midnightblue:"191970",mintcream:"f5fffa",mistyrose:"ffe4e1",moccasin:"ffe4b5",navajowhite:"ffdead",navy:"000080",oldlace:"fdf5e6",olive:"808000",olivedrab:"6b8e23",orange:"ffa500",orangered:"ff4500",orchid:"da70d6",palegoldenrod:"eee8aa",palegreen:"98fb98",paleturquoise:"afeeee",palevioletred:"db7093",papayawhip:"ffefd5",peachpuff:"ffdab9",peru:"cd853f",pink:"ffc0cb",plum:"dda0dd",powderblue:"b0e0e6",purple:"800080",rebeccapurple:"639",red:"f00",rosybrown:"bc8f8f",royalblue:"4169e1",saddlebrown:"8b4513",salmon:"fa8072",sandybrown:"f4a460",seagreen:"2e8b57",seashell:"fff5ee",sienna:"a0522d",silver:"c0c0c0",skyblue:"87ceeb",slateblue:"6a5acd",slategray:"708090",slategrey:"708090",snow:"fffafa",springgreen:"00ff7f",steelblue:"4682b4",tan:"d2b48c",teal:"008080",thistle:"d8bfd8",tomato:"ff6347",turquoise:"40e0d0",violet:"ee82ee",wheat:"f5deb3",white:"fff",whitesmoke:"f5f5f5",yellow:"ff0",yellowgreen:"9acd32"},K=/^#[a-fA-F0-9]{6}$/,X=/^#[a-fA-F0-9]{8}$/,J=/^#[a-fA-F0-9]{3}$/,Z=/^#[a-fA-F0-9]{4}$/,ee=/^rgb\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*\)$/i,te=/^rgba\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*([-+]?[0-9]*[.]?[0-9]+)\s*\)$/i,ne=/^hsl\(\s*(\d{0,3}[.]?[0-9]+)\s*,\s*(\d{1,3}[.]?[0-9]?)%\s*,\s*(\d{1,3}[.]?[0-9]?)%\s*\)$/i,ae=/^hsla\(\s*(\d{0,3}[.]?[0-9]+)\s*,\s*(\d{1,3}[.]?[0-9]?)%\s*,\s*(\d{1,3}[.]?[0-9]?)%\s*,\s*([-+]?[0-9]*[.]?[0-9]+)\s*\)$/i;function ie(e){if("string"!=typeof e)throw new b(3);var t=function(e){if("string"!=typeof e)return e;var t=e.toLowerCase();return Y[t]?"#"+Y[t]:e}(e);if(t.match(K))return{red:parseInt(""+t[1]+t[2],16),green:parseInt(""+t[3]+t[4],16),blue:parseInt(""+t[5]+t[6],16)};if(t.match(X)){var n=parseFloat((parseInt(""+t[7]+t[8],16)/255).toFixed(2));return{red:parseInt(""+t[1]+t[2],16),green:parseInt(""+t[3]+t[4],16),blue:parseInt(""+t[5]+t[6],16),alpha:n}}if(t.match(J))return{red:parseInt(""+t[1]+t[1],16),green:parseInt(""+t[2]+t[2],16),blue:parseInt(""+t[3]+t[3],16)};if(t.match(Z)){var a=parseFloat((parseInt(""+t[4]+t[4],16)/255).toFixed(2));return{red:parseInt(""+t[1]+t[1],16),green:parseInt(""+t[2]+t[2],16),blue:parseInt(""+t[3]+t[3],16),alpha:a}}var i=ee.exec(t);if(i)return{red:parseInt(""+i[1],10),green:parseInt(""+i[2],10),blue:parseInt(""+i[3],10)};var r=te.exec(t.substring(0,50));if(r)return{red:parseInt(""+r[1],10),green:parseInt(""+r[2],10),blue:parseInt(""+r[3],10),alpha:parseFloat(""+r[4])};var o=ne.exec(t);if(o){var s="rgb("+Q(parseInt(""+o[1],10),parseInt(""+o[2],10)/100,parseInt(""+o[3],10)/100)+")",l=ee.exec(s);if(!l)throw new b(4,t,s);return{red:parseInt(""+l[1],10),green:parseInt(""+l[2],10),blue:parseInt(""+l[3],10)}}var c=ae.exec(t.substring(0,50));if(c){var u="rgb("+Q(parseInt(""+c[1],10),parseInt(""+c[2],10)/100,parseInt(""+c[3],10)/100)+")",d=ee.exec(u);if(!d)throw new b(4,t,u);return{red:parseInt(""+d[1],10),green:parseInt(""+d[2],10),blue:parseInt(""+d[3],10),alpha:parseFloat(""+c[4])}}throw new b(5)}function re(e){return function(e){var t,n=e.red/255,a=e.green/255,i=e.blue/255,r=Math.max(n,a,i),o=Math.min(n,a,i),s=(r+o)/2;if(r===o)return void 0!==e.alpha?{hue:0,saturation:0,lightness:s,alpha:e.alpha}:{hue:0,saturation:0,lightness:s};var l=r-o,c=s>.5?l/(2-r-o):l/(r+o);switch(r){case n:t=(a-i)/l+(a<i?6:0);break;case a:t=(i-n)/l+2;break;default:t=(n-a)/l+4}return t*=60,void 0!==e.alpha?{hue:t,saturation:c,lightness:s,alpha:e.alpha}:{hue:t,saturation:c,lightness:s}}(ie(e))}var oe=function(e){return 7===e.length&&e[1]===e[2]&&e[3]===e[4]&&e[5]===e[6]?"#"+e[1]+e[3]+e[5]:e};function se(e){var t=e.toString(16);return 1===t.length?"0"+t:t}function le(e){return se(Math.round(255*e))}function ce(e,t,n){return oe("#"+le(e)+le(t)+le(n))}function ue(e,t,n){return Q(e,t,n,ce)}function de(e,t,n){if("number"==typeof e&&"number"==typeof t&&"number"==typeof n)return ue(e,t,n);if("object"==typeof e&&void 0===t&&void 0===n)return ue(e.hue,e.saturation,e.lightness);throw new b(1)}function pe(e,t,n,a){if("number"==typeof e&&"number"==typeof t&&"number"==typeof n&&"number"==typeof a)return a>=1?ue(e,t,n):"rgba("+Q(e,t,n)+","+a+")";if("object"==typeof e&&void 0===t&&void 0===n&&void 0===a)return e.alpha>=1?ue(e.hue,e.saturation,e.lightness):"rgba("+Q(e.hue,e.saturation,e.lightness)+","+e.alpha+")";throw new b(2)}function me(e,t,n){if("number"==typeof e&&"number"==typeof t&&"number"==typeof n)return oe("#"+se(e)+se(t)+se(n));if("object"==typeof e&&void 0===t&&void 0===n)return oe("#"+se(e.red)+se(e.green)+se(e.blue));throw new b(6)}function fe(e,t,n,a){if("string"==typeof e&&"number"==typeof t){var i=ie(e);return"rgba("+i.red+","+i.green+","+i.blue+","+t+")"}if("number"==typeof e&&"number"==typeof t&&"number"==typeof n&&"number"==typeof a)return a>=1?me(e,t,n):"rgba("+e+","+t+","+n+","+a+")";if("object"==typeof e&&void 0===t&&void 0===n&&void 0===a)return e.alpha>=1?me(e.red,e.green,e.blue):"rgba("+e.red+","+e.green+","+e.blue+","+e.alpha+")";throw new b(7)}var ge=function(e){return"number"==typeof e.red&&"number"==typeof e.green&&"number"==typeof e.blue&&("number"!=typeof e.alpha||void 0===e.alpha)},be=function(e){return"number"==typeof e.red&&"number"==typeof e.green&&"number"==typeof e.blue&&"number"==typeof e.alpha},ye=function(e){return"number"==typeof e.hue&&"number"==typeof e.saturation&&"number"==typeof e.lightness&&("number"!=typeof e.alpha||void 0===e.alpha)},he=function(e){return"number"==typeof e.hue&&"number"==typeof e.saturation&&"number"==typeof e.lightness&&"number"==typeof e.alpha};function ve(e){if("object"!=typeof e)throw new b(8);if(be(e))return fe(e);if(ge(e))return me(e);if(he(e))return pe(e);if(ye(e))return de(e);throw new b(8)}function Ee(e,t,n){return function(){var a=n.concat(Array.prototype.slice.call(arguments));return a.length>=t?e.apply(this,a):Ee(e,t,a)}}function xe(e){return Ee(e,e.length,[])}function je(e,t){if("transparent"===t)return t;var n=re(t);return ve(c.default({},n,{hue:n.hue+parseFloat(e)}))}var Oe=xe(je);function Se(e,t,n){return Math.max(e,Math.min(t,n))}function ke(e,t){if("transparent"===t)return t;var n=re(t);return ve(c.default({},n,{lightness:Se(0,1,n.lightness-parseFloat(e))}))}var we=xe(ke);function Ie(e,t){if("transparent"===t)return t;var n=re(t);return ve(c.default({},n,{saturation:Se(0,1,n.saturation-parseFloat(e))}))}var Te=xe(Ie);function Ce(e){if("transparent"===e)return 0;var t=ie(e),n=Object.keys(t).map((function(e){var n=t[e]/255;return n<=.03928?n/12.92:Math.pow((n+.055)/1.055,2.4)})),a=n[0],i=n[1],r=n[2];return parseFloat((.2126*a+.7152*i+.0722*r).toFixed(3))}function Me(e,t){var n=Ce(e),a=Ce(t);return parseFloat((n>a?(n+.05)/(a+.05):(a+.05)/(n+.05)).toFixed(2))}function Ae(e,t){if("transparent"===t)return t;var n=re(t);return ve(c.default({},n,{lightness:Se(0,1,n.lightness+parseFloat(e))}))}var _e=xe(Ae);function Fe(e,t,n){if("transparent"===t)return n;if("transparent"===n)return t;if(0===e)return n;var a=ie(t),i=c.default({},a,{alpha:"number"==typeof a.alpha?a.alpha:1}),r=ie(n),o=c.default({},r,{alpha:"number"==typeof r.alpha?r.alpha:1}),s=i.alpha-o.alpha,l=2*parseFloat(e)-1,u=((l*s==-1?l:l+s)/(1+l*s)+1)/2,d=1-u;return fe({red:Math.floor(i.red*u+o.red*d),green:Math.floor(i.green*u+o.green*d),blue:Math.floor(i.blue*u+o.blue*d),alpha:i.alpha*(parseFloat(e)/1)+o.alpha*(1-parseFloat(e)/1)})}var De=xe(Fe);function Ne(e,t){if("transparent"===t)return t;var n=ie(t),a="number"==typeof n.alpha?n.alpha:1;return fe(c.default({},n,{alpha:Se(0,1,(100*a+100*parseFloat(e))/100)}))}var Pe=xe(Ne),Re="#000",Le="#fff";function qe(e,t){if("transparent"===t)return t;var n=re(t);return ve(c.default({},n,{saturation:Se(0,1,n.saturation+parseFloat(e))}))}var Be=xe(qe);function ze(e,t){return"transparent"===t?t:ve(c.default({},re(t),{hue:parseFloat(e)}))}var $e=xe(ze);function Ve(e,t){return"transparent"===t?t:ve(c.default({},re(t),{lightness:parseFloat(e)}))}var Ue=xe(Ve);function Ge(e,t){return"transparent"===t?t:ve(c.default({},re(t),{saturation:parseFloat(e)}))}var He=xe(Ge);function We(e,t){return"transparent"===t?t:De(parseFloat(e),"rgb(0, 0, 0)",t)}var Qe=xe(We);function Ye(e,t){return"transparent"===t?t:De(parseFloat(e),"rgb(255, 255, 255)",t)}var Ke=xe(Ye);function Xe(e,t){if("transparent"===t)return t;var n=ie(t),a="number"==typeof n.alpha?n.alpha:1;return fe(c.default({},n,{alpha:Se(0,1,+(100*a-100*parseFloat(e)).toFixed(2)/100)}))}var Je=xe(Xe),Ze=["top","right","bottom","left"];function et(e,t){return e(t?":"+t:"")}function tt(e,t,n){if(!t)throw new b(67);if(0===e.length)return et(t,null);for(var a=[],i=0;i<e.length;i+=1){if(n&&n.indexOf(e[i])<0)throw new b(68);a.push(et(t,e[i]))}return a.join(",")}var nt=[void 0,null,"active","focus","hover"];function at(e){return"button"+e+',\n  input[type="button"]'+e+',\n  input[type="reset"]'+e+',\n  input[type="submit"]'+e}var it=["absolute","fixed","relative","static","sticky"],rt=[void 0,null,"active","focus","hover"];function ot(e){return'input[type="color"]'+e+',\n    input[type="date"]'+e+',\n    input[type="datetime"]'+e+',\n    input[type="datetime-local"]'+e+',\n    input[type="email"]'+e+',\n    input[type="month"]'+e+',\n    input[type="number"]'+e+',\n    input[type="password"]'+e+',\n    input[type="search"]'+e+',\n    input[type="tel"]'+e+',\n    input[type="text"]'+e+',\n    input[type="time"]'+e+',\n    input[type="url"]'+e+',\n    input[type="week"]'+e+",\n    input:not([type])"+e+",\n    textarea"+e}t.adjustHue=Oe,t.animation=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];var a=Array.isArray(t[0]);if(!a&&t.length>8)throw new b(64);return{animation:t.map((function(e){if(a&&!Array.isArray(e)||!a&&Array.isArray(e))throw new b(65);if(Array.isArray(e)&&e.length>8)throw new b(66);return Array.isArray(e)?e.join(" "):e})).join(", ")}},t.backgroundImages=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return{backgroundImage:t.join(", ")}},t.backgrounds=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return{background:t.join(", ")}},t.between=D,t.border=function(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),a=1;a<t;a++)n[a-1]=arguments[a];var i;return"string"==typeof e&&Ze.indexOf(e)>=0?((i={})["border"+x(e)+"Width"]=n[0],i["border"+x(e)+"Style"]=n[1],i["border"+x(e)+"Color"]=n[2],i):(n.unshift(e),{borderWidth:n[0],borderStyle:n[1],borderColor:n[2]})},t.borderColor=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return S.apply(void 0,["borderColor"].concat(t))},t.borderRadius=function(e,t){var n,a,i=x(e);if(!t&&0!==t)throw new b(62);if("Top"===i||"Bottom"===i)return(n={})["border"+i+"RightRadius"]=t,n["border"+i+"LeftRadius"]=t,n;if("Left"===i||"Right"===i)return(a={})["borderTop"+i+"Radius"]=t,a["borderBottom"+i+"Radius"]=t,a;throw new b(63)},t.borderStyle=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return S.apply(void 0,["borderStyle"].concat(t))},t.borderWidth=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return S.apply(void 0,["borderWidth"].concat(t))},t.buttons=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return tt(t,at,nt)},t.clearFix=function(e){var t;return void 0===e&&(e="&"),(t={})[e+"::after"]={clear:"both",content:'""',display:"table"},t},t.complement=function(e){if("transparent"===e)return e;var t=re(e);return ve(c.default({},t,{hue:(t.hue+180)%360}))},t.cover=function(e){return void 0===e&&(e=0),{position:"absolute",top:e,right:e,bottom:e,left:e}},t.cssVar=function(e,t){if(!e||!e.match(E)){if(t)return e;throw new b(73)}var n;if("undefined"!=typeof document&&null!==document.documentElement&&(n=getComputedStyle(document.documentElement).getPropertyValue(e)),n)return n.trim();throw new b(74)},t.darken=we,t.desaturate=Te,t.directionalProperty=S,t.ellipsis=function(e){return void 0===e&&(e="100%"),{display:"inline-block",maxWidth:e,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap",wordWrap:"normal"}},t.em=C,t.fluidRange=function(e,t,n){if(void 0===t&&(t="320px"),void 0===n&&(n="1200px"),!Array.isArray(e)&&"object"!=typeof e||null===e)throw new b(49);if(Array.isArray(e)){for(var a,i={},r={},o=function(e,t){var n="undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(n)return(n=n.call(e)).next.bind(n);if(Array.isArray(e)||(n=function(e,t){if(e){if("string"==typeof e)return N(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n||"Set"===n?Array.from(e):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?N(e,t):void 0}}(e))||t&&e&&"number"==typeof e.length){n&&(e=n);var a=0;return function(){return a>=e.length?{done:!0}:{done:!1,value:e[a++]}}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}(e);!(a=o()).done;){var s,l,u=a.value;if(!u.prop||!u.fromSize||!u.toSize)throw new b(50);r[u.prop]=u.fromSize,i["@media (min-width: "+t+")"]=c.default({},i["@media (min-width: "+t+")"],((s={})[u.prop]=D(u.fromSize,u.toSize,t,n),s)),i["@media (min-width: "+n+")"]=c.default({},i["@media (min-width: "+n+")"],((l={})[u.prop]=u.toSize,l))}return c.default({},r,i)}var d,p,m;if(!e.prop||!e.fromSize||!e.toSize)throw new b(51);return(m={})[e.prop]=e.fromSize,m["@media (min-width: "+t+")"]=((d={})[e.prop]=D(e.fromSize,e.toSize,t,n),d),m["@media (min-width: "+n+")"]=((p={})[e.prop]=e.toSize,p),m},t.fontFace=function(e){var t=e.fontFamily,n=e.fontFilePath,a=e.fontStretch,i=e.fontStyle,r=e.fontVariant,o=e.fontWeight,s=e.fileFormats,l=void 0===s?["eot","woff2","woff","ttf","svg"]:s,c=e.formatHint,u=void 0!==c&&c,d=e.localFonts,p=e.unicodeRange,m=e.fontDisplay,f=e.fontVariationSettings,g=e.fontFeatureSettings;if(!t)throw new b(55);if(!n&&!d)throw new b(52);if(d&&!Array.isArray(d))throw new b(53);if(!Array.isArray(l))throw new b(54);var y={"@font-face":{fontFamily:t,src:z(n,d,l,u),unicodeRange:p,fontStretch:a,fontStyle:i,fontVariant:r,fontWeight:o,fontDisplay:m,fontVariationSettings:f,fontFeatureSettings:g}};return JSON.parse(JSON.stringify(y))},t.getContrast=Me,t.getLuminance=Ce,t.getValueAndUnit=A,t.grayscale=function(e){return"transparent"===e?e:ve(c.default({},re(e),{saturation:0}))},t.hiDPI=$,t.hideText=function(){return{textIndent:"101%",overflow:"hidden",whiteSpace:"nowrap"}},t.hideVisually=function(){return{border:"0",clip:"rect(0 0 0 0)",height:"1px",margin:"-1px",overflow:"hidden",padding:"0",position:"absolute",whiteSpace:"nowrap",width:"1px"}},t.hsl=de,t.hslToColorString=function(e){if("object"==typeof e&&"number"==typeof e.hue&&"number"==typeof e.saturation&&"number"==typeof e.lightness)return e.alpha&&"number"==typeof e.alpha?pe({hue:e.hue,saturation:e.saturation,lightness:e.lightness,alpha:e.alpha}):de({hue:e.hue,saturation:e.saturation,lightness:e.lightness});throw new b(45)},t.hsla=pe,t.invert=function(e){if("transparent"===e)return e;var t=ie(e);return ve(c.default({},t,{red:255-t.red,green:255-t.green,blue:255-t.blue}))},t.lighten=_e,t.linearGradient=function(e){var t=e.colorStops,n=e.fallback,a=e.toDirection,i=void 0===a?"":a;if(!t||t.length<2)throw new b(56);return{backgroundColor:n||t[0].replace(/,\s+/g,",").split(" ")[0].replace(/,(?=\S)/g,", "),backgroundImage:V(P||(P=m.default(["linear-gradient(","",")"])),i,t.join(", ").replace(/,(?=\S)/g,", "))}},t.margin=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return S.apply(void 0,["margin"].concat(t))},t.math=function(e,t){var n=v(e),a=n.match(y);if(a&&!a.every((function(e){return e===a[0]})))throw new b(41);return""+function(e,t){var n,a=function(e){var t={};return t.symbols=e?c.default({},g.symbols,e.symbols):c.default({},g.symbols),t}(t),i=[a.symbols["("].prefix],r=[],o=new RegExp("\\d+(?:\\.\\d+)?|"+Object.keys(a.symbols).map((function(e){return a.symbols[e]})).sort((function(e,t){return t.symbol.length-e.symbol.length})).map((function(e){return e.regSymbol})).join("|")+"|(\\S)","g");o.lastIndex=0;var s=!1;do{var l=(n=o.exec(e))||[")",void 0],u=l[0],d=l[1],p=a.symbols[u],m=p&&!p.prefix&&!p.func,f=!p||!p.postfix&&!p.infix;if(d||(s?f:m))throw new b(37,n?n.index:e.length,e);if(s){var y=p.postfix||p.infix;do{var v=i[i.length-1];if((y.precedence-v.precedence||v.rightToLeft)>0)break}while(h(i,r));s="postfix"===y.notation,")"!==y.symbol&&(i.push(y),s&&h(i,r))}else if(p){if(i.push(p.prefix||p.func),p.func&&(!(n=o.exec(e))||"("!==n[0]))throw new b(38,n?n.index:e.length,e)}else r.push(+u),s=!0}while(n&&i.length);if(i.length)throw new b(39,n?n.index:e.length,e);if(n)throw new b(40,n?n.index:e.length,e);return r.pop()}(v(n.replace(y,"")),t)+(a?v(a[0]):"")},t.meetsContrastGuidelines=function(e,t){var n=Me(e,t);return{AA:n>=4.5,AALarge:n>=3,AAA:n>=7,AAALarge:n>=4.5}},t.mix=De,t.modularScale=function(e,t,n){if(void 0===t&&(t="1em"),void 0===n&&(n=1.333),"number"!=typeof e)throw new b(42);if("string"==typeof n&&!_[n])throw new b(43);var a="string"==typeof t?A(t):[t,""],i=a[0],r=a[1],o="string"==typeof n?_[n]:n;if("string"==typeof i)throw new b(44,t);return""+i*Math.pow(o,e)+(r||"")},t.normalize=function(){var e;return[(e={html:{lineHeight:"1.15",textSizeAdjust:"100%"},body:{margin:"0"},main:{display:"block"},h1:{fontSize:"2em",margin:"0.67em 0"},hr:{boxSizing:"content-box",height:"0",overflow:"visible"},pre:{fontFamily:"monospace, monospace",fontSize:"1em"},a:{backgroundColor:"transparent"},"abbr[title]":{borderBottom:"none",textDecoration:"underline"}},e["b,\n    strong"]={fontWeight:"bolder"},e["code,\n    kbd,\n    samp"]={fontFamily:"monospace, monospace",fontSize:"1em"},e.small={fontSize:"80%"},e["sub,\n    sup"]={fontSize:"75%",lineHeight:"0",position:"relative",verticalAlign:"baseline"},e.sub={bottom:"-0.25em"},e.sup={top:"-0.5em"},e.img={borderStyle:"none"},e["button,\n    input,\n    optgroup,\n    select,\n    textarea"]={fontFamily:"inherit",fontSize:"100%",lineHeight:"1.15",margin:"0"},e["button,\n    input"]={overflow:"visible"},e["button,\n    select"]={textTransform:"none"},e['button,\n    html [type="button"],\n    [type="reset"],\n    [type="submit"]']={WebkitAppearance:"button"},e['button::-moz-focus-inner,\n    [type="button"]::-moz-focus-inner,\n    [type="reset"]::-moz-focus-inner,\n    [type="submit"]::-moz-focus-inner']={borderStyle:"none",padding:"0"},e['button:-moz-focusring,\n    [type="button"]:-moz-focusring,\n    [type="reset"]:-moz-focusring,\n    [type="submit"]:-moz-focusring']={outline:"1px dotted ButtonText"},e.fieldset={padding:"0.35em 0.625em 0.75em"},e.legend={boxSizing:"border-box",color:"inherit",display:"table",maxWidth:"100%",padding:"0",whiteSpace:"normal"},e.progress={verticalAlign:"baseline"},e.textarea={overflow:"auto"},e['[type="checkbox"],\n    [type="radio"]']={boxSizing:"border-box",padding:"0"},e['[type="number"]::-webkit-inner-spin-button,\n    [type="number"]::-webkit-outer-spin-button']={height:"auto"},e['[type="search"]']={WebkitAppearance:"textfield",outlineOffset:"-2px"},e['[type="search"]::-webkit-search-decoration']={WebkitAppearance:"none"},e["::-webkit-file-upload-button"]={WebkitAppearance:"button",font:"inherit"},e.details={display:"block"},e.summary={display:"list-item"},e.template={display:"none"},e["[hidden]"]={display:"none"},e),{"abbr[title]":{textDecoration:"underline dotted"}}]},t.opacify=Pe,t.padding=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return S.apply(void 0,["padding"].concat(t))},t.parseToHsl=re,t.parseToRgb=ie,t.position=function(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),a=1;a<t;a++)n[a-1]=arguments[a];return it.indexOf(e)>=0&&e?c.default({},S.apply(void 0,[""].concat(n)),{position:e}):S.apply(void 0,["",e].concat(n))},t.radialGradient=function(e){var t=e.colorStops,n=e.extent,a=void 0===n?"":n,i=e.fallback,r=e.position,o=void 0===r?"":r,s=e.shape,l=void 0===s?"":s;if(!t||t.length<2)throw new b(57);return{backgroundColor:i||t[0].split(" ")[0],backgroundImage:V(R||(R=m.default(["radial-gradient(","","","",")"])),o,l,a,t.join(", "))}},t.readableColor=function(e,t,n,a){void 0===t&&(t=Re),void 0===n&&(n=Le),void 0===a&&(a=!0);var i=Ce(e)>.179,r=i?t:n;return!a||Me(e,r)>=4.5?r:i?Re:Le},t.rem=F,t.retinaImage=function(e,t,n,a,i){var r;if(void 0===n&&(n="png"),void 0===i&&(i="_2x"),!e)throw new b(58);var o=n.replace(/^\./,""),s=a?a+"."+o:""+e+i+"."+o;return(r={backgroundImage:"url("+e+"."+o+")"})[$()]=c.default({backgroundImage:"url("+s+")"},t?{backgroundSize:t}:{}),r},t.rgb=me,t.rgbToColorString=function(e){if("object"==typeof e&&"number"==typeof e.red&&"number"==typeof e.green&&"number"==typeof e.blue)return"number"==typeof e.alpha?fe({red:e.red,green:e.green,blue:e.blue,alpha:e.alpha}):me({red:e.red,green:e.green,blue:e.blue});throw new b(46)},t.rgba=fe,t.saturate=Be,t.setHue=$e,t.setLightness=Ue,t.setSaturation=He,t.shade=Qe,t.size=function(e,t){return void 0===t&&(t=e),{height:e,width:t}},t.stripUnit=I,t.textInputs=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return tt(t,ot,rt)},t.timingFunctions=function(e){return U[e]},t.tint=Ke,t.toColorString=ve,t.transitions=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];if(Array.isArray(t[0])&&2===t.length){var a=t[1];if("string"!=typeof a)throw new b(61);return{transition:t[0].map((function(e){return e+" "+a})).join(", ")}}return{transition:t.join(", ")}},t.transparentize=Je,t.triangle=function(e){var t=e.pointingDirection,n=e.height,a=e.width,i=e.foregroundColor,r=e.backgroundColor,o=void 0===r?"transparent":r,s=A(a),l=A(n);if(isNaN(l[0])||isNaN(s[0]))throw new b(60);return c.default({width:"0",height:"0",borderColor:o},function(e,t){switch(e){case"top":case"bottomRight":return{borderBottomColor:t};case"right":case"bottomLeft":return{borderLeftColor:t};case"bottom":case"topLeft":return{borderTopColor:t};case"left":case"topRight":return{borderRightColor:t};default:throw new b(59)}}(t,i),{borderStyle:"solid",borderWidth:G(t,l,s)})},t.wordWrap=function(e){return void 0===e&&(e="break-word"),{overflowWrap:e,wordWrap:e,wordBreak:"break-word"===e?"break-all":e}}},function(e,t,n){e.exports=n(33)(1654)},,,function(e,t,n){"use strict";n.d(t,"a",(function(){return E}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(44),c=n(41),u=n.n(c),d=n(105),p=n(142),m=n(133),f=n(111),g=n(345),b=n(199);const y=(e,t)=>(t===b.a.createCase||t===b.a.submitCase)&&e===b.b.alertsCases,h=u()(s.EuiTourStep).withConfig({displayName:"StyledTourStep",componentId:"sc-1l8wop5-0"})(["&.euiPopover__panel[data-popover-open]{z-index:",";}"],(({step:e,tourId:t})=>y(t,e)?"9000 !important":"1000 !important")),v=({children:e,onClick:t,step:n,tourId:a})=>{const{activeStep:c,incrementStep:u,isTourShown:v}=Object(g.b)(),E=Object(r.useMemo)((()=>b.e[a].find((e=>e.step===n))),[n,a]),x=Object(r.useMemo)((()=>f.b.getTimelineByIdSelector()),[]),j=Object(d.b)((e=>{var t;return(null!==(t=x(e,p.f.active))&&void 0!==t?t:m.b).show})),O=Object(r.useCallback)((()=>t?t():u(a)),[u,t,a]),S=Object(r.useCallback)((e=>{"Enter"===e.key&&e.stopPropagation()}),[]),k=y(a,n);if(null==E||(n!==c||!v(a))&&!k||j)return e||null;const{anchor:w,content:I,imageConfig:T,dataTestSubj:C,hideNextButton:M=!1,...A}=E,_=M?o.a.createElement(o.a.Fragment,null):o.a.createElement(s.EuiButtonEmpty,{onClick:O,onKeyDown:S,size:"xs",color:"text",flush:"right","data-test-subj":"onboarding--securityTourNextStepButton","tour-step":"nextButton"},o.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.guided_onboarding.nextStep.buttonLabel",defaultMessage:"Next"})),F={...A,content:o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiText,{size:"s"},o.a.createElement("p",null,I)),T&&o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiSpacer,{size:"m"}),o.a.createElement(s.EuiImage,{alt:T.altText,src:T.src,size:"fullWidth"}))),footerAction:_,isStepOpen:!0,onFinish:()=>null,stepsTotal:b.e[a].length,panelProps:{"data-test-subj":C}};return null!=w?o.a.createElement(o.a.Fragment,null,o.a.createElement(h,i()({tourId:a},F,{anchor:w})),o.a.createElement(o.a.Fragment,null,e)):null!=e?o.a.createElement(h,i()({tourId:a},F),e):null},E=({children:e,isTourAnchor:t=!0,...n})=>t?o.a.createElement(v,n,e):o.a.createElement(o.a.Fragment,null,e)},function(e,t,n){const a=n(157);e.exports=(e,t,n=!1)=>{if(e instanceof a)return e;try{return new a(e,t)}catch(e){if(!n)return null;throw e}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"c",(function(){return p}));var a=n(42),i=n(2),r=n(1038),o=n.n(r),s=n(57),l=n(76),c=n.n(l);const u=(e,t)=>{const n=null!=t?t:((e,t)=>{const n=t.diff(e,"days");return n<=1&&!e.isSame(t)?2:n})(c()(e[0]),c()(e[1])),a=Object(s.niceTimeFormatByDay)(n);return Object(s.timeFormatter)(a)},d=(e=100)=>{const[t,n]=Object(i.useState)({width:0,height:0}),r=Object(i.useMemo)((()=>Object(a.throttle)(e,n)),[e]),{ref:s}=o()({onResize:r});return{ref:s,...t}},p=(e,t,n,a)=>{Object(i.useEffect)((()=>{!async function(){const i=await(null==e?void 0:e.getVariation(t,n));i&&a(i)}()}),[e,t,n,a])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(40),i=n(5),r=n(44),o=n(2),s=n.n(o);const l=({count:e})=>{const[t,n,l]=Object(o.useMemo)((()=>function(e){var t;if(!Number.isFinite(e))return[e,"",""];const n=Math.pow(10,3*Math.min(Math.floor(Math.floor(Math.log10(e))/3),4)),a={compactThousands:i.i18n.translate("xpack.securitySolution.formattedNumber.compactThousands",{defaultMessage:"k"}),compactMillions:i.i18n.translate("xpack.securitySolution.formattedNumber.compactMillions",{defaultMessage:"M"}),compactBillions:i.i18n.translate("xpack.securitySolution.formattedNumber.compactBillions",{defaultMessage:"B"}),compactTrillions:i.i18n.translate("xpack.securitySolution.formattedNumber.compactTrillions",{defaultMessage:"T"})},r=new Map([[1,""],[1e3,a.compactThousands],[1e6,a.compactMillions],[1e9,a.compactBillions],[1e12,a.compactTrillions]]),o=i.i18n.translate("xpack.securitySolution.formattedNumber.compactOverflow",{defaultMessage:"+"}),s=null!==(t=r.get(n))&&void 0!==t?t:"";return[Math.floor(e/n),s,e/n%1>Number.EPSILON?o:""]}(e||0)),[e]);return null==e?null:0===e?s.a.createElement(s.a.Fragment,null,0):s.a.createElement(r.FormattedMessage,{id:"xpack.securitySolution.formattedNumber.countsLabel",description:"",defaultMessage:"{mantissa}{scale}{hasRemainder}",values:{mantissa:s.a.createElement(a.EuiI18nNumber,{value:t}),scale:n,hasRemainder:l}})},c=s.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return R})),n.d(t,"b",(function(){return L})),n.d(t,"c",(function(){return q})),n.d(t,"d",(function(){return B}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(5),l=n(40),c=n(44),u=n(41),d=n.n(u),p=n(53),m=n.n(p),f=n(107);const g=d()(l.EuiPanel).withConfig({displayName:"EuiPanelStyled",componentId:"sc-n74boe-0"})(["&.full-height,.full-height{height:100%;}.is-not-scrollable{overflow:hidden;}.is-scrollable{overflow:auto;}"]),b=Object(r.memo)((({pageTitle:e,pageDescription:t,pageBody:n,actions:a,headerHasBottomBorder:i,restrictWidth:s,paddingSize:c="l",scrollableBody:u=!1,headerBackComponent:d,children:p,"data-test-subj":b})=>{const y=!(e||t||a||d),h=Object(f.a)(b),v=Object(r.useMemo)((()=>Array.isArray(a)?a:a?[a]:void 0),[a]),E=Object(r.useMemo)((()=>({gutterSize:"s"})),[]),x=Object(r.useMemo)((()=>m()({"is-scrollable":u,"is-not-scrollable":!u,"full-height":!0})),[u]),j=Object(r.useMemo)((()=>y?null:o.a.createElement(l.EuiFlexGroup,{direction:"column",gutterSize:"none",alignItems:"flexStart",wrap:!1,responsive:!1},d&&o.a.createElement(l.EuiFlexItem,{grow:!1},d),o.a.createElement(l.EuiSpacer,{size:"m"}),o.a.createElement(l.EuiFlexItem,{grow:!1},o.a.createElement(l.EuiTitle,{size:"l"},o.a.createElement("span",{"data-test-subj":h("titleHolder")},e))))),[h,d,y,e]);return o.a.createElement(g,{hasShadow:!1,paddingSize:c,"data-test-subj":b,className:"full-height",color:"transparent"},o.a.createElement(l.EuiFlexGroup,{direction:"column",responsive:!1,gutterSize:"none",className:"full-height","data-test-subj":h("root")},!y&&o.a.createElement(l.EuiFlexItem,{grow:!1,"data-test-subj":h("headerContainer")},o.a.createElement(l.EuiPageHeader,{pageTitle:j,description:t,bottomBorder:i,rightSideItems:v,rightSideGroupProps:E,restrictWidth:s,alignItems:"bottom","data-test-subj":h("header")}),o.a.createElement(l.EuiSpacer,{size:"l"})),o.a.createElement(l.EuiFlexItem,{grow:!1},n),o.a.createElement(l.EuiFlexItem,{grow:!0,className:x,"data-test-subj":h("consoleBody")},o.a.createElement("div",{role:"main",className:"full-height"},p))))}));b.displayName="PageLayout";var y=n(45),h=n(141),v=n(178),E=n(168);const x=d.a.div.withConfig({displayName:"OverlayRootContainer",componentId:"sc-vostrz-0"})(["border:none;display:block;position:fixed;overflow:hidden;top:calc(("," * 2));bottom:0;right:0;height:calc(100% - "," * 2);width:100%;z-index:",";background-color:",";&.scrolling{overflow:auto;}&.hidden{display:none;}&.padding-xs{padding:",";}&.padding-s{padding:",";}&.padding-m{padding:",";}&.padding-l{padding:",";}&.padding-xl{padding:",";}&.fullScreen{top:0;height:100%;}.fullHeight{height:100%;}"],(({theme:{eui:e}})=>e.euiHeaderHeightCompensation),(({theme:{eui:e}})=>e.euiHeaderHeightCompensation),(({theme:{eui:e}})=>e.euiZFlyout),(({theme:{eui:e}})=>e.euiColorEmptyShade),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiSizeM),(({theme:{eui:e}})=>e.euiSizeL),(({theme:{eui:e}})=>e.euiSizeXL)),j="securitySolution-pageOverlay",O=`${j}-isVisible`,S=`${j}-lock`,k=`${j}-fullScreen`,w=`${j}-overSecuritySolutionPageWrapper`,I=Object(u.createGlobalStyle)(["body.","{overflow:hidden;}body.","{","}body.kbnBody.kbnBody--projectLayout:not(.",") .","{top:",";height:calc(100% - (","));}"],S,k,E.e,k,j,(({theme:{eui:e}})=>e.euiHeaderHeightCompensation),(({theme:{eui:e}})=>e.euiHeaderHeightCompensation)),T=()=>{document.body.classList.remove(O)},C=()=>{document.body.classList.remove(S)},M=()=>{document.body.classList.remove(k)},A=()=>{document.body.classList.remove(w)},_=Object(r.memo)((({children:e,onHide:t,isHidden:n=!1,enableScrolling:a=!0,hideOnUrlPathnameChange:i=!0,lockDocumentBody:s=!0,appendAsBodyLastNode:c=!0,paddingSize:u,zIndex:d,"data-test-subj":p})=>{const{pathname:f}=Object(y.useLocation)(),g=Object(h.b)(),b=Object(v.b)(),[E,_]=Object(r.useState)(null),F=Object(r.useRef)(),D=Object(r.useCallback)((e=>{F.current=e}),[]),N=Object(r.useMemo)((()=>{const e={};return d&&(e.zIndex=d),e}),[d]),P=Object(r.useMemo)((()=>m()({[j]:!0,scrolling:a,hidden:n,fullScreen:b,"eui-scrollBar":a,"padding-xs":"xs"===u,"padding-s":"s"===u,"padding-m":"m"===u,"padding-l":"l"===u,"padding-xl":"xl"===u})),[a,n,u,b]);return Object(r.useEffect)((()=>{g()&&_((e=>n?null:e||(c&&F.current&&document.body.appendChild(F.current),f)))}),[c,n,g,f]),Object(r.useEffect)((()=>{g()&&t&&i&&!n&&E&&E!==f&&t()}),[i,n,g,t,E,f]),Object(r.useEffect)((()=>{if(g()){const e=Boolean(document.querySelector(".securitySolutionWrapper"));n?(T(),C(),M(),A()):(document.body.classList.add(O),s&&document.body.classList.add(S),b&&document.body.classList.add(k),e&&document.body.classList.add(w))}return()=>{C(),T(),M(),A()}}),[n,g,s,b]),o.a.createElement(l.EuiPortal,{portalRef:D},o.a.createElement(x,{"data-test-subj":p,className:P,style:N},o.a.createElement(l.EuiFocusTrap,{"data-test-subj":"trap-focus",className:"fullHeight"},e)),o.a.createElement(I,null))}));_.displayName="PageOverlay";const F=s.i18n.translate("xpack.securitySolution.consolePageOverlay.backButtonLabel",{defaultMessage:"Back"}),D=Object(r.memo)((({console:e,onHide:t,isHidden:n,body:a,actions:i,pageTitle:s="",showCloseButton:u=!1})=>{const d=Object(f.a)("consolePageOverlay"),p=Object(r.useCallback)((e=>{e.preventDefault(),t()}),[t]),m=Object(r.useMemo)((()=>n?{}:{pageTitle:s,pageBody:a,headerHasBottomBorder:!1,"data-test-subj":d("layout"),headerBackComponent:o.a.createElement(l.EuiButtonEmpty,{flush:"left",size:"s",iconType:"arrowLeft",onClick:p,"data-test-subj":d("header-back-link")},F),actions:u?[o.a.createElement(l.EuiButton,{fill:!0,onClick:p,minWidth:"auto","data-test-subj":d("doneButton")},o.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.consolePageOverlay.doneButtonLabel",defaultMessage:"Done"})),...null!=i?i:[]]:[...null!=i?i:[]]}),[i,a,d,p,n,s,u]);return o.a.createElement(_,{isHidden:n,"data-test-subj":"consolePageOverlay",onHide:t,paddingSize:"l",enableScrolling:!1},o.a.createElement(b,m,e))}));D.displayName="ConsolePageOverlay";var N=n(865);const P=o.a.createContext(void 0),R=Object(r.memo)((({storage:e={},children:t})=>{const[n,a]=Object(r.useState)(e),[s]=Object(r.useState)(new Map),l=Object(r.useRef)();l.current=n;const c=Object(r.useCallback)((e=>{var t;if(null===(t=l.current)||void 0===t||!t[e])throw new Error(`Console with id ${e} not found`)}),[]),u=Object(r.useCallback)((e=>{c(e),a((t=>{const n={...t};return Object.entries(n).forEach((([e,t])=>{t.isOpen&&(n[e]={...t,isOpen:!1})})),n[e]={...n[e],isOpen:!0},n}))}),[c]),d=Object(r.useCallback)((e=>{c(e),a((t=>({...t,[e]:{...t[e],isOpen:!1}})))}),[c]),p=Object(r.useCallback)((e=>{c(e),a((t=>{const n={...t};return delete n[e],n}))}),[c]),m=Object(r.useCallback)((e=>{var t;if(null!==(t=l.current)&&void 0!==t&&t[e])return l.current[e].client}),[]),f=Object(r.useCallback)((()=>Object.values(n).map((e=>e.client))),[n]),g=Object(r.useCallback)((e=>{var t;return!(null===(t=l.current)||void 0===t||!t[e])&&l.current[e].isOpen}),[]),b=Object(r.useCallback)((({id:e,meta:t,consoleProps:r,...s})=>{if(n[e])throw new Error(`Console with id ${e} already registered`);const l=Symbol(e),c=u.bind(null,e),m=d.bind(null,e),f=p.bind(null,e),b=g.bind(null,e),y={PageBodyComponent:void 0,PageTitleComponent:void 0,ActionComponents:void 0,...s,client:{id:e,meta:t,show:()=>{setTimeout(c,0)},hide:()=>{setTimeout(m,0)},terminate:()=>{setTimeout(f,0)},isVisible:()=>b()},consoleProps:r,console:o.a.createElement(N.a,i()({},r,{managedKey:l,key:e})),isOpen:!1,key:l};return a((t=>({...t,[e]:y}))),y.client}),[n,d,g,u,p]),y=Object(r.useMemo)((()=>({register:b,show:u,hide:d,terminate:p,getOne:m,getList:f})),[f,m,d,b,u,p]),h=Object(r.useMemo)((()=>({client:y,internal:{getManagedConsole:e=>Object.values(n).find((t=>t.key===e)),getManagedConsoleState:e=>s.get(e),storeManagedConsoleState(e,t){s.set(e,t)}}})),[y,s,n]),v=Object(r.useMemo)((()=>Object.values(n).find((e=>e.isOpen))),[n]),E=Object(r.useMemo)((()=>{var e;return null!==(e=null==v?void 0:v.client.meta)&&void 0!==e?e:{}}),[null==v?void 0:v.client.meta]),x=Object(r.useCallback)((()=>{v&&y.hide(v.client.id)}),[y,v]);return o.a.createElement(P.Provider,{value:h},t,v&&o.a.createElement(D,{onHide:x,console:o.a.createElement(N.a,i()({},v.consoleProps,{managedKey:v.key,key:v.client.id})),isHidden:!v,pageTitle:v.PageTitleComponent&&o.a.createElement(v.PageTitleComponent,{meta:E}),body:v.PageBodyComponent&&o.a.createElement(v.PageBodyComponent,{meta:E}),actions:v.ActionComponents&&v.ActionComponents.map((e=>o.a.createElement(e,{meta:E}))),showCloseButton:v.showCloseButton}))}));R.displayName="ConsoleManager";const L=()=>{const e=Object(r.useContext)(P);if(!e)throw new Error("ConsoleManagerContext not found");return e.client},q=e=>{const t=Object(r.useContext)(P);if(e&&t)return t.internal.getManagedConsole(e)},B=e=>{const t=Object(r.useContext)(P);return Object(r.useMemo)((()=>e&&t?[()=>t.internal.getManagedConsoleState(e),n=>{t.internal.getManagedConsole(e)&&t.internal.storeManagedConsoleState(e,n)}]:[void 0,void 0]),[t,e])}},,function(e,t,n){"use strict";n.d(t,"c",(function(){return m})),n.d(t,"i",(function(){return b})),n.d(t,"e",(function(){return y})),n.d(t,"g",(function(){return h})),n.d(t,"h",(function(){return v})),n.d(t,"f",(function(){return E})),n.d(t,"d",(function(){return x})),n.d(t,"b",(function(){return j})),n.d(t,"a",(function(){return O}));var a=n(57),i=n(40),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(4),u=n(102);const d="100%",p=l.a.div.withConfig({displayName:"WrappedByAutoSizerComponent",componentId:"sc-1gxuxf9-0"})([""," position:relative;&:hover{z-index:100;}"],(e=>`\n    height: ${null!=e.height?e.height:d};\n  `));p.displayName="WrappedByAutoSizer";const m=o.a.memo(p);let f;!function(e){e.BAR="bar",e.AREA="area",e.LINE="line"}(f||(f={}));const g={chartMargins:{left:0,right:0,top:4,bottom:0},chartPaddings:{left:0,right:0,top:0,bottom:0},scales:{barsPadding:.05}},b=()=>({baseTheme:Object(u.o)(c.B)?a.DARK_THEME:a.LIGHT_THEME,theme:g}),y={rotation:0,rendering:"canvas",showLegend:!1,showLegendExtra:!1,debug:!1,legendPosition:a.Position.Bottom},h=(e,t)=>{const n=e||t;return n?`${n}px`:d},v=(e,t)=>{const n=e||t;return n?`${n}px`:"100%"},E=e=>Array.isArray(e)&&e.every((e=>Array.isArray(e.value)&&e.value.every((({y:e})=>0===e)))),x=l.a.div.withConfig({displayName:"Wrapper",componentId:"sc-1gxuxf9-1"})(["position:relative;"]),j=l()(i.EuiFlexGroup).withConfig({displayName:"ChartWrapper",componentId:"sc-1gxuxf9-2"})(["z-index:0;"]),O=l()(i.EuiFlexGroup).withConfig({displayName:"BarChartWrapper",componentId:"sc-1gxuxf9-3"})(["z-index:0;padding-right:20px;"])},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(50),i=n.n(a);const r=(e,t)=>"second"===t||"minute"===t||"hour"===t?{from:i()(e.time).subtract(1,"hour").toISOString(),to:i()(e.time).add(1,"hour").toISOString()}:{from:i()(e.time).subtract(1,"day").toISOString(),to:i()(e.time).add(1,"day").toISOString()}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n(109),r=n(108),o=n(239),s=n(375),l=n(285);const c=()=>{const[e,t]=Object(a.useState)(!0),[n,c]=Object(a.useState)({signalIndexExists:null,signalIndexName:null,signalIndexMappingOutdated:null,createDeSignalIndex:null}),{addError:u}=Object(r.a)(),{hasIndexRead:d}=Object(l.a)();return Object(a.useEffect)((()=>{let e=!0;const n=new AbortController,a=async()=>{try{t(!0);const a=await Object(o.h)({signal:n.signal});e&&null!=a&&c({signalIndexExists:!0,signalIndexName:a.name,signalIndexMappingOutdated:a.index_mapping_outdated,createDeSignalIndex:r})}catch(t){e&&(c({signalIndexExists:!1,signalIndexName:null,signalIndexMappingOutdated:null,createDeSignalIndex:r}),Object(i.v)(t)&&404!==t.body.status_code&&u(t,{title:s.c}))}e&&t(!1)},r=async()=>{let l=!1;try{t(!0),await Object(o.d)({signal:n.signal}),e&&(l=!0,a())}catch(t){e&&(Object(i.v)(t)&&409===t.body.status_code?a():(c({signalIndexExists:!1,signalIndexName:null,signalIndexMappingOutdated:null,createDeSignalIndex:r}),u(t,{title:s.d})))}e&&!l&&t(!1)};return d?a():t(!1),()=>{e=!1,n.abort()}}),[u,d]),{loading:e,...n}}},function(e,t,n){e.exports=n(33)(2943)},function(e,t,n){"use strict";const a=n(762);e.exports=function(e,...t){if(!e){if(1===t.length&&t[0]instanceof Error)throw t[0];throw new a(t)}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(0),i=n.n(a),r=n(118);const o=new class ActiveTimelineEvents{constructor(){i()(this,"_activePage",0),i()(this,"_expandedDetail",{}),i()(this,"_pageName",""),i()(this,"_request",null),i()(this,"_response",null),i()(this,"_eqlRequest",null),i()(this,"_eqlResponse",null)}getActivePage(){return this._activePage}setActivePage(e){this._activePage=e}getExpandedDetail(){return this._expandedDetail}toggleExpandedDetail(e){const t=r.d.query,n=this._expandedDetail[t];let a;var i,o;if("eventDetail"===(null==n?void 0:n.panelView))a="eventDetail"===(null==e?void 0:e.panelView)&&(null==e||null===(i=e.params)||void 0===i?void 0:i.eventId)===(null==n||null===(o=n.params)||void 0===o?void 0:o.eventId);else if("hostDetail"===(null==n?void 0:n.panelView)){var s,l;a="hostDetail"===(null==e?void 0:e.panelView)&&(null==e||null===(s=e.params)||void 0===s?void 0:s.hostName)===(null==n||null===(l=n.params)||void 0===l?void 0:l.hostName)}else if("networkDetail"===(null==n?void 0:n.panelView)){var c,u;a="networkDetail"===(null==e?void 0:e.panelView)&&(null==e||null===(c=e.params)||void 0===c?void 0:c.ip)===(null==n||null===(u=n.params)||void 0===u?void 0:u.ip)}this._expandedDetail=a?{}:{[t]:{...e}}}setExpandedDetail(e){this._expandedDetail=e}getPageName(){return this._pageName}setPageName(e){this._pageName=e}getRequest(){return this._request}setRequest(e){this._request=e}getResponse(){return this._response}setResponse(e){this._response=e}getEqlRequest(){return this._eqlRequest}setEqlRequest(e){this._eqlRequest=e}getEqlResponse(){return this._eqlResponse}setEqlResponse(e){this._eqlResponse=e}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(159);const r=()=>{const{startTransaction:e}=Object(i.b)();return{startTracking:Object(a.useCallback)((({name:t,spanName:n="fetch"})=>{const a=e({name:t,type:"http-request",options:{managed:!1}}),i=null==a?void 0:a.startSpan(n,"http-request",{blocking:!0});return{endTracking:e=>{null==a||a.addLabels({result:e}),null==i||i.end()}}}),[e])}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.containers.detectionEngine.rulesAndTimelines",{defaultMessage:"Failed to fetch Rules and Timelines"}),r=a.i18n.translate("xpack.securitySolution.containers.detectionEngine.ruleManagementFiltersFetchFailure",{defaultMessage:"Failed to fetch rule filters"}),o=a.i18n.translate("xpack.securitySolution.containers.detectionEngine.addRuleFailDescription",{defaultMessage:"Failed to add Rule"});a.i18n.translate("xpack.securitySolution.containers.detectionEngine.createPrePackagedRuleAndTimelineFailDescription",{defaultMessage:"Failed to installed pre-packaged rules and timelines from elastic"}),a.i18n.translate("xpack.securitySolution.containers.detectionEngine.createPrePackagedRuleAndTimelineSuccesDescription",{defaultMessage:"Installed pre-packaged rules and timeline templates from elastic"}),a.i18n.translate("xpack.securitySolution.containers.detectionEngine.createPrePackagedRuleSuccesDescription",{defaultMessage:"Installed pre-packaged rules from elastic"}),a.i18n.translate("xpack.securitySolution.containers.detectionEngine.createPrePackagedTimelineSuccesDescription",{defaultMessage:"Installed pre-packaged timeline templates from elastic"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"f",(function(){return l})),n.d(t,"e",(function(){return u}));const a=e=>"string"!=typeof e,i=({allowSet:e,field:t})=>e.has(t),r=({allowSet:e,field:t})=>!e.has(t),o=({allowReplacementSet:e,field:t})=>e.has(t),s=({field:e,list:t,operation:n})=>"add"===n?t.includes(e)?t:[...t,e]:t.filter((t=>t!==e)),l=({field:e,operation:t,selectedPromptContext:n,update:a})=>{const{allow:i,allowReplacement:r}=n;switch(a){case"allow":return{...n,allow:s({field:e,list:i,operation:t})};case"allowReplacement":return{...n,allowReplacement:s({field:e,list:r,operation:t})};default:return n}},c=({currentList:e,setDefaultList:t,update:n,updates:a})=>{const i=a.filter((e=>e.update===n));i.length>0&&t(i.reduce(((e,{field:t,operation:n})=>s({field:t,list:e,operation:n})),e))},u=({defaultAllow:e,defaultAllowReplacement:t,setDefaultAllow:n,setDefaultAllowReplacement:a,updates:i})=>{c({currentList:e,setDefaultList:n,update:"defaultAllow",updates:i}),c({currentList:t,setDefaultList:a,update:"defaultAllowReplacement",updates:i})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n(136),r=n(234),o=n(307);const s={id:r.a,messages:[],apiConfig:{},theme:{title:r.c,titleIcon:"logoSecurity",assistant:{name:r.b,icon:"logoSecurity"},system:{icon:"logoElastic"},user:{}}},l=()=>{const{allSystemPrompts:e,assistantTelemetry:t,setConversations:n}=Object(i.b)();return{appendMessage:Object(a.useCallback)((({conversationId:e,message:a})=>{null==t||t.reportAssistantMessageSent({conversationId:e,role:a.role});let i=[];return n((t=>{const n=t[e];if(null!=n){i=[...n.messages,a];const r={...n,messages:i};return{...t,[e]:r}}return t})),i}),[t,n]),appendReplacements:Object(a.useCallback)((({conversationId:e,replacements:t})=>{let a=t;return n((n=>{const i=n[e];if(null!=i){a={...i.replacements,...t};const r={...i,replacements:a};return{...n,[e]:r}}return n})),a}),[n]),clearConversation:Object(a.useCallback)((t=>{n((n=>{var a;const i=n[t],r=null===(a=Object(o.b)({allSystemPrompts:e,conversation:i}))||void 0===a?void 0:a.id;if(null!=i){const e={...i,apiConfig:{...i.apiConfig,defaultSystemPromptId:r},messages:[],replacements:void 0};return{...n,[t]:e}}return n}))}),[e,n]),createConversation:Object(a.useCallback)((({conversationId:t,messages:a})=>{var i;const r=null===(i=Object(o.b)({allSystemPrompts:e,conversation:void 0}))||void 0===i?void 0:i.id,l={...s,apiConfig:{...s.apiConfig,defaultSystemPromptId:r},id:t,messages:null!=a?a:[]};return n((e=>{if(null!=e[t])throw new Error("Conversation already exists!");return{...e,[t]:{...l}}})),l}),[e,n]),deleteConversation:Object(a.useCallback)((e=>{let t;return n((n=>{const{[e]:a,...i}=n;return t=a,null!=a?i:n})),t}),[n]),setApiConfig:Object(a.useCallback)((({conversationId:e,apiConfig:t})=>{n((n=>{const a=n[e];if(null!=a){const i={...a,apiConfig:t};return{...n,[e]:i}}return n}))}),[n]),setConversation:Object(a.useCallback)((({conversation:e})=>{n((t=>({...t,[e.id]:e})))}),[n])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i}));const a=e=>{const t=[...e.matchAll(/```(\w+)?\s([\s\S]*?)```/g)],n={eql:["Event Query Language","EQL sequence query","EQL"],kql:["Kibana Query Language","KQL Query","KQL"],dsl:["Elasticsearch QueryDSL","Elasticsearch Query DSL","Elasticsearch DSL","Query DSL","DSL"]};return t.map((t=>{let a=t[1]||"no-type";if("no-type"===a||"json"===a){const i=t.index||0,r=e.slice(0,i);for(const[e,t]of Object.entries(n))if(t.some((e=>r.toLowerCase().includes(e.toLowerCase())))){a=e;break}}const i=t[2].trim(),r=t.index||0;return{type:a,content:i,start:r,end:r+t[0].length}}))},i=({allSystemPrompts:e,conversation:t})=>{var n;const a=e.find((e=>{var n;return e.id===(null==t||null===(n=t.apiConfig)||void 0===n?void 0:n.defaultSystemPromptId)})),i=e.find((e=>e.isNewConversationDefault));return null!==(n=null!=a?a:i)&&void 0!==n?n:null==e?void 0:e[0]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=function(e){return(e+1)%1e6};t.default=function(){return a.useReducer(i,0)[1]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(17),i=n(102),r=n(4);const o=()=>{var e,t,n,o,s;const l=Object(a.b)().isEnterprise(),c=Object(i.j)().services.application.capabilities,u=!0===(null===(e=c[r.m])||void 0===e?void 0:e["ai-assistant"]),d=!0===(null===(t=c.actions)||void 0===t?void 0:t.show)&&!0===(null===(n=c.actions)||void 0===n?void 0:n.execute);return{hasAssistantPrivilege:u,hasConnectorsAllPrivilege:d&&!0===(null===(o=c.actions)||void 0===o?void 0:o.delete)&&!0===(null===(s=c.actions)||void 0===s?void 0:s.save),hasConnectorsReadPrivilege:d,isAssistantEnabled:l}}},function(e,t,n){const{MAX_SAFE_COMPONENT_LENGTH:a,MAX_SAFE_BUILD_LENGTH:i,MAX_LENGTH:r}=n(326),o=n(325),s=(t=e.exports={}).re=[],l=t.safeRe=[],c=t.src=[],u=t.t={};let d=0;const p="[a-zA-Z0-9-]",m=[["\\s",1],["\\d",r],[p,i]],f=(e,t,n)=>{const a=(e=>{for(const[t,n]of m)e=e.split(`${t}*`).join(`${t}{0,${n}}`).split(`${t}+`).join(`${t}{1,${n}}`);return e})(t),i=d++;o(e,i,t),u[e]=i,c[i]=t,s[i]=new RegExp(t,n?"g":void 0),l[i]=new RegExp(a,n?"g":void 0)};f("NUMERICIDENTIFIER","0|[1-9]\\d*"),f("NUMERICIDENTIFIERLOOSE","\\d+"),f("NONNUMERICIDENTIFIER",`\\d*[a-zA-Z-]${p}*`),f("MAINVERSION",`(${c[u.NUMERICIDENTIFIER]})\\.(${c[u.NUMERICIDENTIFIER]})\\.(${c[u.NUMERICIDENTIFIER]})`),f("MAINVERSIONLOOSE",`(${c[u.NUMERICIDENTIFIERLOOSE]})\\.(${c[u.NUMERICIDENTIFIERLOOSE]})\\.(${c[u.NUMERICIDENTIFIERLOOSE]})`),f("PRERELEASEIDENTIFIER",`(?:${c[u.NUMERICIDENTIFIER]}|${c[u.NONNUMERICIDENTIFIER]})`),f("PRERELEASEIDENTIFIERLOOSE",`(?:${c[u.NUMERICIDENTIFIERLOOSE]}|${c[u.NONNUMERICIDENTIFIER]})`),f("PRERELEASE",`(?:-(${c[u.PRERELEASEIDENTIFIER]}(?:\\.${c[u.PRERELEASEIDENTIFIER]})*))`),f("PRERELEASELOOSE",`(?:-?(${c[u.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${c[u.PRERELEASEIDENTIFIERLOOSE]})*))`),f("BUILDIDENTIFIER",`${p}+`),f("BUILD",`(?:\\+(${c[u.BUILDIDENTIFIER]}(?:\\.${c[u.BUILDIDENTIFIER]})*))`),f("FULLPLAIN",`v?${c[u.MAINVERSION]}${c[u.PRERELEASE]}?${c[u.BUILD]}?`),f("FULL",`^${c[u.FULLPLAIN]}$`),f("LOOSEPLAIN",`[v=\\s]*${c[u.MAINVERSIONLOOSE]}${c[u.PRERELEASELOOSE]}?${c[u.BUILD]}?`),f("LOOSE",`^${c[u.LOOSEPLAIN]}$`),f("GTLT","((?:<|>)?=?)"),f("XRANGEIDENTIFIERLOOSE",`${c[u.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`),f("XRANGEIDENTIFIER",`${c[u.NUMERICIDENTIFIER]}|x|X|\\*`),f("XRANGEPLAIN",`[v=\\s]*(${c[u.XRANGEIDENTIFIER]})(?:\\.(${c[u.XRANGEIDENTIFIER]})(?:\\.(${c[u.XRANGEIDENTIFIER]})(?:${c[u.PRERELEASE]})?${c[u.BUILD]}?)?)?`),f("XRANGEPLAINLOOSE",`[v=\\s]*(${c[u.XRANGEIDENTIFIERLOOSE]})(?:\\.(${c[u.XRANGEIDENTIFIERLOOSE]})(?:\\.(${c[u.XRANGEIDENTIFIERLOOSE]})(?:${c[u.PRERELEASELOOSE]})?${c[u.BUILD]}?)?)?`),f("XRANGE",`^${c[u.GTLT]}\\s*${c[u.XRANGEPLAIN]}$`),f("XRANGELOOSE",`^${c[u.GTLT]}\\s*${c[u.XRANGEPLAINLOOSE]}$`),f("COERCE",`(^|[^\\d])(\\d{1,${a}})(?:\\.(\\d{1,${a}}))?(?:\\.(\\d{1,${a}}))?(?:$|[^\\d])`),f("COERCERTL",c[u.COERCE],!0),f("LONETILDE","(?:~>?)"),f("TILDETRIM",`(\\s*)${c[u.LONETILDE]}\\s+`,!0),t.tildeTrimReplace="$1~",f("TILDE",`^${c[u.LONETILDE]}${c[u.XRANGEPLAIN]}$`),f("TILDELOOSE",`^${c[u.LONETILDE]}${c[u.XRANGEPLAINLOOSE]}$`),f("LONECARET","(?:\\^)"),f("CARETTRIM",`(\\s*)${c[u.LONECARET]}\\s+`,!0),t.caretTrimReplace="$1^",f("CARET",`^${c[u.LONECARET]}${c[u.XRANGEPLAIN]}$`),f("CARETLOOSE",`^${c[u.LONECARET]}${c[u.XRANGEPLAINLOOSE]}$`),f("COMPARATORLOOSE",`^${c[u.GTLT]}\\s*(${c[u.LOOSEPLAIN]})$|^$`),f("COMPARATOR",`^${c[u.GTLT]}\\s*(${c[u.FULLPLAIN]})$|^$`),f("COMPARATORTRIM",`(\\s*)${c[u.GTLT]}\\s*(${c[u.LOOSEPLAIN]}|${c[u.XRANGEPLAIN]})`,!0),t.comparatorTrimReplace="$1$2$3",f("HYPHENRANGE",`^\\s*(${c[u.XRANGEPLAIN]})\\s+-\\s+(${c[u.XRANGEPLAIN]})\\s*$`),f("HYPHENRANGELOOSE",`^\\s*(${c[u.XRANGEPLAINLOOSE]})\\s+-\\s+(${c[u.XRANGEPLAINLOOSE]})\\s*$`),f("STAR","(<|>)?=?\\s*\\*"),f("GTE0","^\\s*>=\\s*0\\.0\\.0\\s*$"),f("GTE0PRE","^\\s*>=\\s*0\\.0\\.0-0\\s*$")},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(42);const l=o.a.div.withConfig({displayName:"StyledDiv",componentId:"sc-we8ln-0"})(["width:100%;display:flex;flex-grow:1;> *{max-width:100%;}",""],(({targetClassNames:e})=>Object(r.css)(["","{pointer-events:none;opacity:0;transition:opacity "," ease;}","{pointer-events:auto;opacity:1;}"],e.map((e=>`.${e}`)).join(", "),(e=>Object(s.getOr)(250,"theme.eui.euiAnimSpeedNormal",e)),e.map((e=>`&:hover .${e}`)).join(", ")))),c=i.a.memo((({show:e=!0,targetClassNames:t,children:n})=>e?i.a.createElement(l,{"data-test-subj":"hoverVisibilityContainer",targetClassNames:t},n):i.a.createElement(i.a.Fragment,null,n)));c.displayName="HoverVisibilityContainer"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"g",(function(){return p})),n.d(t,"h",(function(){return m}));var a=n(129),i=n(119),r=n(328);const o=e=>{const t="acknowledged"===e?{bool:{should:[{term:{[a.jb]:e}},{term:{[a.jb]:"in-progress"}}]}}:{term:{[a.jb]:e}};return[{meta:{alias:null,negate:!1,disabled:!1,type:"phrase",key:a.jb,params:{query:e}},query:t}]},s=e=>[{meta:{alias:null,negate:!1,disabled:!1},query:{bool:{should:e.map((e=>({term:{[a.jb]:e}})))}}}],l=e=>e?[{meta:{alias:null,negate:!1,disabled:!1,type:"phrase",key:a.K,params:{query:e}},query:{match_phrase:{[a.K]:e}}}]:[],c=e=>e?[]:[{meta:{alias:null,negate:!0,disabled:!1,type:"exists",key:a.b,value:"exists"},query:{exists:{field:a.b}}}],u=e=>e?[{meta:{alias:null,disabled:!1,negate:!1,key:"kibana.alert.rule.type",type:"term"},query:{term:{"kibana.alert.rule.type":"threat_match"}}}]:[],d=e=>({...i.q,columns:Object(r.b)(e),showCheckboxes:!0}),p=e=>({...d(e),columns:Object(r.b)(e),defaultColumns:Object(r.c)(e),sort:[{columnId:"kibana.alert.original_time",columnType:"date",esTypes:["date"],sortDirection:"desc"}],showCheckboxes:!1}),m=["@timestamp","kibana.alert.workflow_status","kibana.alert.workflow_tags","kibana.alert.group.id","kibana.alert.original_time","kibana.alert.building_block_type","kibana.alert.rule.from","kibana.alert.rule.name","kibana.alert.rule.to","kibana.alert.rule.uuid","kibana.alert.rule.rule_id","kibana.alert.rule.type","kibana.alert.suppression.docs_count","kibana.alert.original_event.kind","kibana.alert.original_event.module","file.path","file.Ext.code_signature.subject_name","file.Ext.code_signature.trusted","file.hash.sha256","host.os.family","event.code","process.entry_leader.entity_id"]},function(e,t,n){"use strict";n.d(t,"b",(function(){return y})),n.d(t,"a",(function(){return h})),n.d(t,"d",(function(){return v})),n.d(t,"c",(function(){return E}));var a=n(2),i=n.n(a),r=n(42),o=n(120),s=n(40),l=n(244),c=n(728),u=n(281),d=n(692),p=n(565);const m=e=>t=>""!==e.trim()?Object(u.d)(t,[{comment:e}]):t,f=e=>t=>""!==e.trim()?Object(u.f)(t,e):t,g=e=>t=>Object(u.e)(t,e),b=(e,t)=>n=>e===o.b.ENDPOINT?Object(u.l)(Object(u.c)(n,t)):n,y=({itemName:e,commentToAdd:t,addToRules:n,addToSharedLists:a,sharedLists:i,selectedOs:s,listType:l,expireTime:c,items:d})=>{const p=Object(r.pipe)(m(t),g(c),f(e),b(l,s),((e,t)=>n=>t&&e!==o.b.ENDPOINT?Object(u.g)(n):n)(l,n),((e,t,n)=>a=>t&&e!==o.b.ENDPOINT?Object(u.h)(a,n):a)(l,a,i))(d);return p},h=({itemName:e,commentToAdd:t,selectedOs:n,listType:a,expireTime:i,items:o})=>Object(r.pipe)(m(t),g(i),f(e),b(a,n))(o),v=()=>[{field:"name",name:p.c,sortable:!0,"data-test-subj":"exceptionListNameCell"},{field:"referenced_rules",name:"Number of rules linked to",sortable:!1,"data-test-subj":"exceptionListRulesLinkedToIdCell",render:e=>i.a.createElement(l.e,{emptyButton:!0,useCustomActions:!0,actions:Object(l.j)({dataTestSubj:"addToSharedListsLinkedRulesMenu",linkedRules:e,securityLinkAnchorComponent:d.f}),panelPaddingSize:"none",disableActions:!1,text:e.length.toString(),dataTestSubj:"addToSharedListsLinkedRulesMenuAction"})},{name:p.a,"data-test-subj":"exceptionListRulesActionCell",render:e=>i.a.createElement(d.e,{dataTestSubj:"exceptionListActionCell-link",linkTitle:p.e,listId:e.list_id,external:!0})}],E=()=>[{field:"name",align:"left",name:p.c,sortable:!0,"data-test-subj":"ruleNameCell",truncateText:!1},{field:"tags",align:"left",name:p.d,"data-test-subj":"ruleNameCell",render:e=>0===e.length?null:i.a.createElement(c.a,{items:e,popoverTitle:p.d,popoverButtonTitle:e.length.toString(),popoverButtonIcon:"tag",dataTestPrefix:"tags",renderItem:(e,t)=>i.a.createElement(s.EuiBadge,{color:"hollow",key:`${e}-${t}`,"data-test-subj":"tag"},e)})},{name:p.a,"data-test-subj":"ruleAction-view",render:e=>i.a.createElement(d.f,{external:!0,referenceId:e.id,referenceName:p.f})}]},function(e,t,n){"use strict";n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i}));const a=10,i=0},function(e,t,n){"use strict";var a=n(369);e.exports=function(e){return a({},e)}},function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"a",(function(){return D})),n.d(t,"d",(function(){return A})),n.d(t,"c",(function(){return f}));var a=n(5);const i=a.i18n.translate("autocomplete.loadingDescription",{defaultMessage:"Loading..."}),r=a.i18n.translate("autocomplete.selectField",{defaultMessage:"Please select a field first..."}),o=a.i18n.translate("autocomplete.fieldRequiredError",{defaultMessage:"Value cannot be empty"}),s=a.i18n.translate("autocomplete.invalidNumberError",{defaultMessage:"Not a valid number"}),l=a.i18n.translate("autocomplete.invalidDateError",{defaultMessage:"Not a valid date"}),c=a.i18n.translate("autocomplete.invalidBinaryType",{defaultMessage:"Binary fields are currently unsupported"}),u=a.i18n.translate("autocomplete.fieldSpaceWarning",{defaultMessage:"Warning: Spaces at the start or end of this value aren't being displayed."}),d=(a.i18n.translate("autocomplete.listsTooltipWarning",{defaultMessage:"Lists that aren't able to be processed by this rule type will be disabled."}),a.i18n.translate("autocomplete.seeDocumentation",{defaultMessage:"See Documentation"}),a.i18n.translate("autocomplete.conflictIndicesWarning.title",{defaultMessage:"Mapping Conflict"})),p=a.i18n.translate("autocomplete.conflictIndicesWarning.description",{defaultMessage:"This field is defined as different types across the following indices or is unmapped. This can cause unexpected query results."}),m=(e,t)=>a.i18n.translate("autocomplete.conflictIndicesWarning.index.description",{defaultMessage:"{name} ({count} indices)",values:{count:t,name:e}});var f={LOADING:i,SELECT_FIELD_FIRST:r,FIELD_REQUIRED_ERR:o,NUMBER_ERR:s,DATE_ERR:l,FIELD_SPACE_WARNING:u,BINARY_TYPE_NOT_SUPPORTED:c},g=n(2),b=n.n(g),y=n(40),h=n(21),v=n(210);const E=({getLabel:e,options:t,selectedOptions:n,disabledOptions:a})=>{const i=t.map(e),r=null==a?void 0:a.map(e),o=i.map((e=>({label:e,disabled:r&&0!==r.length&&r.includes(e)}))),s=n.map(e).filter((e=>-1!==i.indexOf(e))).map((e=>o[i.indexOf(e)]));return{comboOptions:o,labels:i,selectedComboOptions:s}},x={binary:c},j={asPlainText:!0},O=({fieldInputWidth:e,fieldTypeFilter:t=[],indexPattern:n,isClearable:i=!1,isDisabled:r=!1,isLoading:o=!1,isRequired:s=!1,onChange:l,placeholder:c,selectedField:u,acceptsCustomOptions:f=!1,showMappingConflicts:O=!1})=>{const{isInvalid:S,comboOptions:k,selectedComboOptions:w,fieldWidth:I,renderFields:T,handleTouch:C,handleValuesChange:M,handleCreateCustomOption:A}=(({indexPattern:e,fieldTypeFilter:t,isRequired:n,selectedField:a,fieldInputWidth:i,showMappingConflicts:r,onChange:o})=>{const[s,l]=Object(g.useState)(!1),[c,u]=Object(g.useState)(null),f=Object(y.useEuiPaddingSize)("s"),{availableFields:j,selectedFields:O}=Object(g.useMemo)((()=>((e,t,n)=>{const a=(e=>null!=e?e.fields:[])(e),i=(e=>e&&""!==e.name.trim()?[e]:[])(t),r=((e,t,n)=>{const a=new Map;e.forEach((e=>a.set(e.name,e))),t.forEach((e=>a.set(e.name,e)));const i=Array.from(a.values());return n&&(null==n?void 0:n.length)>0?i.filter((({type:e})=>n.includes(e))):i})(a,i,n);return{availableFields:r,selectedFields:i}})(null!=c&&null!=e?{...e,fields:[c,...null==e?void 0:e.fields]}:e,a,t)),[e,t,a,c]),{comboOptions:S,labels:k,selectedComboOptions:w,disabledLabelTooltipTexts:I,mappingConflictsTooltipInfo:T}=Object(g.useMemo)((()=>(e=>{const{availableFields:t,selectedFields:n}=e,a=E({getLabel:e=>e.name,options:t,selectedOptions:n}),i=(e=>e.availableFields.reduce(((e,t)=>{var n;const a=null===(n=t.esTypes)||void 0===n?void 0:n.find((e=>x[e])),i=a&&x[a]||x[t.type];return i&&(e[t.name]=i),e}),{}))(e),r=(e=>e.availableFields.reduce(((e,t)=>{const n=Object(v.j)(t);return n?(e[t.name]=n,e):e}),{}))(e);return{...a,disabledLabelTooltipTexts:i,mappingConflictsTooltipInfo:r}})({availableFields:j,selectedFields:O})),[j,O]),C=Object(g.useCallback)((e=>{const t=e.map((({label:e})=>j[k.indexOf(e)]));o(t)}),[j,k,o]),M=Object(g.useCallback)((e=>{e.trim().toLowerCase()&&(u({name:e,type:"text"}),o([{name:e,type:"text"}]))}),[o]),A=Object(g.useCallback)((()=>{l(!0)}),[l]),_=Object(g.useMemo)((()=>i?{width:`${i}px`}:{}),[i]);return{isInvalid:Object(g.useMemo)((()=>!!n&&s&&null==a),[n,a,s]),comboOptions:S,selectedComboOptions:w,fieldWidth:_,renderFields:e=>{const{label:t}=e,n=I[t];if(n)return e.disabled=!0,Object(h.jsx)(y.EuiToolTip,{"data-test-subj":"disabledLabelWithTooltip",content:n,position:"bottom"},Object(h.jsx)(b.a.Fragment,null,t));const a=T[t];if(r&&a){const e=Object(h.jsx)(b.a.Fragment,null,p,a.map((e=>{const t=e.groupedIndices.map((({name:e,count:t})=>`${t>1?m(e,t):e}`));return Object(h.jsx)(b.a.Fragment,null,Object(h.jsx)(y.EuiSpacer,{size:"s"}),`${e.totalIndexCount>1?m(e.type,e.totalIndexCount):e.type}: ${t.join(", ")}`)})));return Object(h.jsx)(y.EuiToolTip,{"data-test-subj":"mappingConflictsTooltip",position:"bottom",content:e},Object(h.jsx)(b.a.Fragment,null,t,Object(h.jsx)(y.EuiIcon,{"data-test-subj":"mappingConflictsWarningIcon",tabIndex:0,type:"warning",title:d,size:"s",css:Object(h.css)({marginLeft:`${f}`},"","")})))}return t},handleTouch:A,handleValuesChange:C,handleCreateCustomOption:M}})({indexPattern:n,fieldTypeFilter:t,isRequired:s,selectedField:u,fieldInputWidth:e,showMappingConflicts:O,onChange:l});return f?Object(h.jsx)(y.EuiComboBox,{placeholder:c,options:k,selectedOptions:w,onChange:M,isLoading:o,isDisabled:r,isClearable:i,isInvalid:S,onFocus:C,singleSelection:j,"data-test-subj":"fieldAutocompleteComboBox",style:I,onCreateOption:A,customOptionText:a.i18n.translate("autocomplete.customOptionText",{defaultMessage:"Add {searchValuePlaceholder} as a custom field",values:{searchValuePlaceholder:"{searchValue}"}}),fullWidth:!0,renderOption:T}):Object(h.jsx)(y.EuiComboBox,{placeholder:c,options:k,selectedOptions:w,onChange:M,isLoading:o,isDisabled:r,isClearable:i,isInvalid:S,onFocus:C,singleSelection:j,"data-test-subj":"fieldAutocompleteComboBox",style:I,fullWidth:!0,renderOption:T})};O.displayName="Field";n(214),n(74);var S=n(8),k=n(120),w=n(49);const I=({selectedField:e,operatorType:t,fieldValue:n,query:a,indexPattern:i,autocompleteService:r})=>{const[o,s]=Object(g.useState)(!1),[l,c]=Object(g.useState)(!0),[u,d]=Object(g.useState)([]),p=Object(g.useRef)(null);return Object(g.useEffect)((()=>{let o=!0;const l=new AbortController,u=Object(S.debounce)((async({fieldSelected:e,patterns:t,searchQuery:n})=>{try{if(o){if(null==e||null==t)return;if("boolean"===e.type)return void c(!1);s(!0);const a=Object(w.getDataViewFieldSubtypeNested)(e),i=a?{...e,name:`${a.nested.path}.${e.name}`}:e,o=await r.getValueSuggestions({field:i,indexPattern:t,query:n,signal:l.signal,useTimeRange:!1});0===o.length&&c(!1),s(!1),d([...o])}}catch(e){o&&(d([]),s(!1))}}),500);return t!==k.d.EXISTS&&u({fieldSelected:e,patterns:i,searchQuery:a,value:n}),p.current=u,()=>{o=!1,l.abort()}}),[e,t,n,i,a,r]),[o,l,u,p.current]};var T=n(62),C=n.n(T);const M=(e,t,n,a)=>{if(null==t)return;const i=((e,t,n,a)=>n&&a&&(null==e||""===e.trim())?o:null==t||n&&!a||!(n||null!=e&&""!==e)?void 0:null)(e,t,n,a);if(null!==i)return i;switch(t.type){case"date":const t=C.a.parse(null!=e?e:"");return Boolean(t&&t.isValid())?void 0:l;case"number":return null==e||""===e.trim()||isNaN(+e)?s:void 0;default:return}},A=e=>e&&e.trim().length!==e.length,_=[{inputDisplay:"true",value:"true"},{inputDisplay:"false",value:"false"}],F={asPlainText:!0},D=({placeholder:e,rowLabel:t,selectedField:n,selectedValue:a,indexPattern:o,isLoading:s,isDisabled:l=!1,isClearable:c=!1,isRequired:d=!1,fieldInputWidth:p,autocompleteService:m,onChange:f,onError:b})=>{const[v,x]=Object(g.useState)(""),[j,O]=Object(g.useState)(!1),[w,T]=Object(g.useState)(void 0),[C,D]=Object(g.useState)(!1),[N,P,R]=I({autocompleteService:m,fieldValue:a,indexPattern:o,operatorType:k.d.MATCH,query:v,selectedField:n}),L=Object(g.useCallback)((e=>e),[]),q=Object(g.useMemo)((()=>{const e=String(a);return null!=a&&""!==a.trim()?Object(S.uniq)([e,...R]):R}),[R,a]),B=Object(g.useMemo)((()=>{const e=String(a);return a?[e]:[]}),[a]),z=Object(g.useCallback)((e=>{if(!e)return D(!1);D(!!A(e))}),[D]),$=Object(g.useCallback)((e=>{T((t=>{const n=null!=e;return null!=t!==n&&null!=b&&b(n),e}))}),[T,b]),{comboOptions:V,labels:U,selectedComboOptions:G}=Object(g.useMemo)((()=>E({getLabel:L,options:q,selectedOptions:B})),[q,B,L]),H=Object(g.useCallback)((e=>{const[t]=e.map((({label:e})=>q[U.indexOf(e)]));z(t),$(void 0),f(null!=t?t:"")}),[$,z,U,f,q]),W=Object(g.useCallback)((e=>{if(""!==e&&null!=n){const t=M(e,n,d,j);$(t),t||z(e),x(e)}}),[$,z,d,n,j]),Q=Object(g.useCallback)((e=>{const t=M(e,n,d,j);if($(t),null!=t)return D(!1),!1;z(e),f(e)}),[d,f,n,j,$,z]),Y=Object(g.useCallback)((e=>{const t=e.target.value;f(t)}),[f]),K=Object(g.useCallback)((e=>{f(e)}),[f]),X=Object(g.useCallback)((()=>{O(!0);const e=M(a,n,d,!0);$(e)}),[O,$,a,n,d]),J=Object(g.useMemo)((()=>s||N?i:null==n?r:e),[s,n,N,e]),Z=Object(g.useMemo)((()=>s||N),[s,N]);Object(g.useEffect)((()=>{T(void 0),null!=b&&b(!1),z(a)}),[null==n?void 0:n.name,null==n?void 0:n.type,a,z,b]);const ee=Object(g.useMemo)((()=>Object(h.jsx)(y.EuiFormRow,{label:t,error:w,isInvalid:null!=n&&null!=w,"data-test-subj":"valuesAutocompleteMatchLabel",fullWidth:!0,helpText:C&&u},Object(h.jsx)(y.EuiComboBox,{placeholder:J,isDisabled:l||!n,isLoading:Z,isClearable:c,options:V,selectedOptions:G,onChange:H,singleSelection:F,onSearchChange:W,onCreateOption:Q,isInvalid:null!=n&&null!=w,onBlur:X,sortMatchesBy:"startsWith","data-test-subj":"valuesAutocompleteMatch",style:p?{width:`${p}px`}:{},fullWidth:!0,async:!0}))),[V,w,p,J,c,l,Z,t,G,n,C,Q,W,H,X]);if(P||null==n)return ee;switch(n.type){case"number":return Object(h.jsx)(y.EuiFormRow,{label:t,error:w,isInvalid:null!=n&&null!=w,"data-test-subj":"valuesAutocompleteMatchLabel",fullWidth:!0},Object(h.jsx)(y.EuiFieldNumber,{placeholder:J,onBlur:X,value:"string"==typeof a&&a.trim().length>0?parseFloat(a):null!=a?a:"",onChange:Y,"data-test-subj":"valueAutocompleteFieldMatchNumber",style:p?{width:`${p}px`}:{},fullWidth:!0}));case"boolean":return Object(h.jsx)(y.EuiFormRow,{label:t,error:w,isInvalid:null!=n&&null!=w,"data-test-subj":"valuesAutocompleteMatchLabel",fullWidth:!0},Object(h.jsx)(y.EuiSuperSelect,{isLoading:Z,options:_,valueOfSelected:null!=a?a:"true",onChange:K,"data-test-subj":"valuesAutocompleteMatchBoolean",style:p?{width:`${p}px`}:{},fullWidth:!0}));default:return ee}};D.displayName="AutocompleteFieldMatch";const N={asPlainText:!0};Object(g.memo)((({autocompleteService:e,placeholder:t,rowLabel:n,selectedField:a,selectedValue:o,indexPattern:s,isLoading:l,isDisabled:c=!1,isClearable:d=!1,isRequired:p=!1,fieldInputWidth:m,onChange:f,onError:b,onWarning:v,warning:x})=>{const[j,O]=Object(g.useState)(""),[w,T]=Object(g.useState)(!1),[C,_]=Object(g.useState)(void 0),[F,D]=Object(g.useState)(!1),[P,,R]=I({autocompleteService:e,fieldValue:o,indexPattern:s,operatorType:k.d.WILDCARD,query:j,selectedField:a}),L=Object(g.useCallback)((e=>e),[]),q=Object(g.useMemo)((()=>{const e=String(o);return null!=o&&""!==o.trim()?Object(S.uniq)([e,...R]):R}),[R,o]),B=Object(g.useMemo)((()=>{const e=String(o);return o?[e]:[]}),[o]),z=Object(g.useCallback)((e=>{if(!e)return D(!1);D(!!A(e))}),[D]),$=Object(g.useCallback)((e=>{_((t=>{const n=null!=e;return null!=t!==n&&null!=b&&b(n),e}))}),[_,b]),V=Object(g.useCallback)((e=>{v(void 0!==e)}),[v]),{comboOptions:U,labels:G,selectedComboOptions:H}=Object(g.useMemo)((()=>E({getLabel:L,options:q,selectedOptions:B})),[q,B,L]),W=Object(g.useCallback)((e=>{const[t]=e.map((({label:e})=>q[G.indexOf(e)]));$(void 0),z(t),D(!1),f(null!=t?t:"")}),[$,z,G,f,q]),Q=Object(g.useCallback)((e=>{if(""!==e.trim()&&null!=a){const t=M(e,a,p,w);$(t),V(x),t||z(e),O(e)}}),[$,z,p,a,w,x,V]),Y=Object(g.useCallback)((e=>{const t=M(e,a,p,w);if($(t),V(x),null!=t)return D(!1),!1;z(e),f(e)}),[p,z,f,a,w,$,V,x]),K=Object(g.useCallback)((()=>{T(!0);const e=M(o,a,p,!0);$(e),V(x)}),[T,$,o,a,p,V,x]),X=Object(g.useMemo)((()=>l||P?i:null==a?r:t),[l,a,P,t]),J=Object(g.useMemo)((()=>l||P),[l,P]);return Object(g.useEffect)((()=>{_(void 0),null!=b&&b(!1),z(o),v(!1)}),[a,o,b,v,z]),Object(g.useMemo)((()=>Object(h.jsx)(y.EuiFormRow,{label:n,error:C,helpText:x||F&&u,isInvalid:null!=a&&null!=C,"data-test-subj":"valuesAutocompleteWildcardLabel",fullWidth:!0},Object(h.jsx)(y.EuiComboBox,{placeholder:X,isDisabled:c||!a,isLoading:J,isClearable:d,options:U,selectedOptions:H,onChange:W,singleSelection:N,onSearchChange:Q,onCreateOption:Y,isInvalid:null!=a&&null!=C,onBlur:K,sortMatchesBy:"startsWith","data-test-subj":"valuesAutocompleteWildcard",style:m?{width:`${m}px`}:{},fullWidth:!0,async:!0}))),[U,C,m,Y,Q,W,X,d,c,J,n,H,a,K,x,F])})).displayName="AutocompleteFieldWildcard"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return h})),n.d(t,"c",(function(){return v})),n.d(t,"d",(function(){return E})),n.d(t,"e",(function(){return x}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r);const s=o.a.aside.attrs({className:"siemUtilityBar"}).withConfig({displayName:"Bar",componentId:"sc-yj1vvr-0"})(["",""],(({border:e,theme:t})=>Object(r.css)([""," @media only screen and (min-width:","){display:flex;justify-content:space-between;}"],e&&Object(r.css)(["border-bottom:",";padding-bottom:",";align-items:center;"],t.eui.euiBorderThin,t.eui.euiSizeXS),t.eui.euiBreakpoints.l)));s.displayName="Bar";const l=o.a.div.attrs({className:"siemUtilityBar__section"}).withConfig({displayName:"BarSection",componentId:"sc-yj1vvr-1"})(["",""],(({grow:e,theme:t})=>Object(r.css)(["& + &{margin-top:",";align-items:center;}@media only screen and (min-width:","){display:flex;flex-wrap:wrap;}@media only screen and (min-width:","){& + &{margin-top:0;margin-left:",";}}",""],t.eui.euiSizeS,t.eui.euiBreakpoints.m,t.eui.euiBreakpoints.l,t.eui.euiSize,e&&Object(r.css)(["flex:1;"]))));l.displayName="BarSection";const c=o.a.div.attrs({className:"siemUtilityBar__group"}).withConfig({displayName:"BarGroup",componentId:"sc-yj1vvr-2"})(["",""],(({grow:e,theme:t})=>Object(r.css)(["align-items:flex-start;display:flex;flex-wrap:wrap;& + &{margin-top:",";}@media only screen and (min-width:","){border-right:",";flex-wrap:nowrap;margin-right:",";padding-right:",";& + &{margin-top:0;}&:last-child{border-right:none;margin-right:0;padding-right:0;}}& > *{margin-right:",";&:last-child{margin-right:0;}}",""],t.eui.euiSizeS,t.eui.euiBreakpoints.m,t.eui.euiBorderThin,t.eui.euiSizeM,t.eui.euiSizeM,t.eui.euiSize,e&&Object(r.css)(["flex:1;"]))));c.displayName="BarGroup";const u=o.a.p.attrs((({className:e})=>({className:e||"siemUtilityBar__text"}))).withConfig({displayName:"BarText",componentId:"sc-yj1vvr-3"})(["",""],(({shouldWrap:e,theme:t})=>Object(r.css)(["color:",";font-size:",";line-height:",";white-space:",";"],t.eui.euiTextSubduedColor,t.eui.euiFontSizeXS,t.eui.euiLineHeight,e?"normal":"nowrap")));u.displayName="BarText";const d=o.a.div.attrs({className:"siemUtilityBar__action"}).withConfig({displayName:"BarAction",componentId:"sc-yj1vvr-4"})(["",""],(({theme:e})=>Object(r.css)(["font-size:",";"],e.eui.euiFontSizeXS)));d.displayName="BarAction";const p=o.a.div.attrs({className:"siemUtilityBar__spacer"}).withConfig({displayName:"BarSpacer",componentId:"sc-yj1vvr-5"})(["",""],(()=>Object(r.css)(["flex:1;"])));p.displayName="BarSpacer";const m=i.a.memo((({border:e,children:t})=>i.a.createElement(s,{border:e},t)));m.displayName="UtilityBar";var f=n(40),g=n(674);const b=o()(f.EuiButtonEmpty).withConfig({displayName:"LoadingButtonEmpty",componentId:"sc-ou55gk-0"})(["",""],(({theme:e})=>Object(r.css)(["&.euiButtonEmpty{height:",";}"],e.eui.euiSize))),y=i.a.memo((({children:e,color:t,iconSide:n,iconSize:r,iconType:o,popoverContent:s,disabled:l,ownFocus:c,dataTestSubj:u,popoverPanelPaddingSize:d,onClick:p})=>{const[m,b]=Object(a.useState)(!1),y=Object(a.useCallback)((()=>b(!1)),[b]),h=Object(a.useCallback)((()=>{null==p||p(),b(!m)}),[m,p]);return i.a.createElement(f.EuiPopover,{ownFocus:c,panelPaddingSize:d,button:i.a.createElement(g.a,{dataTestSubj:u,color:t,iconSide:n,iconSize:r,iconType:o,disabled:l,onClick:h},e),closePopover:y,isOpen:m,repositionOnScroll:!0},null==s?void 0:s(y))}));y.displayName="Popover";const h=i.a.memo((({children:e,color:t,dataTestSubj:n,disabled:a,href:r,iconSide:o,iconSize:s,iconType:l,ownFocus:c,onClick:u,popoverContent:p,popoverPanelPaddingSize:m,inProgress:f})=>f?i.a.createElement(d,null,i.a.createElement(b,{"data-test-subj":`${n}-progress`,size:"xs",className:"eui-alignTop",isLoading:!0,iconSide:"right",flush:"both"},e)):i.a.createElement(d,{"data-test-subj":n},p?i.a.createElement(y,{dataTestSubj:`${n}-popover`,disabled:a,color:t,iconSide:o,iconSize:s,iconType:l,ownFocus:c,popoverPanelPaddingSize:m,popoverContent:p,onClick:u},e):i.a.createElement(g.a,{color:t,dataTestSubj:`${n}-linkIcon`,disabled:a,href:r,iconSide:o,iconSize:s,iconType:l,onClick:u},e))));h.displayName="UtilityBarAction";const v=i.a.memo((({grow:e,children:t})=>i.a.createElement(c,{grow:e},t)));v.displayName="UtilityBarGroup";const E=i.a.memo((({grow:e,children:t,dataTestSubj:n})=>i.a.createElement(l,{grow:e,"data-test-subj":n},t)));E.displayName="UtilityBarSection",i.a.memo((({dataTestSubj:e})=>i.a.createElement(p,{"data-test-subj":e}))).displayName="UtilityBarSpacer";const x=i.a.memo((({children:e,dataTestSubj:t,shouldWrap:n=!1,className:a})=>i.a.createElement(u,{"data-test-subj":t,shouldWrap:n,className:a},e)));x.displayName="UtilityBarText"},function(e,t,n){"use strict";n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return f})),n.d(t,"e",(function(){return g})),n.d(t,"f",(function(){return b}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(44),c=n(117);const u=({children:e,...t})=>i.a.createElement(r.EuiButton,t,e),d=({children:e,...t})=>i.a.createElement(r.EuiLink,t,e),p=s()("span").withConfig({displayName:"Comma",componentId:"sc-11tqw5g-0"})(["margin-right:5px;margin-left:5px;&::after{content:' ,';}"]);p.displayName="Comma";const m=({children:e,Component:t,dataTestSubj:n,href:a,onClick:r,title:o,iconType:s="expand"})=>t?i.a.createElement(t,{"data-test-subj":n,href:a,iconType:s,onClick:r,title:o},null!=o?o:e):i.a.createElement(u,{"data-test-subj":n,href:a,onClick:r},null!=o?o:e),f=i.a.memo(m),g=s.a.div.withConfig({displayName:"PortContainer",componentId:"sc-11tqw5g-1"})(["& svg{position:relative;top:-1px;}"]),b=i.a.memo((({moreMaxHeight:e,overflowIndexStart:t=5,render:n,rowItems:o})=>{const[s,c]=Object(a.useState)(!1),u=Object(a.useCallback)((()=>c((e=>!e))),[]),d=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null," ,",i.a.createElement(r.EuiButtonEmpty,{size:"xs",onClick:u},`+${o.length-t} `,i.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.reputationLinks.moreLabel",defaultMessage:"More"})))),[u,t,o.length]);return i.a.createElement(r.EuiFlexItem,{grow:!1},o.length>t&&i.a.createElement(r.EuiPopover,{id:"popover",button:d,isOpen:s,closePopover:u,repositionOnScroll:!0,panelClassName:"withHoverActions__popover"},i.a.createElement(y,{render:n,rowItems:o,moreMaxHeight:e,overflowIndexStart:t})))}));b.displayName="ReputationLinksOverflow";const y=i.a.memo((({moreMaxHeight:e,overflowIndexStart:t,render:n,rowItems:o})=>{const s=Object(a.useMemo)((()=>o.slice(t).map(((e,t)=>{var a;return i.a.createElement(r.EuiFlexItem,{grow:1,key:`${e}-${t}`},null!==(a=n&&n(e))&&void 0!==a?a:Object(c.a)(e))}))),[t,n,o]);return i.a.createElement("div",{"data-test-subj":"more-container",className:"eui-yScroll",style:{maxHeight:e,paddingRight:"2px"}},i.a.createElement(r.EuiFlexGroup,{gutterSize:"s",direction:"column","data-test-subj":"overflow-items"},s))}));y.displayName="MoreReputationLinksContainer"},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(42);const i=e=>Object(a.some)({category:"kibana",field:"kibana.alert.rule.uuid"},e),r=({data:e})=>{var t;if(!i(e))return!1;const n=null===(t=Object(a.find)({field:"agent.type"},e))||void 0===t?void 0:t.values;return!!n&&"endpoint"===n[0]},o=({ecsData:e})=>{if(null==e)return!1;const t=Object(a.getOr)([],"kibana.alert.original_event.module",e),n=Object(a.getOr)([],"kibana.alert.original_event.kind",e);return t.includes("endpoint")&&n.includes("alert")}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"c",(function(){return g}));var a=n(109),i=n(42),r=n(2),o=n(188),s=n(1387),l=n(485),c=n(434),u=n(380),d=n(167),p=n(142);const m=(e,t,n,i=p.e,r=!1)=>({and:[],enabled:!0,id:Object(a.j)(t),name:e,excluded:r,kqlQuery:"",queryMatch:{field:e,value:n,operator:i,displayValue:Object(c.d)(n)}}),f=(e,t,n,a=p.e,i=!1)=>{const{and:r,...o}=m(e,t,n,a,i);return o},g=({contextId:e,eventId:t,field:n,fieldFormat:a,fieldFromBrowserField:c,fieldType:p,isObjectArray:f,linkValue:g,values:b})=>Object(r.useMemo)((()=>{if(null==b)return null;const r=Array.isArray(b)?b:[b];let y=[];return r.length>1&&(y=[{meta:{},query:{bool:{must:r.map((e=>({term:{[n]:e}})))}}}]),r.reduce(((r,y,h)=>{let v="",E=Object(i.isString)(y)?y:`${b}`;const x=`${e}-${t}-${n}-${h}-${y}`;if(null==c)return r.values.push(E),r;if(f||p===o.f||[o.i].includes(n))return r.values.push(E),r;if(p===o.h){if(v=`formatted-ip-data-provider-${e}-${n}-${y}-${t}`,Object(i.isString)(y)&&!Object(i.isEmpty)(y)){let e=y;try{e=JSON.parse(y)}catch(e){}return Object(i.isArray)(e)&&(E=e.join(","),e.forEach((e=>r.dataProviders.push(m(n,v,e))))),r.dataProviders.push(m(n,v,e)),r.values.push(E),r}}else u.b.some((e=>n===e))?v=`port-default-draggable-${x}`:n===l.b?v=`duration-default-draggable-${x}`:n===o.g?v=`event-details-value-default-draggable-${x}`:a===s.a?v=`bytes-default-draggable-${x}`:n===o.n?v=`event-details-value-default-draggable-${x}-${g}`:n===o.c?v=`event-details-value-default-draggable-${x}-${y}`:n===o.o?v=`alert-details-value-default-draggable-${x}`:n===o.a?(v=`event-details-value-default-draggable-${x}`,E="string"==typeof y?y:""):v=[o.m,o.l,o.e,d.j].includes(n)?`event-details-value-default-draggable-${x}-${y}`:`event-details-value-default-draggable-${x}`;return r.values.push(E),r.dataProviders.push(m(n,v,y)),r}),{values:[],dataProviders:[],filters:y})}),[e,t,n,a,c,p,f,g,b])},function(e,t,n){"use strict";n.d(t,"a",(function(){return Q})),n.d(t,"c",(function(){return K})),n.d(t,"b",(function(){return ee}));var a=n(104),i=n.n(a),r=n(40),o=n(109),s=n(2),l=n.n(s),c=n(70),u=n(103),d=n(41),p=n.n(d),m=n(119),f=n(227),g=n(152),b=n(339),y=n(637),h=n(153),v=n(638),E=n(670),x=n(658),j=n(5),O=n(59),S=n(118),k=n(8),w=n(13),I=n(115),T=n(111),C=n(102),M=n(958),A=n(110),_=n(116),F=n(699);const D=({field:e,value:t})=>null==t?e:Array.isArray(t)?`${e} ${t.join(" ")}`:`${e} ${t}`;var N=n(272);const P=l.a.memo((({className:e,Component:t,enablePopOver:n,field:a,flush:i,iconSide:o,iconType:c,isExpandable:u,onClick:d,onFilterAdded:p,ownFocus:m,paddingSize:f,showLegend:g,showTooltip:b=!0,showTopN:y,scopeId:h,title:v,value:E,globalFilters:x})=>{const O=Object(I.isActiveTimeline)(null!=h?h:"")?A.SourcererScopeName.timeline:null!=h&&Object(N.c)(h)?A.SourcererScopeName.detections:A.SourcererScopeName.default,{browserFields:S,indexPattern:k}=Object(_.d)(O),w=null!=c?c:"visBarVertical",T=null!=o?o:"left",C=null!=v?v:(P=a,j.i18n.translate("xpack.securitySolution.hoverActions.showTopTooltip",{values:{fieldName:P},defaultMessage:"Show top {fieldName}"}));var P;const R=Object(s.useMemo)((()=>t?l.a.createElement(t,{"aria-label":C,className:e,"data-test-subj":"show-top-field",icon:w,iconType:w,iconSide:T,flush:i,onClick:d,title:C},C):l.a.createElement(r.EuiButtonIcon,{"aria-label":C,className:"securitySolution__hoverActionButton","data-test-subj":"show-top-field",iconSize:"s",iconType:w,onClick:d})),[t,C,e,i,w,d,T]),L=Object(s.useMemo)((()=>b&&!y?l.a.createElement(r.EuiToolTip,{content:l.a.createElement(F.a,{additionalScreenReaderOnlyContext:D({field:a,value:E}),content:C,shortcut:"t",showShortcut:m})},R):R),[R,C,a,m,b,y,E]),q=Object(s.useMemo)((()=>l.a.createElement(M.a,{browserFields:S,field:a,indexPattern:k,onFilterAdded:p,paddingSize:f,showLegend:g,scopeId:null!=h?h:void 0,toggleTopN:d,globalFilters:x})),[S,a,k,p,f,g,h,d,x]);return u?l.a.createElement(l.a.Fragment,null,R,y&&q):y?n?l.a.createElement(r.EuiPopover,{button:R,isOpen:y,closePopover:d,panelClassName:"withHoverActions__popover","data-test-subj":"showTopNContainer"},q):q:L}));P.displayName="ShowTopNButton";var R=n(12),L=n(105),q=n(131);const B=p.a.div.withConfig({displayName:"AdditionalContent",componentId:"sc-hbiy4s-0"})(["padding:2px;"]);B.displayName="AdditionalContent";const z=p.a.div.withConfig({displayName:"StyledHoverActionsContainer",componentId:"sc-hbiy4s-1"})(["display:flex;"," ",""],(e=>e.$isActive?"\n    .hoverActions-active {\n      .timelines__hoverActionButton,\n      .securitySolution__hoverActionButton {\n        opacity: 1;\n      }\n    }\n  ":""),(e=>e.$showOwnFocus?`\n    &:focus-within {\n      .timelines__hoverActionButton,\n      .securitySolution__hoverActionButton {\n        opacity: 1;\n      }\n    }\n\n    &:hover {\n      .timelines__hoverActionButton,\n      .securitySolution__hoverActionButton {\n        opacity: 1;\n      }\n    }\n\n  .timelines__hoverActionButton,\n  .securitySolution__hoverActionButton {\n    opacity: ${e.$showTopN?1:0};\n\n      &:focus {\n        opacity: 1;\n      }\n    }\n  `:"")),$=p()(z).withConfig({displayName:"StyledHoverActionsContainerWithPaddingsAndMinWidth",componentId:"sc-hbiy4s-2"})(["min-width:",";padding:",";position:relative;"],(({$hiddenActionsCount:e})=>138-26*e+"px"),(e=>`0 ${e.theme.eui.euiSizeS}`)),V=({ownFocus:e,showTopN:t})=>!t&&!e,U=l.a.memo((({additionalContent:e=null,closePopOver:t,closeTopN:n,dataProvider:a,dataType:i,draggableId:o,enableOverflowButton:c=!1,applyWidthAndPadding:d=!0,field:p,fieldType:m,isAggregatable:f,goGetTimelineId:g,isObjectArray:b,hideAddToTimeline:y=!1,hideTopN:v=!1,onFilterAdded:E,ownFocus:x,showOwnFocus:M=!0,showTopN:A,scopeId:_,toggleColumn:F,toggleTopN:D,values:N})=>{const[U,G]=Object(s.useState)(),[H,W]=Object(s.useState)(!1),[Q,Y]=Object(s.useState)(!1),K=Object(s.useCallback)((()=>{W((e=>!e)),Y(!Q)}),[Q,Y]),X=Object(s.useCallback)((()=>{n&&n(),W(!1),Y(!1),t&&t()}),[t,n]),J=Object(s.useRef)(!0),Z=Object(s.useRef)(null);Object(s.useEffect)((()=>{J.current&&null!=g&&null==_&&(J.current=!1,g(!0))}),[g,_]),Object(s.useEffect)((()=>{x&&setTimeout((()=>{var e;null===(e=Z.current)||void 0===e||e.focus()}),0)}),[x]);const ee=Object(s.useCallback)((e=>{if(x)switch(e.key){case"t":Object(O.stopPropagationAndPreventDefault)(e),D();break;case"Enter":break;case"Escape":Object(O.stopPropagationAndPreventDefault)(e);break;default:G(e)}}),[x,D]),te=_===S.c.casePage,ne=_===S.c.active,ae=_===S.c.detectionsAlertDetailsPage,ie=_===q.a.entityAnalytics,re=Object(s.useMemo)((()=>(ae||ie)&&!ne),[ne,ae,ie]),oe=Object(s.useMemo)((()=>(v?1:0)+(re?2:0)),[re,v]),{overflowActionItems:se,allActionItems:le}=(({dataProvider:e,dataType:t,defaultFocusedButtonRef:n,draggableId:a,enableOverflowButton:i,field:o,fieldType:c,isAggregatable:d,handleHoverActionClicked:p,hideFilters:m,hideTopN:f,hideAddToTimeline:g,isCaseView:b,isObjectArray:y,isOverflowPopoverOpen:v,itemsToShow:E=2,onFilterAdded:x,onOverflowButtonClick:j,ownFocus:O,showTopN:M,stKeyboardEvent:A,scopeId:_,toggleColumn:F,toggleTopN:D,values:N})=>{const q=Object(C.j)(),B=Object(u.useDispatch)(),{timelines:z,uiSettings:$}=q.services,{getAddToTimelineButton:V,getColumnToggleButton:U,getCopyButton:G,getFilterForValueButton:H,getFilterOutValueButton:W,getOverflowButton:Q}=z.getHoverActions(),Y=Object(s.useMemo)((()=>q.services.data.query.filterManager),[q.services.data.query.filterManager]),K=Object(s.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),X=Object(L.a)((e=>{var t;return Object(I.isActiveTimeline)(null!=_?_:"")?null===(t=K(e,null!=_?_:""))||void 0===t?void 0:t.filterManager:void 0})),J=Object(s.useMemo)((()=>Object(I.isActiveTimeline)(null!=_?_:"")?null!=X?X:new w.FilterManager($):Y),[_,X,$,Y]),Z=Object(s.useCallback)((()=>{e&&!Object(k.isEmpty)(e)&&B(Object(R.addProvider)({id:S.c.active,providers:e instanceof Array?e:[e]}))}),[e,B]),ee=Object(s.useCallback)((()=>{p&&p(),Z()}),[p,Z]),te=Object(s.useMemo)((()=>!m&&null!=N&&(i||!M&&!i)&&!b),[i,m,b,M,N]),ne=y&&"geo_point"!==o||b,ae=Object(s.useMemo)((()=>l.a.createElement(P,{Component:i?r.EuiContextMenuItem:void 0,"data-test-subj":"hover-actions-show-top-n",enablePopOver:!i&&b,field:o,key:"hover-actions-show-top-n",onClick:D,onFilterAdded:x,ownFocus:O,showTopN:M,showTooltip:!i,scopeId:_,value:N})),[i,b,o,D,x,O,M,_,N]),ie=Object(s.useMemo)((()=>[te?l.a.createElement("div",{"data-test-subj":"hover-actions-filter-for",key:"hover-actions-filter-for"},H({defaultFocusedButtonRef:n,field:o,filterManager:J,keyboardEvent:A,onClick:p,onFilterAdded:x,ownFocus:O,showTooltip:!i,value:N})):null,te?l.a.createElement("div",{"data-test-subj":"hover-actions-filter-out",key:"hover-actions-filter-out"},W({field:o,filterManager:J,keyboardEvent:A,onFilterAdded:x,ownFocus:O,onClick:p,showTooltip:!i,value:N})):null,F&&!ne?l.a.createElement("div",{"data-test-subj":"hover-actions-toggle-column",key:"hover-actions-toggle-column"},U({Component:i?r.EuiContextMenuItem:void 0,field:o,isDisabled:y&&"geo_point"!==t,isObjectArray:y,keyboardEvent:A,ownFocus:O,onClick:p,showTooltip:!i,toggleColumn:F,value:N})):null,null==N||null==a&&Object(k.isEmpty)(e)||g?null:l.a.createElement("div",{"data-test-subj":"hover-actions-add-timeline",key:"hover-actions-add-timeline"},V({Component:i?r.EuiContextMenuItem:void 0,dataProvider:e,draggableId:a,field:o,keyboardEvent:A,ownFocus:O,onClick:ee,showTooltip:!i,value:N})),Object(h.e)({fieldType:c,isAggregatable:d,fieldName:o,hideTopN:f})?ae:null,null!=o?l.a.createElement("div",{"data-test-subj":"hover-actions-copy-button",key:"hover-actions-copy-button"},G({Component:i?r.EuiContextMenuItem:void 0,field:o,isHoverAction:!0,keyboardEvent:A,ownFocus:O,onClick:p,showTooltip:!i,value:N})):null].filter((e=>null!=e))),[e,t,n,a,i,o,c,d,J,V,U,G,H,W,p,ee,g,f,y,x,O,ne,te,ae,A,F,N]);return{overflowActionItems:Object(s.useMemo)((()=>[...ie.slice(0,E),...i&&E>0&&E<ie.length?[Q({closePopOver:p,field:o,keyboardEvent:A,ownFocus:O,onClick:j,showTooltip:!i,value:N,items:M?[ae]:ie.slice(E),isOverflowPopoverOpen:!!v})]:[]].filter((e=>null!=e))),[ie,i,o,Q,p,v,E,j,ae,O,M,A,N]),allActionItems:Object(s.useMemo)((()=>!M||i||b?ie:[ae]),[M,i,b,ae,ie])}})({dataProvider:a,dataType:i,defaultFocusedButtonRef:Z,draggableId:o,enableOverflowButton:c&&!te,field:p,fieldType:m,hideFilters:re,isAggregatable:f,handleHoverActionClicked:X,hideAddToTimeline:y,hideTopN:v,isCaseView:te,isObjectArray:b,isOverflowPopoverOpen:Q,onFilterAdded:E,onOverflowButtonClick:K,ownFocus:x,showTopN:A,stKeyboardEvent:U,toggleColumn:F,toggleTopN:D,values:N,scopeId:_}),ce=d?$:z;return l.a.createElement(r.EuiFocusTrap,{disabled:V({ownFocus:x,showTopN:A})},l.a.createElement(ce,{"data-test-subj":"hover-actions-container",onKeyDown:ee,$showTopN:A,$showOwnFocus:M,$hiddenActionsCount:oe,$isActive:H,className:H?"hoverActions-active":""},l.a.createElement(r.EuiScreenReaderOnly,null,l.a.createElement("p",null,(ue=p,j.i18n.translate("xpack.securitySolution.dragAndDrop.youAreInADialogContainingOptionsScreenReaderOnly",{values:{fieldName:ue},defaultMessage:"You are in a dialog, containing options for field {fieldName}. Press tab to navigate options. Press escape to exit."})))),null!=e&&l.a.createElement(B,null,e),c&&!te?se:le));var ue}));U.displayName="HoverActions";var G=n(922);const H=({dataProvider:e,isAggregatable:t,fieldType:n,hideTopN:a,isDraggable:i,onFilterAdded:r,render:o,scopeId:c})=>{const{timelineId:u}=Object(s.useContext)(x.b),{tableId:d}=Object(s.useContext)(G.b),p=Object(s.useRef)(null),m=Object(s.useRef)(null),[f,g]=Object(s.useState)(!1),[b,y]=Object(s.useState)(!1),v=Object(s.useMemo)((()=>c||(null!=u?u:d)),[c,d,u]),E=Object(s.useCallback)((()=>{g((e=>!e)),y((e=>(e&&setTimeout((()=>{var e;null===(e=m.current)||void 0===e||e.focus()}),0),!1))),setTimeout((()=>{y(!1)}),0)}),[m]),{closeTopN:j,toggleTopN:O,isShowingTopN:S}=(e=>{const[t,n]=Object(s.useState)(!1),a=Object(s.useCallback)((()=>{n((t=>{const n=!t;return e&&e(n),n}))}),[e]);return{closeTopN:Object(s.useCallback)((()=>{n(!1)}),[]),toggleTopN:a,isShowingTopN:t}})(E),k=Object(s.useMemo)((()=>{const t=e.queryMatch.value;return"number"==typeof t||"boolean"==typeof t?t.toString():Array.isArray(t)?t.map((e=>String(e))):t}),[e.queryMatch.value]),w=Object(s.useMemo)((()=>{const s=b&&!S&&(null!==(u=null==(c=p.current)?void 0:c.querySelectorAll(".euiLink"))&&void 0!==u?u:[]).length>0?l.a.createElement(K,{"data-test-subj":`draggable-link-content-${e.queryMatch.field}`},o(e,null,{isDragging:!1,isDropAnimating:!1,isClone:!1,dropAnimation:null,draggingOver:null,combineWith:null,combineTargetFor:null,mode:null})):null;var c,u;return l.a.createElement(U,{additionalContent:s,closeTopN:j,closePopOver:E,dataProvider:e,draggableId:i?Object(h.l)(e.id):void 0,field:e.queryMatch.field,isAggregatable:t,fieldType:n,hideTopN:a,isObjectArray:!1,onFilterAdded:r,ownFocus:b,showOwnFocus:!1,showTopN:S,scopeId:v,toggleTopN:O,values:k})}),[b,S,e,o,j,E,i,t,n,a,r,v,O,k]),I=Object(s.useCallback)((e=>{p.current=e}),[]),T=Object(s.useCallback)((()=>{var e;b||null===(e=m.current)||void 0===e||e.focus()}),[b,m]),C=Object(s.useCallback)((()=>{j(),b&&(y(!1),setTimeout((()=>{T()}),0))}),[T,b,j]),M=Object(s.useCallback)((()=>{y(!0)}),[]);return Object(s.useMemo)((()=>({closePopOverTrigger:f,handleClosePopOverTrigger:E,hoverActionsOwnFocus:b,hoverContent:w,keyboardHandlerRef:m,onCloseRequested:C,onFocus:T,openPopover:M,setContainerRef:I,isShowingTopN:S})),[f,E,b,w,C,T,M,I,S])};var W=n(662);const Q=p.a.div.withConfig({displayName:"DragEffects",componentId:"sc-1n4vnmw-0"})([""]);Q.displayName="DragEffects";class draggable_wrapper_DragDropErrorBoundary extends l.a.PureComponent{componentDidCatch(){this.forceUpdate()}render(){return this.props.children}}const Y=p.a.div.withConfig({displayName:"Wrapper",componentId:"sc-1n4vnmw-1"})(["display:inline-block;max-width:100%;[data-rbd-placeholder-context-id]{display:none !important;}",""],(({disabled:e})=>e&&"\n    [data-rbd-draggable-id]:hover,\n    .euiBadge:hover,\n    .euiBadge__text:hover {\n      cursor: default;\n    }\n  "));Y.displayName="Wrapper";const K=p.a.span.withConfig({displayName:"ProviderContentWrapper",componentId:"sc-1n4vnmw-2"})(["> span.euiToolTipAnchor{display:block;}> span.euiToolTipAnchor.eui-textTruncate{display:inline-block;}"]),X=(e,t)=>t.isDropAnimating?{...e,transitionDuration:"0.00000001s"}:e,J=({dataProvider:e,hideTopN:t=!1,onFilterAdded:n,render:a,fieldType:d="",isAggregatable:p=!1,scopeId:m,truncate:x})=>{const[j,O]=Object(s.useState)(!1),S=e.id.includes(`-${g.a}-`),k=Object(u.useDispatch)(),{closePopOverTrigger:w,handleClosePopOverTrigger:I,hoverActionsOwnFocus:T,hoverContent:C,keyboardHandlerRef:M,onCloseRequested:A,openPopover:_,onFocus:F,setContainerRef:D,isShowingTopN:N}=H({dataProvider:e,hideTopN:t,onFilterAdded:n,render:a,fieldType:d,isAggregatable:p,scopeId:m,truncate:x}),P=Object(s.useCallback)((()=>{S||(k(f.a.registerProvider({provider:e})),O(!0))}),[S,k,e]),R=Object(s.useCallback)((()=>j&&k(f.a.unRegisterProvider({id:e.id}))),[j,k,e.id]);Object(s.useEffect)((()=>()=>{R()}),[R]);const L=Object(s.useCallback)(((t,n)=>l.a.createElement(te,{registerProvider:P},l.a.createElement("div",i()({},t.draggableProps,t.dragHandleProps,{style:X(t.draggableProps.style,n),ref:t.innerRef,"data-test-subj":"providerContainer",tabIndex:-1}),l.a.createElement(K,{"data-test-subj":`draggable-content-${e.queryMatch.field}`},a(e,t,n))))),[e,P,a]),q=Object(s.useCallback)(((t,n)=>l.a.createElement(v.a,i()({},t.draggableProps,t.dragHandleProps,{ref:e=>{t.innerRef(e),D(e)},"data-test-subj":"providerContainer",isDragging:n.isDragging,registerProvider:P,tabIndex:-1}),l.a.createElement(r.EuiScreenReaderOnly,{"data-test-subj":"screenReaderOnlyField"},l.a.createElement("p",null,e.queryMatch.field)),x&&!n.isDragging?l.a.createElement(b.b,{"data-test-subj":"draggable-truncatable-content"},a(e,t,n)):l.a.createElement(K,{"data-test-subj":`draggable-content-${e.queryMatch.field}`},a(e,t,n)),!n.isDragging&&l.a.createElement(r.EuiScreenReaderOnly,{"data-test-subj":"draggableKeyboardInstructionsNotDragging"},l.a.createElement("p",null,E.b)))),[e,P,a,D,x]),{onBlur:B,onKeyDown:z}=Object(W.a)({closePopover:I,draggableId:Object(h.l)(e.id),fieldName:e.queryMatch.field,keyboardHandlerRef:M,openPopover:_}),$=Object(s.useCallback)((t=>l.a.createElement("div",i()({ref:t.innerRef},t.droppableProps),l.a.createElement("div",{className:o.a,"data-test-subj":"draggableWrapperKeyboardHandler",onClick:F,onBlur:B,onKeyDown:z,ref:M,role:"button",tabIndex:0},l.a.createElement(c.Draggable,{draggableId:Object(h.l)(e.id),index:0,key:Object(h.l)(e.id),isDragDisabled:S},q)),t.placeholder)),[q,e.id,S,M,B,F,z]),V=Object(s.useMemo)((()=>l.a.createElement(Y,{"data-test-subj":"draggableWrapperDiv",disabled:S},l.a.createElement(draggable_wrapper_DragDropErrorBoundary,null,l.a.createElement(c.Droppable,{isDropDisabled:!0,droppableId:Object(h.m)(e.id),renderClone:L},$)))),[$,L,e.id,S]),U=Object(s.useCallback)((()=>V),[V]);return S?l.a.createElement(l.a.Fragment,null,V):l.a.createElement(y.a,{alwaysShow:N||T,closePopOverTrigger:w,hoverContent:C,onCloseRequested:A,render:U})},Z=({dataProvider:e,hideTopN:t=!1,isDraggable:n=!1,onFilterAdded:a,render:i,isAggregatable:r=!1,fieldType:o="",scopeId:c,truncate:u})=>{const{closePopOverTrigger:d,hoverActionsOwnFocus:p,hoverContent:f,onCloseRequested:v,setContainerRef:E,isShowingTopN:x}=H({dataProvider:e,hideTopN:t,isDraggable:n,isAggregatable:r,fieldType:o,onFilterAdded:a,render:i,scopeId:c,truncate:u}),j=Object(s.useCallback)((()=>l.a.createElement("div",{ref:e=>{E(e)},tabIndex:-1,"data-provider-id":Object(h.l)(e.id)},u?l.a.createElement(b.b,{"data-test-subj":"render-truncatable-content"},i(e,null,{isDragging:!1,isDropAnimating:!1,isClone:!1,dropAnimation:null,draggingOver:null,combineWith:null,combineTargetFor:null,mode:null})):l.a.createElement(K,{"data-test-subj":`render-content-${e.queryMatch.field}`},i(e,null,{isDragging:!1,isDropAnimating:!1,isClone:!1,dropAnimation:null,draggingOver:null,combineWith:null,combineTargetFor:null,mode:null})))),[e,i,E,u]);return n?l.a.createElement(J,{dataProvider:e,hideTopN:t,onFilterAdded:a,fieldType:o,isAggregatable:r,render:i,scopeId:c,truncate:u}):l.a.createElement(y.a,{alwaysShow:x||p,closePopOverTrigger:d,hoverContent:(O=c,[m.e.rulePreview,g.a].includes(null!=O?O:"")?void 0:f),onCloseRequested:v,render:j});var O},ee=l.a.memo(Z);ee.displayName="DraggableWrapper";const te=l.a.memo((({children:e,registerProvider:t})=>(Object(s.useEffect)((()=>{t()}),[t]),l.a.createElement(l.a.Fragment,null,e))));te.displayName="ConditionalPortal"},function(e,t,n){"use strict";n.d(t,"c",(function(){return c})),n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return d}));var a=n(40),i=n(2),r=n.n(i);const o="closed",s="open",l=e=>e===o?s:o,c="Header",u="Content",d=({expanded:e,title:t,children:n,"data-test-subj":d})=>{const p=Object(a.useGeneratedHtmlId)({prefix:"accordion"}),{renderContent:m,toggle:f,state:g}=(e=>{const t=e?s:o,[n,a]=Object(i.useReducer)(l,t);return{renderContent:n===s,state:n,toggle:a}})(e),b=d+c,y=d+u,h=r.a.createElement(a.EuiTitle,{size:"xs","data-test-subj":b},r.a.createElement("h4",null,t));return r.a.createElement(a.EuiAccordion,{forceState:g,onToggle:f,id:p,buttonContent:h},r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",direction:"column","data-test-subj":y},m&&n))};d.displayName="ExpandableSection"},,,function(e,t,n){(function(t){const n="object"==typeof t&&Object({IS_KIBANA_DISTRIBUTABLE:"true"})&&Object({IS_KIBANA_DISTRIBUTABLE:"true"}).NODE_DEBUG&&/\bsemver\b/i.test(Object({IS_KIBANA_DISTRIBUTABLE:"true"}).NODE_DEBUG)?(...e)=>console.error("SEMVER",...e):()=>{};e.exports=n}).call(this,n(404))},function(e,t){const n=Number.MAX_SAFE_INTEGER||9007199254740991;e.exports={MAX_LENGTH:256,MAX_SAFE_COMPONENT_LENGTH:16,MAX_SAFE_BUILD_LENGTH:250,MAX_SAFE_INTEGER:n,RELEASE_TYPES:["major","premajor","minor","preminor","patch","prepatch","prerelease"],SEMVER_SPEC_VERSION:"2.0.0",FLAG_INCLUDE_PRERELEASE:1,FLAG_LOOSE:2}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.chart.dataAllValuesZerosTitle",{defaultMessage:"All values returned zero"}),r=a.i18n.translate("xpack.securitySolution.chart.dataNotAvailableTitle",{defaultMessage:"Chart Data Not Available"}),o=a.i18n.translate("xpack.securitySolution.chart.emptyValueLabel",{defaultMessage:"empty value"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"a",(function(){return u}));var a=n(190),i=n(176),r=n(135),o=n(682);const s=e=>{var t,n;const i=null!==(t=null==e||null===(n=e.isPlatinumPlus)||void 0===n?void 0:n.call(e))&&void 0!==t&&t;return[{columnHeaderType:a.a,displayAsText:r.s,id:"kibana.alert.severity",initialWidth:105},{columnHeaderType:a.a,displayAsText:r.o,id:"kibana.alert.risk_score",initialWidth:100},{columnHeaderType:a.a,displayAsText:r.n,id:"kibana.alert.reason",initialWidth:450},{columnHeaderType:a.a,id:"host.name"},i?{columnHeaderType:a.a,id:"host.risk.calculated_level"}:null,{columnHeaderType:a.a,id:"user.name"},i?{columnHeaderType:a.a,id:"user.risk.calculated_level"}:null,{columnHeaderType:a.a,id:"process.name"},{columnHeaderType:a.a,id:"file.name"},{columnHeaderType:a.a,id:"source.ip"},{columnHeaderType:a.a,id:"destination.ip"}].filter((e=>null!=e))},l=e=>[{columnHeaderType:a.a,id:"@timestamp",initialWidth:i.b+10},{columnHeaderType:a.a,displayAsText:r.p,id:"kibana.alert.rule.name",initialWidth:i.a,linkField:"kibana.alert.rule.uuid"},...s(e)],c=e=>[{columnHeaderType:a.a,id:"kibana.alert.original_time",initialWidth:i.b+10},...s(e)],u=[{columnHeaderType:a.a,id:"@timestamp",displayAsText:r.B.timestamp,initialWidth:o.b+50,actions:!1,isExpandable:!1,isResizable:!1},{columnHeaderType:a.a,displayAsText:r.B.rule,id:"kibana.alert.rule.name",initialWidth:o.a+50,linkField:"kibana.alert.rule.uuid",actions:!1,isExpandable:!1,isResizable:!1},{columnHeaderType:a.a,id:"eventSummary",displayAsText:r.B.eventSummary,actions:!1,isExpandable:!1,isResizable:!1}]},function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(2),i=n.n(a),r=n(42),o=n(48),s=n(1408);const{euiColorVis0:l,euiColorVis5:c,euiColorVis7:u,euiColorVis9:d}=o.euiLightVars,p={low:l,medium:c,high:u,critical:d},m=({value:e})=>{var t;const n=Object(r.upperFirst)(e),a=null!==(t=p[e])&&void 0!==t?t:"subdued";return i.a.createElement(s.a,{healthColor:a,tooltipContent:n,dataTestSubj:"severity"},n)},f=i.a.memo(m)},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(40),i=n(2),r=n.n(i),o=n(168);const s=({dataTestSubj:e,descriptionList:t})=>r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(o.d,{"data-test-subj":e,listItems:t}))},function(e,t,n){"use strict";n.d(t,"b",(function(){return g})),n.d(t,"a",(function(){return x}));var a=n(2),i=n.n(a),r=n(44),o=n(40),s=n(41),l=n.n(s),c=n(165),u=n(153),d=n(117),p=n(168),m=n(224);const f=l.a.div.withConfig({displayName:"Subtext",componentId:"sc-19v49l5-0"})(["font-size:",";"],(e=>e.theme.eui.euiFontSizeXS)),g=({values:e,fieldName:t,idPrefix:n,render:a,displayCount:r=5,maxOverflow:o=5})=>{if(null!=e&&e.length>0){const s=e.slice(0,r).map(((e,r)=>{const o=Object(u.i)(`${n}-${t}-${e}-${r}`);return i.a.createElement(c.c,{key:o,mode:c.a.HOVER_DOWN,visibleCellActions:5,showActionTooltips:!0,triggerId:c.d.DEFAULT,data:{value:e,field:t}},i.a.createElement(i.a.Fragment,null,a?a(e):Object(d.a)(e)))}));return s.length>0?i.a.createElement(i.a.Fragment,null,s," ",i.a.createElement(y,{fieldName:t,values:e,idPrefix:n,maxOverflowItems:o,overflowIndexStart:r})):Object(d.d)()}return Object(d.d)()},b=({fieldName:e,values:t,idPrefix:n,maxOverflowItems:a=5,overflowIndexStart:s=5})=>i.a.createElement(i.a.Fragment,null,t.length>s&&i.a.createElement(v,{count:t.length-s,idPrefix:n},i.a.createElement(o.EuiText,{size:"xs"},i.a.createElement(m.c,{fieldName:e,idPrefix:n,values:t,overflowIndexStart:s,moreMaxHeight:"none"}),t.length>s+a&&i.a.createElement("p",{"data-test-subj":"popover-additional-overflow"},i.a.createElement(o.EuiTextColor,{color:"subdued"},t.length-s-a," ",i.a.createElement(r.FormattedMessage,{id:"xpack.securitySolution.tables.rowItemHelper.moreDescription",defaultMessage:"more not shown"}))))));b.displayName="RowItemOverflowComponent";const y=i.a.memo(b),h=({children:e,count:t,idPrefix:n})=>{const[s,l]=Object(a.useState)(!1),c=Object(a.useCallback)((()=>{l(!s)}),[s]);return i.a.createElement(f,null,i.a.createElement(o.EuiPopover,{button:i.a.createElement(o.EuiLink,{onClick:c,"data-test-subj":"overflow-button"},i.a.createElement(r.FormattedMessage,{id:"xpack.securitySolution.tables.rowItemHelper.overflowButtonDescription",defaultMessage:"+{count} More",values:{count:t}})),closePopover:()=>l(!s),id:`${n}-popover`,isOpen:s,panelClassName:"withHoverActions__popover",repositionOnScroll:!0},e))};h.displayName="PopoverComponent";const v=i.a.memo(h);v.displayName="Popover";const E=({value:e,showToolTip:t=!0,overflowLength:n=50})=>i.a.createElement("span",null,t?i.a.createElement(o.EuiToolTip,{"data-test-subj":"message-tooltip",content:"message"},i.a.createElement(i.a.Fragment,null,e.substring(0,n))):i.a.createElement(i.a.Fragment,null,e.substring(0,n)),e.length>n&&i.a.createElement(o.EuiToolTip,{content:e},i.a.createElement(p.f,{type:"boxesHorizontal"})));E.displayName="OverflowFieldComponent";const x=i.a.memo(E);x.displayName="OverflowField"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"c",(function(){return d}));var a=n(46),i=n(2),r=n(4),o=n(143),s=n(354);const l=["GET",r.hb],c=(e,t)=>Object(a.useQuery)([...l,e],(async({signal:t})=>{const n=await Object(o.j)({signal:t,...e});return{rules:n.data,total:n.total}}),{...s.a,staleTime:0,...t}),u=()=>{const e=Object(a.useQueryClient)();return Object(i.useCallback)((()=>{e.invalidateQueries(l,{refetchType:"active"})}),[e])},d=()=>{const e=Object(a.useQueryClient)();return Object(i.useCallback)((t=>{e.setQueriesData(l,(e=>e?{rules:p(e.rules,t),total:e.total}:void 0))}),[e])};function p(e,t){const n=new Map(t.map((e=>[e.id,e])));return e.some((e=>n.has(e.id)))?e.map((e=>{var t;return null!==(t=n.get(e.id))&&void 0!==t?t:e})):e}},function(e,t,n){"use strict";n.d(t,"d",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(137),i=n(204),r=n(586);const o=e=>"boolean"==typeof e,s=(e,t)=>{var n;return null==e||!((null===(n=e.actions)||void 0===n?void 0:n.length)>0&&o(t))||t},l=e=>null==e||e,c=(e,t,n,o)=>null==e?void 0:Object(i.d)(e.type)&&!t?r.d:s(e,n)?l(o)?void 0:a.Rb:a.Qb},function(e,t,n){"use strict";n.d(t,"g",(function(){return v})),n.d(t,"b",(function(){return j})),n.d(t,"f",(function(){return S})),n.d(t,"c",(function(){return I})),n.d(t,"h",(function(){return M})),n.d(t,"d",(function(){return R})),n.d(t,"e",(function(){return L})),n.d(t,"a",(function(){return q}));var a=n(62),i=n.n(a),r=n(50),o=n.n(r),s=n(240),l=n.n(s),c=(n(45),n(41)),u=n.n(c),d=n(40),p=n(163),m=n(197),f=n(207),g=n(145),b=n(737),y=n(213),h=n(739);const v=({rule:e,detailsView:t=!1})=>{const n=x(e);return{aboutRuleData:k(e,t),modifiedAboutRuleDetailsData:C(e),defineRuleData:n,scheduleRuleData:O(e),ruleActionsData:E(e)}},E=e=>{const{enabled:t,meta:n,actions:a=[],response_actions:i}=e;return{actions:null==a?void 0:a.map(b.d),responseActions:null==i?void 0:i.map(b.e),kibanaSiemAppUrl:null==n?void 0:n.kibana_siem_app_url,enabled:t}},x=e=>{var t,n,a,i,r,o,s,l,c,u,d,p,g,b,h,v,E,x,O,S,k,w,I,T,C,M,A,_;return{ruleType:e.type,anomalyThreshold:null!==(t=e.anomaly_threshold)&&void 0!==t?t:50,machineLearningJobId:null!==(n=e.machine_learning_job_id)&&void 0!==n?n:[],index:null!==(a=e.index)&&void 0!==a?a:[],dataViewId:e.data_view_id,threatIndex:null!==(i=e.threat_index)&&void 0!==i?i:[],threatQueryBar:{query:{query:null!==(r=e.threat_query)&&void 0!==r?r:"",language:null!==(o=e.threat_language)&&void 0!==o?o:""},filters:null!==(s=e.threat_filters)&&void 0!==s?s:[],saved_id:null},threatMapping:null!==(l=e.threat_mapping)&&void 0!==l?l:[],queryBar:{query:{query:null!==(c=e.query)&&void 0!==c?c:"",language:null!==(u=e.language)&&void 0!==u?u:""},filters:null!==(d=e.filters)&&void 0!==d?d:[],saved_id:null!==(p=e.saved_id)&&void 0!==p?p:null},relatedIntegrations:null!==(g=e.related_integrations)&&void 0!==g?g:[],requiredFields:null!==(b=e.required_fields)&&void 0!==b?b:[],timeline:{id:null!==(h=e.timeline_id)&&void 0!==h?h:null,title:null!==(v=e.timeline_title)&&void 0!==v?v:null},threshold:{field:Object(m.h)(null===(E=e.threshold)||void 0===E?void 0:E.field),value:`${(null===(x=e.threshold)||void 0===x?void 0:x.value)||100}`,...null!==(O=e.threshold)&&void 0!==O&&null!==(S=O.cardinality)&&void 0!==S&&S.length?{cardinality:{field:[`${e.threshold.cardinality[0].field}`],value:`${e.threshold.cardinality[0].value}`}}:{}},eqlOptions:{timestampField:e.timestamp_field,eventCategoryField:e.event_category_override,tiebreakerField:e.tiebreaker_field},dataSourceType:e.data_view_id?y.a.DataView:y.a.IndexPatterns,newTermsFields:null!==(k=e.new_terms_fields)&&void 0!==k?k:[],historyWindowSize:e.history_window_start?j(e.history_window_start):"7d",shouldLoadQueryDynamically:Boolean("saved_query"===e.type&&e.saved_id),groupByFields:null!==(w=null===(I=e.alert_suppression)||void 0===I?void 0:I.group_by)&&void 0!==w?w:[],groupByRadioSelection:null!==(T=e.alert_suppression)&&void 0!==T&&T.duration?y.b.PerTimePeriod:y.b.PerRuleExecution,groupByDuration:null!==(C=null===(M=e.alert_suppression)||void 0===M?void 0:M.duration)&&void 0!==C?C:{value:5,unit:"m"},suppressionMissingFields:null!==(A=null===(_=e.alert_suppression)||void 0===_?void 0:_.missing_fields_strategy)&&void 0!==A?A:f.f}},j=e=>e.startsWith("now-")?e.substring(4):e,O=e=>{const{interval:t,from:n}=e;return{interval:t,from:S(n,t)}},S=(e,t)=>{var n,a;const r=null!==(n=i.a.parse(e))&&void 0!==n?n:o()(),s=null!==(a=i.a.parse(`now-${t}`))&&void 0!==a?a:o()(),l=o.a.duration(s.diff(r)),c=Math.floor(l.asSeconds());return 0===c?"0s":c%3600==0?c/3600+"h":c%60==0?c/60+"m":`${c}s`},k=(e,t)=>{var n;const{name:a,description:i,note:r}=T(e,t),{author:o,building_block_type:s,exceptions_list:l,license:c,risk_score_mapping:u,rule_name_override:d,severity_mapping:m,timestamp_override:f,timestamp_override_fallback_disabled:g,references:b,severity:y,false_positives:h,risk_score:v,investigation_fields:E,tags:x,threat:j,threat_indicator_path:O}=e;return{author:o,isAssociatedToEndpointList:null!==(n=null==l?void 0:l.some((({id:e})=>e===p.k)))&&void 0!==n&&n,isBuildingBlock:void 0!==s,license:null!=c?c:"",ruleNameOverride:null!=d?d:"",timestampOverride:null!=f?f:"",timestampOverrideFallbackDisabled:g,name:a,description:i,note:r,references:b,severity:{value:y,mapping:I(m),isMappingChecked:m.length>0},tags:x,riskScore:{value:v,mapping:u,isMappingChecked:u.length>0},falsePositives:h,investigationFields:null!=E?E:[],threat:j,threatIndicatorPath:O}},w={low:0,medium:1,high:2,critical:3},I=e=>{const t=h.i.flatMap((t=>null==e.find((e=>e.severity===t.value))?[{field:"",value:"",operator:"equals",severity:t.value}]:[]));return[...e,...t].sort(((e,t)=>w[e.severity]-w[t.severity]))},T=(e,t)=>{const{name:n,description:a,note:i}=e;return t?{name:"",description:"",note:""}:{name:n,description:a,note:null!=i?i:""}},C=e=>{var t,n;return{note:null!==(t=e.note)&&void 0!==t?t:"",description:e.description,setup:null!==(n=e.setup)&&void 0!==n?n:""}},M=(e,t,n,a)=>!1===e||!1===t||!1===n||a,A=["id","name","description","false_positives","investigation_fields","rule_id","max_signals","risk_score","output_index","references","severity","timeline_id","timeline_title","threat","type","version"],_=["index","filters","language","query","saved_id","response_actions"],F=["anomaly_threshold","machine_learning_job_id"],D=["threshold",..._],N=e=>{switch(e){case"machine_learning":return F;case"threshold":return D;case"new_terms":case"threat_match":case"query":case"saved_query":case"eql":return _}Object(g.a)(e)},P=e=>({state:[{name:"signals_count",description:"state.signals_count"}],params:[],context:[{name:"results_link",description:"context.results_link",useWithTripleBracesInTemplates:!0},{name:"alerts",description:"context.alerts"},...e.map((e=>{const t=`rule.${e}`;return{name:t,description:`context.${t}`}}))]}),R=l()((e=>{if(!e)return{state:[],params:[]};const t=(e=>[...A,...N(e)].sort())(e);return P(t)})),L=()=>P((()=>{const e=[...A,..._,...F,...D].sort();return Array.from(new Set(e))})()),q=u()(d.EuiFlexItem).withConfig({displayName:"MaxWidthEuiFlexItem",componentId:"sc-15hicli-0"})(["max-width:1000px;overflow:hidden;"])},function(e,t,n){"use strict";n.d(t,"a",(function(){return h}));var a=n(41),i=n.n(a),r=n(40),o=n(2),s=n.n(o),l=(n(21),n(674)),c=n(679),u=n(1051),d=n(169),p=n(102);const m=i.a.div.attrs({className:"securitySolutionHeaderPage__linkBack"}).withConfig({displayName:"LinkBack",componentId:"sc-1acc7vc-0"})(["",""],(({theme:e})=>Object(a.css)(["font-size:",";line-height:",";margin-bottom:",";"],e.eui.euiFontSizeXS,e.eui.euiLineHeight,e.eui.euiSizeS)));m.displayName="LinkBack";const f=i()(r.EuiPageHeaderSection).withConfig({displayName:"HeaderSection",componentId:"sc-1acc7vc-1"})(["min-width:0;max-width:100%;"]);function g(){const{euiTheme:e}=Object(r.useEuiTheme)();return s.a.createElement(v,{$_css:e.border.thin})}f.displayName="HeaderSection";const b=s.a.memo((({backOptions:e})=>{var t,n;const{navigateToUrl:a}=Object(p.j)().services.application,{formatUrl:i}=Object(d.m)(e.pageId),r=i(null!==(t=e.path)&&void 0!==t?t:"");return s.a.createElement(m,null,s.a.createElement(l.a,{dataTestSubj:null!==(n=e.dataTestSubj)&&void 0!==n?n:"link-back",onClick:e=>{e.preventDefault(),a(r)},href:r,iconType:"arrowLeft"},e.text))}));b.displayName="HeaderLinkBack";const y=({backOptions:e,backComponent:t,badgeOptions:n,border:a,children:i,isLoading:o,rightSideItems:l,subtitle:d,subtitle2:p,title:m,titleNode:y})=>s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiPageHeader,{alignItems:"center",rightSideItems:l},s.a.createElement(f,null,e&&s.a.createElement(b,{backOptions:e}),!e&&t&&s.a.createElement(s.a.Fragment,null,t),y||s.a.createElement(u.a,{title:m,badgeOptions:n}),d&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"s"}),s.a.createElement(c.a,{"data-test-subj":"header-page-subtitle",items:d})),a&&o&&s.a.createElement(r.EuiProgress,{size:"xs",color:"accent"})),i&&s.a.createElement(r.EuiPageHeaderSection,{"data-test-subj":"header-page-supplements"},i)),p&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"xs"}),s.a.createElement(c.a,{"data-test-subj":"header-page-subtitle-2",items:p})),a&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"m"}),s.a.createElement(g,null)),s.a.createElement(r.EuiSpacer,{size:"l"})),h=s.a.memo(y);var v=i()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-1acc7vc-2"})(["border-bottom:",";"],(e=>e.$_css))},function(e,t,n){"use strict";n.d(t,"e",(function(){return j})),n.d(t,"f",(function(){return O})),n.d(t,"g",(function(){return S})),n.d(t,"c",(function(){return I})),n.d(t,"a",(function(){return C})),n.d(t,"b",(function(){return M})),n.d(t,"d",(function(){return A}));var a=n(8);const i={"@timestamp":{type:"date",array:!1,required:!0},"agent.build.original":{type:"keyword",array:!1,required:!1},"agent.ephemeral_id":{type:"keyword",array:!1,required:!1},"agent.id":{type:"keyword",array:!1,required:!1},"agent.name":{type:"keyword",array:!1,required:!1},"agent.type":{type:"keyword",array:!1,required:!1},"agent.version":{type:"keyword",array:!1,required:!1},"client.address":{type:"keyword",array:!1,required:!1},"client.as.number":{type:"long",array:!1,required:!1},"client.as.organization.name":{type:"keyword",array:!1,required:!1},"client.bytes":{type:"long",array:!1,required:!1},"client.domain":{type:"keyword",array:!1,required:!1},"client.geo.city_name":{type:"keyword",array:!1,required:!1},"client.geo.continent_code":{type:"keyword",array:!1,required:!1},"client.geo.continent_name":{type:"keyword",array:!1,required:!1},"client.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"client.geo.country_name":{type:"keyword",array:!1,required:!1},"client.geo.location":{type:"geo_point",array:!1,required:!1},"client.geo.name":{type:"keyword",array:!1,required:!1},"client.geo.postal_code":{type:"keyword",array:!1,required:!1},"client.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"client.geo.region_name":{type:"keyword",array:!1,required:!1},"client.geo.timezone":{type:"keyword",array:!1,required:!1},"client.ip":{type:"ip",array:!1,required:!1},"client.mac":{type:"keyword",array:!1,required:!1},"client.nat.ip":{type:"ip",array:!1,required:!1},"client.nat.port":{type:"long",array:!1,required:!1},"client.packets":{type:"long",array:!1,required:!1},"client.port":{type:"long",array:!1,required:!1},"client.registered_domain":{type:"keyword",array:!1,required:!1},"client.subdomain":{type:"keyword",array:!1,required:!1},"client.top_level_domain":{type:"keyword",array:!1,required:!1},"client.user.domain":{type:"keyword",array:!1,required:!1},"client.user.email":{type:"keyword",array:!1,required:!1},"client.user.full_name":{type:"keyword",array:!1,required:!1},"client.user.group.domain":{type:"keyword",array:!1,required:!1},"client.user.group.id":{type:"keyword",array:!1,required:!1},"client.user.group.name":{type:"keyword",array:!1,required:!1},"client.user.hash":{type:"keyword",array:!1,required:!1},"client.user.id":{type:"keyword",array:!1,required:!1},"client.user.name":{type:"keyword",array:!1,required:!1},"client.user.roles":{type:"keyword",array:!0,required:!1},"cloud.account.id":{type:"keyword",array:!1,required:!1},"cloud.account.name":{type:"keyword",array:!1,required:!1},"cloud.availability_zone":{type:"keyword",array:!1,required:!1},"cloud.instance.id":{type:"keyword",array:!1,required:!1},"cloud.instance.name":{type:"keyword",array:!1,required:!1},"cloud.machine.type":{type:"keyword",array:!1,required:!1},"cloud.origin.account.id":{type:"keyword",array:!1,required:!1},"cloud.origin.account.name":{type:"keyword",array:!1,required:!1},"cloud.origin.availability_zone":{type:"keyword",array:!1,required:!1},"cloud.origin.instance.id":{type:"keyword",array:!1,required:!1},"cloud.origin.instance.name":{type:"keyword",array:!1,required:!1},"cloud.origin.machine.type":{type:"keyword",array:!1,required:!1},"cloud.origin.project.id":{type:"keyword",array:!1,required:!1},"cloud.origin.project.name":{type:"keyword",array:!1,required:!1},"cloud.origin.provider":{type:"keyword",array:!1,required:!1},"cloud.origin.region":{type:"keyword",array:!1,required:!1},"cloud.origin.service.name":{type:"keyword",array:!1,required:!1},"cloud.project.id":{type:"keyword",array:!1,required:!1},"cloud.project.name":{type:"keyword",array:!1,required:!1},"cloud.provider":{type:"keyword",array:!1,required:!1},"cloud.region":{type:"keyword",array:!1,required:!1},"cloud.service.name":{type:"keyword",array:!1,required:!1},"cloud.target.account.id":{type:"keyword",array:!1,required:!1},"cloud.target.account.name":{type:"keyword",array:!1,required:!1},"cloud.target.availability_zone":{type:"keyword",array:!1,required:!1},"cloud.target.instance.id":{type:"keyword",array:!1,required:!1},"cloud.target.instance.name":{type:"keyword",array:!1,required:!1},"cloud.target.machine.type":{type:"keyword",array:!1,required:!1},"cloud.target.project.id":{type:"keyword",array:!1,required:!1},"cloud.target.project.name":{type:"keyword",array:!1,required:!1},"cloud.target.provider":{type:"keyword",array:!1,required:!1},"cloud.target.region":{type:"keyword",array:!1,required:!1},"cloud.target.service.name":{type:"keyword",array:!1,required:!1},"container.id":{type:"keyword",array:!1,required:!1},"container.image.name":{type:"keyword",array:!1,required:!1},"container.image.tag":{type:"keyword",array:!0,required:!1},"container.labels":{type:"object",array:!1,required:!1},"container.name":{type:"keyword",array:!1,required:!1},"container.runtime":{type:"keyword",array:!1,required:!1},"destination.address":{type:"keyword",array:!1,required:!1},"destination.as.number":{type:"long",array:!1,required:!1},"destination.as.organization.name":{type:"keyword",array:!1,required:!1},"destination.bytes":{type:"long",array:!1,required:!1},"destination.domain":{type:"keyword",array:!1,required:!1},"destination.geo.city_name":{type:"keyword",array:!1,required:!1},"destination.geo.continent_code":{type:"keyword",array:!1,required:!1},"destination.geo.continent_name":{type:"keyword",array:!1,required:!1},"destination.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"destination.geo.country_name":{type:"keyword",array:!1,required:!1},"destination.geo.location":{type:"geo_point",array:!1,required:!1},"destination.geo.name":{type:"keyword",array:!1,required:!1},"destination.geo.postal_code":{type:"keyword",array:!1,required:!1},"destination.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"destination.geo.region_name":{type:"keyword",array:!1,required:!1},"destination.geo.timezone":{type:"keyword",array:!1,required:!1},"destination.ip":{type:"ip",array:!1,required:!1},"destination.mac":{type:"keyword",array:!1,required:!1},"destination.nat.ip":{type:"ip",array:!1,required:!1},"destination.nat.port":{type:"long",array:!1,required:!1},"destination.packets":{type:"long",array:!1,required:!1},"destination.port":{type:"long",array:!1,required:!1},"destination.registered_domain":{type:"keyword",array:!1,required:!1},"destination.subdomain":{type:"keyword",array:!1,required:!1},"destination.top_level_domain":{type:"keyword",array:!1,required:!1},"destination.user.domain":{type:"keyword",array:!1,required:!1},"destination.user.email":{type:"keyword",array:!1,required:!1},"destination.user.full_name":{type:"keyword",array:!1,required:!1},"destination.user.group.domain":{type:"keyword",array:!1,required:!1},"destination.user.group.id":{type:"keyword",array:!1,required:!1},"destination.user.group.name":{type:"keyword",array:!1,required:!1},"destination.user.hash":{type:"keyword",array:!1,required:!1},"destination.user.id":{type:"keyword",array:!1,required:!1},"destination.user.name":{type:"keyword",array:!1,required:!1},"destination.user.roles":{type:"keyword",array:!0,required:!1},"dll.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"dll.code_signature.exists":{type:"boolean",array:!1,required:!1},"dll.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"dll.code_signature.status":{type:"keyword",array:!1,required:!1},"dll.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"dll.code_signature.team_id":{type:"keyword",array:!1,required:!1},"dll.code_signature.timestamp":{type:"date",array:!1,required:!1},"dll.code_signature.trusted":{type:"boolean",array:!1,required:!1},"dll.code_signature.valid":{type:"boolean",array:!1,required:!1},"dll.hash.md5":{type:"keyword",array:!1,required:!1},"dll.hash.sha1":{type:"keyword",array:!1,required:!1},"dll.hash.sha256":{type:"keyword",array:!1,required:!1},"dll.hash.sha512":{type:"keyword",array:!1,required:!1},"dll.hash.ssdeep":{type:"keyword",array:!1,required:!1},"dll.name":{type:"keyword",array:!1,required:!1},"dll.path":{type:"keyword",array:!1,required:!1},"dll.pe.architecture":{type:"keyword",array:!1,required:!1},"dll.pe.company":{type:"keyword",array:!1,required:!1},"dll.pe.description":{type:"keyword",array:!1,required:!1},"dll.pe.file_version":{type:"keyword",array:!1,required:!1},"dll.pe.imphash":{type:"keyword",array:!1,required:!1},"dll.pe.original_file_name":{type:"keyword",array:!1,required:!1},"dll.pe.product":{type:"keyword",array:!1,required:!1},"dns.answers":{type:"object",array:!0,required:!1},"dns.answers.class":{type:"keyword",array:!1,required:!1},"dns.answers.data":{type:"keyword",array:!1,required:!1},"dns.answers.name":{type:"keyword",array:!1,required:!1},"dns.answers.ttl":{type:"long",array:!1,required:!1},"dns.answers.type":{type:"keyword",array:!1,required:!1},"dns.header_flags":{type:"keyword",array:!0,required:!1},"dns.id":{type:"keyword",array:!1,required:!1},"dns.op_code":{type:"keyword",array:!1,required:!1},"dns.question.class":{type:"keyword",array:!1,required:!1},"dns.question.name":{type:"keyword",array:!1,required:!1},"dns.question.registered_domain":{type:"keyword",array:!1,required:!1},"dns.question.subdomain":{type:"keyword",array:!1,required:!1},"dns.question.top_level_domain":{type:"keyword",array:!1,required:!1},"dns.question.type":{type:"keyword",array:!1,required:!1},"dns.resolved_ip":{type:"ip",array:!0,required:!1},"dns.response_code":{type:"keyword",array:!1,required:!1},"dns.type":{type:"keyword",array:!1,required:!1},"ecs.version":{type:"keyword",array:!1,required:!0},"error.code":{type:"keyword",array:!1,required:!1},"error.id":{type:"keyword",array:!1,required:!1},"error.message":{type:"match_only_text",array:!1,required:!1},"error.stack_trace":{type:"wildcard",array:!1,required:!1},"error.type":{type:"keyword",array:!1,required:!1},"event.action":{type:"keyword",array:!1,required:!1},"event.agent_id_status":{type:"keyword",array:!1,required:!1},"event.category":{type:"keyword",array:!0,required:!1},"event.code":{type:"keyword",array:!1,required:!1},"event.created":{type:"date",array:!1,required:!1},"event.dataset":{type:"keyword",array:!1,required:!1},"event.duration":{type:"long",array:!1,required:!1},"event.end":{type:"date",array:!1,required:!1},"event.hash":{type:"keyword",array:!1,required:!1},"event.id":{type:"keyword",array:!1,required:!1},"event.ingested":{type:"date",array:!1,required:!1},"event.kind":{type:"keyword",array:!1,required:!1},"event.module":{type:"keyword",array:!1,required:!1},"event.original":{type:"keyword",array:!1,required:!1},"event.outcome":{type:"keyword",array:!1,required:!1},"event.provider":{type:"keyword",array:!1,required:!1},"event.reason":{type:"keyword",array:!1,required:!1},"event.reference":{type:"keyword",array:!1,required:!1},"event.risk_score":{type:"float",array:!1,required:!1},"event.risk_score_norm":{type:"float",array:!1,required:!1},"event.sequence":{type:"long",array:!1,required:!1},"event.severity":{type:"long",array:!1,required:!1},"event.start":{type:"date",array:!1,required:!1},"event.timezone":{type:"keyword",array:!1,required:!1},"event.type":{type:"keyword",array:!0,required:!1},"event.url":{type:"keyword",array:!1,required:!1},"faas.coldstart":{type:"boolean",array:!1,required:!1},"faas.execution":{type:"keyword",array:!1,required:!1},"faas.trigger":{type:"nested",array:!1,required:!1},"faas.trigger.request_id":{type:"keyword",array:!1,required:!1},"faas.trigger.type":{type:"keyword",array:!1,required:!1},"file.accessed":{type:"date",array:!1,required:!1},"file.attributes":{type:"keyword",array:!0,required:!1},"file.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"file.code_signature.exists":{type:"boolean",array:!1,required:!1},"file.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"file.code_signature.status":{type:"keyword",array:!1,required:!1},"file.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"file.code_signature.team_id":{type:"keyword",array:!1,required:!1},"file.code_signature.timestamp":{type:"date",array:!1,required:!1},"file.code_signature.trusted":{type:"boolean",array:!1,required:!1},"file.code_signature.valid":{type:"boolean",array:!1,required:!1},"file.created":{type:"date",array:!1,required:!1},"file.ctime":{type:"date",array:!1,required:!1},"file.device":{type:"keyword",array:!1,required:!1},"file.directory":{type:"keyword",array:!1,required:!1},"file.drive_letter":{type:"keyword",array:!1,required:!1},"file.elf.architecture":{type:"keyword",array:!1,required:!1},"file.elf.byte_order":{type:"keyword",array:!1,required:!1},"file.elf.cpu_type":{type:"keyword",array:!1,required:!1},"file.elf.creation_date":{type:"date",array:!1,required:!1},"file.elf.exports":{type:"flattened",array:!0,required:!1},"file.elf.header.abi_version":{type:"keyword",array:!1,required:!1},"file.elf.header.class":{type:"keyword",array:!1,required:!1},"file.elf.header.data":{type:"keyword",array:!1,required:!1},"file.elf.header.entrypoint":{type:"long",array:!1,required:!1},"file.elf.header.object_version":{type:"keyword",array:!1,required:!1},"file.elf.header.os_abi":{type:"keyword",array:!1,required:!1},"file.elf.header.type":{type:"keyword",array:!1,required:!1},"file.elf.header.version":{type:"keyword",array:!1,required:!1},"file.elf.imports":{type:"flattened",array:!0,required:!1},"file.elf.sections":{type:"nested",array:!0,required:!1},"file.elf.sections.chi2":{type:"long",array:!1,required:!1},"file.elf.sections.entropy":{type:"long",array:!1,required:!1},"file.elf.sections.flags":{type:"keyword",array:!1,required:!1},"file.elf.sections.name":{type:"keyword",array:!1,required:!1},"file.elf.sections.physical_offset":{type:"keyword",array:!1,required:!1},"file.elf.sections.physical_size":{type:"long",array:!1,required:!1},"file.elf.sections.type":{type:"keyword",array:!1,required:!1},"file.elf.sections.virtual_address":{type:"long",array:!1,required:!1},"file.elf.sections.virtual_size":{type:"long",array:!1,required:!1},"file.elf.segments":{type:"nested",array:!0,required:!1},"file.elf.segments.sections":{type:"keyword",array:!1,required:!1},"file.elf.segments.type":{type:"keyword",array:!1,required:!1},"file.elf.shared_libraries":{type:"keyword",array:!0,required:!1},"file.elf.telfhash":{type:"keyword",array:!1,required:!1},"file.extension":{type:"keyword",array:!1,required:!1},"file.fork_name":{type:"keyword",array:!1,required:!1},"file.gid":{type:"keyword",array:!1,required:!1},"file.group":{type:"keyword",array:!1,required:!1},"file.hash.md5":{type:"keyword",array:!1,required:!1},"file.hash.sha1":{type:"keyword",array:!1,required:!1},"file.hash.sha256":{type:"keyword",array:!1,required:!1},"file.hash.sha512":{type:"keyword",array:!1,required:!1},"file.hash.ssdeep":{type:"keyword",array:!1,required:!1},"file.inode":{type:"keyword",array:!1,required:!1},"file.mime_type":{type:"keyword",array:!1,required:!1},"file.mode":{type:"keyword",array:!1,required:!1},"file.mtime":{type:"date",array:!1,required:!1},"file.name":{type:"keyword",array:!1,required:!1},"file.owner":{type:"keyword",array:!1,required:!1},"file.path":{type:"keyword",array:!1,required:!1},"file.pe.architecture":{type:"keyword",array:!1,required:!1},"file.pe.company":{type:"keyword",array:!1,required:!1},"file.pe.description":{type:"keyword",array:!1,required:!1},"file.pe.file_version":{type:"keyword",array:!1,required:!1},"file.pe.imphash":{type:"keyword",array:!1,required:!1},"file.pe.original_file_name":{type:"keyword",array:!1,required:!1},"file.pe.product":{type:"keyword",array:!1,required:!1},"file.size":{type:"long",array:!1,required:!1},"file.target_path":{type:"keyword",array:!1,required:!1},"file.type":{type:"keyword",array:!1,required:!1},"file.uid":{type:"keyword",array:!1,required:!1},"file.x509.alternative_names":{type:"keyword",array:!0,required:!1},"file.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"file.x509.issuer.country":{type:"keyword",array:!0,required:!1},"file.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"file.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"file.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"file.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"file.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"file.x509.not_after":{type:"date",array:!1,required:!1},"file.x509.not_before":{type:"date",array:!1,required:!1},"file.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"file.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"file.x509.public_key_exponent":{type:"long",array:!1,required:!1},"file.x509.public_key_size":{type:"long",array:!1,required:!1},"file.x509.serial_number":{type:"keyword",array:!1,required:!1},"file.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"file.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"file.x509.subject.country":{type:"keyword",array:!0,required:!1},"file.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"file.x509.subject.locality":{type:"keyword",array:!0,required:!1},"file.x509.subject.organization":{type:"keyword",array:!0,required:!1},"file.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"file.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"file.x509.version_number":{type:"keyword",array:!1,required:!1},"group.domain":{type:"keyword",array:!1,required:!1},"group.id":{type:"keyword",array:!1,required:!1},"group.name":{type:"keyword",array:!1,required:!1},"host.architecture":{type:"keyword",array:!1,required:!1},"host.boot.id":{type:"keyword",array:!1,required:!1},"host.cpu.usage":{type:"scaled_float",array:!1,required:!1,scaling_factor:1e3},"host.disk.read.bytes":{type:"long",array:!1,required:!1},"host.disk.write.bytes":{type:"long",array:!1,required:!1},"host.domain":{type:"keyword",array:!1,required:!1},"host.geo.city_name":{type:"keyword",array:!1,required:!1},"host.geo.continent_code":{type:"keyword",array:!1,required:!1},"host.geo.continent_name":{type:"keyword",array:!1,required:!1},"host.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"host.geo.country_name":{type:"keyword",array:!1,required:!1},"host.geo.location":{type:"geo_point",array:!1,required:!1},"host.geo.name":{type:"keyword",array:!1,required:!1},"host.geo.postal_code":{type:"keyword",array:!1,required:!1},"host.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"host.geo.region_name":{type:"keyword",array:!1,required:!1},"host.geo.timezone":{type:"keyword",array:!1,required:!1},"host.hostname":{type:"keyword",array:!1,required:!1},"host.id":{type:"keyword",array:!1,required:!1},"host.ip":{type:"ip",array:!0,required:!1},"host.mac":{type:"keyword",array:!0,required:!1},"host.name":{type:"keyword",array:!1,required:!1},"host.network.egress.bytes":{type:"long",array:!1,required:!1},"host.network.egress.packets":{type:"long",array:!1,required:!1},"host.network.ingress.bytes":{type:"long",array:!1,required:!1},"host.network.ingress.packets":{type:"long",array:!1,required:!1},"host.os.family":{type:"keyword",array:!1,required:!1},"host.os.full":{type:"keyword",array:!1,required:!1},"host.os.kernel":{type:"keyword",array:!1,required:!1},"host.os.name":{type:"keyword",array:!1,required:!1},"host.os.platform":{type:"keyword",array:!1,required:!1},"host.os.type":{type:"keyword",array:!1,required:!1},"host.os.version":{type:"keyword",array:!1,required:!1},"host.pid_ns_ino":{type:"keyword",array:!1,required:!1},"host.risk.calculated_level":{type:"keyword",array:!1,required:!1},"host.risk.calculated_score":{type:"float",array:!1,required:!1},"host.risk.calculated_score_norm":{type:"float",array:!1,required:!1},"host.risk.static_level":{type:"keyword",array:!1,required:!1},"host.risk.static_score":{type:"float",array:!1,required:!1},"host.risk.static_score_norm":{type:"float",array:!1,required:!1},"host.type":{type:"keyword",array:!1,required:!1},"host.uptime":{type:"long",array:!1,required:!1},"http.request.body.bytes":{type:"long",array:!1,required:!1},"http.request.body.content":{type:"wildcard",array:!1,required:!1},"http.request.bytes":{type:"long",array:!1,required:!1},"http.request.id":{type:"keyword",array:!1,required:!1},"http.request.method":{type:"keyword",array:!1,required:!1},"http.request.mime_type":{type:"keyword",array:!1,required:!1},"http.request.referrer":{type:"keyword",array:!1,required:!1},"http.response.body.bytes":{type:"long",array:!1,required:!1},"http.response.body.content":{type:"wildcard",array:!1,required:!1},"http.response.bytes":{type:"long",array:!1,required:!1},"http.response.mime_type":{type:"keyword",array:!1,required:!1},"http.response.status_code":{type:"long",array:!1,required:!1},"http.version":{type:"keyword",array:!1,required:!1},labels:{type:"object",array:!1,required:!1},"log.file.path":{type:"keyword",array:!1,required:!1},"log.level":{type:"keyword",array:!1,required:!1},"log.logger":{type:"keyword",array:!1,required:!1},"log.origin.file.line":{type:"long",array:!1,required:!1},"log.origin.file.name":{type:"keyword",array:!1,required:!1},"log.origin.function":{type:"keyword",array:!1,required:!1},"log.syslog":{type:"object",array:!1,required:!1},"log.syslog.facility.code":{type:"long",array:!1,required:!1},"log.syslog.facility.name":{type:"keyword",array:!1,required:!1},"log.syslog.priority":{type:"long",array:!1,required:!1},"log.syslog.severity.code":{type:"long",array:!1,required:!1},"log.syslog.severity.name":{type:"keyword",array:!1,required:!1},message:{type:"match_only_text",array:!1,required:!1},"network.application":{type:"keyword",array:!1,required:!1},"network.bytes":{type:"long",array:!1,required:!1},"network.community_id":{type:"keyword",array:!1,required:!1},"network.direction":{type:"keyword",array:!1,required:!1},"network.forwarded_ip":{type:"ip",array:!1,required:!1},"network.iana_number":{type:"keyword",array:!1,required:!1},"network.inner":{type:"object",array:!1,required:!1},"network.inner.vlan.id":{type:"keyword",array:!1,required:!1},"network.inner.vlan.name":{type:"keyword",array:!1,required:!1},"network.name":{type:"keyword",array:!1,required:!1},"network.packets":{type:"long",array:!1,required:!1},"network.protocol":{type:"keyword",array:!1,required:!1},"network.transport":{type:"keyword",array:!1,required:!1},"network.type":{type:"keyword",array:!1,required:!1},"network.vlan.id":{type:"keyword",array:!1,required:!1},"network.vlan.name":{type:"keyword",array:!1,required:!1},"observer.egress":{type:"object",array:!1,required:!1},"observer.egress.interface.alias":{type:"keyword",array:!1,required:!1},"observer.egress.interface.id":{type:"keyword",array:!1,required:!1},"observer.egress.interface.name":{type:"keyword",array:!1,required:!1},"observer.egress.vlan.id":{type:"keyword",array:!1,required:!1},"observer.egress.vlan.name":{type:"keyword",array:!1,required:!1},"observer.egress.zone":{type:"keyword",array:!1,required:!1},"observer.geo.city_name":{type:"keyword",array:!1,required:!1},"observer.geo.continent_code":{type:"keyword",array:!1,required:!1},"observer.geo.continent_name":{type:"keyword",array:!1,required:!1},"observer.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"observer.geo.country_name":{type:"keyword",array:!1,required:!1},"observer.geo.location":{type:"geo_point",array:!1,required:!1},"observer.geo.name":{type:"keyword",array:!1,required:!1},"observer.geo.postal_code":{type:"keyword",array:!1,required:!1},"observer.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"observer.geo.region_name":{type:"keyword",array:!1,required:!1},"observer.geo.timezone":{type:"keyword",array:!1,required:!1},"observer.hostname":{type:"keyword",array:!1,required:!1},"observer.ingress":{type:"object",array:!1,required:!1},"observer.ingress.interface.alias":{type:"keyword",array:!1,required:!1},"observer.ingress.interface.id":{type:"keyword",array:!1,required:!1},"observer.ingress.interface.name":{type:"keyword",array:!1,required:!1},"observer.ingress.vlan.id":{type:"keyword",array:!1,required:!1},"observer.ingress.vlan.name":{type:"keyword",array:!1,required:!1},"observer.ingress.zone":{type:"keyword",array:!1,required:!1},"observer.ip":{type:"ip",array:!0,required:!1},"observer.mac":{type:"keyword",array:!0,required:!1},"observer.name":{type:"keyword",array:!1,required:!1},"observer.os.family":{type:"keyword",array:!1,required:!1},"observer.os.full":{type:"keyword",array:!1,required:!1},"observer.os.kernel":{type:"keyword",array:!1,required:!1},"observer.os.name":{type:"keyword",array:!1,required:!1},"observer.os.platform":{type:"keyword",array:!1,required:!1},"observer.os.type":{type:"keyword",array:!1,required:!1},"observer.os.version":{type:"keyword",array:!1,required:!1},"observer.product":{type:"keyword",array:!1,required:!1},"observer.serial_number":{type:"keyword",array:!1,required:!1},"observer.type":{type:"keyword",array:!1,required:!1},"observer.vendor":{type:"keyword",array:!1,required:!1},"observer.version":{type:"keyword",array:!1,required:!1},"orchestrator.api_version":{type:"keyword",array:!1,required:!1},"orchestrator.cluster.id":{type:"keyword",array:!1,required:!1},"orchestrator.cluster.name":{type:"keyword",array:!1,required:!1},"orchestrator.cluster.url":{type:"keyword",array:!1,required:!1},"orchestrator.cluster.version":{type:"keyword",array:!1,required:!1},"orchestrator.namespace":{type:"keyword",array:!1,required:!1},"orchestrator.organization":{type:"keyword",array:!1,required:!1},"orchestrator.resource.id":{type:"keyword",array:!1,required:!1},"orchestrator.resource.ip":{type:"ip",array:!0,required:!1},"orchestrator.resource.name":{type:"keyword",array:!1,required:!1},"orchestrator.resource.parent.type":{type:"keyword",array:!1,required:!1},"orchestrator.resource.type":{type:"keyword",array:!1,required:!1},"orchestrator.type":{type:"keyword",array:!1,required:!1},"organization.id":{type:"keyword",array:!1,required:!1},"organization.name":{type:"keyword",array:!1,required:!1},"package.architecture":{type:"keyword",array:!1,required:!1},"package.build_version":{type:"keyword",array:!1,required:!1},"package.checksum":{type:"keyword",array:!1,required:!1},"package.description":{type:"keyword",array:!1,required:!1},"package.install_scope":{type:"keyword",array:!1,required:!1},"package.installed":{type:"date",array:!1,required:!1},"package.license":{type:"keyword",array:!1,required:!1},"package.name":{type:"keyword",array:!1,required:!1},"package.path":{type:"keyword",array:!1,required:!1},"package.reference":{type:"keyword",array:!1,required:!1},"package.size":{type:"long",array:!1,required:!1},"package.type":{type:"keyword",array:!1,required:!1},"package.version":{type:"keyword",array:!1,required:!1},"process.args":{type:"keyword",array:!0,required:!1},"process.args_count":{type:"long",array:!1,required:!1},"process.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"process.code_signature.exists":{type:"boolean",array:!1,required:!1},"process.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"process.code_signature.status":{type:"keyword",array:!1,required:!1},"process.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"process.code_signature.team_id":{type:"keyword",array:!1,required:!1},"process.code_signature.timestamp":{type:"date",array:!1,required:!1},"process.code_signature.trusted":{type:"boolean",array:!1,required:!1},"process.code_signature.valid":{type:"boolean",array:!1,required:!1},"process.command_line":{type:"wildcard",array:!1,required:!1},"process.elf.architecture":{type:"keyword",array:!1,required:!1},"process.elf.byte_order":{type:"keyword",array:!1,required:!1},"process.elf.cpu_type":{type:"keyword",array:!1,required:!1},"process.elf.creation_date":{type:"date",array:!1,required:!1},"process.elf.exports":{type:"flattened",array:!0,required:!1},"process.elf.header.abi_version":{type:"keyword",array:!1,required:!1},"process.elf.header.class":{type:"keyword",array:!1,required:!1},"process.elf.header.data":{type:"keyword",array:!1,required:!1},"process.elf.header.entrypoint":{type:"long",array:!1,required:!1},"process.elf.header.object_version":{type:"keyword",array:!1,required:!1},"process.elf.header.os_abi":{type:"keyword",array:!1,required:!1},"process.elf.header.type":{type:"keyword",array:!1,required:!1},"process.elf.header.version":{type:"keyword",array:!1,required:!1},"process.elf.imports":{type:"flattened",array:!0,required:!1},"process.elf.sections":{type:"nested",array:!0,required:!1},"process.elf.sections.chi2":{type:"long",array:!1,required:!1},"process.elf.sections.entropy":{type:"long",array:!1,required:!1},"process.elf.sections.flags":{type:"keyword",array:!1,required:!1},"process.elf.sections.name":{type:"keyword",array:!1,required:!1},"process.elf.sections.physical_offset":{type:"keyword",array:!1,required:!1},"process.elf.sections.physical_size":{type:"long",array:!1,required:!1},"process.elf.sections.type":{type:"keyword",array:!1,required:!1},"process.elf.sections.virtual_address":{type:"long",array:!1,required:!1},"process.elf.sections.virtual_size":{type:"long",array:!1,required:!1},"process.elf.segments":{type:"nested",array:!0,required:!1},"process.elf.segments.sections":{type:"keyword",array:!1,required:!1},"process.elf.segments.type":{type:"keyword",array:!1,required:!1},"process.elf.shared_libraries":{type:"keyword",array:!0,required:!1},"process.elf.telfhash":{type:"keyword",array:!1,required:!1},"process.end":{type:"date",array:!1,required:!1},"process.entity_id":{type:"keyword",array:!1,required:!1},"process.entry_leader.entity_id":{type:"keyword",array:!1,required:!1},"process.executable":{type:"keyword",array:!1,required:!1},"process.exit_code":{type:"long",array:!1,required:!1},"process.hash.md5":{type:"keyword",array:!1,required:!1},"process.hash.sha1":{type:"keyword",array:!1,required:!1},"process.hash.sha256":{type:"keyword",array:!1,required:!1},"process.hash.sha512":{type:"keyword",array:!1,required:!1},"process.hash.ssdeep":{type:"keyword",array:!1,required:!1},"process.name":{type:"keyword",array:!1,required:!1},"process.parent.args":{type:"keyword",array:!0,required:!1},"process.parent.args_count":{type:"long",array:!1,required:!1},"process.parent.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"process.parent.code_signature.exists":{type:"boolean",array:!1,required:!1},"process.parent.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"process.parent.code_signature.status":{type:"keyword",array:!1,required:!1},"process.parent.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"process.parent.code_signature.team_id":{type:"keyword",array:!1,required:!1},"process.parent.code_signature.timestamp":{type:"date",array:!1,required:!1},"process.parent.code_signature.trusted":{type:"boolean",array:!1,required:!1},"process.parent.code_signature.valid":{type:"boolean",array:!1,required:!1},"process.parent.command_line":{type:"wildcard",array:!1,required:!1},"process.parent.elf.architecture":{type:"keyword",array:!1,required:!1},"process.parent.elf.byte_order":{type:"keyword",array:!1,required:!1},"process.parent.elf.cpu_type":{type:"keyword",array:!1,required:!1},"process.parent.elf.creation_date":{type:"date",array:!1,required:!1},"process.parent.elf.exports":{type:"flattened",array:!0,required:!1},"process.parent.elf.header.abi_version":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.class":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.data":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.entrypoint":{type:"long",array:!1,required:!1},"process.parent.elf.header.object_version":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.os_abi":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.type":{type:"keyword",array:!1,required:!1},"process.parent.elf.header.version":{type:"keyword",array:!1,required:!1},"process.parent.elf.imports":{type:"flattened",array:!0,required:!1},"process.parent.elf.sections":{type:"nested",array:!0,required:!1},"process.parent.elf.sections.chi2":{type:"long",array:!1,required:!1},"process.parent.elf.sections.entropy":{type:"long",array:!1,required:!1},"process.parent.elf.sections.flags":{type:"keyword",array:!1,required:!1},"process.parent.elf.sections.name":{type:"keyword",array:!1,required:!1},"process.parent.elf.sections.physical_offset":{type:"keyword",array:!1,required:!1},"process.parent.elf.sections.physical_size":{type:"long",array:!1,required:!1},"process.parent.elf.sections.type":{type:"keyword",array:!1,required:!1},"process.parent.elf.sections.virtual_address":{type:"long",array:!1,required:!1},"process.parent.elf.sections.virtual_size":{type:"long",array:!1,required:!1},"process.parent.elf.segments":{type:"nested",array:!0,required:!1},"process.parent.elf.segments.sections":{type:"keyword",array:!1,required:!1},"process.parent.elf.segments.type":{type:"keyword",array:!1,required:!1},"process.parent.elf.shared_libraries":{type:"keyword",array:!0,required:!1},"process.parent.elf.telfhash":{type:"keyword",array:!1,required:!1},"process.parent.end":{type:"date",array:!1,required:!1},"process.parent.entity_id":{type:"keyword",array:!1,required:!1},"process.parent.executable":{type:"keyword",array:!1,required:!1},"process.parent.exit_code":{type:"long",array:!1,required:!1},"process.parent.hash.md5":{type:"keyword",array:!1,required:!1},"process.parent.hash.sha1":{type:"keyword",array:!1,required:!1},"process.parent.hash.sha256":{type:"keyword",array:!1,required:!1},"process.parent.hash.sha512":{type:"keyword",array:!1,required:!1},"process.parent.hash.ssdeep":{type:"keyword",array:!1,required:!1},"process.parent.name":{type:"keyword",array:!1,required:!1},"process.parent.pe.architecture":{type:"keyword",array:!1,required:!1},"process.parent.pe.company":{type:"keyword",array:!1,required:!1},"process.parent.pe.description":{type:"keyword",array:!1,required:!1},"process.parent.pe.file_version":{type:"keyword",array:!1,required:!1},"process.parent.pe.imphash":{type:"keyword",array:!1,required:!1},"process.parent.pe.original_file_name":{type:"keyword",array:!1,required:!1},"process.parent.pe.product":{type:"keyword",array:!1,required:!1},"process.parent.pgid":{type:"long",array:!1,required:!1},"process.parent.pid":{type:"long",array:!1,required:!1},"process.parent.start":{type:"date",array:!1,required:!1},"process.parent.thread.id":{type:"long",array:!1,required:!1},"process.parent.thread.name":{type:"keyword",array:!1,required:!1},"process.parent.title":{type:"keyword",array:!1,required:!1},"process.parent.uptime":{type:"long",array:!1,required:!1},"process.parent.working_directory":{type:"keyword",array:!1,required:!1},"process.pe.architecture":{type:"keyword",array:!1,required:!1},"process.pe.company":{type:"keyword",array:!1,required:!1},"process.pe.description":{type:"keyword",array:!1,required:!1},"process.pe.file_version":{type:"keyword",array:!1,required:!1},"process.pe.imphash":{type:"keyword",array:!1,required:!1},"process.pe.original_file_name":{type:"keyword",array:!1,required:!1},"process.pe.product":{type:"keyword",array:!1,required:!1},"process.pgid":{type:"long",array:!1,required:!1},"process.pid":{type:"long",array:!1,required:!1},"process.session_leader.entity_id":{type:"keyword",array:!1,required:!1},"process.start":{type:"date",array:!1,required:!1},"process.thread.id":{type:"long",array:!1,required:!1},"process.thread.name":{type:"keyword",array:!1,required:!1},"process.title":{type:"keyword",array:!1,required:!1},"process.uptime":{type:"long",array:!1,required:!1},"process.working_directory":{type:"keyword",array:!1,required:!1},"registry.data.bytes":{type:"keyword",array:!1,required:!1},"registry.data.strings":{type:"wildcard",array:!0,required:!1},"registry.data.type":{type:"keyword",array:!1,required:!1},"registry.hive":{type:"keyword",array:!1,required:!1},"registry.key":{type:"keyword",array:!1,required:!1},"registry.path":{type:"keyword",array:!1,required:!1},"registry.value":{type:"keyword",array:!1,required:!1},"related.hash":{type:"keyword",array:!0,required:!1},"related.hosts":{type:"keyword",array:!0,required:!1},"related.ip":{type:"ip",array:!0,required:!1},"related.user":{type:"keyword",array:!0,required:!1},"rule.author":{type:"keyword",array:!0,required:!1},"rule.category":{type:"keyword",array:!1,required:!1},"rule.description":{type:"keyword",array:!1,required:!1},"rule.id":{type:"keyword",array:!1,required:!1},"rule.license":{type:"keyword",array:!1,required:!1},"rule.name":{type:"keyword",array:!1,required:!1},"rule.reference":{type:"keyword",array:!1,required:!1},"rule.ruleset":{type:"keyword",array:!1,required:!1},"rule.uuid":{type:"keyword",array:!1,required:!1},"rule.version":{type:"keyword",array:!1,required:!1},"server.address":{type:"keyword",array:!1,required:!1},"server.as.number":{type:"long",array:!1,required:!1},"server.as.organization.name":{type:"keyword",array:!1,required:!1},"server.bytes":{type:"long",array:!1,required:!1},"server.domain":{type:"keyword",array:!1,required:!1},"server.geo.city_name":{type:"keyword",array:!1,required:!1},"server.geo.continent_code":{type:"keyword",array:!1,required:!1},"server.geo.continent_name":{type:"keyword",array:!1,required:!1},"server.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"server.geo.country_name":{type:"keyword",array:!1,required:!1},"server.geo.location":{type:"geo_point",array:!1,required:!1},"server.geo.name":{type:"keyword",array:!1,required:!1},"server.geo.postal_code":{type:"keyword",array:!1,required:!1},"server.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"server.geo.region_name":{type:"keyword",array:!1,required:!1},"server.geo.timezone":{type:"keyword",array:!1,required:!1},"server.ip":{type:"ip",array:!1,required:!1},"server.mac":{type:"keyword",array:!1,required:!1},"server.nat.ip":{type:"ip",array:!1,required:!1},"server.nat.port":{type:"long",array:!1,required:!1},"server.packets":{type:"long",array:!1,required:!1},"server.port":{type:"long",array:!1,required:!1},"server.registered_domain":{type:"keyword",array:!1,required:!1},"server.subdomain":{type:"keyword",array:!1,required:!1},"server.top_level_domain":{type:"keyword",array:!1,required:!1},"server.user.domain":{type:"keyword",array:!1,required:!1},"server.user.email":{type:"keyword",array:!1,required:!1},"server.user.full_name":{type:"keyword",array:!1,required:!1},"server.user.group.domain":{type:"keyword",array:!1,required:!1},"server.user.group.id":{type:"keyword",array:!1,required:!1},"server.user.group.name":{type:"keyword",array:!1,required:!1},"server.user.hash":{type:"keyword",array:!1,required:!1},"server.user.id":{type:"keyword",array:!1,required:!1},"server.user.name":{type:"keyword",array:!1,required:!1},"server.user.roles":{type:"keyword",array:!0,required:!1},"service.address":{type:"keyword",array:!1,required:!1},"service.environment":{type:"keyword",array:!1,required:!1},"service.ephemeral_id":{type:"keyword",array:!1,required:!1},"service.id":{type:"keyword",array:!1,required:!1},"service.name":{type:"keyword",array:!1,required:!1},"service.node.name":{type:"keyword",array:!1,required:!1},"service.origin.address":{type:"keyword",array:!1,required:!1},"service.origin.environment":{type:"keyword",array:!1,required:!1},"service.origin.ephemeral_id":{type:"keyword",array:!1,required:!1},"service.origin.id":{type:"keyword",array:!1,required:!1},"service.origin.name":{type:"keyword",array:!1,required:!1},"service.origin.node.name":{type:"keyword",array:!1,required:!1},"service.origin.state":{type:"keyword",array:!1,required:!1},"service.origin.type":{type:"keyword",array:!1,required:!1},"service.origin.version":{type:"keyword",array:!1,required:!1},"service.state":{type:"keyword",array:!1,required:!1},"service.target.address":{type:"keyword",array:!1,required:!1},"service.target.environment":{type:"keyword",array:!1,required:!1},"service.target.ephemeral_id":{type:"keyword",array:!1,required:!1},"service.target.id":{type:"keyword",array:!1,required:!1},"service.target.name":{type:"keyword",array:!1,required:!1},"service.target.node.name":{type:"keyword",array:!1,required:!1},"service.target.state":{type:"keyword",array:!1,required:!1},"service.target.type":{type:"keyword",array:!1,required:!1},"service.target.version":{type:"keyword",array:!1,required:!1},"service.type":{type:"keyword",array:!1,required:!1},"service.version":{type:"keyword",array:!1,required:!1},"source.address":{type:"keyword",array:!1,required:!1},"source.as.number":{type:"long",array:!1,required:!1},"source.as.organization.name":{type:"keyword",array:!1,required:!1},"source.bytes":{type:"long",array:!1,required:!1},"source.domain":{type:"keyword",array:!1,required:!1},"source.geo.city_name":{type:"keyword",array:!1,required:!1},"source.geo.continent_code":{type:"keyword",array:!1,required:!1},"source.geo.continent_name":{type:"keyword",array:!1,required:!1},"source.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"source.geo.country_name":{type:"keyword",array:!1,required:!1},"source.geo.location":{type:"geo_point",array:!1,required:!1},"source.geo.name":{type:"keyword",array:!1,required:!1},"source.geo.postal_code":{type:"keyword",array:!1,required:!1},"source.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"source.geo.region_name":{type:"keyword",array:!1,required:!1},"source.geo.timezone":{type:"keyword",array:!1,required:!1},"source.ip":{type:"ip",array:!1,required:!1},"source.mac":{type:"keyword",array:!1,required:!1},"source.nat.ip":{type:"ip",array:!1,required:!1},"source.nat.port":{type:"long",array:!1,required:!1},"source.packets":{type:"long",array:!1,required:!1},"source.port":{type:"long",array:!1,required:!1},"source.registered_domain":{type:"keyword",array:!1,required:!1},"source.subdomain":{type:"keyword",array:!1,required:!1},"source.top_level_domain":{type:"keyword",array:!1,required:!1},"source.user.domain":{type:"keyword",array:!1,required:!1},"source.user.email":{type:"keyword",array:!1,required:!1},"source.user.full_name":{type:"keyword",array:!1,required:!1},"source.user.group.domain":{type:"keyword",array:!1,required:!1},"source.user.group.id":{type:"keyword",array:!1,required:!1},"source.user.group.name":{type:"keyword",array:!1,required:!1},"source.user.hash":{type:"keyword",array:!1,required:!1},"source.user.id":{type:"keyword",array:!1,required:!1},"source.user.name":{type:"keyword",array:!1,required:!1},"source.user.roles":{type:"keyword",array:!0,required:!1},"span.id":{type:"keyword",array:!1,required:!1},tags:{type:"keyword",array:!0,required:!1},"threat.enrichments":{type:"nested",array:!0,required:!1},"threat.enrichments.indicator":{type:"object",array:!1,required:!1},"threat.enrichments.indicator.as.number":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.as.organization.name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.confidence":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.description":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.email.address":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.accessed":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.attributes":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.exists":{type:"boolean",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.status":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.team_id":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.timestamp":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.trusted":{type:"boolean",array:!1,required:!1},"threat.enrichments.indicator.file.code_signature.valid":{type:"boolean",array:!1,required:!1},"threat.enrichments.indicator.file.created":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.ctime":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.device":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.directory":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.drive_letter":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.architecture":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.byte_order":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.cpu_type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.creation_date":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.elf.exports":{type:"flattened",array:!0,required:!1},"threat.enrichments.indicator.file.elf.header.abi_version":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.class":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.data":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.entrypoint":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.object_version":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.os_abi":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.header.version":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.imports":{type:"flattened",array:!0,required:!1},"threat.enrichments.indicator.file.elf.sections":{type:"nested",array:!0,required:!1},"threat.enrichments.indicator.file.elf.sections.chi2":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.entropy":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.flags":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.physical_offset":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.physical_size":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.virtual_address":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.sections.virtual_size":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.elf.segments":{type:"nested",array:!0,required:!1},"threat.enrichments.indicator.file.elf.segments.sections":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.segments.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.elf.shared_libraries":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.elf.telfhash":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.extension":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.fork_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.gid":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.group":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.hash.md5":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.hash.sha1":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.hash.sha256":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.hash.sha512":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.hash.ssdeep":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.inode":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.mime_type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.mode":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.mtime":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.owner":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.path":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.architecture":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.company":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.description":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.file_version":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.imphash":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.original_file_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.pe.product":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.size":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.target_path":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.uid":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.alternative_names":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.country":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.not_after":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.x509.not_before":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.file.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.public_key_exponent":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.x509.public_key_size":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.file.x509.serial_number":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.subject.country":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.file.x509.subject.locality":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.subject.organization":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.file.x509.version_number":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.first_seen":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.geo.city_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.continent_code":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.continent_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.country_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.location":{type:"geo_point",array:!1,required:!1},"threat.enrichments.indicator.geo.name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.postal_code":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.region_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.geo.timezone":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.ip":{type:"ip",array:!1,required:!1},"threat.enrichments.indicator.last_seen":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.marking.tlp":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.modified_at":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.port":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.provider":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.reference":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.data.bytes":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.data.strings":{type:"wildcard",array:!0,required:!1},"threat.enrichments.indicator.registry.data.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.hive":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.key":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.path":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.registry.value":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.scanner_stats":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.sightings":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.type":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.domain":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.extension":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.fragment":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.full":{type:"wildcard",array:!1,required:!1},"threat.enrichments.indicator.url.original":{type:"wildcard",array:!1,required:!1},"threat.enrichments.indicator.url.password":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.path":{type:"wildcard",array:!1,required:!1},"threat.enrichments.indicator.url.port":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.url.query":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.registered_domain":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.scheme":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.subdomain":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.top_level_domain":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.url.username":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.alternative_names":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.country":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.not_after":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.x509.not_before":{type:"date",array:!1,required:!1},"threat.enrichments.indicator.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.public_key_exponent":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.x509.public_key_size":{type:"long",array:!1,required:!1},"threat.enrichments.indicator.x509.serial_number":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.subject.country":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.enrichments.indicator.x509.subject.locality":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.subject.organization":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"threat.enrichments.indicator.x509.version_number":{type:"keyword",array:!1,required:!1},"threat.enrichments.matched.atomic":{type:"keyword",array:!1,required:!1},"threat.enrichments.matched.field":{type:"keyword",array:!1,required:!1},"threat.enrichments.matched.id":{type:"keyword",array:!1,required:!1},"threat.enrichments.matched.index":{type:"keyword",array:!1,required:!1},"threat.enrichments.matched.type":{type:"keyword",array:!1,required:!1},"threat.framework":{type:"keyword",array:!1,required:!1},"threat.group.alias":{type:"keyword",array:!0,required:!1},"threat.group.id":{type:"keyword",array:!1,required:!1},"threat.group.name":{type:"keyword",array:!1,required:!1},"threat.group.reference":{type:"keyword",array:!1,required:!1},"threat.indicator.as.number":{type:"long",array:!1,required:!1},"threat.indicator.as.organization.name":{type:"keyword",array:!1,required:!1},"threat.indicator.confidence":{type:"keyword",array:!1,required:!1},"threat.indicator.description":{type:"keyword",array:!1,required:!1},"threat.indicator.email.address":{type:"keyword",array:!1,required:!1},"threat.indicator.file.accessed":{type:"date",array:!1,required:!1},"threat.indicator.file.attributes":{type:"keyword",array:!0,required:!1},"threat.indicator.file.code_signature.digest_algorithm":{type:"keyword",array:!1,required:!1},"threat.indicator.file.code_signature.exists":{type:"boolean",array:!1,required:!1},"threat.indicator.file.code_signature.signing_id":{type:"keyword",array:!1,required:!1},"threat.indicator.file.code_signature.status":{type:"keyword",array:!1,required:!1},"threat.indicator.file.code_signature.subject_name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.code_signature.team_id":{type:"keyword",array:!1,required:!1},"threat.indicator.file.code_signature.timestamp":{type:"date",array:!1,required:!1},"threat.indicator.file.code_signature.trusted":{type:"boolean",array:!1,required:!1},"threat.indicator.file.code_signature.valid":{type:"boolean",array:!1,required:!1},"threat.indicator.file.created":{type:"date",array:!1,required:!1},"threat.indicator.file.ctime":{type:"date",array:!1,required:!1},"threat.indicator.file.device":{type:"keyword",array:!1,required:!1},"threat.indicator.file.directory":{type:"keyword",array:!1,required:!1},"threat.indicator.file.drive_letter":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.architecture":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.byte_order":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.cpu_type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.creation_date":{type:"date",array:!1,required:!1},"threat.indicator.file.elf.exports":{type:"flattened",array:!0,required:!1},"threat.indicator.file.elf.header.abi_version":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.class":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.data":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.entrypoint":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.header.object_version":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.os_abi":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.header.version":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.imports":{type:"flattened",array:!0,required:!1},"threat.indicator.file.elf.sections":{type:"nested",array:!0,required:!1},"threat.indicator.file.elf.sections.chi2":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.sections.entropy":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.sections.flags":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.sections.name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.sections.physical_offset":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.sections.physical_size":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.sections.type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.sections.virtual_address":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.sections.virtual_size":{type:"long",array:!1,required:!1},"threat.indicator.file.elf.segments":{type:"nested",array:!0,required:!1},"threat.indicator.file.elf.segments.sections":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.segments.type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.elf.shared_libraries":{type:"keyword",array:!0,required:!1},"threat.indicator.file.elf.telfhash":{type:"keyword",array:!1,required:!1},"threat.indicator.file.extension":{type:"keyword",array:!1,required:!1},"threat.indicator.file.fork_name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.gid":{type:"keyword",array:!1,required:!1},"threat.indicator.file.group":{type:"keyword",array:!1,required:!1},"threat.indicator.file.hash.md5":{type:"keyword",array:!1,required:!1},"threat.indicator.file.hash.sha1":{type:"keyword",array:!1,required:!1},"threat.indicator.file.hash.sha256":{type:"keyword",array:!1,required:!1},"threat.indicator.file.hash.sha512":{type:"keyword",array:!1,required:!1},"threat.indicator.file.hash.ssdeep":{type:"keyword",array:!1,required:!1},"threat.indicator.file.inode":{type:"keyword",array:!1,required:!1},"threat.indicator.file.mime_type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.mode":{type:"keyword",array:!1,required:!1},"threat.indicator.file.mtime":{type:"date",array:!1,required:!1},"threat.indicator.file.name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.owner":{type:"keyword",array:!1,required:!1},"threat.indicator.file.path":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.architecture":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.company":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.description":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.file_version":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.imphash":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.original_file_name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.pe.product":{type:"keyword",array:!1,required:!1},"threat.indicator.file.size":{type:"long",array:!1,required:!1},"threat.indicator.file.target_path":{type:"keyword",array:!1,required:!1},"threat.indicator.file.type":{type:"keyword",array:!1,required:!1},"threat.indicator.file.uid":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.alternative_names":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.country":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.not_after":{type:"date",array:!1,required:!1},"threat.indicator.file.x509.not_before":{type:"date",array:!1,required:!1},"threat.indicator.file.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.public_key_exponent":{type:"long",array:!1,required:!1},"threat.indicator.file.x509.public_key_size":{type:"long",array:!1,required:!1},"threat.indicator.file.x509.serial_number":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.subject.country":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.indicator.file.x509.subject.locality":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.subject.organization":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"threat.indicator.file.x509.version_number":{type:"keyword",array:!1,required:!1},"threat.indicator.first_seen":{type:"date",array:!1,required:!1},"threat.indicator.geo.city_name":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.continent_code":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.continent_name":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.country_iso_code":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.country_name":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.location":{type:"geo_point",array:!1,required:!1},"threat.indicator.geo.name":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.postal_code":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.region_iso_code":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.region_name":{type:"keyword",array:!1,required:!1},"threat.indicator.geo.timezone":{type:"keyword",array:!1,required:!1},"threat.indicator.ip":{type:"ip",array:!1,required:!1},"threat.indicator.last_seen":{type:"date",array:!1,required:!1},"threat.indicator.marking.tlp":{type:"keyword",array:!1,required:!1},"threat.indicator.modified_at":{type:"date",array:!1,required:!1},"threat.indicator.port":{type:"long",array:!1,required:!1},"threat.indicator.provider":{type:"keyword",array:!1,required:!1},"threat.indicator.reference":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.data.bytes":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.data.strings":{type:"wildcard",array:!0,required:!1},"threat.indicator.registry.data.type":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.hive":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.key":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.path":{type:"keyword",array:!1,required:!1},"threat.indicator.registry.value":{type:"keyword",array:!1,required:!1},"threat.indicator.scanner_stats":{type:"long",array:!1,required:!1},"threat.indicator.sightings":{type:"long",array:!1,required:!1},"threat.indicator.type":{type:"keyword",array:!1,required:!1},"threat.indicator.url.domain":{type:"keyword",array:!1,required:!1},"threat.indicator.url.extension":{type:"keyword",array:!1,required:!1},"threat.indicator.url.fragment":{type:"keyword",array:!1,required:!1},"threat.indicator.url.full":{type:"wildcard",array:!1,required:!1},"threat.indicator.url.original":{type:"wildcard",array:!1,required:!1},"threat.indicator.url.password":{type:"keyword",array:!1,required:!1},"threat.indicator.url.path":{type:"wildcard",array:!1,required:!1},"threat.indicator.url.port":{type:"long",array:!1,required:!1},"threat.indicator.url.query":{type:"keyword",array:!1,required:!1},"threat.indicator.url.registered_domain":{type:"keyword",array:!1,required:!1},"threat.indicator.url.scheme":{type:"keyword",array:!1,required:!1},"threat.indicator.url.subdomain":{type:"keyword",array:!1,required:!1},"threat.indicator.url.top_level_domain":{type:"keyword",array:!1,required:!1},"threat.indicator.url.username":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.alternative_names":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.country":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.not_after":{type:"date",array:!1,required:!1},"threat.indicator.x509.not_before":{type:"date",array:!1,required:!1},"threat.indicator.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.public_key_exponent":{type:"long",array:!1,required:!1},"threat.indicator.x509.public_key_size":{type:"long",array:!1,required:!1},"threat.indicator.x509.serial_number":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.subject.country":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"threat.indicator.x509.subject.locality":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.subject.organization":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"threat.indicator.x509.version_number":{type:"keyword",array:!1,required:!1},"threat.software.alias":{type:"keyword",array:!0,required:!1},"threat.software.id":{type:"keyword",array:!1,required:!1},"threat.software.name":{type:"keyword",array:!1,required:!1},"threat.software.platforms":{type:"keyword",array:!0,required:!1},"threat.software.reference":{type:"keyword",array:!1,required:!1},"threat.software.type":{type:"keyword",array:!1,required:!1},"threat.tactic.id":{type:"keyword",array:!0,required:!1},"threat.tactic.name":{type:"keyword",array:!0,required:!1},"threat.tactic.reference":{type:"keyword",array:!0,required:!1},"threat.technique.id":{type:"keyword",array:!0,required:!1},"threat.technique.name":{type:"keyword",array:!0,required:!1},"threat.technique.reference":{type:"keyword",array:!0,required:!1},"threat.technique.subtechnique.id":{type:"keyword",array:!0,required:!1},"threat.technique.subtechnique.name":{type:"keyword",array:!0,required:!1},"threat.technique.subtechnique.reference":{type:"keyword",array:!0,required:!1},"tls.cipher":{type:"keyword",array:!1,required:!1},"tls.client.certificate":{type:"keyword",array:!1,required:!1},"tls.client.certificate_chain":{type:"keyword",array:!0,required:!1},"tls.client.hash.md5":{type:"keyword",array:!1,required:!1},"tls.client.hash.sha1":{type:"keyword",array:!1,required:!1},"tls.client.hash.sha256":{type:"keyword",array:!1,required:!1},"tls.client.issuer":{type:"keyword",array:!1,required:!1},"tls.client.ja3":{type:"keyword",array:!1,required:!1},"tls.client.not_after":{type:"date",array:!1,required:!1},"tls.client.not_before":{type:"date",array:!1,required:!1},"tls.client.server_name":{type:"keyword",array:!1,required:!1},"tls.client.subject":{type:"keyword",array:!1,required:!1},"tls.client.supported_ciphers":{type:"keyword",array:!0,required:!1},"tls.client.x509.alternative_names":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.country":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"tls.client.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"tls.client.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"tls.client.x509.not_after":{type:"date",array:!1,required:!1},"tls.client.x509.not_before":{type:"date",array:!1,required:!1},"tls.client.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"tls.client.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"tls.client.x509.public_key_exponent":{type:"long",array:!1,required:!1},"tls.client.x509.public_key_size":{type:"long",array:!1,required:!1},"tls.client.x509.serial_number":{type:"keyword",array:!1,required:!1},"tls.client.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"tls.client.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"tls.client.x509.subject.country":{type:"keyword",array:!0,required:!1},"tls.client.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"tls.client.x509.subject.locality":{type:"keyword",array:!0,required:!1},"tls.client.x509.subject.organization":{type:"keyword",array:!0,required:!1},"tls.client.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"tls.client.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"tls.client.x509.version_number":{type:"keyword",array:!1,required:!1},"tls.curve":{type:"keyword",array:!1,required:!1},"tls.established":{type:"boolean",array:!1,required:!1},"tls.next_protocol":{type:"keyword",array:!1,required:!1},"tls.resumed":{type:"boolean",array:!1,required:!1},"tls.server.certificate":{type:"keyword",array:!1,required:!1},"tls.server.certificate_chain":{type:"keyword",array:!0,required:!1},"tls.server.hash.md5":{type:"keyword",array:!1,required:!1},"tls.server.hash.sha1":{type:"keyword",array:!1,required:!1},"tls.server.hash.sha256":{type:"keyword",array:!1,required:!1},"tls.server.issuer":{type:"keyword",array:!1,required:!1},"tls.server.ja3s":{type:"keyword",array:!1,required:!1},"tls.server.not_after":{type:"date",array:!1,required:!1},"tls.server.not_before":{type:"date",array:!1,required:!1},"tls.server.subject":{type:"keyword",array:!1,required:!1},"tls.server.x509.alternative_names":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.common_name":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.country":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.distinguished_name":{type:"keyword",array:!1,required:!1},"tls.server.x509.issuer.locality":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.organization":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.organizational_unit":{type:"keyword",array:!0,required:!1},"tls.server.x509.issuer.state_or_province":{type:"keyword",array:!0,required:!1},"tls.server.x509.not_after":{type:"date",array:!1,required:!1},"tls.server.x509.not_before":{type:"date",array:!1,required:!1},"tls.server.x509.public_key_algorithm":{type:"keyword",array:!1,required:!1},"tls.server.x509.public_key_curve":{type:"keyword",array:!1,required:!1},"tls.server.x509.public_key_exponent":{type:"long",array:!1,required:!1},"tls.server.x509.public_key_size":{type:"long",array:!1,required:!1},"tls.server.x509.serial_number":{type:"keyword",array:!1,required:!1},"tls.server.x509.signature_algorithm":{type:"keyword",array:!1,required:!1},"tls.server.x509.subject.common_name":{type:"keyword",array:!0,required:!1},"tls.server.x509.subject.country":{type:"keyword",array:!0,required:!1},"tls.server.x509.subject.distinguished_name":{type:"keyword",array:!1,required:!1},"tls.server.x509.subject.locality":{type:"keyword",array:!0,required:!1},"tls.server.x509.subject.organization":{type:"keyword",array:!0,required:!1},"tls.server.x509.subject.organizational_unit":{type:"keyword",array:!0,required:!1},"tls.server.x509.subject.state_or_province":{type:"keyword",array:!0,required:!1},"tls.server.x509.version_number":{type:"keyword",array:!1,required:!1},"tls.version":{type:"keyword",array:!1,required:!1},"tls.version_protocol":{type:"keyword",array:!1,required:!1},"trace.id":{type:"keyword",array:!1,required:!1},"transaction.id":{type:"keyword",array:!1,required:!1},"url.domain":{type:"keyword",array:!1,required:!1},"url.extension":{type:"keyword",array:!1,required:!1},"url.fragment":{type:"keyword",array:!1,required:!1},"url.full":{type:"wildcard",array:!1,required:!1},"url.original":{type:"wildcard",array:!1,required:!1},"url.password":{type:"keyword",array:!1,required:!1},"url.path":{type:"wildcard",array:!1,required:!1},"url.port":{type:"long",array:!1,required:!1},"url.query":{type:"keyword",array:!1,required:!1},"url.registered_domain":{type:"keyword",array:!1,required:!1},"url.scheme":{type:"keyword",array:!1,required:!1},"url.subdomain":{type:"keyword",array:!1,required:!1},"url.top_level_domain":{type:"keyword",array:!1,required:!1},"url.username":{type:"keyword",array:!1,required:!1},"user.changes.domain":{type:"keyword",array:!1,required:!1},"user.changes.email":{type:"keyword",array:!1,required:!1},"user.changes.full_name":{type:"keyword",array:!1,required:!1},"user.changes.group.domain":{type:"keyword",array:!1,required:!1},"user.changes.group.id":{type:"keyword",array:!1,required:!1},"user.changes.group.name":{type:"keyword",array:!1,required:!1},"user.changes.hash":{type:"keyword",array:!1,required:!1},"user.changes.id":{type:"keyword",array:!1,required:!1},"user.changes.name":{type:"keyword",array:!1,required:!1},"user.changes.roles":{type:"keyword",array:!0,required:!1},"user.domain":{type:"keyword",array:!1,required:!1},"user.effective.domain":{type:"keyword",array:!1,required:!1},"user.effective.email":{type:"keyword",array:!1,required:!1},"user.effective.full_name":{type:"keyword",array:!1,required:!1},"user.effective.group.domain":{type:"keyword",array:!1,required:!1},"user.effective.group.id":{type:"keyword",array:!1,required:!1},"user.effective.group.name":{type:"keyword",array:!1,required:!1},"user.effective.hash":{type:"keyword",array:!1,required:!1},"user.effective.id":{type:"keyword",array:!1,required:!1},"user.effective.name":{type:"keyword",array:!1,required:!1},"user.effective.roles":{type:"keyword",array:!0,required:!1},"user.email":{type:"keyword",array:!1,required:!1},"user.full_name":{type:"keyword",array:!1,required:!1},"user.group.domain":{type:"keyword",array:!1,required:!1},"user.group.id":{type:"keyword",array:!1,required:!1},"user.group.name":{type:"keyword",array:!1,required:!1},"user.hash":{type:"keyword",array:!1,required:!1},"user.id":{type:"keyword",array:!1,required:!1},"user.name":{type:"keyword",array:!1,required:!1},"user.risk.calculated_level":{type:"keyword",array:!1,required:!1},"user.risk.calculated_score":{type:"float",array:!1,required:!1},"user.risk.calculated_score_norm":{type:"float",array:!1,required:!1},"user.risk.static_level":{type:"keyword",array:!1,required:!1},"user.risk.static_score":{type:"float",array:!1,required:!1},"user.risk.static_score_norm":{type:"float",array:!1,required:!1},"user.roles":{type:"keyword",array:!0,required:!1},"user.target.domain":{type:"keyword",array:!1,required:!1},"user.target.email":{type:"keyword",array:!1,required:!1},"user.target.full_name":{type:"keyword",array:!1,required:!1},"user.target.group.domain":{type:"keyword",array:!1,required:!1},"user.target.group.id":{type:"keyword",array:!1,required:!1},"user.target.group.name":{type:"keyword",array:!1,required:!1},"user.target.hash":{type:"keyword",array:!1,required:!1},"user.target.id":{type:"keyword",array:!1,required:!1},"user.target.name":{type:"keyword",array:!1,required:!1},"user.target.roles":{type:"keyword",array:!0,required:!1},"user_agent.device.name":{type:"keyword",array:!1,required:!1},"user_agent.name":{type:"keyword",array:!1,required:!1},"user_agent.original":{type:"keyword",array:!1,required:!1},"user_agent.os.family":{type:"keyword",array:!1,required:!1},"user_agent.os.full":{type:"keyword",array:!1,required:!1},"user_agent.os.kernel":{type:"keyword",array:!1,required:!1},"user_agent.os.name":{type:"keyword",array:!1,required:!1},"user_agent.os.platform":{type:"keyword",array:!1,required:!1},"user_agent.os.type":{type:"keyword",array:!1,required:!1},"user_agent.os.version":{type:"keyword",array:!1,required:!1},"user_agent.version":{type:"keyword",array:!1,required:!1},"vulnerability.category":{type:"keyword",array:!0,required:!1},"vulnerability.classification":{type:"keyword",array:!1,required:!1},"vulnerability.description":{type:"keyword",array:!1,required:!1},"vulnerability.enumeration":{type:"keyword",array:!1,required:!1},"vulnerability.id":{type:"keyword",array:!1,required:!1},"vulnerability.reference":{type:"keyword",array:!1,required:!1},"vulnerability.report_id":{type:"keyword",array:!1,required:!1},"vulnerability.scanner.vendor":{type:"keyword",array:!1,required:!1},"vulnerability.score.base":{type:"float",array:!1,required:!1},"vulnerability.score.environmental":{type:"float",array:!1,required:!1},"vulnerability.score.temporal":{type:"float",array:!1,required:!1},"vulnerability.score.version":{type:"keyword",array:!1,required:!1},"vulnerability.severity":{type:"keyword",array:!1,required:!1}};var r=n(129);const o={[r.a]:{type:"keyword",array:!1,required:!1},[r.c]:{type:"keyword",array:!0,required:!1},[r.e]:{type:"long",array:!1,required:!1},[r.f]:{type:"date",array:!1,required:!1},[r.j]:{type:"boolean",array:!1,required:!1},[r.k]:{type:"boolean",array:!0,required:!1},[r.n]:{type:"keyword",array:!0,required:!1},[r.l]:{type:"keyword",array:!1,required:!0},[r.m]:{type:"date",required:!1,array:!1},[r.p]:{type:"keyword",array:!1,required:!1},[r.s]:{type:"keyword",array:!1,required:!0},[r.t]:{type:"keyword",array:!1,required:!0},[r.z]:{type:"keyword",array:!1,required:!1},[r.D]:{type:"keyword",array:!1,required:!0},[r.G]:{array:!1,type:"flattened",ignore_above:4096,required:!1},[r.H]:{type:"keyword",array:!1,required:!0},[r.J]:{type:"long",array:!1,required:!0},[r.M]:{type:"keyword",array:!0,required:!1},[r.P]:{type:"keyword",array:!1,required:!0},[r.S]:{type:"keyword",array:!1,required:!0},[r.V]:{type:"date",array:!1,required:!1},[r.W]:{type:"keyword",array:!1,required:!0},[r.fb]:{type:"date_range",format:"epoch_millis||strict_date_optional_time",array:!1,required:!1},[r.gb]:{type:"keyword",array:!1,index:!1,required:!1,ignore_above:2048},[r.hb]:{type:"keyword",array:!1,required:!0},[r.jb]:{type:"keyword",array:!1,required:!1},[r.kb]:{type:"keyword",array:!0,required:!1},[r.ob]:{type:"keyword",array:!1,required:!1},[r.pb]:{type:"keyword",array:!1,required:!1},[r.qb]:{type:"keyword",array:!0,required:!0},[r.rb]:{type:"keyword",array:!0,required:!1},[r.sb]:{type:"date",required:!0,array:!1},[r.tb]:{type:"version",array:!1,required:!1}};var s=n(697);const l=["constant_keyword"],c=(Object.fromEntries(Object.entries(s.a).filter((([e,t])=>!l.includes(t.type))).map((([e,t])=>{const n=s.a[e];return[e,{type:n.type,array:n.normalize.includes("array"),required:!!n.required,...n.scaling_factor?{scaling_factor:n.scaling_factor}:{},...n.ignore_above?{ignore_above:n.ignore_above}:{},...n.multi_fields?{multi_fields:n.multi_fields}:{}}]}))),{[r.q]:{type:"float",array:!1,required:!1},[r.r]:{type:"keyword",array:!1,required:!1},[r.u]:{type:"date",array:!1,required:!1},[r.v]:{type:"keyword",array:!1,required:!1},[r.w]:{type:"keyword",array:!1,required:!1},[r.x]:{type:"keyword",array:!1,required:!1},[r.A]:{type:"keyword",array:!1,required:!1},[r.B]:{type:"keyword",array:!1,required:!1},[r.C]:{type:"keyword",array:!1,required:!1},[r.F]:{type:"keyword",array:!1,required:!1},[r.I]:{type:"keyword",array:!0,required:!1},[r.K]:{type:"keyword",array:!1,required:!1},[r.L]:{type:"keyword",array:!1,required:!1},[r.N]:{type:"keyword",array:!1,required:!1},[r.O]:{type:"keyword",array:!1,required:!1},[r.Q]:{type:"date",array:!1,required:!1},[r.R]:{type:"keyword",array:!1,required:!1},[r.T]:{type:"keyword",array:!1,required:!1},[r.U]:{type:"keyword",array:!1,required:!1},[r.Y]:{type:"long",array:!1,required:!1},[r.Z]:{type:"date",array:!1,required:!1},[r.ab]:{type:"keyword",array:!0,required:!1},[r.bb]:{type:"date",array:!1,required:!1},[r.db]:{type:"keyword",array:!0,required:!1},[r.eb]:{type:"keyword",array:!1,required:!1},[r.ib]:{type:"keyword",array:!1,required:!1},[r.lb]:{type:"keyword",array:!1,required:!1},[r.nb]:{type:"keyword",array:!1,required:!1}}),u={[r.g]:{type:"scaled_float",scaling_factor:100,required:!1},[r.h]:{type:"scaled_float",scaling_factor:100,required:!1},[r.d]:{type:"object",array:!1,required:!1},[r.i]:{type:"scaled_float",scaling_factor:100,required:!1,array:!0}};n(801);var d=n(42);function p(e,...t){const n=Object.keys(e).filter((e=>t.some((t=>{if(t===e)return!0;const n=e.split("."),a=t.split(".");return a.indexOf("*")===a.length-1&&n.every(((e,t)=>{const n=a.length-1<t?"*":a[t];return e===n||"*"===n}))}))));return Object(a.pick)(e,n)}r.t,r.kb,r.U,r.q,r.G;const m={...p(o,"*"),...p(c,"*")};var f=n(4);const g=e=>{if(Array.isArray(e))return e.reduce(((e,t)=>{if(null!=t)switch(typeof t){case"number":case"boolean":return[...e,t.toString()];case"object":try{return[...e,JSON.stringify(t)]}catch{return[...e,"Invalid Object"]}case"string":return[...e,t];default:return[...e,`${t}`]}return e}),[]);if(null==e)return[];if(Array.isArray(e)||"object"!=typeof e)return[`${e}`];try{return[JSON.stringify(e)]}catch{return["Invalid Object"]}},b=["@timestamp","labels","message","tags"],y=e=>{const t=e.length>0?e[0]:null;if(null!=t&&!Object(d.isEmpty)(t.coordinates))try{return g({lon:t.coordinates[0],lat:t.coordinates[1]})}catch{return g(e)}return g(e)},h=(e,t,n)=>Object.keys(e).reduce(((a,r)=>{const o=e[r],s=null!=n?n:(e=>{const t=e.split(".")[0];return!Object(d.isEmpty)(t)&&b.includes(t)?"base":t})(r);if((e=>e.includes("geo.location")||e.includes("geoip.location"))(r))return[...a,{category:s,field:r,values:y(o),originalValue:y(o),isObjectArray:!0}];const l=(e=>{if(Array.isArray(e))return e.reduce(((e,t)=>{if(null!=t)switch(typeof t){case"number":case"boolean":return[...e,{str:t.toString()}];case"object":try{return[...e,{str:JSON.stringify(t),isObjectArray:!0}]}catch{return[...e,{str:"Invalid Object"}]}case"string":return[...e,{str:t}];default:return[...e,{str:`${t}`}]}return e}),[]);if(null==e)return[];if(Array.isArray(e)||"object"!=typeof e)return[{str:`${e}`}];try{return[{str:JSON.stringify(e),isObjectArray:!0}]}catch{return[{str:"Invalid Object"}]}})(o),c=l.map((({str:e})=>e)),p=l.some((e=>e.isObjectArray)),g=t?`${t}.${r}`:r;if(!p||void 0===Object.keys({...i,...m,...u}).find((e=>e===r)))return[...a,{category:s,field:g,values:c,originalValue:c,isObjectArray:p}];const v=((e,t)=>(null==t?void 0:t.includes(f.pb))||e===f.pb)(r,t)?[{category:s,field:g,values:c,originalValue:c,isObjectArray:p}]:[],E=Array.isArray(o)?o.reduce(((e,t)=>[...e,h(t,g,s)]),[]).flat():h(o,t,s),x=[...a,...E,...v].reduce(((e,t)=>({...e,...null!=e[t.field]?{[t.field]:{...t,originalValue:e[t.field].originalValue.includes(t.originalValue[0])?e[t.field].originalValue:[...e[t.field].originalValue,...t.originalValue],values:e[t.field].values.includes(t.values[0])?e[t.field].values:[...e[t.field].values,...t.values]}}:{[t.field]:t}})),{});return Object.values(x)}),[]);var v=n(167),E=n(408),x=n(802);const j=e=>e===v.c.InvestigationTime,O=e=>{const t=e.find((({field:e,originalValue:t})=>e===f.pb&&t));if(!t)return[];const{originalValue:n}=t;return(Array.isArray(n)?n:[n]).reduce(((e,t)=>{try{const n=h(JSON.parse(t));e.push(n)}catch(e){}return e}),[])},S=e=>e.reduce(((e,t)=>(e[t.field]=t.originalValue,e)),{}),k=(e,t)=>Object(x.a)(e[t]),w=(e,t)=>k(e,t)||k(e,`threatintel.${t}`)||k(e,`threat.${t}`),I=e=>({id:k(e,v.m),field:k(e,v.l),value:k(e,v.k),type:k(e,v.n),feedName:w(e,v.e)}),T=e=>{const{id:t,field:n}=I(e);return`${t}${n}`},C=e=>{if(e.length<2)return e;const t=Object(a.groupBy)(e,T);return Object.values(t).map((e=>{var t;return null!==(t=e.find((e=>!j(k(e,v.n)))))&&void 0!==t?t:e[0]}))},M=e=>e.reduce(((e,t)=>{if(Object(E.b)(t.field)){const n=Object(x.a)(t.originalValue);if(n)return{...e,[t.field]:n}}return e}),{}),A=e=>{const t=w(e,v.f),n=Date.parse(null!=t?t:"no date");return Number.isInteger(n)?n:new Date(-1).valueOf()}},,function(e,t,n){"use strict";n.d(t,"f",(function(){return a.b})),n.d(t,"g",(function(){return a.c})),n.d(t,"h",(function(){return a.d})),n.d(t,"w",(function(){return i.d})),n.d(t,"x",(function(){return i.e})),n.d(t,"F",(function(){return i.l})),n.d(t,"b",(function(){return i.a})),n.d(t,"y",(function(){return i.f})),n.d(t,"D",(function(){return i.j})),n.d(t,"E",(function(){return i.k})),n.d(t,"B",(function(){return i.h})),n.d(t,"C",(function(){return i.i})),n.d(t,"A",(function(){return i.g})),n.d(t,"u",(function(){return i.b})),n.d(t,"v",(function(){return i.c})),n.d(t,"i",(function(){return r.a})),n.d(t,"j",(function(){return r.b})),n.d(t,"k",(function(){return r.c})),n.d(t,"m",(function(){return o.c})),n.d(t,"s",(function(){return o.i})),n.d(t,"d",(function(){return o.a})),n.d(t,"e",(function(){return o.b})),n.d(t,"n",(function(){return o.d})),n.d(t,"o",(function(){return o.e})),n.d(t,"p",(function(){return o.f})),n.d(t,"r",(function(){return o.h})),n.d(t,"t",(function(){return o.j})),n.d(t,"q",(function(){return o.g})),n.d(t,"l",(function(){return s.b})),n.d(t,"a",(function(){return s.a})),n.d(t,"z",(function(){return s.c})),n.d(t,"c",(function(){return l})),n(408);var a=n(419),i=n(753),r=n(747),o=n(263),s=n(508);const l="firstlastseen";n(510)},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return d}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(40);const u=l.a.span.withConfig({displayName:"EllipsisText",componentId:"sc-saif2w-0"})(["&,& *{display:inline-block;max-width:100%;overflow:hidden;text-overflow:ellipsis;vertical-align:top;white-space:nowrap;}"]);function d({tooltipContent:e,children:t,dataTestSubj:n,...a}){return e?o.a.createElement(c.EuiToolTip,{display:"block",content:e},o.a.createElement(u,i()({"data-test-subj":n},a),t)):o.a.createElement(u,i()({"data-test-subj":n},a),t)}u.displayName="EllipsisText"},function(e,t,n){"use strict";n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i}));const a=e=>{const t=e.reduce(((e,t)=>t.trim().startsWith("-")?{includes:e.includes,excludes:[...e.excludes,t]}:{includes:[...e.includes,t],excludes:e.excludes}),{includes:[],excludes:[]});return[...t.includes.sort(),...t.excludes.sort()]},i=e=>a([...new Set(e.reduce(((e,t)=>[...t.split(","),...e]),[]))])},function(e,t,n){var a=n(436),i=n(437);e.exports=function(e){return function(){var t=arguments;switch(t.length){case 0:return new e;case 1:return new e(t[0]);case 2:return new e(t[0],t[1]);case 3:return new e(t[0],t[1],t[2]);case 4:return new e(t[0],t[1],t[2],t[3]);case 5:return new e(t[0],t[1],t[2],t[3],t[4]);case 6:return new e(t[0],t[1],t[2],t[3],t[4],t[5]);case 7:return new e(t[0],t[1],t[2],t[3],t[4],t[5],t[6])}var n=a(e.prototype),r=e.apply(n,t);return i(r)?r:n}}},function(e,t,n){e.exports=n(33)(315)},function(e,t,n){"use strict";var a=function(e){return function(e){return!!e&&"object"==typeof e}(e)&&!function(e){var t=Object.prototype.toString.call(e);return"[object RegExp]"===t||"[object Date]"===t||function(e){return e.$$typeof===i}(e)}(e)},i="function"==typeof Symbol&&Symbol.for?Symbol.for("react.element"):60103;function r(e,t){return!1!==t.clone&&t.isMergeableObject(e)?c((n=e,Array.isArray(n)?[]:{}),e,t):e;var n}function o(e,t,n){return e.concat(t).map((function(e){return r(e,n)}))}function s(e){return Object.keys(e).concat(function(e){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(e).filter((function(t){return e.propertyIsEnumerable(t)})):[]}(e))}function l(e,t){try{return t in e}catch(e){return!1}}function c(e,t,n){(n=n||{}).arrayMerge=n.arrayMerge||o,n.isMergeableObject=n.isMergeableObject||a,n.cloneUnlessOtherwiseSpecified=r;var i=Array.isArray(t);return i===Array.isArray(e)?i?n.arrayMerge(e,t,n):function(e,t,n){var a={};return n.isMergeableObject(e)&&s(e).forEach((function(t){a[t]=r(e[t],n)})),s(t).forEach((function(i){(function(e,t){return l(e,t)&&!(Object.hasOwnProperty.call(e,t)&&Object.propertyIsEnumerable.call(e,t))})(e,i)||(l(e,i)&&n.isMergeableObject(t[i])?a[i]=function(e,t){if(!t.customMerge)return c;var n=t.customMerge(e);return"function"==typeof n?n:c}(i,n)(e[i],t[i],n):a[i]=r(t[i],n))})),a}(e,t,n):r(t,n)}c.all=function(e,t){if(!Array.isArray(e))throw new Error("first argument should be an array");return e.reduce((function(e,n){return c(e,n,t)}),{})};var u=c;e.exports=u},function(e,t,n){"use strict";n.d(t,"s",(function(){return o})),n.d(t,"r",(function(){return s})),n.d(t,"m",(function(){return l})),n.d(t,"t",(function(){return c})),n.d(t,"u",(function(){return u})),n.d(t,"o",(function(){return d})),n.d(t,"q",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"n",(function(){return f})),n.d(t,"p",(function(){return g})),n.d(t,"a",(function(){return b})),n.d(t,"k",(function(){return y})),n.d(t,"l",(function(){return h})),n.d(t,"i",(function(){return v})),n.d(t,"j",(function(){return E})),n.d(t,"w",(function(){return x})),n.d(t,"v",(function(){return j})),n.d(t,"h",(function(){return O})),n.d(t,"g",(function(){return S})),n.d(t,"f",(function(){return k})),n.d(t,"c",(function(){return w})),n.d(t,"d",(function(){return I})),n.d(t,"e",(function(){return T}));var a=n(5),i=n(119);const r=(e,t)=>{switch(e){case i.d.alert:return a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.entityAlerts",{values:{count:t},defaultMessage:"{count, plural, =1 {alert} other {alerts}}"});case i.d.event:return a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.entityEvents",{values:{count:t},defaultMessage:"{count, plural, =1 {event} other {events}}"});case i.d.session:return a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.entitySessions",{values:{count:t},defaultMessage:"{count, plural, =1 {session} other {sessions}}"})}},o=(e,t,n)=>a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.selectAllEntitiesTitle",{values:{entityPlural:r(e,n),totalFormatted:t,total:n},defaultMessage:"Select {total, plural, =1 {} other {all}} {totalFormatted} {entityPlural}"}),s=(e,t,n)=>a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.selectedEntitiesTitle",{values:{entityPlural:r(e,n),totalFormatted:t},defaultMessage:"Selected {totalFormatted} {entityPlural}"}),l=a.i18n.translate("xpack.securitySolution.toolbar.bulkActions.clearSelectionTitle",{defaultMessage:"Clear selection"}),c=e=>a.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailed",{values:{conflicts:e},defaultMessage:"Failed to update { conflicts } {conflicts, plural, =1 {alert} other {alerts}}."}),u=(e,t)=>a.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailedDetailed",{values:{updated:e,conflicts:t},defaultMessage:"{ updated } {updated, plural, =1 {alert was} other {alerts were}} updated successfully, but { conflicts } failed to update\n         because { conflicts, plural, =1 {it was} other {they were}} already being modified."}),d=e=>a.i18n.translate("xpack.securitySolution.bulkActions.closedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully closed {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."}),p=e=>a.i18n.translate("xpack.securitySolution.bulkActions.openedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully opened {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."}),m=e=>a.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully marked {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}} as acknowledged."}),f=a.i18n.translate("xpack.securitySolution.bulkActions.closedAlertFailedToastMessage",{defaultMessage:"Failed to close alert(s)."}),g=a.i18n.translate("xpack.securitySolution.bulkActions.openedAlertFailedToastMessage",{defaultMessage:"Failed to open alert(s)"}),b=a.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedAlertFailedToastMessage",{defaultMessage:"Failed to mark alert(s) as acknowledged"}),y=a.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailedSingleAlert",{defaultMessage:"Failed to update alert because it was already being modified."}),h=a.i18n.translate("xpack.securitySolution.bulkActions.openSelectedTitle",{defaultMessage:"Mark as open"}),v=a.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedSelectedTitle",{defaultMessage:"Mark as acknowledged"}),E=a.i18n.translate("xpack.securitySolution.bulkActions.closeSelectedTitle",{defaultMessage:"Mark as closed"}),x=e=>a.i18n.translate("xpack.securitySolution.bulkActions.updateAlertTagsSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully updated tags for {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."}),j=a.i18n.translate("xpack.securitySolution.bulkActions.updateAlertTagsFailedToastMessage",{defaultMessage:"Failed to update alert tags."}),O=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsMenuSearchPlaceholderMessage",{defaultMessage:"Search tags"}),S=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsMenuSearchNoTagsFoundMessage",{defaultMessage:"No tags match current search"}),k=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsMenuEmptyMessage",{defaultMessage:"No alert tag options exist, add tag options in Kibana Advanced Settings."}),w=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsApplyButtonMessage",{defaultMessage:"Apply tags"}),I=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsContextMenuItemTitle",{defaultMessage:"Apply alert tags"}),T=a.i18n.translate("xpack.securitySolution.bulkActions.alertTagsContextMenuItemTooltip",{defaultMessage:"Change alert tag options in Kibana Advanced Settings."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return b})),n.d(t,"b",(function(){return y}));var a=n(2),i=n.n(a),r=n(10),o=n.n(r),s=n(3),l=n(45),c=n(908),u=n(115),d=n(102),p=n(199);const m={activeStep:0,endTourStep:()=>{},incrementStep:()=>{},isTourShown:()=>!1,setStep:()=>{}},f=Object(a.createContext)(m),g=({children:e})=>{var t,n;const{guidedOnboardingApi:r}=Object(d.j)().services.guidedOnboarding,l=o()(null!==(t=null==r?void 0:r.isGuideStepActive$(c.a,p.b.rules).pipe(Object(s.timeout)(3e4),Object(s.catchError)((e=>Object(s.of)(!1)))))&&void 0!==t?t:Object(s.of)(!1),!1),u=o()(null!==(n=null==r?void 0:r.isGuideStepActive$(c.a,p.b.alertsCases).pipe(Object(s.timeout)(3e4),Object(s.catchError)((e=>Object(s.of)(!1)))))&&void 0!==n?n:Object(s.of)(!1),!1),m=Object(a.useMemo)((()=>({[p.b.rules]:l,[p.b.alertsCases]:u})),[l,u]),g=Object(a.useCallback)((e=>m[e]),[m]),[b,y]=Object(a.useState)(1),h=Object(a.useCallback)((e=>{y((t=>(t>=p.e[e].length?0:t)+1))}),[]),v=Object(a.useCallback)(((e,t)=>{t<=p.e[e].length&&y(t)}),[]),[E,x]=Object(a.useState)(null);Object(a.useEffect)((()=>{if(!E||!r)return;let e=!1;return(async()=>{await r.completeGuideStep(c.a,E),e||(x(null),y(1))})(),()=>{e=!0}}),[E,r]);const j=Object(a.useCallback)((e=>{x(e)}),[]),O=Object(a.useMemo)((()=>({activeStep:b,endTourStep:j,incrementStep:h,isTourShown:g,setStep:v})),[b,j,h,g,v]);return i.a.createElement(f.Provider,{value:O},e)},b=({children:e})=>{const{pathname:t}=Object(l.useLocation)(),n=Object(a.useMemo)((()=>Object(u.isTourPath)(t)?g:f.Provider),[t]);return i.a.createElement(n,{value:m},e)},y=()=>{const e=Object(a.useContext)(f);if(!e)throw new Error("useTourContext can only be called inside of TourContext!");return e}},function(e,t,n){"use strict";n.d(t,"i",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"d",(function(){return d})),n.d(t,"h",(function(){return p})),n.d(t,"e",(function(){return m})),n.d(t,"a",(function(){return f}));var a=n(42),i=n(106),r=n(389);const o=(e,t)=>"__typename"!==e&&null!=t?t:void 0,s=e=>!Object(a.isEmpty)(e),l=({isAlert:e,isPinned:t,eventHasNotes:n,timelineType:a})=>a===i.l.template?r.b(e):t&&n?r.d(e):t?r.c(e):r.g(e),c=({eventId:e,pinnedEventIds:t})=>!0===t[e],u=({allowUnpinning:e,eventId:t,onPinEvent:n,onUnPinEvent:a,isEventPinned:i})=>{e&&(i?a(t):n(t))},d=(e,t,n)=>e.reduce(((e,a)=>({...e,...t.includes(a._id)?{[a._id]:a.data.filter((e=>n.includes(e.field)))}:{}})),{}),p=e=>{var t;if(!Object(a.isEmpty)(null===(t=e.eql)||void 0===t?void 0:t.sequenceNumber))try{var n,i;const t=(null!==(n=null===(i=e.eql)||void 0===i?void 0:i.sequenceNumber)&&void 0!==n?n:"").split("-")[0];return parseInt(t,10)%2==0}catch{return!1}return!1},m=e=>{var t,n,i,r;return Object(a.isEmpty)(null===(t=e.kibana)||void 0===t||null===(n=t.alert)||void 0===n||null===(i=n.rule)||void 0===i?void 0:i.uuid)?Object(a.isEmpty)(null===(r=e.eql)||void 0===r?void 0:r.parentId)?"raw":"eql":"signal"},f="note-content"},function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(5),i=n(174);a.i18n.translate("xpack.securitySolution.endpointsTab",{defaultMessage:"Endpoints"}),a.i18n.translate("xpack.securitySolution.policiesTab",{defaultMessage:"Policies"}),a.i18n.translate("xpack.securitySolution.trustedAppsTab",{defaultMessage:"Trusted applications"}),a.i18n.translate("xpack.securitySolution.eventFiltersTab",{defaultMessage:"Event filters"});const r={[i.c.WINDOWS]:a.i18n.translate("xpack.securitySolution.administration.os.windows",{defaultMessage:"Windows"}),[i.c.MAC]:a.i18n.translate("xpack.securitySolution.administration.os.macos",{defaultMessage:"Mac"}),[i.c.LINUX]:a.i18n.translate("xpack.securitySolution.administration.os.linux",{defaultMessage:"Linux"})},o=e=>a.i18n.translate("xpack.securitySolution.exceptions.failedLoadPolicies",{defaultMessage:'There was an error loading policies: "{error}"',values:{error:e.message}})},function(e,t,n){"use strict";n.d(t,"a",(function(){return h}));var a=n(42),i=n(2),r=n(64),o=n.n(r),s=n(130),l=n.n(s),c=n(3),u=n(51),d=n(54),p=n(102),m=n(113),f=n(108),g=n(5);const b=g.i18n.translate("xpack.securitySolution.timeline.failDescription",{defaultMessage:"An error has occurred"}),y=g.i18n.translate("xpack.securitySolution.timeline.failSearchDescription",{defaultMessage:"Failed to run search"}),h=({entityType:e=d.EntityType.EVENTS,indexName:t,eventId:n,runtimeMappings:r,skip:s})=>{const{data:g}=Object(p.j)().services,h=Object(i.useRef)((()=>Promise.resolve())),v=Object(i.useRef)(new AbortController),E=Object(i.useRef)(new c.Subscription),[x,j]=Object(i.useState)(!0),[O,S]=Object(i.useState)(null),{addError:k,addWarning:w}=Object(f.a)(),[I,T]=Object(i.useState)(null),[C,M]=Object(i.useState)(null),[A,_]=Object(i.useState)(void 0),F=Object(i.useCallback)((e=>{if(null==e||s||Object(a.isEmpty)(e.eventId))return;const t=async()=>{v.current=new AbortController,j(!0),E.current=g.search.search(e,{strategy:"timelineSearchStrategy",abortSignal:v.current.signal}).subscribe({next:e=>{Object(u.isCompleteResponse)(e)?Promise.resolve().then((()=>{o.a.unstable_batchedUpdates((()=>{j(!1),T(e.data||[]),_(e.rawResponse.hits.hits[0]),M(e.ecs||null),E.current.unsubscribe()}))})):Object(u.isErrorResponse)(e)&&(j(!1),w(b),E.current.unsubscribe())},error:e=>{j(!1),k(e,{title:y}),E.current.unsubscribe()}})};E.current.unsubscribe(),v.current.abort(),t(),h.current=t}),[g.search,k,w,s]);return Object(i.useEffect)((()=>{S((a=>{const i={...null!=a?a:{},entityType:e,indexName:t,eventId:n,factoryQueryType:m.A.details,runtimeMappings:r};return l()(a,i)?a:i}))}),[e,n,t,r]),Object(i.useEffect)((()=>(F(O),()=>{E.current.unsubscribe(),v.current.abort()})),[O,F]),[x,I,A,C,h.current]}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(42);const i=({category:e,field:t},n)=>{const i=(({category:e,field:t},n)=>{var i,r,o;const s="signal"===e?"kibana":"kibana"===e?"signal":e,l="signal"===e?t.replace("signal","kibana.alert").replace("rule.id","rule.uuid"):"kibana"===e?t.replace("kibana.alert","signal").replace("rule.uuid","rule.id"):t;return null!==(i=null===(r=Object(a.find)({category:e,field:t},n))||void 0===r?void 0:r.values)&&void 0!==i?i:null===(o=Object(a.find)({category:s,field:l},n))||void 0===o?void 0:o.values})({category:e,field:t},n);return i&&i.length>0?i[0]:""}},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(112),i=n(771);let r;n(145),n(262),function(e){e.trace="trace",e.debug="debug",e.info="info",e.warn="warn",e.error="error"}(r||(r={}));const o=Object(a.u)("LogLevel",r),s=Object.values(r);Object(i.a)(r)},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(43);const i=n(112).n,r=a.partial({total_search_duration_ms:i,total_indexing_duration_ms:i,total_enrichment_duration_ms:i,execution_gap_duration_s:i})},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"c",(function(){return p}));var a=n(46),i=n(2),r=n(4),o=n(409),s=n(143),l=n(354);const c=["GET",r.gb],u=(e,t)=>Object(a.useQuery)([...c,e],(async({signal:t})=>{const n=await Object(s.h)({signal:t,id:e});return Object(o.a)(n)}),{...l.a,...t,staleTime:0,enabled:!!e}),d=()=>{const e=Object(a.useQueryClient)();return Object(i.useCallback)((()=>{e.invalidateQueries(c,{refetchType:"active"})}),[e])},p=()=>{const e=Object(a.useQueryClient)();return Object(i.useCallback)((t=>{e.setQueryData([...c,t.id],Object(o.a)(t))}),[e])}},,function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"d",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.assistant.clearChat",{defaultMessage:"Clear chat"}),r=a.i18n.translate("xpack.elasticAssistant.assistant.defaultAssistantTitle",{defaultMessage:"Elastic AI Assistant"}),o=a.i18n.translate("xpack.elasticAssistant.assistant.settings.showAnonymizedToggleLabel",{defaultMessage:"Show anonymized"}),s=a.i18n.translate("xpack.elasticAssistant.assistant.settings.showAnonymizedTooltip",{defaultMessage:"Show the anonymized values sent to and from the assistant"}),l=a.i18n.translate("xpack.elasticAssistant.assistant.submitMessage",{defaultMessage:"Submit message"}),c=a.i18n.translate("xpack.elasticAssistant.assistant.apiErrorTitle",{defaultMessage:"An error occurred sending your message. If the problem persists, please test the connector configuration."}),u=a.i18n.translate("xpack.elasticAssistant.documentationLinks.ariaLabel",{defaultMessage:"Click to open Elastic Assistant documentation in a new tab"}),d=a.i18n.translate("xpack.elasticAssistant.documentationLinks.documentation",{defaultMessage:"documentation"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"e",(function(){return p}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.youAreAHelpfulExpertAssistant",{defaultMessage:"You are a helpful, expert assistant who answers questions about Elastic Security."}),r=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.useTheFollowingContextToAnswer",{defaultMessage:"Use the following context to answer questions:"}),o=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.ifYouDontKnowTheAnswer",{defaultMessage:"Do not answer questions unrelated to Elastic Security."}),s=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.superheroPersonality",{defaultMessage:"Provide the most detailed and relevant answer possible, as if you were relaying this information back to a cyber security expert."}),l=`${i} ${o}\n${r}`,c=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.defaultSystemPromptName",{defaultMessage:"Default system prompt"}),u=`${i} ${o}\n${s}\n${r}`,d=a.i18n.translate("xpack.elasticAssistant.assistant.content.prompts.system.superheroSystemPromptName",{defaultMessage:"Enhanced system prompt"}),p=e=>`CONTEXT:\n"""\n${e}\n"""`},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a={SYSTEM_PROMPT_SELECTOR:"systemPromptSelector",CONVERSATIONS_MULTISELECTOR:"conversationMultiSelector",ADD_SYSTEM_PROMPT:"addSystemPrompt",PROMPT_SUPERSELECT:"promptSuperSelect",CONVERSATIONS_MULTISELECTOR_OPTION:e=>`conversationMultiSelectorOption-${e}`,SETTINGS_MODAL:"settingsModal",SYSTEM_PROMPT_MODAL:{ID:"systemPromptModal",PROMPT_TEXT:"systemPromptModalPromptText",TOGGLE_ALL_DEFAULT_CONVERSATIONS:"systemPromptModalToggleDefaultConversations",SAVE:"systemPromptModalSave",CANCEL:"systemPromptModalCancel"}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(46),i=n(68),r=n(269);const o=["elastic-assistant, load-connectors"],s=({http:e,toasts:t})=>Object(a.useQuery)(o,(async()=>(await Object(i.loadAllActions)({http:e})).filter((e=>!e.isMissingSecrets&&".gen-ai"===e.actionTypeId))),{retry:!1,keepPreviousData:!0,onError:e=>{"AbortError"!==e.name&&(null==t||t.addError(e.body&&e.body.message?new Error(e.body.message):e,{title:r.n}))}})},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(445);t.default=function(e,t){var n=i.useFirstMountState();a.useEffect((function(){if(!n)return e()}),t)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){void 0===e&&(e={});var t=a.useState(e),n=t[0],i=t[1];return[n,a.useCallback((function(e){i((function(t){return Object.assign({},t,e instanceof Function?e(t):e)}))}),[i])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){a.useEffect(e,[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(448));t.default=function(e){var t=i.useRef(0),n=i.useState(e),a=n[0],o=n[1],s=i.useCallback((function(e){cancelAnimationFrame(t.current),t.current=requestAnimationFrame((function(){o(e)}))}),[]);return r.default((function(){cancelAnimationFrame(t.current)})),[a,s]}},function(e,t,n){"use strict";var a=n(345);n.d(t,"b",(function(){return a.b})),n.d(t,"a",(function(){return a.a}))},function(e,t,n){"use strict";n.d(t,"i",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"j",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"h",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"o",(function(){return d})),n.d(t,"n",(function(){return p})),n.d(t,"k",(function(){return m})),n.d(t,"m",(function(){return f})),n.d(t,"l",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"a",(function(){return y})),n.d(t,"g",(function(){return h}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.locationTitle",{defaultMessage:"Location"}),r=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.autonomousSystemTitle",{defaultMessage:"Autonomous system"}),o=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.maxAnomalyScoreByJobTitle",{defaultMessage:"Max anomaly score by job"}),s=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.firstSeenTitle",{defaultMessage:"First seen"}),l=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.lastSeenTitle",{defaultMessage:"Last seen"}),c=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.hostIdTitle",{defaultMessage:"Host ID"}),u=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.hostNameTitle",{defaultMessage:"Host name"}),d=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.whoIsTitle",{defaultMessage:"WhoIs"}),p=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.viewWhoisTitle",{defaultMessage:"iana.org"}),m=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.ipReputationTitle",{defaultMessage:"Reputation"}),f=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.viewVirusTotalTitle.",{defaultMessage:"virustotal.com"}),g=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.viewTalosIntelligenceTitle",{defaultMessage:"talosIntelligence.com"}),b=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.asSourceDropDownOptionLabel",{defaultMessage:"As Source"}),y=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.asDestinationDropDownOptionLabel",{defaultMessage:"As Destination"}),h=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.inspectTitle",{defaultMessage:"IP overview"})},function(e,t,n){"use strict";n.d(t,"c",(function(){return p})),n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return d}));var a,i=n(2),r=n(64),o=(a=function(e,t){return a=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},a(e,t)},function(e,t){function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}),s="html",l="svg",c=function(e,t){var n,a,i,r={};if(e===s)i=document.createElement("div");else{if(e!==l)throw new Error('Invalid element type "'+e+'" for createPortalNode: must be "html" or "svg".');i=document.createElementNS("http://www.w3.org/2000/svg","g")}if(t&&"object"==typeof t)for(var o=0,c=Object.entries(t.attributes);o<c.length;o++){var u=c[o],d=u[0],p=u[1];i.setAttribute(d,p)}var m={element:i,elementType:e,setPortalProps:function(e){r=e},getInitialPortalProps:function(){return r},mount:function(t,i){if(i!==a){if(m.unmount(),t!==n&&!function(e,t){if(t===s)return e instanceof HTMLElement;if(t===l)return e instanceof SVGElement;throw new Error('Unrecognized element type "'+t+'" for validateElementType.')}(t,e))throw new Error('Invalid element type for portal: "'+e+'" portalNodes must be used with '+e+" elements, but OutPortal is within <"+t.tagName+">.");t.replaceChild(m.element,i),n=t,a=i}},unmount:function(e){e&&e!==a||n&&a&&(n.replaceChild(a,m.element),n=void 0,a=void 0)}};return m},u=function(e){function t(t){var n=e.call(this,t)||this;return n.addPropsChannel=function(){Object.assign(n.props.node,{setPortalProps:function(e){n.setState({nodeProps:e})}})},n.state={nodeProps:n.props.node.getInitialPortalProps()},n}return o(t,e),t.prototype.componentDidMount=function(){this.addPropsChannel()},t.prototype.componentDidUpdate=function(){this.addPropsChannel()},t.prototype.render=function(){var e=this,t=this.props,n=t.children,a=t.node;return r.createPortal(i.Children.map(n,(function(t){return i.isValidElement(t)?i.cloneElement(t,e.state.nodeProps):t})),a.element)},t}(i.PureComponent),d=function(e){function t(t){var n=e.call(this,t)||this;return n.placeholderNode=i.createRef(),n.passPropsThroughPortal(),n}return o(t,e),t.prototype.passPropsThroughPortal=function(){var e=Object.assign({},this.props,{node:void 0});this.props.node.setPortalProps(e)},t.prototype.componentDidMount=function(){var e=this.props.node;this.currentPortalNode=e;var t=this.placeholderNode.current,n=t.parentNode;e.mount(n,t),this.passPropsThroughPortal()},t.prototype.componentDidUpdate=function(){var e=this.props.node;this.currentPortalNode&&e!==this.currentPortalNode&&(this.currentPortalNode.unmount(this.placeholderNode.current),this.currentPortalNode=e);var t=this.placeholderNode.current,n=t.parentNode;e.mount(n,t),this.passPropsThroughPortal()},t.prototype.componentWillUnmount=function(){this.props.node.unmount(this.placeholderNode.current)},t.prototype.render=function(){return i.createElement("div",{ref:this.placeholderNode})},t}(i.PureComponent),p=c.bind(null,s);c.bind(null,l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"f",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"b",(function(){return l}));const a="kibana.alert.ancestors.id",i="kibana.alert.rule.indices",r="kibana.alert.original_event.id",o="process.entry_leader.entity_id",s="process.entry_leader.start",l="kibana.alert.ancestors.index"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n.n(a),r=n(385),o=n(610);const s=i.a.memo((({influencers:e,startDate:t,endDate:n,children:s,criteriaFields:l,skip:c})=>{const{jobNameById:u}=Object(r.a)(),d=Object(a.useMemo)((()=>Object.keys(u)),[u]),[p,m]=Object(o.a)({criteriaFields:l,influencers:e,startDate:t,endDate:n,skip:c,jobIds:d,aggregationInterval:"auto"});return i.a.createElement(i.a.Fragment,null,s({isLoadingAnomaliesData:p,anomaliesData:m,jobNameById:u}))}));s.displayName="AnomalyTableProvider"},function(e,t,n){"use strict";n.d(t,"d",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return c}));var a=n(47),i=n(226);const r=i.b.length,o=e=>{var t;return void 0!==(null!==(t=e.tags)&&void 0!==t?t:[]).find((e=>e===i.d))},s=e=>!o(e),l=e=>{var t;const n=[],a=null!==(t=e.tags)&&void 0!==t?t:[];for(const e of a)e!==i.d&&e.startsWith(i.b)&&n.push(e.substring(r));return n},c=e=>({comments:[],description:"",entries:[],item_id:void 0,list_id:e,meta:{temporaryUuid:Object(a.v4)()},name:"",namespace_type:"agnostic",tags:[i.d],type:"simple",os_types:["windows"]})},function(e,t,n){"use strict";var a=Object.assign;e.exports=a},function(e,t,n){"use strict";n.d(t,"g",(function(){return s})),n.d(t,"i",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"d",(function(){return d})),n.d(t,"h",(function(){return p})),n.d(t,"c",(function(){return m})),n.d(t,"a",(function(){return f})),n.d(t,"j",(function(){return g})),n.d(t,"b",(function(){return b}));var a=n(47),i=n(5),r=n(174),o=n(193);const s=(e,t,n)=>n.reduce(((n,i,r)=>{const o=((e,t,n,i,r=a.v4)=>{var o;const{fields:s}=e,{fields:l}=t,c=n.field,u=n.value,[d]=s.filter((({name:e})=>null!=c&&c===e)),[p]=l.filter((({name:e})=>null!=u&&u===e));return{id:null!==(o=n.id)&&void 0!==o?o:r(),field:d,type:"mapping",value:p,entryIndex:i}})(e,t,i,r);return[...n,o]}),[]),l=(e,t)=>({...e,entries:[...e.entries.slice(0,t),...e.entries.slice(t+1)]}),c=(e,t)=>{const{entryIndex:n}=e;return{updatedEntry:{id:e.id,field:null!=t?t.name:"",type:"mapping",value:null!=e.value?e.value.name:""},index:n}},u=(e,t)=>{const{entryIndex:n}=e;return{updatedEntry:{id:e.id,field:null!=e.field?e.field.name:"",type:"mapping",value:null!=t?t.name:""},index:n}},d=()=>Object(r.d)({field:"",type:"mapping",value:""}),p=()=>Object(r.d)({entries:[Object(r.d)({field:"",type:"mapping",value:""})]}),m=e=>e.reduce(((e,t)=>{const n={...t,entries:t.entries};return o.w.is(n)?[...e,n]:e}),[]),f=e=>e.some((e=>e.entries.some((e=>""===e.field||""===e.value)))),g=e=>1===e.length&&1===e[0].entries.length&&""===e[0].entries[0].field&&""===e[0].entries[0].value,b={forbiddenField:(e,t)=>{let n;if(n="string"==typeof e?e===t:!!Array.isArray(e)&&!!e.find((e=>e===t)),n)return{code:"ERR_FIELD_FORMAT",message:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.threatMatchIndexForbiddenError",{defaultMessage:"The index pattern cannot be { forbiddenString }. Please choose a more specific index pattern.",values:{forbiddenString:t}})}}}},function(e,t,n){"use strict";n.d(t,"m",(function(){return i})),n.d(t,"k",(function(){return r})),n.d(t,"l",(function(){return o})),n.d(t,"i",(function(){return s})),n.d(t,"j",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"f",(function(){return g})),n.d(t,"e",(function(){return b}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlValidation.requestError",{defaultMessage:"An error occurred while validating your EQL query"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlValidation.title",{defaultMessage:"EQL Validation Errors"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlValidation.showErrorsLabel",{defaultMessage:"Show EQL Validation Errors"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOverViewLink.text",{defaultMessage:"Event Query Language (EQL) Overview"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlSettings.title",{defaultMessage:"EQL settings"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsSize.label",{defaultMessage:"Size"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsSize.text",{defaultMessage:"For basic queries, the maximum number of matching events to return. For sequence queries, the maximum number of matching sequences to return."}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventCategoryField.label",{defaultMessage:"Event category field"}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventCategoryField.text",{defaultMessage:"Field containing the event classification, such as process, file, or network. This field is typically mapped as a field type in the keyword family"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventTiebreakerField.label",{defaultMessage:"Tiebreaker field"}),f=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventTiebreakerField.text",{defaultMessage:"Field used to sort hits with the same timestamp in ascending, lexicographic order"}),g=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventTimestampField.label",{defaultMessage:"Timestamp field"}),b=a.i18n.translate("xpack.securitySolution.detectionEngine.eqlOptionsEventTimestampField.text",{defaultMessage:"Field containing event timestamp"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return Ue})),n.d(t,"c",(function(){return Ge})),n.d(t,"d",(function(){return He})),n.d(t,"a",(function(){return nt}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(21),c=n(775),u=n(136),d=n(869),p=n(305),m=n(897),f=n(885),g=n(5);g.i18n.translate("xpack.elasticAssistant.dataAnonymization.settings.anonymizationSettings.calloutParagraph1",{defaultMessage:"The fields below are allowed by default"}),g.i18n.translate("xpack.elasticAssistant.dataAnonymization.settings.anonymizationSettings.calloutParagraph2",{defaultMessage:"Optionally enable anonymization for these fields"}),g.i18n.translate("xpack.elasticAssistant.dataAnonymization.settings.anonymizationSettings.calloutTitle",{defaultMessage:"Anonymization defaults"});const b=g.i18n.translate("xpack.elasticAssistant.dataAnonymization.settings.anonymizationSettings.settingsTitle",{defaultMessage:"Anonymization"}),y=g.i18n.translate("xpack.elasticAssistant.dataAnonymization.settings.anonymizationSettings.settingsDescription",{defaultMessage:"When adding Prompt Context throughout the Security App that may contain sensitive information, you can choose which fields are sent, and whether to enable anonymization for these fields. This will replace the field's value with a random string before sending the conversation. Helpful defaults are provided below."}),h=s()(r.EuiFlexItem)`
  margin-right: ${({theme:e})=>e.eui.euiSizeL};
`,v=({defaultAllow:e,defaultAllowReplacement:t,pageSize:n,setUpdatedDefaultAllow:o,setUpdatedDefaultAllowReplacement:s})=>{const{baseAllow:c,baseAllowReplacement:g}=Object(u.b)(),v=Object(a.useCallback)((n=>{Object(p.e)({defaultAllow:e,defaultAllowReplacement:t,setDefaultAllow:o,setDefaultAllowReplacement:s,updates:n})}),[e,t,o,s]),E=Object(a.useCallback)((()=>{o(c),s(g)}),[c,g,o,s]),x=Object(a.useMemo)((()=>{const n=new Set(e);return t.reduce(((e,t)=>n.has(t)?e+1:e),0)}),[e,t]);return Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiTitle,{size:"s"},Object(l.jsx)("h2",null,b)),Object(l.jsx)(r.EuiSpacer,{size:"xs"}),Object(l.jsx)(r.EuiText,{size:"xs"},y),Object(l.jsx)(r.EuiHorizontalRule,{margin:"s"}),Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center","data-test-subj":"summary",gutterSize:"none"},Object(l.jsx)(h,{grow:!1},Object(l.jsx)(m.a,{allowed:e.length,total:e.length})),Object(l.jsx)(h,{grow:!1},Object(l.jsx)(f.a,{anonymized:x,isDataAnonymizable:!0}))),Object(l.jsx)(r.EuiSpacer,{size:"s"}),Object(l.jsx)(d.a,{allow:e,allowReplacement:t,onListUpdated:v,onReset:E,rawData:null,pageSize:n}))};v.displayName="AnonymizationSettingsComponent";const E=i.a.memo(v),x=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.settingsTitle",{defaultMessage:"Quick Prompts"}),j=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.settingsDescription",{defaultMessage:"Create and manage Quick Prompts. Quick Prompts are shortcuts to common actions."}),O=(g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.modalTitle",{defaultMessage:"Quick Prompts"}),g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.nameLabel",{defaultMessage:"Name"})),S=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.promptLabel",{defaultMessage:"Prompt"}),k=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.promptPlaceholder",{defaultMessage:"Enter a Quick Prompt"}),w=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.badgeColorLabel",{defaultMessage:"Badge color"}),I=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.contextsLabel",{defaultMessage:"Contexts"}),T=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.settings.contextsHelpText",{defaultMessage:"Select the Prompt Contexts that this Quick Prompt will be available for. Selecting none will make this Quick Prompt available at all times."}),C=(g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.modalCancelButtonTitle",{defaultMessage:"Cancel"}),g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.modalSaveButtonTitle",{defaultMessage:"Save"}),g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.quickPromptSelector.ariaLabel",{defaultMessage:"Select or type to create new..."})),M=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.quickPromptSelector.deletePromptTitle",{defaultMessage:"Delete Quick Prompt"}),A=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.quickPromptSelector.customOptionText",{defaultMessage:"Create new Quick Prompt named"});var _={name:"4109g5",styles:"visibility:hidden;.parentFlexGroup:hover &{visibility:visible;}"},F={name:"d3v9zr",styles:"overflow:hidden"},D={name:"1e5733u",styles:"width:calc(100% - 60px)"};const N=i.a.memo((({isDisabled:e=!1,quickPrompts:t,onQuickPromptDeleted:n,onQuickPromptSelectionChange:i,selectedQuickPrompt:o})=>{const[s,c]=Object(a.useState)(t.map((e=>{var t;return{value:{isDefault:null!==(t=e.isDefault)&&void 0!==t&&t},label:e.title,color:e.color}}))),u=Object(a.useMemo)((()=>o?[{value:{isDefault:!0},label:o.title,color:o.color}]:[]),[o]),d=Object(a.useCallback)((e=>{var n,a;const r=0===e.length?void 0:null!==(n=t.find((t=>{var n;return t.title===(null===(n=e[0])||void 0===n?void 0:n.label)})))&&void 0!==n?n:null===(a=e[0])||void 0===a?void 0:a.label;i(r)}),[i,t]),p=Object(a.useCallback)(((e,t=[])=>{if(!e||!e.trim().toLowerCase())return;const n=e.trim().toLowerCase(),a={value:e,label:e};-1!==t.findIndex((e=>e.label.trim().toLowerCase()===n))||c([...s,a]),d([a])}),[d,s]),m=Object(a.useCallback)((e=>{0===e.length?d([]):-1!==s.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&d(e)}),[d,s]),f=Object(a.useCallback)((e=>{var t;c(s.filter((t=>t.label!==e))),(null==u||null===(t=u[0])||void 0===t?void 0:t.label)===e&&d([]),n(e)}),[d,n,s,u]);return Object(l.jsx)(r.EuiComboBox,{"aria-label":C,compressed:!0,isDisabled:e,placeholder:C,customOptionText:`${A} {searchValue}`,singleSelection:!0,options:s,selectedOptions:u,onChange:m,onCreateOption:p,renderOption:(e,t,n)=>{const{color:a,label:i,value:o}=e;return Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center",className:"parentFlexGroup",component:"span",justifyContent:"spaceBetween"},Object(l.jsx)(r.EuiFlexItem,{component:"span",grow:!1,css:D},Object(l.jsx)(r.EuiHealth,{color:a,css:F},Object(l.jsx)(r.EuiHighlight,{search:t},i))),!(null!=o&&o.isDefault)&&Object(l.jsx)(r.EuiFlexItem,{grow:!1},Object(l.jsx)(r.EuiToolTip,{position:"right",content:M},Object(l.jsx)(r.EuiButtonIcon,{iconType:"cross","aria-label":M,color:"danger",onClick:e=>{e.stopPropagation(),f(i)},css:_}))))},fullWidth:!0})}));N.displayName="QuickPromptSelector";const P=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.promptContextSelector.ariaLabel",{defaultMessage:"Select Prompt Context categories this Quick Prompt will be available for."}),R=g.i18n.translate("xpack.elasticAssistant.assistant.quickPrompts.promptContextSelector.placeholderLabel",{defaultMessage:"(Quick Prompt will always be visible)."}),L=i.a.memo((({isDisabled:e,onPromptContextSelectionChange:t,promptContexts:n,selectedPromptContexts:i=[]})=>{const o=Object(a.useMemo)((()=>n.map((e=>({value:{category:e.category},label:e.description})))),[n]),s=Object(a.useMemo)((()=>null!=i?i.map((e=>({value:{category:e.category},label:e.description}))):[]),[i]),c=Object(a.useCallback)((e=>{const a=n.filter((t=>e.some((e=>t.description===e.label))));t(a)}),[t,n]),u=Object(a.useCallback)((e=>{0===e.length?c([]):-1!==o.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&c(e)}),[c,o]);return Object(l.jsx)(r.EuiComboBox,{"aria-label":P,compressed:!0,fullWidth:!0,isDisabled:e,placeholder:R,options:o,selectedOptions:s,onChange:u,renderOption:(e,t,n)=>{const{label:a,value:i}=e;return Object(l.jsx)("span",{className:n},Object(l.jsx)(r.EuiHighlight,{search:t},a),Object(l.jsx)("span",null,` / (${null==i?void 0:i.category})`))}})}));L.displayName="PromptContextSelector";const q="#D36086";var B={name:"xpz1vu",styles:"min-height:150px"};const z=i.a.memo((({onSelectedQuickPromptChange:e,quickPromptSettings:t,selectedQuickPrompt:n,setUpdatedQuickPromptSettings:o})=>{const{basePromptContexts:s}=Object(u.b)(),c=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.prompt)&&void 0!==e?e:""}),[null==n?void 0:n.prompt]),d=Object(a.useCallback)((e=>{null!=n&&o((t=>t.some((e=>e.title===n.title))?t.map((t=>t.title===n.title?{...t,prompt:e.target.value}:t)):t))}),[n,o]),p=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.color)&&void 0!==e?e:q}),[null==n?void 0:n.color]),m=Object(a.useCallback)(((e,{hex:t,isValid:a})=>{null!=n&&o((t=>t.some((e=>e.title===n.title))?t.map((t=>t.title===n.title?{...t,color:e}:t)):t))}),[n,o]),f=Object(a.useMemo)((()=>{var e;return null!==(e=s.filter((e=>{var t;return null==n||null===(t=n.categories)||void 0===t?void 0:t.some((t=>(null==e?void 0:e.category)===t))})))&&void 0!==e?e:[]}),[s,null==n?void 0:n.categories]),g=Object(a.useCallback)((e=>{null!=n&&o((t=>t.some((e=>e.title===n.title))?t.map((t=>t.title===n.title?{...t,categories:e.map((e=>e.category))}:t)):t))}),[n,o]),b=Object(a.useCallback)((t=>{const n="string"==typeof t?{title:null!=t?t:"",prompt:"",color:q,categories:[]}:t;null!=n&&o((e=>e.some((e=>e.title===n.title))?e:[...e,n])),e(n)}),[e,o]),y=Object(a.useCallback)((e=>{o((t=>t.filter((t=>t.title!==e))))}),[o]);return Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiTitle,{size:"s"},Object(l.jsx)("h2",null,x)),Object(l.jsx)(r.EuiSpacer,{size:"xs"}),Object(l.jsx)(r.EuiText,{size:"s"},j),Object(l.jsx)(r.EuiHorizontalRule,{margin:"s"}),Object(l.jsx)(r.EuiFormRow,{label:O,display:"rowCompressed",fullWidth:!0},Object(l.jsx)(N,{onQuickPromptDeleted:y,onQuickPromptSelectionChange:b,quickPrompts:t,selectedQuickPrompt:n})),Object(l.jsx)(r.EuiFormRow,{label:S,display:"rowCompressed",fullWidth:!0},Object(l.jsx)(r.EuiTextArea,{compressed:!0,disabled:null==n,fullWidth:!0,onChange:d,placeholder:k,value:c,css:B})),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",fullWidth:!0,label:I,helpText:T},Object(l.jsx)(L,{isDisabled:null==n,onPromptContextSelectionChange:g,promptContexts:s,selectedPromptContexts:f})),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:w},Object(l.jsx)(r.EuiColorPicker,{color:p,compressed:!0,disabled:null==n,onChange:m})))}));z.displayName="AddQuickPromptModal";var $=n(42);const V=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.settingsTitle",{defaultMessage:"System Prompts"}),U=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.settingsDescription",{defaultMessage:"Create and manage System Prompts. System Prompts are configurable chunks of context that are always sent for a given conversations."}),G=(g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.modalTitle",{defaultMessage:"System Prompts"}),g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.nameLabel",{defaultMessage:"Name"})),H=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.promptLabel",{defaultMessage:"Prompt"}),W=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.promptPlaceholder",{defaultMessage:"Enter a System Prompt"}),Q=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.defaultConversationsLabel",{defaultMessage:"Default conversations"}),Y=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.defaultNewConversationTitle",{defaultMessage:"Use as default for all new conversations"}),K=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.settings.defaultConversationsHelpText",{defaultMessage:"Conversations that should use this System Prompt by default"});g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.slCancelButtonTitle",{defaultMessage:"Cancel"}),g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.slSaveButtonTitle",{defaultMessage:"Save"});var X=n(357);const J=i.a.memo((({conversations:e,isDisabled:t=!1,onConversationSelectionChange:n,selectedConversations:i=[]})=>{const o=Object(a.useMemo)((()=>e.map((e=>({label:e.id,"data-test-subj":X.a.CONVERSATIONS_MULTISELECTOR_OPTION(e.id)})))),[e]),s=Object(a.useMemo)((()=>null!=i?i.map((e=>({label:e.id}))):[]),[i]),c=Object(a.useCallback)((t=>{const a=e.filter((e=>t.some((t=>e.id===t.label))));n(a)}),[n,e]),u=Object(a.useCallback)((e=>{0===e.length?c([]):-1!==o.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&c(e)}),[c,o]);return Object(l.jsx)(r.EuiComboBox,{"aria-label":Q,compressed:!0,"data-test-subj":X.a.CONVERSATIONS_MULTISELECTOR,isDisabled:t,fullWidth:!0,options:o,selectedOptions:s,onChange:u})}));J.displayName="ConversationMultiSelector";const Z=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.systemPromptModal.systemPromptSelector.ariaLabel",{defaultMessage:"Select or type to create new..."}),ee=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.systemPromptModal.systemPromptSelector.deletePromptTitle",{defaultMessage:"Delete System Prompt"}),te=g.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.systemPromptModal.systemPromptSelector.customOptionText",{defaultMessage:"Create new System Prompt named"});var ne={name:"4109g5",styles:"visibility:hidden;.parentFlexGroup:hover &{visibility:visible;}"},ae={name:"1gz2b5f",styles:"overflow:hidden;text-overflow:ellipsis"},ie={name:"qhxz92",styles:"max-width:100%"},re={name:"1e5733u",styles:"width:calc(100% - 60px)"};const oe=i.a.memo((({autoFocus:e=!1,systemPrompts:t,onSystemPromptDeleted:n,onSystemPromptSelectionChange:i,selectedSystemPrompt:o})=>{const[s,c]=Object(a.useState)(t.map((e=>{var t,n;return{value:{isDefault:null!==(t=e.isDefault)&&void 0!==t&&t,isNewConversationDefault:null!==(n=e.isNewConversationDefault)&&void 0!==n&&n},label:e.name,"data-test-subj":`${X.a.SYSTEM_PROMPT_SELECTOR}-${e.id}`}}))),u=Object(a.useMemo)((()=>{var e,t;return o?[{value:{isDefault:null!==(e=o.isDefault)&&void 0!==e&&e,isNewConversationDefault:null!==(t=o.isNewConversationDefault)&&void 0!==t&&t},label:o.name}]:[]}),[o]),d=Object(a.useCallback)((e=>{var n,a;const r=0===e.length?void 0:null!==(n=t.find((t=>{var n;return t.name===(null===(n=e[0])||void 0===n?void 0:n.label)})))&&void 0!==n?n:null===(a=e[0])||void 0===a?void 0:a.label;i(r)}),[i,t]),p=Object(a.useCallback)(((e,t=[])=>{if(!e||!e.trim().toLowerCase())return;const n=e.trim().toLowerCase(),a={value:e,label:e};-1!==t.findIndex((e=>e.label.trim().toLowerCase()===n))||c([...s,a]),d([a])}),[d,s]),m=Object(a.useCallback)((e=>{0===e.length?d([]):-1!==s.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&d(e)}),[d,s]),f=Object(a.useCallback)((e=>{var t;c(s.filter((t=>t.label!==e))),(null==u||null===(t=u[0])||void 0===t?void 0:t.label)===e&&d([]),n(e)}),[d,n,s,u]);return Object(l.jsx)(r.EuiComboBox,{"aria-label":Z,className:"systemPromptSelector",compressed:!0,"data-test-subj":X.a.SYSTEM_PROMPT_SELECTOR,fullWidth:!0,placeholder:Z,customOptionText:`${te} {searchValue}`,singleSelection:{asPlainText:!0},options:s,selectedOptions:u,onChange:m,onCreateOption:p,renderOption:(e,t,n)=>{const{label:a,value:i}=e;return Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center",className:"parentFlexGroup",component:"span",justifyContent:"spaceBetween","data-test-subj":"systemPromptOptionSelector"},Object(l.jsx)(r.EuiFlexItem,{grow:!1,component:"span",css:re},Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center",component:"span",gutterSize:"s"},Object(l.jsx)(r.EuiFlexItem,{component:"span",grow:!1,css:ie},Object(l.jsx)(r.EuiHighlight,{search:t,css:ae},a)),(null==i?void 0:i.isNewConversationDefault)&&Object(l.jsx)(r.EuiFlexItem,{grow:!1,component:"span"},Object(l.jsx)(r.EuiToolTip,{position:"right",content:Y},Object(l.jsx)(r.EuiIcon,{type:"starFilled"}))))),!(null!=i&&i.isDefault)&&Object(l.jsx)(r.EuiFlexItem,{grow:!1,component:"span"},Object(l.jsx)(r.EuiToolTip,{position:"right",content:ee},Object(l.jsx)(r.EuiButtonIcon,{iconType:"cross","aria-label":ee,color:"danger",onClick:e=>{e.stopPropagation(),f(a)},css:ne}))))},autoFocus:e})}));oe.displayName="SystemPromptSelector";var se={name:"xpz1vu",styles:"min-height:150px"};const le=i.a.memo((({conversationSettings:e,onSelectedSystemPromptChange:t,selectedSystemPrompt:n,setUpdatedSystemPromptSettings:o,setUpdatedConversationSettings:s,systemPromptSettings:c})=>{const u=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.content)&&void 0!==e?e:""}),[null==n?void 0:n.content]),d=Object(a.useCallback)((e=>{null!=n&&o((t=>t.some((e=>e.id===n.id))?t.map((t=>t.id===n.id?{...t,content:e.target.value}:t)):t))}),[n,o]),p=Object(a.useMemo)((()=>Object.values(e)),[e]),m=Object(a.useMemo)((()=>null!=n?Object.values(e).filter((e=>e.apiConfig.defaultSystemPromptId===n.id)):[]),[e,n]),f=Object(a.useCallback)((e=>{const t=e.map((e=>e.id));null!=n&&s((e=>Object($.keyBy)("id",Object.values(e).map((e=>({...e,apiConfig:{...e.apiConfig,defaultSystemPromptId:t.includes(e.id)?null==n?void 0:n.id:e.apiConfig.defaultSystemPromptId===(null==n?void 0:n.id)?void 0:e.apiConfig.defaultSystemPromptId}}))))))}),[n,s]),g=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.isNewConversationDefault)&&void 0!==e&&e}),[null==n?void 0:n.isNewConversationDefault]),b=Object(a.useCallback)((e=>{const t=e.target.checked;null!=n&&o((e=>e.map((e=>({...e,isNewConversationDefault:n.id===e.id&&t})))))}),[n,o]),y=Object(a.useCallback)((e=>{const n="string"==typeof e?{id:null!=e?e:"",content:"",name:null!=e?e:"",promptType:"system"}:e;null!=n&&o((e=>e.some((e=>e.id===n.id))?e:[...e,n])),t(n)}),[t,o]),h=Object(a.useCallback)((e=>{o((t=>t.filter((t=>t.id!==e))))}),[o]);return Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiTitle,{size:"s"},Object(l.jsx)("h2",null,V)),Object(l.jsx)(r.EuiSpacer,{size:"xs"}),Object(l.jsx)(r.EuiText,{size:"s"},U),Object(l.jsx)(r.EuiHorizontalRule,{margin:"s"}),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:G,fullWidth:!0},Object(l.jsx)(oe,{onSystemPromptDeleted:h,onSystemPromptSelectionChange:y,systemPrompts:c,selectedSystemPrompt:n})),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:H,fullWidth:!0},Object(l.jsx)(r.EuiTextArea,{"data-test-subj":X.a.SYSTEM_PROMPT_MODAL.PROMPT_TEXT,disabled:null==n,onChange:d,placeholder:W,value:u,compressed:!0,fullWidth:!0,css:se})),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",fullWidth:!0,helpText:K,label:Q},Object(l.jsx)(J,{conversations:p,isDisabled:null==n,onConversationSelectionChange:f,selectedConversations:m})),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed"},Object(l.jsx)(r.EuiCheckbox,{"data-test-subj":X.a.SYSTEM_PROMPT_MODAL.TOGGLE_ALL_DEFAULT_CONVERSATIONS,disabled:null==n,id:"defaultNewConversation",label:Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center",gutterSize:"xs"},Object(l.jsx)(r.EuiFlexItem,null,Y),Object(l.jsx)(r.EuiFlexItem,{grow:!1},Object(l.jsx)(r.EuiIcon,{type:g?"starFilled":"starEmpty"}))),checked:g,onChange:b,compressed:!0})))}));le.displayName="SystemPromptSettings";const ce=g.i18n.translate("xpack.elasticAssistant.assistant.settings.advancedSettings.settingsTitle",{defaultMessage:"Advanced Settings"}),ue=g.i18n.translate("xpack.elasticAssistant.assistant.settings.advancedSettings.settingsDescription",{defaultMessage:"They're not further along, they just have a different set of problems."}),de=i.a.memo((({onAdvancedSettingsChange:e})=>Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiTitle,{size:"s"},Object(l.jsx)("h2",null,ce)),Object(l.jsx)(r.EuiSpacer,{size:"xs"}),Object(l.jsx)(r.EuiText,{size:"s"},ue),Object(l.jsx)(r.EuiHorizontalRule,{margin:"s"}),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:"Disable LocalStorage"},Object(l.jsx)(i.a.Fragment,null,"Disable LocalStorage")),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:"Clear LocalStorage"},Object(l.jsx)(i.a.Fragment,null,"Clear LocalStorage")),Object(l.jsx)(r.EuiFormRow,{display:"rowCompressed",label:"Reset Something Else"},Object(l.jsx)(i.a.Fragment,null,"Reset Something Else")))));de.displayName="AdvancedSettings";var pe=n(44),me=n(66);const fe=g.i18n.translate("xpack.elasticAssistant.assistant.conversations.settings.settingsTitle",{defaultMessage:"Conversations"}),ge=g.i18n.translate("xpack.elasticAssistant.assistant.conversations.settings.settingsDescription",{defaultMessage:"Create and manage conversations with the Elastic AI Assistant"}),be=g.i18n.translate("xpack.elasticAssistant.assistant.conversations.settings.connectorTitle",{defaultMessage:"Connector"}),ye=g.i18n.translate("xpack.elasticAssistant.assistant.conversations.settings.promptTitle",{defaultMessage:"System Prompt"}),he=g.i18n.translate("xpack.elasticAssistant.assistant.conversations.settings.promptHelpTextTitle",{defaultMessage:"Context provided as part of every conversation"});var ve=n(776),Ee=n(68),xe=n(358),je=n(269),Oe=n(554),Se=n(444);const ke="ADD_NEW_CONNECTOR",we=i.a.memo((({actionTypeRegistry:e,http:t,isDisabled:n=!1,onConnectorModalVisibilityChange:o,selectedConnectorId:s,onConnectorSelectionChange:c})=>{var d;const{assistantAvailability:p}=Object(u.b)(),[m,f]=Object(a.useState)(!1),{data:g}=Object(Oe.a)({http:t}),b=null!==(d=null==g?void 0:g.find((e=>e.id===me.GEN_AI_CONNECTOR_ID)))&&void 0!==d?d:{enabledInConfig:!0,enabledInLicense:!0,minimumLicenseRequired:"platinum",supportedFeatureIds:["general"],isSystemActionType:!1,id:".gen-ai",name:"Generative AI",enabled:!0},{data:y,isLoading:h,isFetching:v,refetch:E}=Object(xe.a)({http:t}),x=h||v,j=n||!p.hasConnectorsReadPrivilege,O=Object(a.useMemo)((()=>({value:ke,inputDisplay:je.e,dropdownDisplay:Object(l.jsx)(r.EuiFlexGroup,{gutterSize:"none",key:ke},Object(l.jsx)(r.EuiFlexItem,{grow:!0},Object(l.jsx)(r.EuiButtonEmpty,{iconType:"plus",size:"xs"},je.e)),Object(l.jsx)(r.EuiFlexItem,{grow:!1},Object(l.jsx)("div",{style:{width:"24px"}})))})),[]),S=Object(a.useMemo)((()=>{var e;return null!==(e=null==y?void 0:y.map((e=>{var t;const n=null===(t=Object(Se.a)(e))||void 0===t?void 0:t.apiProvider,a=e.isPreconfigured?je.q:n;return{value:e.id,inputDisplay:e.name,dropdownDisplay:Object(l.jsx)(i.a.Fragment,{key:e.id},Object(l.jsx)("strong",null,e.name),a&&Object(l.jsx)(r.EuiText,{size:"xs",color:"subdued"},Object(l.jsx)("p",null,a)))}})))&&void 0!==e?e:[]}),[y]),k=Object(a.useMemo)((()=>p.hasConnectorsAllPrivilege?[...S,O]:[...S]),[O,p.hasConnectorsAllPrivilege,S]),w=Object(a.useCallback)((()=>{null==o||o(!1),f(!1)}),[o]),I=Object(a.useCallback)((e=>{if(e===ke)return null==o||o(!0),void f(!0);const t=null==y?void 0:y.find((t=>t.id===e));c(t)}),[y,c,o]);return Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiSuperSelect,{"aria-label":je.f,compressed:!0,disabled:j,hasDividers:!0,isLoading:x,onChange:I,options:k,valueOfSelected:null!=s?s:""}),m&&Object(l.jsx)(Ee.ConnectorAddModal,{actionType:b,onClose:w,postSaveEventHandler:e=>{c(e),null==E||E(),w()},actionTypeRegistry:e}))}));we.displayName="ConnectorSelector";var Ie=n(898),Te=n(777);const Ce=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.defaultConversationTitle",{defaultMessage:"Conversations"}),Me=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.ariaLabel",{defaultMessage:"Conversation selector"}),Ae=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.placeholderTitle",{defaultMessage:"Select or type to create new..."}),_e=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.CustomOptionTextTitle",{defaultMessage:"Create new conversation:"}),Fe=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.previousConversationTitle",{defaultMessage:"Previous conversation"}),De=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.nextConversationTitle",{defaultMessage:"Next conversation"}),Ne=g.i18n.translate("xpack.elasticAssistant.assistant.conversationSelectorSettings.deleteConversationTitle",{defaultMessage:"Delete conversation"});var Pe={name:"1v0pok0",styles:"min-width:300px"},Re={name:"4109g5",styles:"visibility:hidden;.parentFlexGroup:hover &{visibility:visible;}"},Le={name:"1gz2b5f",styles:"overflow:hidden;text-overflow:ellipsis"},qe={name:"1e5733u",styles:"width:calc(100% - 60px)"};const Be=i.a.memo((({allSystemPrompts:e,conversations:t,onConversationDeleted:n,onConversationSelectionChange:i,selectedConversationId:o,defaultConnectorId:s,defaultProvider:c})=>{const u=Object(a.useMemo)((()=>Object.keys(t)),[t]),[d,p]=Object(a.useState)((()=>Object.values(t).map((e=>{var t;return{value:{isDefault:null!==(t=e.isDefault)&&void 0!==t&&t},label:e.id}})))),m=Object(a.useMemo)((()=>{var e;return o&&null!==(e=d.filter((e=>e.label===o)))&&void 0!==e?e:[]}),[d,o]),f=Object(a.useCallback)((e=>{var n,a;const r=0===e.length?void 0:null!==(n=Object.values(t).find((t=>{var n;return t.id===(null===(n=e[0])||void 0===n?void 0:n.label)})))&&void 0!==n?n:null===(a=e[0])||void 0===a?void 0:a.label;i(r)}),[i,t]),g=Object(a.useCallback)(((e,t=[])=>{if(!e||!e.trim().toLowerCase())return;const n=e.trim().toLowerCase(),a={value:e,label:e};-1!==t.findIndex((e=>e.label.trim().toLowerCase()===n))||p([...d,a]),f([a])}),[d,f]),b=Object(a.useCallback)((e=>{0===e.length?f([]):-1!==d.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&f(e)}),[d,f]),y=Object(a.useCallback)((e=>{var t;p(d.filter((t=>t.label!==e))),(null==m||null===(t=m[0])||void 0===t?void 0:t.label)===e&&f([]),n(e)}),[d,f,n,m]),h=Object(a.useCallback)((()=>{const e=((e,t="")=>0===e.indexOf(t)?e[e.length-1]:e[e.indexOf(t)-1])(u,o),t=d.filter((t=>t.label===e));f(t)}),[u,d,f,o]),v=Object(a.useCallback)((()=>{const e=((e,t="")=>e.indexOf(t)+1>=e.length?e[0]:e[e.indexOf(t)+1])(u,o),t=d.filter((t=>t.label===e));f(t)}),[u,d,f,o]);return Object(l.jsx)(r.EuiFormRow,{label:Ce,display:"rowCompressed",css:Pe},Object(l.jsx)(r.EuiComboBox,{"aria-label":Me,customOptionText:`${_e} {searchValue}`,placeholder:Ae,singleSelection:{asPlainText:!0},options:d,selectedOptions:m,onChange:b,onCreateOption:g,renderOption:(e,t,n)=>{const{label:a,value:i}=e;return Object(l.jsx)(r.EuiFlexGroup,{alignItems:"center",className:"parentFlexGroup",component:"span",justifyContent:"spaceBetween"},Object(l.jsx)(r.EuiFlexItem,{component:"span",grow:!1,css:qe},Object(l.jsx)(r.EuiHighlight,{search:t,css:Le},a)),!(null!=i&&i.isDefault)&&Object(l.jsx)(r.EuiFlexItem,{grow:!1,component:"span"},Object(l.jsx)(r.EuiToolTip,{position:"right",content:Ne},Object(l.jsx)(r.EuiButtonIcon,{iconType:"cross","aria-label":Ne,color:"danger",onClick:e=>{e.stopPropagation(),y(a)},css:Re}))))},compressed:!0,prepend:Object(l.jsx)(r.EuiButtonIcon,{iconType:"arrowLeft","aria-label":Fe,onClick:h,disabled:u.length<=1}),append:Object(l.jsx)(r.EuiButtonIcon,{iconType:"arrowRight","aria-label":De,onClick:v,disabled:u.length<=1})}))}));Be.displayName="ConversationSelectorSettings";var ze=n(307);const $e=i.a.memo((({actionTypeRegistry:e,allSystemPrompts:t,defaultConnectorId:n,defaultProvider:o,selectedConversation:s,onSelectedConversationChange:c,conversationSettings:u,http:d,setUpdatedConversationSettings:p,isDisabled:m=!1})=>{const f=Object(a.useMemo)((()=>Object(ze.b)({allSystemPrompts:t,conversation:void 0})),[t]),g=Object(a.useMemo)((()=>Object(ze.b)({allSystemPrompts:t,conversation:s})),[t,s]),{data:b,isSuccess:y}=Object(xe.a)({http:d}),h=Object(a.useCallback)((e=>{const t="string"==typeof e?{id:null!=e?e:"",messages:[],apiConfig:{connectorId:n,provider:o,defaultSystemPromptId:null==f?void 0:f.id}}:e;null!=t&&p((e=>({...e,[t.id]:t}))),c(t)}),[n,o,null==f?void 0:f.id,c,p]),v=Object(a.useCallback)((e=>{p((t=>{const{[e]:n,...a}=t;return null!=n?a:t}))}),[p]),E=Object(a.useCallback)((e=>{null!=s&&p((t=>({...t,[s.id]:{...s,apiConfig:{...s.apiConfig,defaultSystemPromptId:e}}})))}),[s,p]),x=Object(a.useMemo)((()=>{const e=null==s?void 0:s.apiConfig.connectorId;if(y)return null==b?void 0:b.find((t=>t.id===e))}),[y,b,null==s?void 0:s.apiConfig.connectorId]),j=Object(a.useMemo)((()=>null==s?void 0:s.apiConfig.provider),[null==s?void 0:s.apiConfig.provider]),O=Object(a.useCallback)((e=>{if(null!=s){const t=Object(Se.a)(e);p((n=>({...n,[s.id]:{...s,apiConfig:{...s.apiConfig,connectorId:null==e?void 0:e.id,provider:null==t?void 0:t.apiProvider,model:null==t?void 0:t.defaultModel}}})))}}),[s,p]),S=Object(a.useMemo)((()=>{var e,t;const n=null===(e=Object(Se.a)(x))||void 0===e?void 0:e.defaultModel;return null!==(t=null==s?void 0:s.apiConfig.model)&&void 0!==t?t:n}),[x,null==s?void 0:s.apiConfig.model]),k=Object(a.useCallback)((e=>{null!=s&&p((t=>({...t,[s.id]:{...s,apiConfig:{...s.apiConfig,model:e}}})))}),[s,p]);return Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiTitle,{size:"s"},Object(l.jsx)("h2",null,fe)),Object(l.jsx)(r.EuiSpacer,{size:"xs"}),Object(l.jsx)(r.EuiText,{size:"s"},ge),Object(l.jsx)(r.EuiHorizontalRule,{margin:"s"}),Object(l.jsx)(Be,{selectedConversationId:null==s?void 0:s.id,allSystemPrompts:t,conversations:u,onConversationDeleted:v,onConversationSelectionChange:h}),Object(l.jsx)(r.EuiFormRow,{"data-test-subj":"prompt-field",display:"rowCompressed",fullWidth:!0,label:ye,helpText:he},Object(l.jsx)(Ie.a,{allSystemPrompts:t,compressed:!0,conversation:s,isEditing:!0,isDisabled:null==s,onSystemPromptSelectionChange:E,selectedPrompt:g,showTitles:!0,isSettingsModalVisible:!0,setIsSettingsModalVisible:$.noop})),Object(l.jsx)(r.EuiFormRow,{"data-test-subj":"connector-field",display:"rowCompressed",label:be,helpText:Object(l.jsx)(r.EuiLink,{href:`${d.basePath.get()}/app/management/insightsAndAlerting/triggersActionsConnectors/connectors`,target:"_blank",external:!0},Object(l.jsx)(pe.FormattedMessage,{id:"xpack.elasticAssistant.assistant.settings.connectorHelpTextTitle",defaultMessage:"Kibana Connector to make requests with"}))},Object(l.jsx)(we,{actionTypeRegistry:e,http:d,isDisabled:null==s,onConnectorModalVisibilityChange:()=>{},onConnectorSelectionChange:O,selectedConnectorId:null==x?void 0:x.id})),!1===(null==x?void 0:x.isPreconfigured)&&j===me.OpenAiProviderType.OpenAi&&Object(l.jsx)(r.EuiFormRow,{"data-test-subj":"model-field",display:"rowCompressed",label:ve.c,helpText:ve.b},Object(l.jsx)(Te.b,{onModelSelectionChange:k,selectedModel:S})))}));$e.displayName="ConversationSettings";const Ve=s()(r.EuiModal)`
  width: 800px;
  height: 575px;
`,Ue="CONVERSATION_TAB",Ge="QUICK_PROMPTS_TAB",He="SYSTEM_PROMPTS_TAB",We="ANONYMIZATION_TAB";var Qe={name:"1r962iv",styles:"padding:4px"},Ye={name:"1tk8yx0",styles:"padding:8px"},Ke={name:"zd35ug",styles:"max-height:550px;overflow-y:scroll"},Xe={name:"16zl6ct",styles:"position:absolute;top:11px;left:14px"},Je={name:"16zl6ct",styles:"position:absolute;top:11px;left:14px"},Ze={name:"57t0bw",styles:"position:relative;transform:rotateY(180deg);top:-7px"},et={name:"15ag9ng",styles:"position:relative;top:-10px"},tt={name:"18wygtw",styles:"min-inline-size:unset!important;max-width:104px"};const nt=i.a.memo((({defaultConnectorId:e,defaultProvider:t,onClose:n,onSave:o,selectedConversation:s,setSelectedConversationId:d})=>{const{actionTypeRegistry:p,http:m,selectedSettingsTab:f,setSelectedSettingsTab:g}=Object(u.b)(),{conversationSettings:b,defaultAllow:y,defaultAllowReplacement:h,quickPromptSettings:v,systemPromptSettings:x,setUpdatedConversationSettings:j,setUpdatedDefaultAllow:O,setUpdatedDefaultAllowReplacement:S,setUpdatedQuickPromptSettings:k,setUpdatedSystemPromptSettings:w,saveSettings:I}=(()=>{const{allQuickPrompts:e,allSystemPrompts:t,conversations:n,defaultAllow:i,defaultAllowReplacement:r,setAllQuickPrompts:o,setAllSystemPrompts:s,setConversations:l,setDefaultAllow:c,setDefaultAllowReplacement:d}=Object(u.b)(),[p,m]=Object(a.useState)(n),[f,g]=Object(a.useState)(e),[b,y]=Object(a.useState)(t),[h,v]=Object(a.useState)(i),[E,x]=Object(a.useState)(r),j=Object(a.useCallback)((()=>{m(n),g(e),y(t),v(i),x(r)}),[e,t,n,i,r]),O=Object(a.useCallback)((()=>{o(f),s(b),l(p),c(h),d(E)}),[o,s,l,c,d,p,h,E,f,b]);return{conversationSettings:p,defaultAllow:h,defaultAllowReplacement:E,quickPromptSettings:f,resetSettings:j,systemPromptSettings:b,saveSettings:O,setUpdatedDefaultAllow:v,setUpdatedDefaultAllowReplacement:x,setUpdatedConversationSettings:m,setUpdatedQuickPromptSettings:g,setUpdatedSystemPromptSettings:y}})(),[T,C]=Object(a.useState)((()=>b[s.id])),M=Object(a.useCallback)((e=>{C(e)}),[]);Object(a.useEffect)((()=>{null!=T&&C(b[T.id])}),[b,T]);const[A,_]=Object(a.useState)(),F=Object(a.useCallback)((e=>{_(e)}),[]);Object(a.useEffect)((()=>{null!=A&&_(v.find((e=>e.title===A.title)))}),[v,A]);const[D,N]=Object(a.useState)(),P=Object(a.useCallback)((e=>{N(e)}),[]);Object(a.useEffect)((()=>{null!=D&&N(x.find((e=>e.id===D.id)))}),[D,x]);const R=Object(a.useCallback)((()=>{const e=null==b[s.id],t=Object.keys(b)[0];e&&null!=t&&d(b[t].id),I(),o()}),[b,s.id,o,I,d]);return Object(l.jsx)(Ve,{"data-test-subj":X.a.SETTINGS_MODAL,onClose:n},Object(l.jsx)(r.EuiPage,{paddingSize:"none"},Object(l.jsx)(r.EuiPageSidebar,{paddingSize:"xs",css:tt},Object(l.jsx)(r.EuiKeyPadMenu,null,Object(l.jsx)(r.EuiKeyPadMenuItem,{id:Ue,label:c.c,isSelected:f===Ue,onClick:()=>g(Ue)},Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiIcon,{type:"editorComment",size:"xl",css:et}),Object(l.jsx)(r.EuiIcon,{type:"editorComment",size:"l",css:Ze}))),Object(l.jsx)(r.EuiKeyPadMenuItem,{id:Ge,label:c.d,isSelected:f===Ge,onClick:()=>g(Ge)},Object(l.jsx)(i.a.Fragment,null,Object(l.jsx)(r.EuiIcon,{type:"editorComment",size:"xxl"}),Object(l.jsx)(r.EuiIcon,{type:"bolt",size:"s",color:"warning",css:Je}))),Object(l.jsx)(r.EuiKeyPadMenuItem,{id:He,label:c.h,isSelected:f===He,onClick:()=>g(He)},Object(l.jsx)(r.EuiIcon,{type:"editorComment",size:"xxl"}),Object(l.jsx)(r.EuiIcon,{type:"storage",size:"s",color:"success",css:Xe})),Object(l.jsx)(r.EuiKeyPadMenuItem,{id:We,label:c.a,isSelected:f===We,onClick:()=>g(We)},Object(l.jsx)(r.EuiIcon,{type:"eyeClosed",size:"l"})))),Object(l.jsx)(r.EuiPageBody,{paddingSize:"none",panelled:!0},Object(l.jsx)(r.EuiSplitPanel.Outer,{grow:!0},Object(l.jsx)(r.EuiSplitPanel.Inner,{className:"eui-scrollBar",grow:!0,css:Ke},f===Ue&&Object(l.jsx)($e,{defaultConnectorId:e,defaultProvider:t,conversationSettings:b,setUpdatedConversationSettings:j,allSystemPrompts:x,actionTypeRegistry:p,selectedConversation:T,onSelectedConversationChange:M,http:m}),f===Ge&&Object(l.jsx)(z,{quickPromptSettings:v,onSelectedQuickPromptChange:F,selectedQuickPrompt:A,setUpdatedQuickPromptSettings:k}),f===He&&Object(l.jsx)(le,{conversationSettings:b,systemPromptSettings:x,onSelectedSystemPromptChange:P,selectedSystemPrompt:D,setUpdatedConversationSettings:j,setUpdatedSystemPromptSettings:w}),f===We&&Object(l.jsx)(E,{defaultAllow:y,defaultAllowReplacement:h,pageSize:5,setUpdatedDefaultAllow:O,setUpdatedDefaultAllowReplacement:S}),"FUNCTIONS_TAB"===f&&Object(l.jsx)(i.a.Fragment,null),"ADVANCED_TAB"===f&&Object(l.jsx)(de,null)),Object(l.jsx)(r.EuiSplitPanel.Inner,{grow:!1,color:"subdued",css:Ye},Object(l.jsx)(r.EuiModalFooter,{css:Qe},Object(l.jsx)(r.EuiButtonEmpty,{size:"s",onClick:n},c.b),Object(l.jsx)(r.EuiButton,{size:"s",type:"submit",onClick:R,fill:!0},c.e)))))))}));nt.displayName="AssistantSettings"},function(e,t,n){"use strict";n.d(t,"g",(function(){return i.ab})),n.d(t,"h",(function(){return i.jb})),n.d(t,"i",(function(){return i.kb})),n.d(t,"f",(function(){return i.K})),n.d(t,"a",(function(){return r.b})),n.d(t,"b",(function(){return r.c})),n.d(t,"c",(function(){return r.d})),n.d(t,"d",(function(){return r.f})),n.d(t,"e",(function(){return o.f}));var a=n(43),i=n(128);a.exact(a.type({tags:i.V,ids:i.U})),n(602),n(691),n(749);var r=n(506),o=n(283);a.intersection([i.J,i.T,a.type({invocationCount:a.number,timeframeEnd:a.string})]);var s=n(112);a.exact(a.partial({query:a.object,aggs:a.object,size:s.n,track_total_hits:a.boolean,_source:a.union([a.boolean,a.string,a.array(a.string)]),fields:a.array(a.string),runtime_mappings:a.unknown,sort:a.object})),a.intersection([a.type({status:i.ib}),a.partial({conflicts:i.X,signal_ids:i.gb,query:i.hb})]);const l=a.partial({requests_per_second:a.number,size:s.o,slices:s.n});a.intersection([a.exact(a.type({index:i.i})),a.exact(l)]),a.exact(a.type({migration_ids:a.array(a.string)})),a.exact(a.type({migration_ids:a.array(a.string)}));var c=n(193);a.exact(a.type({from:c.n}))},,function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.errorGetAlertDescription",{defaultMessage:"Failed to get signal index name"}),r=a.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.errorPostAlertDescription",{defaultMessage:"Failed to create signal index"}),o=a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.failedToIsolate.title",{defaultMessage:"Failed to isolate host"}),s=a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.casesFromAlerts.title",{defaultMessage:"Failed to find associated cases"})},function(e,t,n){"use strict";n.r(t),n.d(t,"selectTimeline",(function(){return r})),n.d(t,"selectInsertTimeline",(function(){return o})),n.d(t,"autoSaveMsgSelector",(function(){return s})),n.d(t,"timelineByIdSelector",(function(){return l})),n.d(t,"getShowCallOutUnauthorizedMsg",(function(){return c})),n.d(t,"getTimelineByIdSelector",(function(){return u})),n.d(t,"getKqlFilterQuerySelector",(function(){return d})),n.d(t,"getKqlFilterKuerySelector",(function(){return p}));var a=n(139);const i=e=>e.timeline.showCallOutUnauthorizedMsg,r=(e,t)=>e.timeline.timelineById[t],o=e=>e.timeline.insertTimeline,s=Object(a.createSelector)((e=>e.timeline.autoSavedWarningMsg),(e=>e)),l=Object(a.createSelector)((e=>e.timeline.timelineById),(e=>e)),c=()=>Object(a.createSelector)(i,(e=>e)),u=()=>Object(a.createSelector)(r,(e=>e)),d=()=>Object(a.createSelector)(r,(e=>e&&e.kqlQuery&&e.kqlQuery.filterQuery&&e.kqlQuery.filterQuery.kuery?e.kqlQuery.filterQuery.kuery.expression:null)),p=()=>Object(a.createSelector)(r,(e=>e&&e.kqlQuery&&e.kqlQuery.filterQuery&&e.kqlQuery.filterQuery.kuery?e.kqlQuery.filterQuery.kuery:null))},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return g}));var a=n(2),i=n(103),r=n(240),o=n.n(r),s=n(79),l=n(102),c=n(158),u=n(110),d=n(665),p=n(513),m=n(108);const f=o()(((e,t)=>{if(null==t)return{browserFields:{}};{const e={};for(const[n,a]of Object.entries(t)){const t=Object(s.getCategory)(n);null==e[t]&&(e[t]={fields:{}});const i=e[t].fields;i&&(i[n]=a)}return{browserFields:e}}}),((e,t)=>{var n,a;return e[0]===t[0]&&(null===(n=e[1])||void 0===n?void 0:n.length)===(null===(a=t[1])||void 0===a?void 0:a.length)})),g=()=>{const{data:e}=Object(l.j)().services,t=Object(a.useRef)({}),n=Object(a.useRef)({}),r=Object(i.useDispatch)(),{addError:o}=Object(m.a)(),s=Object(a.useCallback)((({id:e,loading:t})=>{r(c.a.setDataViewLoading({id:e,loading:t}))}),[r]);return{indexFieldsSearch:Object(a.useCallback)((({dataViewId:a,scopeId:i=u.SourcererScopeName.default,needToBeInit:l=!1,cleanCache:m=!1,skipScopeUpdate:f=!1})=>(n.current[a]&&n.current[a].unsubscribe(),t.current[a]&&t.current[a].abort(),(async()=>{try{t.current={...t.current,[a]:new AbortController},s({id:a,loading:!0});const n=await Object(d.a)(a,e.dataViews,m);l&&i&&!f&&r(c.a.setSelectedDataView({id:i,selectedDataViewId:a,selectedPatterns:n.patternList})),r(c.a.setDataView({...n,loading:!1}))}catch(e){o(null==e?void 0:e.message,{title:p.a})}})())),[s,e.dataViews,r,o])}}},function(e,t,n){"use strict";n.d(t,"c",(function(){return E})),n.d(t,"b",(function(){return x})),n.d(t,"a",(function(){return j}));var a=n(62),i=n.n(a),r=n(40),o=n(42),s=n(2),l=n.n(s),c=n(103),u=n(130),d=n.n(u),p=n(707),m=n(4),f=n(111),g=n(102),b=n(182),y=n(114),h=n(187);const v=l.a.memo((({duration:e,end:t,fromStr:n,id:a,isLoading:i,kqlQuery:c,policy:u,queries:d,setDuration:p,showUpdateButton:f=!0,start:b,startAutoReload:y,stopAutoReload:h,timelineId:v,toStr:x,updateReduxTime:j,disabled:O,width:S="restricted",compressed:k=!1})=>{const[w,I]=Object(s.useState)([]),T=Object(s.useCallback)((({start:e,end:n})=>{const i=e.includes("now")||n.includes("now"),{kqlHaveBeenUpdated:r}=j({end:n,id:a,isInvalid:!1,isQuickSelection:i,kql:c,start:e,timelineId:v}),o=E(e),s=i?E(n,{roundUp:!0}):E(n);!d||r||i&&(b!==o||t!==s)||M(d)}),[t,a,c,d,b,v,j]),C=Object(s.useCallback)((({isPaused:t,refreshInterval:i})=>{const r=null!=n&&n.includes("now")||null!=x&&x.includes("now");e!==i&&p({id:a,duration:i}),t&&"interval"===u?h({id:a}):t||"manual"!==u||y({id:a}),d&&!t&&(!r||r&&"now"!==x)&&M(d)}),[n,x,e,u,p,a,h,y,d]),M=e=>{e.forEach((e=>e.refetch&&e.refetch()))},A=Object(s.useCallback)((({start:e,end:t,isInvalid:n})=>{const i=e.includes("now")||t.includes("now");if(!n){j({end:t,id:a,isInvalid:n,isQuickSelection:i,kql:c,start:e,timelineId:v});const r=[{start:e,end:t},...Object(o.take)(9,w.filter((n=>!(n.start===e&&n.end===t))))];I(r)}}),[j,a,c,v,w]),_=null!=x?x:new Date(t).toISOString(),F=null!=n?n:new Date(b).toISOString(),[D]=Object(g.p)(m.V),N=Object(o.isEmpty)(D)?[]:D.map((({from:e,to:t,display:n})=>({start:e,end:t,label:n})));return l.a.createElement(r.EuiSuperDatePicker,{commonlyUsedRanges:N,end:_,isLoading:i,isPaused:"manual"===u,onRefresh:T,onRefreshChange:C,onTimeChange:A,recentlyUsedRanges:w,refreshInterval:e,showUpdateButton:f,start:F,isDisabled:O,width:S,compressed:k})}),((e,t)=>e.duration===t.duration&&e.end===t.end&&e.fromStr===t.fromStr&&e.id===t.id&&e.isLoading===t.isLoading&&e.policy===t.policy&&e.setDuration===t.setDuration&&e.start===t.start&&e.startAutoReload===t.startAutoReload&&e.stopAutoReload===t.stopAutoReload&&e.timelineId===t.timelineId&&e.disabled===t.disabled&&e.toStr===t.toStr&&e.updateReduxTime===t.updateReduxTime&&d()(e.kqlQuery,t.kqlQuery)&&d()(e.queries,t.queries))),E=(e,t)=>{const n=i.a.parse(e,t);return null!=n&&n.isValid()?n.toISOString():""},x=e=>({end:t,id:n,isQuickSelection:a,kql:i,start:r,timelineId:o})=>{const s=E(r);let l=E(t,{roundUp:!0});var c;return a?e(t===r?b.c.setAbsoluteRangeDatePicker({id:n,fromStr:r,toStr:t,from:s,to:l}):b.c.setRelativeRangeDatePicker({id:n,fromStr:r,toStr:t,from:s,to:l})):(l=E(t),e(b.c.setAbsoluteRangeDatePicker({id:n,from:E(r),to:E(t)}))),null!=o&&e(f.a.updateRange({id:o,start:s,end:l})),i&&i.refetch?{kqlHaveBeenUpdated:null!==(c=i.refetch(e))&&void 0!==c&&c}:{kqlHaveBeenUpdated:!1}};v.displayName="SuperDatePickerComponent";const j=Object(c.connect)((()=>{const e=Object(h.a)(),t=Object(h.b)(),n=Object(h.c)(),a=Object(h.d)(),i=Object(h.e)(),r=Object(h.f)(),s=Object(h.g)(),l=Object(h.h)(),c=Object(h.i)(),u=Object(h.j)();return(d,{id:m})=>{const f=Object(o.getOr)({},`inputs.${m}`,d);return{duration:e(f),end:t(f),fromStr:n(f),kind:i(f),policy:s(f),start:c(f),toStr:u(f),isLoading:!1,...Object(p.c)(f)&&(m===y.a.timeline||m===y.a.global)&&{isLoading:a(f),kqlQuery:r(f),queries:l(d,m)}}}}),(e=>({startAutoReload:({id:t})=>e(b.c.startAutoReload({id:t})),stopAutoReload:({id:t})=>e(b.c.stopAutoReload({id:t})),setDuration:({id:t,duration:n})=>e(b.c.setDuration({id:t,duration:n})),updateReduxTime:x(e)})))(v)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(42),i=n(2),r=n.n(i),o=n(150),s=n(950);const l=r.a.memo((({dataProvider:e})=>{var t;const[n,l]=Object(i.useState)(!1);return r.a.createElement(s.a,{deleteProvider:a.noop,field:e.queryMatch.displayField||e.queryMatch.field,kqlQuery:e.kqlQuery,isEnabled:e.enabled,isExcluded:e.excluded,providerId:e.id,isPopoverOpen:n,setIsPopoverOpen:l,toggleExcludedProvider:a.noop,toggleEnabledProvider:a.noop,toggleTypeProvider:a.noop,displayValue:String(null!==(t=e.queryMatch.displayValue)&&void 0!==t?t:e.queryMatch.value),val:e.queryMatch.value,operator:e.queryMatch.operator||o.d,type:e.type||o.a.default})}));l.displayName="Provider"},,,function(e,t,n){"use strict";n.d(t,"b",(function(){return F})),n.d(t,"a",(function(){return D}));var a=n(601),i=n(2),r=n.n(i),o=n(321),s=n(153),l=n(117),c=n(150),u=n(379),d=n(1407);const p={isInstance:(e,t)=>((e,t)=>-1===t.findIndex((t=>t.field===e)))(e,t),renderColumn:({columnName:e,eventId:t,field:n,isDraggable:a=!0,scopeId:i,truncate:p})=>a?r.a.createElement(o.b,{dataProvider:{enabled:!0,id:Object(s.i)(`empty-column-renderer-draggable-wrapper-${i}-${e}-${t}-${n.id}`),name:`${e}: ${Object(d.a)(null)}`,queryMatch:{field:n.id,value:Object(d.a)(null),displayValue:Object(l.e)(),operator:c.b},excluded:!0,kqlQuery:"",and:[]},isDraggable:a,key:`empty-column-renderer-draggable-wrapper-${i}-${e}-${t}-${n.id}`,render:(e,t,n)=>n.isDragging?r.a.createElement(o.a,null,r.a.createElement(u.a,{dataProvider:e})):r.a.createElement("span",null,Object(l.e)()),truncate:p,scopeId:i}):r.a.createElement("span",null,Object(l.e)())};var m=n(820),f=n(42),g=n(337);const b={isInstance:(e,t)=>((e,t)=>-1!==t.findIndex((t=>t.field===e)))(e,t),renderColumn:({asPlainText:e,columnName:t,eventId:n,field:a,isDraggable:i=!0,scopeId:o,truncate:s,values:c,linkValues:u})=>{return Array.isArray(c)&&0!==c.length?i?c.map(((l,c)=>{var d,p,m;return r.a.createElement(g.a,{asPlainText:e,contextId:`plain-column-renderer-formatted-field-value-${o}`,eventId:n,fieldFormat:null!==(d=a.format)&&void 0!==d?d:"",fieldName:t,isAggregatable:null!==(p=a.aggregatable)&&void 0!==p&&p,fieldType:null!==(m=a.type)&&void 0!==m?m:"",isDraggable:i,key:`plain-column-renderer-formatted-field-value-${o}-${t}-${n}-${a.id}-${l}-${c}`,linkValue:Object(f.head)(u),truncate:s,value:l})})):r.a.createElement(g.a,{asPlainText:e,contextId:`plain-column-renderer-formatted-field-value-${o}`,eventId:n,fieldFormat:null!==(d=a.format)&&void 0!==d?d:"",fieldName:t,isAggregatable:null!==(p=a.aggregatable)&&void 0!==p&&p,fieldType:null!==(m=a.type)&&void 0!==m?m:"",isDraggable:i,key:`plain-column-renderer-formatted-field-value-${o}-${t}-${n}-${a.id}`,linkValue:Object(f.head)(u),truncate:s,value:y(c)}):Object(l.d)();var d,p,m}};function y(e){return Array.isArray(e)?e.length>0?e.join(", "):e[0]:e}var h=n(871);const v={isInstance:()=>!0,renderColumn:()=>Object(l.d)()};var E=n(873),x=n(206),j=n(870),O=n(40),S=n(119),k=n(188),w=n(420);const I={isInstance:Object(f.isEqual)(k.k),renderColumn:({columnName:e,ecsData:t,eventId:n,field:a,isDetails:i,isDraggable:o=!0,linkValues:s,rowRenderers:l=[],scopeId:c,truncate:u,values:d})=>i&&d&&t&&l?d.map(((i,o)=>r.a.createElement(T,{ecsData:t,key:`reason-column-renderer-value-${c}-${e}-${n}-${a.id}-${i}-${o}`,rowRenderers:l,scopeId:c,value:i}))):b.renderColumn({columnName:e,eventId:n,field:a,isDetails:i,isDraggable:o,linkValues:s,scopeId:c,truncate:u,values:d})},T=({ecsData:e,rowRenderers:t,scopeId:n,value:a})=>{const o=Object(i.useMemo)((()=>Object(w.a)({data:e,rowRenderers:t})),[e,t]),s=Object(i.useMemo)((()=>o&&o.renderRow({data:e,isDraggable:!1,scopeId:n})),[o,e,n]),l=Object(i.useMemo)((()=>n===S.e.rulePreview),[n]);return r.a.createElement(r.a.Fragment,null,o&&s&&!l?r.a.createElement(O.EuiPanel,{color:"subdued",className:"eui-xScroll","data-test-subj":"reason-cell-renderer"},r.a.createElement(O.EuiText,{size:"xs"},r.a.createElement("div",{className:"eui-displayInlineBlock"},s))):a)};var C=n(41);const M=n.n(C)()(O.EuiFlexItem).withConfig({displayName:"EventRenderedFlexItem",componentId:"sc-1jiiiew-0"})(["div:first-child{padding-left:0px;div{margin:0px;}}"]),A={isInstance:Object(f.isEqual)(k.d),renderColumn:({ecsData:e,columnName:t,eventId:n,field:a,isDetails:i,linkValues:o,rowRenderers:s=[],scopeId:l,truncate:c,values:u})=>e&&s?r.a.createElement(_,{ecsData:e,key:`reason-column-renderer-value-${l}-${t}-${n}-${a.id}`,rowRenderers:s,scopeId:l,values:u}):b.renderColumn({columnName:t,eventId:n,field:a,isDetails:i,isDraggable:!1,linkValues:o,scopeId:l,truncate:c,values:u})},_=({ecsData:e,rowRenderers:t,scopeId:n,values:a})=>{const o=Object(i.useMemo)((()=>Object(w.a)({data:e,rowRenderers:t})),[e,t]),s=Object(i.useMemo)((()=>o&&o.renderRow({data:e,isDraggable:!1,scopeId:n})),[o,e,n]);return r.a.createElement(O.EuiFlexGroup,{gutterSize:"none",direction:"column",className:"eui-fullWidth"},o&&s?r.a.createElement(M,{className:"eui-xScroll"},r.a.createElement("div",{className:"eui-displayInlineBlock",style:{width:"fit-content"}},s)):a&&r.a.createElement(O.EuiFlexItem,{"data-test-subj":"plain-text-reason"},a))},F=[j.a,...a.a,...x.k,h.a,E.a,m.a],D=[I,A,b,p,v]},function(e,t,n){"use strict";n.d(t,"b",(function(){return x})),n.d(t,"a",(function(){return j.a}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(42),l=n(40),c=n(496),u=n.n(c),d=n(44),p=n(654);const m=({disableLinks:e,href:t,target:n,children:a,...i})=>o.a.createElement(l.EuiToolTip,{content:t},o.a.createElement(l.EuiLink,{href:e?void 0:t,"data-test-subj":"markdown-link",rel:"nofollow",target:"_blank"},a)),f=Object(r.memo)(m);var g=n(102),b=n(17),y=n(5);const h=y.i18n.translate("xpack.securitySolution.markdown.platinumWarning",{defaultMessage:"The following markdown may make use of subscription features"}),v=y.i18n.translate("xpack.securitySolution.markdown.invalid",{defaultMessage:"Invalid markdown detected"}),E=({children:e,disableLinks:t,textSize:n="m"})=>{const a=Object(r.useMemo)((()=>e=>o.a.createElement(f,i()({},e,{disableLinks:t}))),[t]),c=Object(s.cloneDeep)(p.c);c[1][1].components.a=a;const m=Object(b.b)().isAtLeast("platinum"),{application:y}=Object(g.j)().services,E=Object(r.useMemo)((()=>{if(!1===m){const t=String(e);return p.b.some((e=>new RegExp(e).test(t)))}return!1}),[e,m]),x=Object(r.useMemo)((()=>u()().use(p.a).use(c)),[c]),j=Object(r.useMemo)((()=>{try{return x.processSync(e),null}catch(e){return String(e.message)}}),[e,x]);return o.a.createElement(o.a.Fragment,null,E&&o.a.createElement(o.a.Fragment,null,o.a.createElement(l.EuiCallOut,{title:h,color:"primary",iconType:"lock"},o.a.createElement(d.FormattedMessage,{id:"xpack.securitySolution.markdown.premiumPluginLinkPrefix",defaultMessage:"To use these interactive markdown features, you must {link}.",values:{link:o.a.createElement(l.EuiLink,{href:y.getUrlForApp("management",{path:"stack/license_management/home"})},o.a.createElement(d.FormattedMessage,{id:"xpack.securitySolution.markdown.premiumPluginLinkSuffix",defaultMessage:"start a trial or upgrade your subscription"}))}})),o.a.createElement(l.EuiSpacer,{size:"s"})),null!==j&&o.a.createElement(o.a.Fragment,null,o.a.createElement(l.EuiCallOut,{title:v,color:"danger",iconType:"error"},j),o.a.createElement(l.EuiSpacer,{size:"s"})),o.a.createElement(l.EuiMarkdownFormat,{parsingPluginList:p.a,processingPluginList:c,textSize:n},e))};E.displayName="MarkdownRendererComponent";const x=Object(r.memo)(E);var j=n(452);n(481)},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(365),l=n(40),c=n(1102);const u=o.a.header.withConfig({displayName:"FiltersGlobalContainer",componentId:"sc-sjn739-0"})(["display:",";"],(({show:e})=>e?"block":"none"));u.displayName="FiltersGlobalContainer";const d=i.a.memo((({children:e,show:t=!0})=>{const{globalKQLHeaderPortalNode:n}=Object(c.a)();return i.a.createElement(s.a,{node:n},i.a.createElement(l.EuiPanel,{borderRadius:"none",color:"subdued",paddingSize:"none"},i.a.createElement(u,{"data-test-subj":"filters-global-container",show:t},e)))}));d.displayName="FiltersGlobal"},function(e,t,n){"use strict";n.d(t,"b",(function(){return p})),n.d(t,"a",(function(){return m}));var a=n(2),i=n(486),r=n(231),o=n(4);const s=e=>e.groups.some((e=>o.Lb.includes(e)));var l=n(108),c=n(1041),u=n(1436),d=n(162);const p=()=>{const{addError:e}=Object(l.a)(),t=Object(d.a)(),n=Object(r.a)(t),a=Object(i.a)(t),{isFetching:o,data:p=[]}=Object(u.a)({},{enabled:n&&a,onError:t=>{e(t,{title:c.a})}});return{isLicensed:a,isMlUser:n,jobs:p.filter(s),loading:o}},m=()=>{const{jobs:e,loading:t}=p();return{jobNameById:Object(a.useMemo)((()=>e.reduce(((e,t)=>{var n;return e[t.id]=null===(n=t.customSettings)||void 0===n?void 0:n.security_app_display_name,e}),{})),[e]),loading:t}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(2);const i=n(5).i18n.translate("xpack.securitySolution.userDetails.failSearchDescription",{defaultMessage:"Failed to run search on user details"});var r=n(508),o=n(425),s=n(194),l=n(124);const c="observedUsersDetailsQuery",u=({endDate:e,userName:t,indexNames:n,id:u=c,skip:d=!1,startDate:p})=>{const m=Object(l.a)("newUserDetailsFlyout"),{loading:f,result:g,search:b,refetch:y,inspect:h}=Object(s.a)({factoryQueryType:r.c.observedDetails,initialResult:{userDetails:{}},errorMessage:i,abort:d}),v=Object(a.useMemo)((()=>({endDate:e,userDetails:g.userDetails,id:u,inspect:h,refetch:y,startDate:p})),[e,u,h,y,g.userDetails,p]),E=Object(a.useMemo)((()=>({defaultIndex:n,factoryQueryType:r.c.observedDetails,userName:t,timerange:{interval:"12h",from:p,to:e},filterQuery:m?o.a:void 0})),[e,n,p,t,m]);return Object(a.useEffect)((()=>{d||b(E)}),[E,b,d]),[f,v]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(286),i=n(712);const r=(e,t=!0)=>{const n=Object(i.a)(e.to),r=Object(i.a)(e.from),{to:o,from:s}=Object(a.d)(t),l=n.isValid()?n.toISOString():o,c=r.isValid()?r.toISOString():s;return{...e,to:l,from:c}}},function(e,t,n){t.set=t.assoc=t.assocPath=n(972),t.setWith=n(1030)},function(e,t,n){"use strict";n.d(t,"g",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"b",(function(){return c})),n.d(t,"a",(function(){return u}));var a=n(5);const i=e=>a.i18n.translate("xpack.securitySolution.timeline.body.pinning.pinTooltip",{values:{isAlert:e},defaultMessage:"Pin {isAlert, select, true{alert} other{event}}"}),r=e=>a.i18n.translate("xpack.securitySolution.timeline.body.pinning.unpinTooltip",{values:{isAlert:e},defaultMessage:"Unpin {isAlert, select, true{alert} other{event}}"}),o=e=>a.i18n.translate("xpack.securitySolution.timeline.body.pinning.pinnnedWithNotesTooltip",{values:{isAlert:e},defaultMessage:"This {isAlert, select, true{alert} other{event}} cannot be unpinned because it has notes"}),s=a.i18n.translate("xpack.securitySolution.timeline.body.sort.sortedAscendingTooltip",{defaultMessage:"Sorted ascending"}),l=a.i18n.translate("xpack.securitySolution.timeline.body.sort.sortedDescendingTooltip",{defaultMessage:"Sorted descending"}),c=e=>a.i18n.translate("xpack.securitySolution.timeline.body.pinning.disablePinnnedTooltip",{values:{isAlert:e},defaultMessage:"This {isAlert, select, true{alert} other{event}} may not be pinned while editing a template timeline"}),u=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.timeline.body.actions.attachAlertToCaseForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"Attach the alert or event in row {ariaRowindex} to a case, with columns {columnValues}"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return E}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(114),c=n(407),u=n(454),d=n(561),p=n(642),m=n(643),f=n(644),g=n(230),b=n(211),y=n(110);const h=s.a.div.withConfig({displayName:"Wrapper",componentId:"sc-9cci34-0"})(["&.viz-actions{position:absolute;top:0;right:0;z-index:1;}&.histogram-viz-actions{padding:",";}"],(({theme:e})=>e.eui.euiSizeS)),v=({applyGlobalQueriesAndFilters:e=!0,className:t,extraActions:n,extraOptions:o,getLensAttributes:s,inputId:v=l.a.global,inspectIndex:E=0,isInspectButtonDisabled:x,isMultipleQuery:j,lensAttributes:O,onCloseInspect:S,queryId:k,timerange:w,title:I,scopeId:T=y.SourcererScopeName.default,stackByField:C,withDefaultActions:M=!0})=>{const{lens:A}=Object(c.b)().services,{canUseEditor:_,navigateToPrefilledEditor:F}=A,[D,N]=Object(i.useState)(!1),[P,R]=Object(i.useState)(!1),L=Object(i.useCallback)((()=>{N(!D)}),[D]),q=()=>{N(!1)},B=Object(p.a)({applyGlobalQueriesAndFilters:e,extraOptions:o,getLensAttributes:s,lensAttributes:O,scopeId:T,stackByField:C,title:""}),z=`stat-${k}`,{disabled:$,onAddToExistingCaseClicked:V}=Object(m.a)({onAddToCaseClicked:q,lensAttributes:B,timeRange:w}),{onAddToNewCaseClicked:U,disabled:G}=Object(f.a)({onClick:q,timeRange:w,lensAttributes:B}),H=Object(i.useCallback)((()=>{q(),w&&B&&F({id:"",timeRange:w,attributes:B},{openInNewTab:!0})}),[B,F,w]),W=Object(i.useCallback)((()=>{q(),R(!0)}),[]),Q=Object(i.useCallback)((()=>{R(!1),S&&S()}),[S]),{additionalRequests:Y,additionalResponses:K,handleClick:X,handleCloseModal:J,isButtonDisabled:Z,request:ee,response:te}=Object(d.a)({inputId:v,inspectIndex:E,isDisabled:x,multiple:j,onCloseInspect:Q,onClick:W,queryId:k}),ne=Object(i.useMemo)((()=>!_()||null==B),[B,_]),ae=Object(i.useMemo)((()=>{var e;const t={};return[...(null!==(e=null==n?void 0:n.map((e=>r.a.createElement(a.EuiContextMenuItem,{icon:null==e?void 0:e.getIconType(t),key:e.id,onClick:()=>e.execute(t),"data-test-subj":`viz-actions-${e.id}`},e.getDisplayName(t)))))&&void 0!==e?e:[])||[],...M?[r.a.createElement(a.EuiContextMenuItem,{icon:"inspect",key:"visualizationActionsInspect",onClick:X,disabled:Z,"data-test-subj":"viz-actions-inspect"},g.j),r.a.createElement(a.EuiContextMenuItem,{disabled:G,icon:"plusInCircle",key:"visualizationActionsAddToNewCase",onClick:U,"data-test-subj":"viz-actions-add-to-new-case"},g.c),r.a.createElement(a.EuiContextMenuItem,{disabled:$,"data-test-subj":"viz-actions-add-to-existing-case",icon:"plusInCircle",key:"visualizationActionsAddToExistingCase",onClick:V},g.b),r.a.createElement(a.EuiContextMenuItem,{icon:"visArea",key:"visualizationActionsOpenInLens","data-test-subj":"viz-actions-open-in-lens",disabled:ne,onClick:H},g.l)]:[]]}),[Z,ne,n,X,$,G,V,U,H,M]),ie=Object(i.useMemo)((()=>r.a.createElement(a.EuiButtonIcon,{"aria-label":g.k,className:b.a,"data-test-subj":z,iconType:"boxesHorizontal",onClick:L})),[z,L]);return r.a.createElement(h,{className:t},ae.length>0&&r.a.createElement(a.EuiPopover,{button:ie,isOpen:D,closePopover:q,panelPaddingSize:"none",anchorPosition:"downLeft",panelClassName:"withHoverActions__popover","data-test-subj":"viz-actions-popover"},r.a.createElement(a.EuiContextMenuPanel,{"data-test-subj":"viz-actions-panel",size:"s",items:ae})),P&&null!==ee&&null!==te&&r.a.createElement(u.a,{additionalRequests:Y,additionalResponses:K,closeModal:J,inputId:v,request:ee,response:te,title:I}))};v.displayName="VisualizationActionsComponent";const E=r.a.memo(v)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return d}));var a=n(2),i=n(45),r=n(116),o=n(183),s=n(921);const l=({setQuery:e,response:t,request:n,refetch:i,uniqueQueryId:r,deleteQuery:o,loading:s,searchSessionId:l})=>{Object(a.useEffect)((()=>(null!=i&&null!=e&&e({id:r,inspect:{dsl:[n],response:[t]},loading:s,refetch:i,searchSessionId:l}),()=>{o&&o({id:r})})),[e,s,t,n,i,r,o,l])};function c(e){var t;const n=null==e?void 0:e.subType;return!(null==n||null===(t=n.nested)||void 0===t||!t.path)}function u(e,t){const n=[];for(const[a,i]of Object.entries(e))t?i.aggregatable&&Object(s.a)(i.type)&&!c(i)&&n.push({label:a,value:a}):!0===i.aggregatable&&n.push({label:a,value:a});return n}const d=e=>{const{pathname:t}=Object(i.useLocation)(),{browserFields:n}=Object(r.d)(Object(r.a)(t)),s=Object(a.useMemo)((()=>Object(o.a)(n)),[n]),[l,c]=Object(a.useState)((()=>u(s,e)));return Object(a.useEffect)((()=>{c(u(s,e))}),[s,e]),Object(a.useMemo)((()=>l),[l])}},,function(e,t,n){"use strict";n.d(t,"b",(function(){return u})),n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(40),o=n(886),s=n(117),l=n(132),c=n(113);let u;!function(e){e.FIRST_SEEN="first-seen",e.LAST_SEEN="last-seen"}(u||(u={}));const d=i.a.memo((({indexPatterns:e,field:t,type:n,value:d})=>{const[p,{firstSeen:m,lastSeen:f,errorMessage:g}]=Object(o.a)({field:t,value:d,order:n===u.FIRST_SEEN?c.b.asc:c.b.desc,defaultIndex:e}),b=Object(a.useMemo)((()=>n===u.FIRST_SEEN?m:f),[m,f,n]);return null!=g?i.a.createElement(r.EuiToolTip,{position:"top",content:g,"data-test-subj":"firstLastSeenErrorToolTip","aria-label":`firstLastSeenError-${n}`,id:`firstLastSeenError-${t}-${n}`},i.a.createElement(r.EuiIcon,{"aria-describedby":`firstLastSeenError-${t}-${n}`,type:"warning"})):i.a.createElement(i.a.Fragment,null,p&&i.a.createElement(r.EuiLoadingSpinner,{"data-test-subj":"loading-spinner",size:"m"}),p||null==b||"Invalid Date"!==new Date(b).toString()?!p&&null!==b&&i.a.createElement(r.EuiText,{"data-test-subj":"first-last-seen-value",size:"s"},i.a.createElement(l.b,{value:`${b}`})):b,!p&&null===b&&Object(s.d)())}));d.displayName="FirstLastSeen"},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n(4),r=n(134),o=n(233),s=n(232),l=n(105),c=n(122);const u="countOfAlertsWithSameFieldAndValue",d=({field:e,value:t,isActiveTimelines:n,signalIndexName:i,includeAlertIds:d=!1,ignoreTimerange:m=!1})=>{const f=Object(l.a)((e=>c.d.timelineTimeRangeSelector(e))),g=Object(r.a)();let b,y;!1===m&&({to:b,from:y}=n?f:g);const[h]=Object(a.useState)((()=>p(e,t,y,b,d))),{loading:v,data:E,setQuery:x}=Object(o.a)({query:h,indexName:i,queryName:s.a.PREVALENCE});let j;if(Object(a.useEffect)((()=>{x(p(e,t,y,b,d))}),[x,e,t,y,b,d]),E){var O,S;const e=null===(O=E.aggregations)||void 0===O||null===(S=O[u])||void 0===S?void 0:S.buckets;e&&e.length>0&&(j=e[0].doc_count)}const k=!v&&void 0===j;return Object(a.useMemo)((()=>({loading:v,count:j,error:k,alertIds:null==E?void 0:E.hits.hits.map((({_id:e})=>e))})),[j,E,k,v])},p=(e,t,n,a,r)=>{const o=r?{size:i.N}:{size:0},s=r?{sort:{"@timestamp":"desc"}}:{},l=Array.isArray(t)&&1===t.length?t[0]:t;let c;return c={bool:{must:{match:{[e]:l}}}},void 0!==n&&void 0!==a&&(c={...c,bool:{...c.bool,filter:[{range:{"@timestamp":{gte:n,lte:a}}}]}}),Array.isArray(t)&&t.length>1&&(c={bool:{must:t.map((t=>({term:{[e]:t}})))}},void 0!==n&&void 0!==a&&c.bool.must.push({range:{"@timestamp":{gte:n,lte:a}}})),{...o,...s,_source:!1,aggs:{[u]:{terms:{field:e,size:i.N}}},query:c,runtime_mappings:{}}}},,function(e,t,n){const a=n(192);e.exports=(e,t,n)=>a(e,t,n)<=0},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(2),i=n(46),r=n(547),o=n(143),s=n(354);const l=["GET",r.b],c=e=>Object(i.useQuery)(l,(async({signal:e})=>await Object(o.i)({signal:e})),{...s.a,...e}),u=()=>{const e=Object(i.useQueryClient)();return Object(a.useCallback)((()=>{e.invalidateQueries(l,{refetchType:"active"})}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return de})),n.d(t,"b",(function(){return he}));var a=n(666),i=n(1405),r=n(772),o=n(3),s=n(1401),l=n.n(s),c=n(119),u=n(770),d=n(4),p=n(18),m=n(179),f=n(111),g=n(12),b=n(138),y=n(543),h=n(42),v=n(49),E=n(60),x=n(106),j=n(241),O=n(209),S=n(479),k=n(710),w=n(0),I=n.n(w);const T=new class manage_timeline_id_ManageEpicTimelineId{constructor(){I()(this,"timelineId",null),I()(this,"version",null),I()(this,"templateTimelineId",null),I()(this,"templateVersion",null)}getTimelineId(){return this.timelineId}getTimelineVersion(){return this.version}getTemplateTimelineId(){return this.templateTimelineId}getTemplateTimelineVersion(){return this.templateVersion}setTimelineId(e){this.timelineId=e}setTimelineVersion(e){this.version=e}setTemplateTimelineId(e){this.templateTimelineId=e}setTemplateTimelineVersion(e){this.templateVersion=e}},C=new o.Subject;var M=n(102);const A=[g.addNote.type,g.addNoteToEvent.type],_=(e,t)=>null!=e?t[e].note:"",F=[g.pinEvent.type,g.unPinEvent.type],D=[g.updateIsFavorite.type];var N=n(711);const P=[g.applyKqlFilterQuery.type,g.addProvider.type,g.addTimeline.type,g.dataProviderEdited.type,g.removeProvider.type,g.saveTimeline.type,g.setExcludedRowRendererIds.type,g.setFilters.type,g.setSavedQueryId.type,g.updateDataProviderEnabled.type,g.updateDataProviderExcluded.type,g.updateDataProviderType.type,g.updateEqlOptions.type,g.updateKqlMode.type,g.updateProviders.type,g.updateTitleAndDescription.type,g.updateDataView.type,g.removeColumn.type,g.updateColumns.type,g.updateSort.type,g.updateRange.type,g.upsertColumn.type],R=e=>e&&e.toLowerCase().startsWith("timeline"),L=()=>(e,t,{selectAllTimelineQuery:n,selectNotesByIdSelector:a,timelineByIdSelector:i,timelineTimeRangeSelector:r,kibana$:s})=>{const l=t.pipe(Object(E.map)(i),Object(E.filter)(N.h)),c=t.pipe(Object(E.map)((e=>n()(e,S.a))),Object(E.filter)(N.h)),u=t.pipe(Object(E.map)(a),Object(E.filter)(N.h)),p=t.pipe(Object(E.map)(r),Object(E.filter)(N.h));return Object(o.merge)(e.pipe(Object(E.withLatestFrom)(l),Object(E.filter)((([e,t])=>{const n=Object(h.get)("payload.id",e),a=t[n];if(e.type===j.addError.type)return!0;if(R(n)&&null!=a&&null!=a.status&&x.k.immutable===a.status)return!1;if(e.type===g.createTimeline.type&&R(n))T.setTimelineVersion(null),T.setTimelineId(null),T.setTemplateTimelineId(null),T.setTemplateTimelineVersion(null);else{if(e.type===g.addTimeline.type&&R(n)){const t=Object(h.get)("payload.timeline",e);return T.setTimelineId(t.savedObjectId),T.setTimelineVersion(t.version),T.setTemplateTimelineId(t.templateTimelineId),T.setTemplateTimelineVersion(t.templateTimelineVersion),Object(h.getOr)(!1,"payload.savedTimeline",e)}if(P.includes(e.type)&&!a.isLoading&&R(n))return!0}})),Object(E.debounceTime)(500),Object(E.mergeMap)((([e])=>(C.next({action:e}),Object(o.empty)())))),C.pipe(Object(E.delay)(500),Object(E.withLatestFrom)(l,u,p),Object(E.concatMap)((([t,n,a,i])=>{const r=Object(h.get)("action",t),p=T.getTimelineId(),m=T.getTimelineVersion(),f=T.getTemplateTimelineId(),b=T.getTemplateTimelineVersion();return A.includes(r.type)?((e,t,n,a,i,r,s)=>Object(o.from)((async({note:e,noteId:t,version:n,overrideOwner:a})=>{let i;try{i=JSON.stringify({noteId:t,version:n,note:e,overrideOwner:a})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}return await M.b.get().http.patch(d.Ob,{method:"PATCH",body:i})})({noteId:null,version:null,note:{eventId:e.payload.eventId,note:_(e.payload.noteId,n),timelineId:T.getTimelineId()}})).pipe(Object(E.withLatestFrom)(i,r,s),Object(E.mergeMap)((([t,n,a,i])=>{const r=e.payload.noteId,o=Object(h.get)("data.persistNote",t),s=403===o.code?[Object(g.showCallOutUnauthorizedMsg)()]:[];return null!=i.refetch&&i.refetch(),[...s,null==n[e.payload.id].savedObjectId?Object(g.updateTimeline)({id:e.payload.id,timeline:{...n[e.payload.id],savedObjectId:o.note.timelineId||null,version:o.note.timelineVersion||null}}):null,Object(j.updateNote)({note:{...a[r],created:null!=o.note.updated?new Date(o.note.updated):a[r].created,user:null!=o.note.updatedBy?o.note.updatedBy:a[r].user,saveObjectId:o.note.noteId,version:o.note.version}}),Object(g.endTimelineSaving)({id:e.payload.id})].filter((e=>null!=e))})),Object(E.startWith)(Object(g.startTimelineSaving)({id:e.payload.id})),Object(E.takeUntil)(a.pipe(Object(E.withLatestFrom)(i),Object(E.filter)((([e,t])=>e.type===j.addError.type||e.type===g.endTimelineSaving.type&&null!=t[Object(h.get)("payload.id",e)].savedObjectId&&(T.setTimelineId(t[Object(h.get)("payload.id",e)].savedObjectId),T.setTimelineVersion(t[Object(h.get)("payload.id",e)].version),!0)))))))(r,0,a,e,l,u,c):F.includes(r.type)?((e,t,n,a,i)=>Object(o.from)((async({eventId:e,pinnedEventId:t,timelineId:n})=>{let a;try{a=JSON.stringify({eventId:e,pinnedEventId:t,timelineId:n})}catch(e){return Promise.reject(new Error(`Failed to stringify query: ${JSON.stringify(e)}`))}return await M.b.get().http.patch(d.Ub,{method:"PATCH",body:a})})({pinnedEventId:null!=t[e.payload.id].pinnedEventsSaveObject[e.payload.eventId]?t[e.payload.id].pinnedEventsSaveObject[e.payload.eventId].pinnedEventId:null,eventId:e.payload.eventId,timelineId:T.getTimelineId()})).pipe(Object(E.withLatestFrom)(a,i),Object(E.mergeMap)((([t,n,a])=>{const i=n[e.payload.id],r=Object(h.get)("data.persistPinnedEventOnTimeline",t),o=r&&403===r.code?[Object(g.showCallOutUnauthorizedMsg)()]:[];return null!=a.refetch&&a.refetch(),[null!=r?Object(g.updateTimeline)({id:e.payload.id,timeline:{...i,savedObjectId:null==i.savedObjectId&&null!=r.timelineId?r.timelineId:i.savedObjectId,version:null==i.version&&null!=r.timelineVersion?r.timelineVersion:i.version,pinnedEventIds:{...i.pinnedEventIds,[e.payload.eventId]:!0},pinnedEventsSaveObject:{...i.pinnedEventsSaveObject,[e.payload.eventId]:r}}}):Object(g.updateTimeline)({id:e.payload.id,timeline:{...i,pinnedEventIds:Object(h.omit)(e.payload.eventId,i.pinnedEventIds),pinnedEventsSaveObject:Object(h.omit)(e.payload.eventId,i.pinnedEventsSaveObject)}}),...o,Object(g.endTimelineSaving)({id:e.payload.id})]})),Object(E.startWith)(Object(g.startTimelineSaving)({id:e.payload.id})),Object(E.takeUntil)(n.pipe(Object(E.withLatestFrom)(a),Object(E.filter)((([e,t])=>e.type===j.addError.type||e.type===g.endTimelineSaving.type&&null!=t[Object(h.get)("payload.id",e)].savedObjectId&&(T.setTimelineId(t[Object(h.get)("payload.id",e)].savedObjectId),T.setTimelineVersion(t[Object(h.get)("payload.id",e)].version),!0)))))))(r,n,e,l,c):D.includes(r.type)?((e,t,n,a,i)=>{var r;return Object(o.from)(Object(O.g)({timelineId:T.getTimelineId(),templateTimelineId:t[e.payload.id].templateTimelineId,templateTimelineVersion:t[e.payload.id].templateTimelineVersion,timelineType:null!==(r=t[e.payload.id].timelineType)&&void 0!==r?r:x.l.default})).pipe(Object(E.withLatestFrom)(a,i),Object(E.mergeMap)((([t,n,a])=>{const i=n[e.payload.id],r=Object(h.get)("data.persistFavorite",t),o=403===r.code?[Object(g.showCallOutUnauthorizedMsg)()]:[];return null!=a.refetch&&a.refetch(),[...o,Object(g.updateTimeline)({id:e.payload.id,timeline:{...i,isFavorite:null!=r.favorite&&r.favorite.length>0,savedObjectId:r.savedObjectId||null,version:r.version||null}}),Object(g.endTimelineSaving)({id:e.payload.id})]})),Object(E.startWith)(Object(g.startTimelineSaving)({id:e.payload.id})),Object(E.takeUntil)(n.pipe(Object(E.withLatestFrom)(a),Object(E.filter)((([e,t])=>e.type===j.addError.type||e.type===g.endTimelineSaving.type&&null!=t[Object(h.get)("payload.id",e)].savedObjectId&&(T.setTimelineId(t[Object(h.get)("payload.id",e)].savedObjectId),T.setTimelineVersion(t[Object(h.get)("payload.id",e)].version),T.setTemplateTimelineId(t[Object(h.get)("payload.id",e)].templateTimelineId),T.setTemplateTimelineVersion(t[Object(h.get)("payload.id",e)].templateTimelineVersion),!0))))))})(r,n,e,l,c):P.includes(r.type)?Object(o.from)(Object(O.h)({timelineId:p,version:m,timeline:{...B(n[r.payload.id],i),templateTimelineId:f,templateTimelineVersion:b}})).pipe(Object(E.withLatestFrom)(l,c,s),Object(E.mergeMap)((([e,t,n,a])=>{var i,o,s,l,c;const u=e;var d;if(null!=u.status_code&&405===u.status_code)return a.notifications.toasts.addDanger({title:k.f,text:null!==(d=u.message)&&void 0!==d?d:k.e}),[Object(g.endTimelineSaving)({id:r.payload.id})];const p=t[r.payload.id],m=Object(h.get)("data.persistTimeline",e);if(null==m)return[Object(g.endTimelineSaving)({id:r.payload.id})];const f=403===m.code?[Object(g.showCallOutUnauthorizedMsg)()]:[];return null!=n.refetch&&n.refetch(),[409===m.code?Object(g.updateAutoSaveMsg)({timelineId:r.payload.id,newTimelineModel:$(p,m.timeline)}):Object(g.updateTimeline)({id:r.payload.id,timeline:{...p,updated:null!==(i=m.timeline.updated)&&void 0!==i?i:void 0,savedObjectId:m.timeline.savedObjectId,version:m.timeline.version,status:null!==(o=m.timeline.status)&&void 0!==o?o:x.k.active,timelineType:null!==(s=m.timeline.timelineType)&&void 0!==s?s:x.l.default,templateTimelineId:null!==(l=m.timeline.templateTimelineId)&&void 0!==l?l:null,templateTimelineVersion:null!==(c=m.timeline.templateTimelineVersion)&&void 0!==c?c:null,isSaving:!1}}),...f,Object(g.endTimelineSaving)({id:r.payload.id})]})),Object(E.startWith)(Object(g.startTimelineSaving)({id:r.payload.id})),Object(E.takeUntil)(e.pipe(Object(E.withLatestFrom)(l),Object(E.filter)((([e,t])=>e.type===g.endTimelineSaving.type&&null!=t[Object(h.get)("payload.id",e)].savedObjectId&&(T.setTimelineId(t[Object(h.get)("payload.id",e)].savedObjectId),T.setTimelineVersion(t[Object(h.get)("payload.id",e)].version),T.setTemplateTimelineId(t[Object(h.get)("payload.id",e)].templateTimelineId),T.setTemplateTimelineVersion(t[Object(h.get)("payload.id",e)].templateTimelineVersion),!0)))))):Object(o.empty)()}))))},q={columns:null,dataProviders:null,dataViewId:null,description:null,eqlOptions:null,eventType:null,excludedRowRendererIds:null,filters:null,kqlMode:null,kqlQuery:null,indexNames:null,title:null,timelineType:x.l.default,templateTimelineVersion:null,templateTimelineId:null,dateRange:null,savedQueryId:null,sort:null,status:null},B=(e,t)=>Object.keys(q).reduce(((n,a)=>{if(Object(h.has)(a,e)){if("kqlQuery"===a)return Object(h.set)(`${a}.filterQuery`,Object(h.get)(`${a}.filterQuery`,e),n);if("dateRange"===a)return Object(h.set)(`${a}`,{start:t.from,end:t.to},n);if("columns"===a&&null!=Object(h.get)(a,e))return Object(h.set)(a,Object(h.get)(a,e).map((e=>Object(h.omit)(["initialWidth","width","__typename","esTypes"],e))),n);if("filters"===a&&null!=Object(h.get)(a,e)){const t=Object(h.get)(a,e);return Object(h.set)(a,null!=t?t.map((e=>{const t=Object(h.omit)(["$state"],e);return{...t,meta:{...t.meta,field:(Object(v.isMatchAllFilter)(t)||Object(v.isPhraseFilter)(t)||Object(v.isPhrasesFilter)(t)||Object(v.isRangeFilter)(t))&&null!=t.meta.field?V(t.meta.field):null,value:null!=t.meta.value?V(t.meta.value):null,params:null!=t.meta.params?V(t.meta.params):null},...Object(v.isMatchAllFilter)(t)?{query:{match_all:V(t.query.match_all)}}:{match_all:null},...Object(v.isExistsFilter)(t)&&null!=t.query.exists?{query:{exists:V(t.query.exists)}}:{exists:null},...!Object(v.isQueryStringFilter)(t)&&null==Object(h.get)("query",t)||null==t.query?{query:null}:{query:V(t.query)},...Object(v.isRangeFilter)(t)&&null!=t.query.range?{query:{range:V(t.query.range)}}:{range:null},...Object(v.isScriptedRangeFilter)(t)&&null!=t.query.script?{query:{script:V(t.query.script)}}:{script:null}}})):[],n)}return Object(h.set)(a,Object(h.get)(a,e),n)}return n}),q),z=(e,t)=>"__typename"===e?void 0:t,$=(e,t)=>JSON.parse(JSON.stringify(Object(h.merge)(e,t)),z),V=e=>{try{return Object(h.isObject)(e)?JSON.stringify(e):Object(h.toString)(e)}catch{return""}};var U=n(714);const{applyDeltaToColumnWidth:G,changeViewMode:H,removeColumn:W,toggleDetailPanel:Q,updateColumnOrder:Y,updateColumns:K,updateColumnWidth:X,updateIsLoading:J,updateItemsPerPage:Z,updateShowBuildingBlockAlertsFilter:ee,updateSort:te,upsertColumn:ne}=c.h,ae=e=>null!==e,ie=[W.type,ne.type,G.type,K.type,Y.type,X.type,Z.type,te.type,H.type,ee.type,g.updateTotalCount.type,J.type,Q.type];var re=n(110),oe=n(689),se=n(1433);function le(e){return e?{timeRange:{from:e.from,to:e.to}}:[]}var ce=n(158);let ue=null;const de=async(e,t,n,a,i)=>{var r,s,c,p;let m={name:null};try{!0===e.application.capabilities[d.tc].show&&(m=await e.http.fetch(d.bb,{method:"GET"}))}catch{m={name:null}}const f=e.uiSettings.get(d.H);let g,b;try{var h,v;const e=await Object(oe.a)({body:{patternList:[...f,...null!=m.name?[m.name]:[]]},dataViewService:t.data.dataViews,dataViewId:`${d.C}-${null===(h=await(null===(v=t.spaces)||void 0===v?void 0:v.getActiveSpace()))||void 0===h?void 0:h.id}`});if(void 0===e)throw new Error("");g={...re.initDataView,...e.defaultDataView},b=e.kibanaDataViews.map((e=>({...re.initDataView,...e})))}catch(e){g={...re.initDataView,error:e},b=[]}const E={kibana:e},x=new o.BehaviorSubject(E),j={timeline:{...n.timelines.store.initialState.timeline,timelineById:{...n.timelines.store.initialState.timeline.timelineById}}},O={dataTable:{tableById:{...n.alerts.storageDataTables.tableById,...n.rules.storageDataTables.tableById,...n.exceptions.storageDataTables.tableById,...n.explore.exploreDataTables.hosts.tableById,...n.explore.exploreDataTables.network.tableById,...n.explore.exploreDataTables.users.tableById}}},S={groups:u.b},k=l()(j.timeline,null!==(r=null===(s=t.timelines)||void 0===s?void 0:s.getTimelineReducer())&&void 0!==r?r:{},n.timelines.store.reducer.timeline),w=Object(y.a)({...n.explore.store.initialState,...j,...n.management.store.initialState},{defaultDataView:g,kibanaDataViews:b,signalIndexName:m.name,enableExperimental:i},O,S,{analyzer:{}}),I={...n.explore.store.reducer,timeline:k,...n.management.store.reducer};return ye(w,I,x.pipe(Object(o.pluck)("kibana")),a,[...null!==(c=n.management.store.middleware)&&void 0!==c?c:[],null!==(p=Object(se.a)((T=e,{relatedEvents:async({entityID:e,timeRange:t,indexPatterns:n})=>({...await T.http.post("/api/endpoint/resolver/events",{query:{},body:JSON.stringify({indexPatterns:n,...le(t),filter:JSON.stringify({bool:{filter:[{term:{"process.entity_id":e}},{bool:{must_not:{term:{"event.category":"process"}}}}]}})})}),entityID:e}),eventsWithEntityIDAndCategory({entityID:e,category:t,after:n,timeRange:a,indexPatterns:i}){const r={query:{afterEvent:n,limit:25},body:{...le(a),indexPatterns:i}};return"alert"===t?T.http.post("/api/endpoint/resolver/events",{query:r.query,body:JSON.stringify({...r.body,entityType:"alerts",eventID:e})}):T.http.post("/api/endpoint/resolver/events",{query:r.query,body:JSON.stringify({...r.body,filter:JSON.stringify({bool:{filter:[{term:{"process.entity_id":e}},{term:{"event.category":t}}]}})})})},async nodeData({ids:e,timeRange:t,indexPatterns:n,limit:a}){const i={query:{limit:a},body:JSON.stringify({indexPatterns:n,...le(t),filter:JSON.stringify({bool:{filter:[{terms:{"process.entity_id":e}},{term:{"event.category":"process"}}]}})})};return(await T.http.post("/api/endpoint/resolver/events",i)).events},async event({nodeID:e,eventID:t,eventCategory:n,eventTimestamp:a,winlogRecordID:i,timeRange:r,indexPatterns:o}){const s=void 0===t?{bool:{filter:[{terms:{"event.category":n}},{term:{"process.entity_id":e}},{term:{"@timestamp":a}},{term:{"winlog.record_id":i}}]}}:{bool:{filter:[{term:{"event.id":t}}]}};if(!1===n.includes("alert")){const e=await T.http.post("/api/endpoint/resolver/events",{query:{limit:1},body:JSON.stringify({indexPatterns:o,...le(r),filter:JSON.stringify(s)})}),[t]=e.events;return null!=t?t:null}{const e=await T.http.post("/api/endpoint/resolver/events",{query:{limit:1},body:JSON.stringify({indexPatterns:o,...le(r),entityType:"alertDetail",eventID:t})}),[n]=e.events;return null!=n?n:null}},resolverTree:async({dataId:e,schema:t,timeRange:n,indices:a,ancestors:i,descendants:r})=>T.http.post("/api/endpoint/resolver/tree",{body:JSON.stringify({ancestors:i,descendants:r,timeRange:n,schema:t,nodes:[e],indexPatterns:a})}),entities:async({_id:e,indices:t,signal:n})=>T.http.get("/api/endpoint/resolver/entity",{signal:n,query:{_id:e,indices:t}})})))&&void 0!==p?p:[]]);var T},pe=[g.updateTimeline.type,g.addTimeline.type,g.updateAutoSaveMsg.type,g.initializeTimelineSettings.type],me=e=>{if(e.type===ce.a.setDataView.type)return{...e,payload:{...e.payload,dataView:"dataView",browserFields:"browserFields",indexFields:"indexFields",fields:"fields"}};if(pe.includes(e.type)){const{type:t,payload:n}=e;if(t===g.addTimeline.type||t===g.updateTimeline.type)return{...e,payload:{...n,timeline:ge(n.timeline)}};if(t===g.updateAutoSaveMsg.type)return{...e,payload:{...n,newTimelineModel:ge(n.newTimelineModel)}};if(t===g.initializeTimelineSettings.type)return{...e,payload:{...n,timeline:ge(n.timeline)}}}return e},fe=e=>({...e,browserFields:"browserFields",indexFields:"indexFields",fields:"fields",dataView:"dataView"}),ge=e=>({...e,filterManager:"filterManager",footerText:"footerText",loadingText:"loadingText"}),be=e=>e.sourcerer?{...e,sourcerer:{...e.sourcerer,defaultDataView:fe(e.sourcerer.defaultDataView),kibanaDataViews:e.sourcerer.kibanaDataViews.map(fe)}}:e,ye=(e,t,n,s,l)=>{const u={name:"Kibana Security Solution",actionsBlacklist:["USER_MOVED_POINTER","USER_SET_RASTER_SIZE"],actionSanitizer:me,stateSanitizer:be},d=Object(i.composeWithDevTools)(u),g={kibana$:n,selectAllTimelineQuery:b.d.globalQueryByIdSelector,selectNotesByIdSelector:m.c.selectNotesByIdSelector,timelineByIdSelector:f.b.timelineByIdSelector,timelineTimeRangeSelector:b.d.timelineTimeRangeSelector,tableByIdSelector:c.j.tableByIdSelector,storage:s},v=Object(r.createEpicMiddleware)({dependencies:g}),x=Object(a.applyMiddleware)(v,p.g,...null!=l?l:[]);return ue=Object(a.createStore)(Object(y.b)(t),e,d(x)),v.run(Object(r.combineEpics)(L(),(e=>e.pipe(Object(E.filter)((e=>D.includes(e.type))),Object(E.mergeMap)((e=>(C.next({action:e}),Object(o.empty)()))))),(e=>e.pipe(Object(E.filter)((e=>A.includes(e.type))),Object(E.switchMap)((e=>(C.next({action:e}),Object(o.empty)()))))),(e=>e.pipe(Object(E.filter)((e=>F.includes(e.type))),Object(E.mergeMap)((e=>(C.next({action:e}),Object(o.empty)()))))),((e,t,{tableByIdSelector:n,storage:a})=>{const i=t.pipe(Object(E.map)(n),Object(E.filter)(ae));return e.pipe(Object(E.delay)(500),Object(E.withLatestFrom)(i),Object(E.tap)((([e,t])=>{if(ie.includes(e.type)&&a){const n=Object(h.get)("payload.id",e);Object(U.a)(a,n,t[n])}})),Object(E.ignoreElements)())}))),ue},he=()=>ue},function(e,t,n){"use strict";n.d(t,"c",(function(){return h})),n.d(t,"b",(function(){return E})),n.d(t,"d",(function(){return x})),n.d(t,"a",(function(){return j}));var a=n(2),i=n.n(a),r=n(40),o=n(44),s=n(5);const l=s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.cancel",{defaultMessage:"Cancel"}),c=s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.confirm",{defaultMessage:"Confirm"}),u=s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.comment",{defaultMessage:"Comment"}),d=s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.comment.placeholder",{defaultMessage:"You may leave an optional note here."}),p=e=>s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.isolation.successfulMessage",{defaultMessage:"Isolation on host {hostName} successfully submitted",values:{hostName:e}}),m=e=>s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.unisolate.successfulMessage",{defaultMessage:"Release on host {hostName} successfully submitted",values:{hostName:e}}),f=s.i18n.translate("xpack.securitySolution.endpoint.hostisolation.unisolate",{defaultMessage:"release"}),g=s.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.isolated",{defaultMessage:"isolated"});var b=n(822),y=n(123);const h=Object(a.memo)((({hostName:e,alertId:t,isolateAction:n="isolateHost",additionalInfo:s})=>i.a.createElement(r.EuiCallOut,{iconType:"check",color:"success",title:"isolateHost"===n?p(e):m(e),"data-test-subj":"isolateHost"===n?"hostIsolateSuccessMessage":"hostUnisolateSuccessMessage"},void 0!==t?(({alertIdForCase:e})=>{const{casesInfo:t}=Object(b.a)({alertId:e}),n=Object(a.useMemo)((()=>t.length),[t]),s=Object(a.useMemo)((()=>t.map(((e,t)=>i.a.createElement("li",{key:e.id},i.a.createElement(y.a,{detailName:e.id},i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.endpoint.hostIsolation.placeholderCase",defaultMessage:"{caseName}",values:{caseName:e.title}})))))),[t]);return i.a.createElement(i.a.Fragment,null,n>0&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("p",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.endpoint.hostIsolation.successfulIsolation.cases",defaultMessage:"This action has been attached to the following {caseCount, plural, one {case} other {cases}}:",values:{caseCount:n}}))),i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("ul",null,s))))})({alertIdForCase:t}):s)));h.displayName="EndpointIsolateSuccess";var v=n(1065);const E=Object(a.memo)((({hostName:e,onCancel:t,onConfirm:n,onChange:s,comment:p="",messageAppend:m,isLoading:f=!1})=>{const g=Object(a.useCallback)((e=>{s({comment:e.target.value})}),[s]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(v.a,null),i.a.createElement(r.EuiForm,{"data-test-subj":"endpointHostIsolationForm"},i.a.createElement(r.EuiFormRow,{fullWidth:!0},i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("p",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.endpoint.hostIsolation.isolateThisHost",defaultMessage:"Isolate host {hostName} from network.",values:{hostName:i.a.createElement("b",null,e)}}),i.a.createElement("br",null)),i.a.createElement("p",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.endpoint.hostIsolation.isolateThisHostAbout",defaultMessage:"Isolating a host will disconnect it from the network. The host will only be able to communicate with the Kibana platform."})," ",m))),i.a.createElement(r.EuiFormRow,{label:u,fullWidth:!0},i.a.createElement(r.EuiTextArea,{"data-test-subj":"host_isolation_comment",fullWidth:!0,placeholder:d,value:p,onChange:g})),i.a.createElement(r.EuiFormRow,{fullWidth:!0},i.a.createElement(r.EuiFlexGroup,{justifyContent:"flexEnd"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{onClick:t,disabled:f,"data-test-subj":"hostIsolateCancelButton"},l)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{fill:!0,onClick:n,disabled:f,isLoading:f,"data-test-subj":"hostIsolateConfirmButton"},c))))))}));E.displayName="EndpointIsolateForm";const x=Object(a.memo)((({hostName:e,onCancel:t,onConfirm:n,onChange:s,comment:p="",messageAppend:m,isLoading:b=!1})=>{const y=Object(a.useCallback)((e=>{s({comment:e.target.value})}),[s]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(v.a,null),i.a.createElement(r.EuiForm,{"data-test-subj":"endpointHostIsolationForm"},i.a.createElement(r.EuiFormRow,{fullWidth:!0},i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("p",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.endpoint.hostIsolation.unIsolateThisHost",defaultMessage:"{hostName} is currently {isolated}. Are you sure you want to {unisolate} this host?",values:{hostName:i.a.createElement("b",null,e),isolated:i.a.createElement("b",null,g),unisolate:i.a.createElement("b",null,f)}})," ",m))),i.a.createElement(r.EuiFormRow,{label:u,fullWidth:!0},i.a.createElement(r.EuiTextArea,{"data-test-subj":"host_isolation_comment",fullWidth:!0,placeholder:d,value:p,onChange:y})),i.a.createElement(r.EuiFormRow,{fullWidth:!0},i.a.createElement(r.EuiFlexGroup,{justifyContent:"flexEnd"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{onClick:t,disabled:b,"data-test-subj":"hostIsolateCancelButton"},l)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{fill:!0,onClick:n,disabled:b,isLoading:b},c))))))}));x.displayName="EndpointUnisolateForm";const j=i.a.memo((({onClick:e,buttonText:t})=>{const n=Object(a.useCallback)((()=>e()),[e]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",justifyContent:"flexEnd"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{flush:"right",onClick:n,"data-test-subj":"hostIsolateSuccessCompleteButton"},i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("p",null,t))))))}));j.displayName="ActionCompletionReturnButton"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"d",(function(){return a})),n.d(t,"e",(function(){return E})),n.d(t,"c",(function(){return x}));var a={};n.r(a),n.d(a,"authenticationsSelector",(function(){return c})),n.d(a,"hostsSelector",(function(){return u})),n.d(a,"hostRiskScoreSelector",(function(){return d})),n.d(a,"hostRiskScoreSeverityFilterSelector",(function(){return p})),n.d(a,"uncommonProcessesSelector",(function(){return m})),n.d(a,"hostsAnomaliesJobIdFilterSelector",(function(){return f})),n.d(a,"hostsAnomaliesIntervalSelector",(function(){return g}));var i=n(525),r=n(200),o=n(42),s=n(139);const l=(e,t)=>Object(o.get)(t,e.hosts),c=()=>Object(s.createSelector)(l,(e=>e.queries.authentications)),u=()=>Object(s.createSelector)(l,(e=>e.queries[r.HostsTableType.hosts])),d=()=>Object(s.createSelector)(l,(e=>e.queries[r.HostsTableType.risk])),p=()=>Object(s.createSelector)(l,(e=>e.queries[r.HostsTableType.risk].severitySelection)),m=()=>Object(s.createSelector)(l,(e=>e.queries.uncommonProcesses)),f=()=>Object(s.createSelector)(l,(e=>e.queries[r.HostsTableType.anomalies].jobIdSelection)),g=()=>Object(s.createSelector)(l,(e=>e.queries[r.HostsTableType.anomalies].intervalSelection));var b=n(208),y=n(113),h=n(314),v=n(835);const E={page:{queries:{[r.HostsTableType.authentications]:{activePage:h.a,limit:h.b},[r.HostsTableType.hosts]:{activePage:h.a,limit:h.b,direction:y.b.desc,sortField:y.h.lastSeen},[r.HostsTableType.events]:{activePage:h.a,limit:h.b},[r.HostsTableType.uncommonProcesses]:{activePage:h.a,limit:h.b},[r.HostsTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"},[r.HostsTableType.risk]:{activePage:h.a,limit:h.b,sort:{field:y.x.hostRiskScore,direction:y.b.desc},severitySelection:[]},[r.HostsTableType.sessions]:{activePage:h.a,limit:h.b}}},details:{queries:{[r.HostsTableType.authentications]:{activePage:h.a,limit:h.b},[r.HostsTableType.hosts]:{activePage:h.a,direction:y.b.desc,limit:h.b,sortField:y.h.lastSeen},[r.HostsTableType.events]:{activePage:h.a,limit:h.b},[r.HostsTableType.uncommonProcesses]:{activePage:h.a,limit:h.b},[r.HostsTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"},[r.HostsTableType.risk]:{activePage:h.a,limit:h.b,sort:{field:y.x.hostRiskScore,direction:y.b.desc},severitySelection:[]},[r.HostsTableType.sessions]:{activePage:h.a,limit:h.b}}}},x=Object(b.reducerWithInitialState)(E).case(i.setHostTablesActivePageToZero,(e=>({...e,page:{...e.page,queries:Object(v.c)(e)},details:{...e.details,queries:Object(v.b)(e)}}))).case(i.setHostDetailsTablesActivePageToZero,(e=>({...e,details:{...e.details,queries:Object(v.b)(e)}}))).case(i.updateTableActivePage,((e,{activePage:t,hostsType:n,tableType:a})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[a]:{...e[n].queries[a],activePage:t}}}}))).case(i.updateTableLimit,((e,{limit:t,hostsType:n,tableType:a})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[a]:{...e[n].queries[a],limit:t}}}}))).case(i.updateHostsSort,((e,{sort:t,hostsType:n})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[r.HostsTableType.hosts]:{...e[n].queries[r.HostsTableType.hosts],direction:t.direction,sortField:t.field,activePage:h.a}}}}))).case(i.updateHostRiskScoreSort,((e,{sort:t,hostsType:n})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[r.HostsTableType.risk]:{...e[n].queries[r.HostsTableType.risk],sort:t}}}}))).case(i.updateHostRiskScoreSeverityFilter,((e,{severitySelection:t,hostsType:n})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[r.HostsTableType.risk]:{...e[n].queries[r.HostsTableType.risk],severitySelection:t,activePage:h.a}}}}))).case(i.updateHostsAnomaliesJobIdFilter,((e,{jobIds:t,hostsType:n})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[r.HostsTableType.anomalies]:{...e[n].queries[r.HostsTableType.anomalies],jobIdSelection:t}}}}))).case(i.updateHostsAnomaliesInterval,((e,{interval:t,hostsType:n})=>({...e,[n]:{...e[n],queries:{...e[n].queries,[r.HostsTableType.anomalies]:{...e[n].queries[r.HostsTableType.anomalies],intervalSelection:t}}}}))).build()},function(e,t,n){"use strict";n.d(t,"a",(function(){return g})),n.d(t,"b",(function(){return b}));var a=n(46),i=n(2),r=n(373),o=n(143),s=n(8);const l=["TA0043","TA0042","TA0001","TA0002","TA0003","TA0004","TA0005","TA0006","TA0007","TA0008","TA0009","TA0011","TA0010","TA0040"],c=()=>n.e(19).then(n.bind(null,1443));function u(e){const t={totalRulesCount:Object.keys(e).length,totalEnabledRulesCount:0};for(const n of Object.keys(e))e[n].activity===r.b.Enabled&&t.totalEnabledRulesCount++;return t}function d(e){const t={enabledRules:[],disabledRules:[],availableRules:[]};for(const n of e.unmapped_rule_ids)p(t,n,e.rules_data[n]);return t}function p(e,t,n){n&&(n.activity===r.b.Enabled?e.enabledRules.push({id:t,name:n.name}):n.activity===r.b.Disabled&&e.disabledRules.push({id:t,name:n.name}))}var m=n(354);const f=["POST",r.d],g=(e={},t)=>Object(a.useQuery)([...f,e],(async({signal:t})=>async function(e){const t=await c(),{tactics:n,techniques:a,subtechniques:i}=t,r=function(e,t,n){const a=new Map;for(const e of n){const t={id:e.id,name:e.name,reference:e.reference,enabledRules:[],disabledRules:[],availableRules:[]},n=a.get(e.techniqueId);n?n.push(t):a.set(e.techniqueId,[t])}const i=new Map;for(const e of t){var r;const t={id:e.id,name:e.name,reference:e.reference,subtechniques:null!==(r=a.get(e.id))&&void 0!==r?r:[],enabledRules:[],disabledRules:[],availableRules:[]};for(const n of e.tactics){const e=i.get(n);e?e.push(t):i.set(n,[t])}}const o=e.sort(((e,t)=>l.indexOf(e.id)-l.indexOf(t.id))),c=[];for(const e of o){var u;c.push({id:e.id,name:e.name,reference:e.reference,techniques:null!==(u=i.get(Object(s.kebabCase)(e.name)))&&void 0!==u?u:[],enabledRules:[],disabledRules:[],availableRules:[]})}return c}(n,a,i);for(const t of r){for(const n of null!==(o=e.coverage[t.id])&&void 0!==o?o:[]){var o;p(t,n,e.rules_data[n])}for(const n of t.techniques){for(const t of null!==(m=e.coverage[n.id])&&void 0!==m?m:[]){var m;p(n,t,e.rules_data[t])}for(const t of n.subtechniques)for(const n of null!==(f=e.coverage[t.id])&&void 0!==f?f:[]){var f;p(t,n,e.rules_data[n])}}}return{mitreTactics:r,unmappedRules:d(e),metrics:u(e.rules_data)}}(await Object(o.g)({signal:t,filter:e}))),{...m.a,...t}),b=()=>{const e=Object(a.useQueryClient)();return Object(i.useCallback)((()=>{e.invalidateQueries(f,{refetchType:"active"})}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return j}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(155),c=n(383),u=n(639),d=n(5);const p=d.i18n.translate("xpack.securitySolution.alertDetails.summary.readMore",{defaultMessage:"Read More"}),m=d.i18n.translate("xpack.securitySolution.alertDetails.summary.readLess",{defaultMessage:"Read Less"}),f=s()(a.EuiButtonEmpty).withConfig({displayName:"ReadMore",componentId:"sc-1cdn95f-0"})(["span.euiButtonContent{padding:0;}"]),g=s.a.div.withConfig({displayName:"ExpandedContent",componentId:"sc-1cdn95f-1"})(["max-height:33vh;overflow-wrap:break-word;overflow-x:hidden;overflow-y:auto;"]),b=s.a.div.withConfig({displayName:"StyledLineClamp",componentId:"sc-1cdn95f-2"})(["display:-webkit-box;-webkit-line-clamp:",";-webkit-box-orient:vertical;overflow:hidden;max-height:","em;height:","em;"],3,(({lineClampHeight:e})=>e),(({lineClampHeight:e})=>e)),y=({children:e,lineClampHeight:t=5.5})=>{const[n,a]=Object(i.useState)(null),[o,s]=Object(u.a)(e),l=Object(i.useCallback)((()=>{a((e=>!e))}),[]);return n?r.a.createElement(r.a.Fragment,null,r.a.createElement(g,{"data-test-subj":"expanded-line-clamp"},r.a.createElement("p",null,e)),o&&r.a.createElement(f,{onClick:l,size:"s","data-test-subj":"summary-view-readmore"},m)):r.a.createElement(r.a.Fragment,null,null==o||!0===o?r.a.createElement(b,{"data-test-subj":"styled-line-clamp",ref:s,lineClampHeight:t},e):e,o&&r.a.createElement(f,{onClick:l,size:"s","data-test-subj":"summary-view-readmore"},p))},h=r.a.memo(y),v=s.a.div.withConfig({displayName:"Indent",componentId:"sc-1pv3muo-0"})(["padding:0 8px;word-break:break-word;"]),E=Object(i.createContext)({}),x=({basicData:e,ruleNote:t,showFullView:n=!1,showTitle:i=!0})=>r.a.createElement(E.Provider,{value:e},i&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(a.EuiTitle,{size:"xxxs","data-test-subj":"summary-view-guide"},r.a.createElement("h5",null,l.q)),r.a.createElement(a.EuiSpacer,{size:"s"})),r.a.createElement(v,null,n?r.a.createElement(a.EuiText,{size:"xs","data-test-subj":"investigation-guide-full-view"},r.a.createElement(c.b,null,t)):r.a.createElement(a.EuiText,{size:"xs","data-test-subj":"investigation-guide-clamped"},r.a.createElement(h,{lineClampHeight:4.5},r.a.createElement(c.b,null,t))))),j=r.a.memo(x)},function(e,t,n){"use strict";n.d(t,"a",(function(){return U}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(103),l=n(41),c=n.n(l),u=n(723),d=n(105),p=n(138),m=n(724),f=n(114),g=n(482),b=n(44),y=n(73),h=n(40),v=n(151),E=n(102),x=n(642),j=n(407),O=n(643),S=n(644),k=n(230),w=n(455);const I=({callback:e})=>({id:"openInLens",getDisplayName:e=>k.l,getIconType:e=>"visArea",type:"actionButton",isCompatible:async e=>!0,async execute(t){e()},order:1}),T=({callback:e,disabled:t})=>({id:"addToNewCase",getDisplayName:e=>k.c,getIconType:e=>"casesApp",type:"actionButton",isCompatible:async e=>!0,async execute(t){e()},disabled:t,order:3}),C=({callback:e,disabled:t})=>({id:"inspect",getDisplayName:e=>w.d,getIconType:e=>"inspect",type:"actionButton",isCompatible:async e=>!0,async execute(t){e()},disabled:t,order:4}),M=({callback:e,disabled:t})=>({id:"addToExistingCase",getDisplayName:e=>k.b,getIconType:e=>"casesApp",type:"actionButton",isCompatible:async e=>!0,async execute(t){e()},disabled:t,order:2});var A=n(122),_=n(454),F=n(211),D=n(110),N=n(390);const P=c.a.div.withConfig({displayName:"LensComponentWrapper",componentId:"sc-1ajgxgj-0"})(["height:",";width:",";"," .embPanel__header{z-index:2;position:absolute;right:0;}.expExpressionRenderer__expression{padding:2px 0 0 0 !important;}.legacyMtrVis__container{padding:0;}"],(({$height:e})=>e?`${e}px`:"auto"),(({width:e})=>null!=e?e:"auto"),(({$addHoverActionsPadding:e})=>e?".embPanel__header { top: -24px; }":"")),R={requests:void 0,responses:void 0,isLoading:!0},L=({applyGlobalQueriesAndFilters:e=!0,extraActions:t,extraOptions:n,getLensAttributes:a,height:i,id:l,inputsModelId:c=f.a.global,inspectTitle:u,lensAttributes:p,onLoad:m,scopeId:g=D.SourcererScopeName.default,stackByField:k,timerange:w,width:L,withActions:B=!0})=>{var z,$,V,U;const G=Object(r.useMemo)((()=>({height:null!=i?i:"100%",minWidth:"100px",width:null!=L?L:"100%"})),[i,L]),{lens:H,data:{actions:{createFiltersFromValueClickAction:W}}}=Object(E.j)().services,Q=Object(s.useDispatch)(),[Y,K]=Object(r.useState)(!1),[X,J]=Object(r.useState)(R),Z=A.d.globalQueryByIdSelector(),{searchSessionId:ee}=Object(d.a)((e=>Z(e,l))),te=Object(x.a)({applyGlobalQueriesAndFilters:e,extraOptions:n,getLensAttributes:a,lensAttributes:p,scopeId:g,stackByField:k,title:""}),ne=null==te||null===(z=te.state)||void 0===z||null===($=z.visualization)||void 0===$?void 0:$.preferredSeriesType,ae="lnsLegacyMetric"!==(null==te?void 0:te.visualizationType)&&"lnsPie"!==(null==te?void 0:te.visualizationType),ie=H.EmbeddableComponent,re=Object(r.useMemo)((()=>({onInspectActionClicked:()=>{K(!0)},isDisabled:X.isLoading})),[X.isLoading]),oe=(({attributes:e,extraActions:t,inspectActionProps:n,timeRange:a,withActions:i})=>{const{lens:o}=Object(j.b)().services,{navigateToPrefilledEditor:s}=o,[l,c]=Object(r.useState)(["inspect","addToNewCase","addToExistingCase","openInLens"]);Object(r.useEffect)((()=>{!1===i&&c([])}),[i]);const u=Object(r.useCallback)((()=>{a&&e&&s({id:"",timeRange:a,attributes:e},{openInNewTab:!0})}),[e,s,a]),{disabled:d,onAddToExistingCaseClicked:p}=Object(O.a)({lensAttributes:e,timeRange:a}),{onAddToNewCaseClicked:m,disabled:f}=Object(S.a)({timeRange:a,lensAttributes:e});return Object(r.useMemo)((()=>null==l?void 0:l.reduce(((e,t)=>"inspect"===t&&null!=n?[...e,C({callback:null==n?void 0:n.onInspectActionClicked,disabled:null==n?void 0:n.isDisabled})]:"addToExistingCase"===t?[...e,M({callback:p,disabled:d})]:"addToNewCase"===t?[...e,T({callback:m,disabled:f})]:"openInLens"===t?[...e,I({callback:u})]:e),[])),[l,n,p,d,m,f,u]).concat(null!=t?t:[])})({attributes:te,extraActions:t,inspectActionProps:re,timeRange:w,withActions:B}),se=Object(r.useCallback)((()=>{K(!1)}),[]),le=Object(r.useCallback)((({range:e})=>{const[t,n]=e;Q(Object(v.setAbsoluteRangeDatePicker)({id:c,from:new Date(t).toISOString(),to:new Date(n).toISOString()}))}),[Q,c]),ce=Object(r.useMemo)((()=>{var e;const[t,...n]=null!==(e=X.requests)&&void 0!==e?e:[];return{request:t,additionalRequests:n}}),[X.requests]),ue=Object(r.useMemo)((()=>{var e;const[t,...n]=null!==(e=X.responses)&&void 0!==e?e:[];return{response:t,additionalResponses:n}}),[X.responses]),de=Object(r.useCallback)(((e,t)=>{var n;if(!t)return;const a=Object(F.f)(null==t||null===(n=t.requests)||void 0===n?void 0:n.getRequests());J({requests:a.requests,responses:a.responses,isLoading:e}),null!=m&&m({requests:a.requests,responses:a.responses,isLoading:e})}),[m]),pe=Object(r.useCallback)((async e=>{if(!q(e)||"area"!==ne)return;const[{query:t}]=await W({data:e.data,negate:e.negate}),n=null==t?void 0:t.range["@timestamp"];null!=n&&n.gte&&null!=n&&n.lt&&le({range:[n.gte,n.lt]})}),[W,le,ne]),me=Object(r.useMemo)((()=>{var e,t;return null!=(null==te||null===(e=te.state)||void 0===e?void 0:e.adHocDataViews)?Object.values(null==te||null===(t=te.state)||void 0===t?void 0:t.adHocDataViews).reduce(((e,t)=>(null!=(null==t?void 0:t.name)&&e.push(null==t?void 0:t.name),e)),[]):null}),[null==te||null===(V=te.state)||void 0===V?void 0:V.adHocDataViews]);return ee?!te||null!=(null==X?void 0:X.responses)&&0===(null==X||null===(U=X.responses)||void 0===U?void 0:U.length)?o.a.createElement(h.EuiFlexGroup,null,o.a.createElement(h.EuiFlexItem,{grow:1},o.a.createElement(h.EuiEmptyPrompt,{body:o.a.createElement(h.EuiText,{size:"xs"},o.a.createElement(b.FormattedMessage,{id:"xpack.securitySolution.lensEmbeddable.NoDataToDisplay.title",defaultMessage:"No data to display"}))})),o.a.createElement(h.EuiFlexItem,{grow:!1},o.a.createElement(N.a,{extraActions:t,getLensAttributes:a,inputId:c,isInspectButtonDisabled:!0,lensAttributes:te,queryId:l,stackByField:k,timerange:w,title:u,withDefaultActions:!1}))):o.a.createElement(o.a.Fragment,null,te&&ee&&o.a.createElement(P,{$height:i,width:L,$addHoverActionsPadding:ae},o.a.createElement(ie,{id:l,style:G,timeRange:w,attributes:te,onLoad:de,onBrushEnd:le,onFilter:pe,viewMode:y.ViewMode.VIEW,withDefaultActions:!1,extraActions:oe,searchSessionId:ee,showInspector:!1,syncTooltips:!1,syncCursor:!1})),Y&&null!=ce.request&&null!=ue.response&&o.a.createElement(_.a,{adHocDataViews:me,additionalRequests:ce.additionalRequests,additionalResponses:ue.additionalResponses,closeModal:se,"data-test-subj":"inspect-modal",inputId:c,request:ce.request,response:ue.response,title:u})):null},q=e=>Array.isArray(e.data)&&"column"in e.data[0],B=o.a.memo(L);var z=n(116),$=n(413);const V=e=>{var t,n;const a=Object(s.useDispatch)(),{inputId:c=f.a.global,id:b,isDonut:y,label:h,donutTextWrapperClassName:v,onLoad:E,...x}=e,{session:j,refetchByRestartingSession:O,refetchByDeletingSession:S}=Object(g.a)({inputId:c,queryId:b}),{indicesExist:k}=Object(z.d)(x.scopeId),w=Object(r.useRef)(x.timerange),I=p.d.globalQueryByIdSelector(),{searchSessionId:T}=Object(d.a)((e=>I(e,b))),C=Object($.a)({visualizationId:b}),M=null!=C&&0!==(null===(t=C[0])||void 0===t||null===(n=t.hits)||void 0===n?void 0:n.total),A=M?Object(l.css)(["top:40%;right:12%;"]):Object(l.css)(["top:66%;right:12%;"]),_=Object(r.useCallback)((({requests:e,responses:t,isLoading:n})=>{a(p.b.setQuery({inputId:c,id:b,searchSessionId:j.current.start(),refetch:O,loading:n,inspect:{dsl:e,response:t}})),"function"==typeof E&&E({requests:e,responses:t,isLoading:n})}),[a,c,b,j,O,E]);return Object(r.useEffect)((()=>{var e,t;(!k&&(null===(e=w.current)||void 0===e?void 0:e.from)!==x.timerange.from||(null===(t=w.current)||void 0===t?void 0:t.to)!==x.timerange.to)&&(w.current=x.timerange,a(p.b.deleteOneQuery({inputId:c,id:b})))}),[a,b,k,c,x.timerange]),Object(r.useEffect)((()=>{T||setTimeout((()=>{a(p.b.setQuery({inputId:c,id:b,searchSessionId:j.current.start(),refetch:M?O:S,loading:!1,inspect:null}))}),200)}),[a,c,b,j,M,O,T,S]),Object(r.useEffect)((()=>()=>{a(p.b.deleteOneQuery({inputId:c,id:b}))}),[a,b,c]),(x.getLensAttributes||x.lensAttributes)&&x.timerange?y?o.a.createElement(m.b,{isChartEmbeddablesEnabled:!0,dataExists:M,label:h,title:M?o.a.createElement(u.a,{count:null===(F=C[0])||void 0===F||null===(D=F.hits)||void 0===D?void 0:D.total}):null,donutTextWrapperClassName:v,donutTextWrapperStyles:A},o.a.createElement(B,i()({},x,{id:b,onLoad:_}))):o.a.createElement(B,i()({},x,{id:b,onLoad:_})):null;var F,D},U=o.a.memo(V)},function(e,t,n){e.exports=n(33)(448)},function(e,t,n){"use strict";e.exports=n(963)},function(e,t,n){"use strict";e.exports=n(969)},,function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return o}));var a=n(167);let i;!function(e){e.eventEnrichment="eventEnrichment",e.dataSource="dataSource"}(i||(i={}));const r=Object.keys(a.d),o=e=>r.includes(e)},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(324),i=n(174);const r=e=>Object(a.flow)(l)(e),o=e=>Object(a.flow)(s)(e),s=e=>{if("threat_match"===e.type&&null!=e.threat_mapping){const t=e.threat_mapping.map((e=>{const t=e.entries.map((e=>Object(i.d)(e)));return Object(i.d)({entries:t})}));return{...e,threat_mapping:t}}return e},l=e=>{if("threat_match"===e.type&&null!=e.threat_mapping){const t=e.threat_mapping.map((e=>{const t=e.entries.map((e=>Object(i.g)(e)));return{...Object(i.g)(e),entries:t}}));return{...e,threat_mapping:t}}return e}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(239);const i=({status:e,query:t,signalIds:n,signal:i})=>{if(n&&n.length>0)return Object(a.j)({status:e,signalIds:n,signal:i}).then((({items:e})=>({updated:e.length,version_conflicts:0})));if(t)return Object(a.k)({status:e,query:t,signal:i}).then((({updated:e,version_conflicts:t})=>({updated:null!=e?e:0,version_conflicts:t})));throw new Error("Either query or signalIds must be provided")}},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(263),i=n(668),r=n(195);const o=e=>`${Object(r.a)(e)}`,s=(e,t,n,o=i.a.flows)=>`/ip/${e}/${t||a.a.source}/${o}${Object(r.a)(n)}`},function(e,t,n){"use strict";n.d(t,"a",(function(){return b})),n.d(t,"c",(function(){return y})),n.d(t,"b",(function(){return h})),n.d(t,"d",(function(){return E}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(103),c=n(106),u=n(111),d=n(105),p=n(248),m=n(242),f=n(133);s()(a.EuiBadge).withConfig({displayName:"NotesCountBadge",componentId:"sc-v4xtfs-0"})(["margin-left:5px;"]).displayName="NotesCountBadge";const g=({timelineId:e})=>{const t=Object(l.useDispatch)(),n=Object(i.useMemo)((()=>u.b.getTimelineByIdSelector()),[]),o=Object(d.b)((t=>{var a;return(null!==(a=n(t,e))&&void 0!==a?a:f.b).isFavorite})),s=Object(d.b)((t=>{var a;return(null!==(a=n(t,e))&&void 0!==a?a:f.b).status}))===c.k.immutable,m=Object(i.useCallback)((()=>t(u.a.updateIsFavorite({id:e,isFavorite:!o}))),[t,e,o]);return r.a.createElement(a.EuiButton,{isSelected:o,fill:o,iconType:o?"starFilled":"starEmpty",onClick:m,"data-test-subj":`timeline-favorite-${o?"filled":"empty"}-star`,disabled:s},o?p.j:p.b)};g.displayName="AddToFavoritesButtonComponent";const b=r.a.memo(g),y=r.a.memo((({closeGearMenu:e,outline:t=!1,timelineId:n,title:a=p.h})=>{const{getButton:i}=Object(m.b)({timelineId:n,timelineType:c.l.default,closeGearMenu:e});return i({outline:t,title:a})}));y.displayName="NewTimeline";const h="notes-button",v=r.a.memo((({ariaLabel:e=p.i,isDisabled:t,toggleShowNotes:n,timelineType:i})=>{const o=i===c.l.template;return r.a.createElement(a.EuiButtonIcon,{"aria-label":e,className:h,"data-test-subj":"timeline-notes-button-small",disabled:t,iconType:"editorComment",onClick:n,size:"s",isDisabled:o})}));v.displayName="SmallNotesButton";const E=r.a.memo((({ariaLabel:e,isDisabled:t,showNotes:n,timelineType:i,toggleShowNotes:o,toolTip:s})=>n?r.a.createElement(v,{ariaLabel:e,isDisabled:t,toggleShowNotes:o,timelineType:i}):r.a.createElement(a.EuiToolTip,{content:s||"","data-test-subj":"timeline-notes-tool-tip"},r.a.createElement(v,{ariaLabel:e,isDisabled:t,toggleShowNotes:o,timelineType:i}))));E.displayName="NotesButton"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(211),r=n(105),o=n(122);const s=({visualizationId:e})=>{const t=o.d.globalQueryByIdSelector(),{inspect:n}=Object(r.a)((n=>t(n,e)));return Object(a.useMemo)((()=>n?Object(i.g)(null==n?void 0:n.response):null),[n])}},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(2),i=n(102);const r=()=>{const[e,t]=Object(a.useState)(!1),n=Object(a.useCallback)((()=>{t(!1)}),[]);return[e,Object(a.useCallback)((()=>{t(!0)}),[]),n]},o=e=>{const{capabilities:t}=Object(i.j)().services.application;return!!t.siem[e]}},function(e,t,n){"use strict";n.d(t,"l",(function(){return i})),n.d(t,"o",(function(){return r})),n.d(t,"u",(function(){return o})),n.d(t,"s",(function(){return s})),n.d(t,"q",(function(){return l})),n.d(t,"r",(function(){return c})),n.d(t,"m",(function(){return u})),n.d(t,"k",(function(){return d})),n.d(t,"p",(function(){return p})),n.d(t,"x",(function(){return m})),n.d(t,"t",(function(){return f})),n.d(t,"n",(function(){return g})),n.d(t,"w",(function(){return b})),n.d(t,"v",(function(){return y})),n.d(t,"h",(function(){return h})),n.d(t,"i",(function(){return v})),n.d(t,"j",(function(){return E})),n.d(t,"b",(function(){return x})),n.d(t,"e",(function(){return j})),n.d(t,"c",(function(){return O})),n.d(t,"d",(function(){return S})),n.d(t,"a",(function(){return k})),n.d(t,"g",(function(){return w})),n.d(t,"f",(function(){return I}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.filtersLabel",{defaultMessage:"Filters"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.QueryLabel",{defaultMessage:"Custom query"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.threatQueryLabel",{defaultMessage:"Indicator index query"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.savedIdLabel",{defaultMessage:"Saved query name"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.savedQueryFiltersLabel",{defaultMessage:"Saved query filters"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.savedQueryLabel",{defaultMessage:"Saved query"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.mlRuleTypeDescription",{defaultMessage:"Machine Learning"}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.eqlRuleTypeDescription",{defaultMessage:"Event Correlation"}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.queryRuleTypeDescription",{defaultMessage:"Query"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.thresholdRuleTypeDescription",{defaultMessage:"Threshold"}),f=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.threatMatchRuleTypeDescription",{defaultMessage:"Indicator Match"}),g=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.newTermsRuleTypeDescription",{defaultMessage:"New Terms"}),b=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.thresholdResultsAllDescription",{defaultMessage:"All results"}),y=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.thresholdResultsAggregatedByDescription",{defaultMessage:"Results aggregated by"}),h=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.eqlEventCategoryFieldLabel",{defaultMessage:"Event category field"}),v=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.eqlTiebreakerFieldLabel",{defaultMessage:"Tiebreaker field"}),E=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.eqlTimestampFieldLabel",{defaultMessage:"Timestamp field"}),x=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.alertSuppressionInsufficientLicense",{defaultMessage:"Alert suppression is configured but will not be applied due to insufficient licensing"}),j=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.alertSuppressionTechnicalPreview",{defaultMessage:"Technical Preview"}),O=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.alertSuppressionPerRuleExecution",{defaultMessage:"One rule execution"}),S=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.alertSuppressionSuppressOnMissingFieldsDescription",{defaultMessage:"Suppress and group alerts for events with missing fields"}),k=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.alertSuppressionDoNotSuppressOnMissingFieldsDescription",{defaultMessage:"Do not suppress alerts for events with missing fields"}),w=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.buildingBlockLabel",{defaultMessage:"Building block"}),I=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.buildingBlockDescription",{defaultMessage:'All generated alerts will be marked as "building block" alerts'})},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(10),o=n.n(r),s=n(102);const l=Object(a.memo)((()=>{const{getStartedComponent$:e}=Object(s.j)().services,t=o()(e);return i.a.createElement(i.a.Fragment,null,t)}));l.displayName="LandingPageComponent"},function(e,t,n){"use strict";n.d(t,"f",(function(){return b})),n.d(t,"b",(function(){return y})),n.d(t,"a",(function(){return v})),n.d(t,"e",(function(){return E})),n.d(t,"d",(function(){return k})),n.d(t,"c",(function(){return w}));var a=n(42),i=n(50),r=n.n(i),o=n(343),s=n.n(o),l=n(1309),c=n.n(l),u=n(163),d=n(145),p=n(737),m=n(213),f=n(207),g=n(528);const b=e=>{const t={unit:"ms",value:0},n=e.match(/\d+/g),i=e.match(/[a-zA-Z]+/g);return Object(a.isEmpty)(n)||null==n||isNaN(Number(n[0]))||(t.value=Number(n[0])),!Object(a.isEmpty)(i)&&null!=i&&["s","m","h","d"].includes(i[0])&&(t.unit=i[0]),t},y=(e,t)=>{switch(t){case"machine_learning":const{index:t,queryBar:n,threshold:a,threatIndex:i,threatQueryBar:r,threatMapping:o,eqlOptions:s,newTermsFields:l,historyWindowSize:c,...u}=e;return u;case"threshold":const{anomalyThreshold:d,machineLearningJobId:p,threatIndex:m,threatQueryBar:f,threatMapping:g,eqlOptions:b,newTermsFields:y,historyWindowSize:h,...v}=e;return v;case"threat_match":const{anomalyThreshold:E,machineLearningJobId:x,threshold:j,eqlOptions:O,newTermsFields:S,historyWindowSize:k,...w}=e;return w;case"query":case"saved_query":const{anomalyThreshold:I,machineLearningJobId:T,threshold:C,threatIndex:M,threatQueryBar:A,threatMapping:_,eqlOptions:F,newTermsFields:D,historyWindowSize:N,...P}=e;return P;case"eql":const{anomalyThreshold:R,machineLearningJobId:L,threshold:q,threatIndex:B,threatQueryBar:z,threatMapping:$,newTermsFields:V,historyWindowSize:U,...G}=e;return G;case"new_terms":const{anomalyThreshold:H,machineLearningJobId:W,threshold:Q,threatIndex:Y,threatQueryBar:K,threatMapping:X,eqlOptions:J,...Z}=e;return Z}Object(d.a)(t)};function h(e){return e.filter((e=>"none"!==e.name))}const v=e=>e.filter((e=>"none"!==e.tactic.name)).map((e=>{var t;return{...e,technique:h(null!==(t=e.technique)&&void 0!==t?t:[]).map((e=>({...e,subtechnique:null!=e.subtechnique?h(e.subtechnique):[]})))}})),E=e=>{const t={...e};return e.dataSourceType===m.a.DataView?c()(t,["index","dataSourceType"]):e.dataSourceType===m.a.IndexPatterns?c()(t,["dataViewId","dataSourceType"]):t},x=e=>{var t,n,i,r,o,s,l,c,u,d,p,g,b,h,v,x,j,O,S,k,w,I,T,C,M,A,_,F,D,N,P,R,L,q,B,z,$,V,U,G,H,W,Q,Y,K,X;const J=E(e),Z=y(J,J.ruleType),{ruleType:ee,timeline:te}=Z;var ne;return{...{type:ee,...null!=te.id&&null!=te.title&&{timeline_id:te.id,timeline_title:te.title}},...(ne=Z,Object(a.has)("anomalyThreshold",ne)?{anomaly_threshold:Z.anomalyThreshold,machine_learning_job_id:Z.machineLearningJobId}:(e=>Object(a.has)("threshold",e))(Z)?{index:Z.index,filters:null===(t=Z.queryBar)||void 0===t?void 0:t.filters,language:null===(n=Z.queryBar)||void 0===n||null===(i=n.query)||void 0===i?void 0:i.language,query:null===(r=Z.queryBar)||void 0===r||null===(o=r.query)||void 0===o?void 0:o.query,saved_id:null!==(s=null===(l=Z.queryBar)||void 0===l?void 0:l.saved_id)&&void 0!==s?s:void 0,..."threshold"===ee&&{threshold:{field:null!==(c=null===(u=Z.threshold)||void 0===u?void 0:u.field)&&void 0!==c?c:[],value:null!==(d=parseInt(null===(p=Z.threshold)||void 0===p?void 0:p.value,10))&&void 0!==d?d:0,cardinality:Object(a.isEmpty)(null===(g=Z.threshold.cardinality)||void 0===g?void 0:g.field)||null==(null===(b=Z.threshold.cardinality)||void 0===b?void 0:b.value)?[]:[{field:Z.threshold.cardinality.field[0],value:parseInt(Z.threshold.cardinality.value,10)}]}}}:(e=>Object(a.has)("threatIndex",e))(Z)?{index:Z.index,filters:null===(h=Z.queryBar)||void 0===h?void 0:h.filters,language:null===(v=Z.queryBar)||void 0===v||null===(x=v.query)||void 0===x?void 0:x.language,query:null===(j=Z.queryBar)||void 0===j||null===(O=j.query)||void 0===O?void 0:O.query,saved_id:null!==(S=null===(k=Z.queryBar)||void 0===k?void 0:k.saved_id)&&void 0!==S?S:void 0,threat_index:Z.threatIndex,threat_query:null===(w=Z.threatQueryBar)||void 0===w||null===(I=w.query)||void 0===I?void 0:I.query,threat_filters:null===(T=Z.threatQueryBar)||void 0===T?void 0:T.filters,threat_mapping:Z.threatMapping,threat_language:null===(C=Z.threatQueryBar)||void 0===C||null===(M=C.query)||void 0===M?void 0:M.language}:(e=>Object(a.has)("eqlOptions",e))(Z)?{index:Z.index,filters:null===(A=Z.queryBar)||void 0===A?void 0:A.filters,language:null===(_=Z.queryBar)||void 0===_||null===(F=_.query)||void 0===F?void 0:F.language,query:null===(D=Z.queryBar)||void 0===D||null===(N=D.query)||void 0===N?void 0:N.query,saved_id:null!==(P=null===(R=Z.queryBar)||void 0===R?void 0:R.saved_id)&&void 0!==P?P:void 0,timestamp_field:null===(L=Z.eqlOptions)||void 0===L?void 0:L.timestampField,event_category_override:null===(q=Z.eqlOptions)||void 0===q?void 0:q.eventCategoryField,tiebreaker_field:null===(B=Z.eqlOptions)||void 0===B?void 0:B.tiebreakerField}:(e=>Object(a.has)("newTermsFields",e))(Z)?{index:Z.index,filters:null===(z=Z.queryBar)||void 0===z?void 0:z.filters,language:null===($=Z.queryBar)||void 0===$||null===(V=$.query)||void 0===V?void 0:V.language,query:null===(U=Z.queryBar)||void 0===U||null===(G=U.query)||void 0===G?void 0:G.query,new_terms_fields:Z.newTermsFields,history_window_start:`now-${Z.historyWindowSize}`}:{...Z.groupByFields.length>0?{alert_suppression:{group_by:Z.groupByFields,duration:Z.groupByRadioSelection===m.b.PerTimePeriod?Z.groupByDuration:void 0,missing_fields_strategy:Z.suppressionMissingFields||f.f}}:{},index:Z.index,filters:null===(H=Z.queryBar)||void 0===H?void 0:H.filters,language:null===(W=Z.queryBar)||void 0===W||null===(Q=W.query)||void 0===Q?void 0:Q.language,query:null===(Y=Z.queryBar)||void 0===Y||null===(K=Y.query)||void 0===K?void 0:K.query,saved_id:void 0,type:"query",...["query","saved_query"].includes(ee)&&(null===(X=Z.queryBar)||void 0===X?void 0:X.saved_id)&&Z.shouldLoadQueryDynamically&&{type:"saved_query",query:void 0,filters:void 0,saved_id:Z.queryBar.saved_id}}),data_view_id:Z.dataViewId}},j=e=>{const{...t}=e;if(!Object(a.isEmpty)(t.interval)&&!Object(a.isEmpty)(t.from)){const{unit:e,value:n}=b(t.interval),{unit:a,value:i}=b(t.from),o=r.a.duration(n,e);o.add(i,a),t.from=`now-${o.asSeconds()}s`,t.to="now"}return{...t,meta:{from:e.from}}},O=(e,t)=>{const{author:n,falsePositives:i,investigationFields:r,references:o,riskScore:s,severity:l,threat:c,isAssociatedToEndpointList:d,isBuildingBlock:p,note:m,ruleNameOverride:f,threatIndicatorPath:g,timestampOverride:b,timestampOverrideFallbackDisabled:y,...h}=e,E=null!=t?t.filter((e=>"endpoint"!==e.type)):[];return{author:n.filter((e=>!Object(a.isEmpty)(e))),...p?{building_block_type:"default"}:{},...d?{exceptions_list:[{id:u.k,list_id:u.k,namespace_type:"agnostic",type:"endpoint"},...E]}:null!=t?{exceptions_list:[...E]}:{},false_positives:i.filter((e=>!Object(a.isEmpty)(e))),references:o.filter((e=>!Object(a.isEmpty)(e))),investigation_fields:r.filter((e=>!Object(a.isEmpty)(e.trim()))),risk_score:s.value,risk_score_mapping:s.isMappingChecked?s.mapping.filter((e=>null!=e.field&&""!==e.field)):[],rule_name_override:""!==f?f:void 0,severity:l.value,severity_mapping:l.isMappingChecked?l.mapping.filter((e=>null!=e.field&&""!==e.field&&null!=e.value)):[],threat:v(c).map((e=>({...e,framework:"MITRE ATT&CK"}))),threat_indicator_path:g,timestamp_override:""!==b?b:void 0,timestamp_override_fallback_disabled:y,...Object(a.isEmpty)(m)?{}:{note:m},...h}},S=e=>{const{actions:t=[],responseActions:n,enabled:a,kibanaSiemAppUrl:i}=e;return{actions:t.map(p.b),response_actions:null==n?void 0:n.map(p.c),enabled:a,meta:{kibana_siem_app_url:i}}},k=(e,t,n,a,i)=>s.a.all([x(e),O(t,i),j(n),S(a)]),w=({defineRuleData:e,aboutRuleData:t,scheduleRuleData:n,exceptionsList:a})=>{const i={...t,name:"Preview Rule",description:"Preview Rule"};return{...k(e,i,n,g.c,a)}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return se}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(42),l=n(40),c=n(163),u=n(120),d=n(5);const p=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.cancel",{defaultMessage:"Cancel"}),m=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.createRuleExceptionLabel",{defaultMessage:"Add rule exception"}),f=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.addEndpointException",{defaultMessage:"Add Endpoint Exception"}),g=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.submitError.title",{defaultMessage:"An error occured submitting exception"}),b=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.submitError.dismissButton",{defaultMessage:"Dismiss"}),y=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.submitError.message",{defaultMessage:"View toast for error details."}),h=d.i18n.translate("xpack.securitySolution.ruleExceptions.addException.success",{defaultMessage:"Rule exception added to shared exception list"}),v=d.i18n.translate("xpack.securitySolution.ruleExceptions.addExceptionFlyout.addRuleExceptionToastSuccessTitle",{defaultMessage:"Rule exception added"});var E=n(611),x=n(281);const j={initialItems:[],exceptionItems:[],exceptionItemMeta:{name:""},newComment:"",itemConditionValidationErrorExists:!1,closeSingleAlert:!1,bulkCloseAlerts:!1,disableBulkClose:!1,bulkCloseIndex:void 0,selectedOs:void 0,exceptionListsToAddTo:[],addExceptionToRadioSelection:"add_to_rule",selectedRulesToAddTo:[],listType:u.b.RULE_DEFAULT,errorSubmitting:null,expireTime:void 0,expireErrorExists:!1};var O=n(890),S=n(891),k=n(806),w=n(882);const I=d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addExceptionToRuleOrList.addToListsLabel",{defaultMessage:"Add to rule or lists"});var T=n(44),C=n(874);const M=({possibleRules:e,isSingleRule:t,isBulkAction:n,selectedRadioOption:r,onRuleSelectionChange:o,onRadioChange:s})=>{const c=Object(a.useMemo)((()=>n&&null!=e?{id:"add_to_rules",label:i.a.createElement(l.EuiText,{"data-test-subj":"addToRulesRadioOption"},i.a.createElement(T.FormattedMessage,{defaultMessage:"Add to [{numRules}] selected rules: {ruleNames}",id:"xpack.securitySolution.exceptions.common.addToRulesOptionLabel",values:{numRules:e.length,ruleNames:i.a.createElement("span",{style:{fontWeight:"bold"}},e.map((({name:e})=>e)).join(","))}})),checked:"add_to_rules"===r,"data-test-subj":"addToRulesOptionsRadio",onChange:()=>{s("add_to_rules"),o(e)}}:t&&null!=e?{id:"add_to_rule",label:i.a.createElement(l.EuiText,{"data-test-subj":"addToRuleRadioOption"},i.a.createElement(T.FormattedMessage,{defaultMessage:"Add to this rule: {ruleName}",id:"xpack.securitySolution.exceptions.common.addToRuleOptionLabel",values:{ruleName:i.a.createElement("span",{style:{fontWeight:"bold"}},e[0].name)}})),checked:"add_to_rule"===r,"data-test-subj":"addToRuleOptionsRadio",onChange:()=>{s("add_to_rule"),o(e)}}:{id:"select_rules_to_add_to",label:i.a.createElement(l.EuiText,{"data-test-subj":"selectRulesToAddToRadioOption"},i.a.createElement(T.FormattedMessage,{defaultMessage:"Add to rules",id:"xpack.securitySolution.exceptions.common.selectRulesOptionLabel"})),checked:"select_rules_to_add_to"===r,"data-test-subj":"selectRulesToAddToOptionRadio",onChange:()=>s("select_rules_to_add_to")}),[n,e,t,r,s,o]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiRadio,c),"select_rules_to_add_to"===r&&i.a.createElement(C.a,{onRuleSelectionChange:o,initiallySelectedRules:[]}))},A=i.a.memo(M);A.displayName="ExceptionsAddToRulesOptions";const _=d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsOptions.addToListsOptionLabel",{defaultMessage:"Add to shared exception lists"}),F=d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsOptions.gotToSharedExceptions",{defaultMessage:"Manage shared exception lists"}),D=d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsOptions.addToListsTooltip",{defaultMessage:"Shared exception list is a group of exceptions. Select this option if you’d like to add this exception to shared exception lists."}),N=e=>d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsOptions.addToListsTooltipTitle",{values:{rulesCount:e},defaultMessage:"Shared exception list is a group of exceptions shared across rules. {rulesCount, plural, =1 {This rule currently has no shared} other {These rules currently have no commonly shared}} exception lists attached. To create one, visit the Shared Exception Lists page."});var P=n(605);const R=d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsTableSelection.addToListsDescription",{defaultMessage:"After you create the exception, it is added to the exception lists you select."}),L=(d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsTableSelection.viewListDetailActionLabel",{defaultMessage:"View list detail"}),d.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToListsTableSelection.referencesFetchError",{defaultMessage:"Unable to load shared exception lists"}));var q=n(565);const B=Object(a.memo)((({list:e,linkedList:t,onListLinkChange:n,dataTestSubj:r})=>{const o=Object(a.useMemo)((()=>Boolean(t.find((t=>t.id===e.id)))),[t,e.id]),s=Object(a.useCallback)((({target:{checked:a}})=>{const i=a?[...t,e]:null==t?void 0:t.filter((t=>t.id!==e.id));"function"==typeof n&&n(i)}),[t,n,e]);return i.a.createElement(l.EuiFlexItem,{grow:!1},i.a.createElement(l.EuiSwitch,{"data-test-subj":r,onChange:s,label:"",checked:o}))}));B.displayName="LinkListSwitch";var z=n(313);const $=({showAllSharedLists:e,sharedExceptionLists:t,onListSelectionChange:n})=>{const{error:r,isLoading:o,pagination:s,lists:c,listTableColumnsWithLinkSwitch:d,onTableChange:p,addToSelectedListDescription:m}=(({showAllSharedLists:e,sharedExceptionLists:t,onListSelectionChange:n})=>{const[r,o]=Object(a.useState)([]),[s,l]=Object(a.useState)(!1),c=Object(a.useMemo)((()=>e?[]:t),[e,t]),[d,p]=Object(a.useState)([]),[m,f]=Object(a.useState)({pageIndex:0,initialPageSize:5,showPerPageOptions:!1}),[g,b]=Object(a.useState)(void 0),y=Object(a.useCallback)((async()=>{try{return l(!0),Object(P.c)(c.length?c:[{namespace_type:"single"}])}catch(e){b(L)}}),[c]),h=Object(a.useCallback)((async()=>{const e=await y();if(!e)return l(!1);const t=[];for(const n of Object.values(e))n.type===u.b.DETECTION&&t.push(n);o(t),l(!1)}),[y]);Object(a.useEffect)((()=>{h()}),[c,y,h]),Object(a.useEffect)((()=>{n(d.map((({referenced_rules:e,namespace_type:t,os_types:n,tags:a,...i})=>({...i,namespace_type:null!=t?t:"single",os_types:null!=n?n:[],tags:null!=a?a:[]}))))}),[d,n]);const v=Object(a.useMemo)((()=>[{field:"link",name:q.b,align:"left","data-test-subj":"ruleActionLinkRuleSwitch",render:(e,t)=>i.a.createElement(B,{dataTestSubj:"addToSharedListSwitch",list:t,linkedList:d,onListLinkChange:p})},...Object(z.d)()]),[d]),E=Object(a.useCallback)((({page:{index:e}})=>f({...m,pageIndex:e})),[m]);return{error:g,isLoading:s,pagination:m,lists:r,listTableColumnsWithLinkSwitch:v,addToSelectedListDescription:R,onTableChange:E}})({showAllSharedLists:e,sharedExceptionLists:t,onListSelectionChange:n});return i.a.createElement(l.EuiPanel,{color:"subdued",borderRadius:"none",hasShadow:!1},i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiText,{size:"s"},m),i.a.createElement(l.EuiSpacer,{size:"s"}),i.a.createElement(l.EuiSpacer,{size:"s"}),i.a.createElement(l.EuiInMemoryTable,{sorting:!0,tableLayout:"auto",tableCaption:"Table of exception lists","data-test-subj":"addExceptionToSharedListsTable",error:r,items:c,loading:o,message:o?i.a.createElement(l.EuiSkeletonText,{lines:4,"data-test-subj":"exceptionItemViewerEmptyPrompts-loading"}):void 0,columns:d,pagination:s,onTableChange:p})))},V=i.a.memo($);V.displayName="ExceptionsAddToListsTable";var U=n(102);const G=({rulesCount:e,selectedRadioOption:t,sharedLists:n,onListsSelectionChange:r,onRadioChange:o})=>{const{navigateToApp:s}=Object(U.j)().services.application,[c,u]=Object(a.useState)(!1);return i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiRadio,{id:"add_to_lists",label:i.a.createElement(l.EuiFlexGroup,{alignItems:"flexStart",gutterSize:"none",responsive:!1,"data-test-subj":"addToListsRadioOptionLabel"},i.a.createElement(l.EuiFlexItem,{grow:!1},i.a.createElement(l.EuiText,null,_)),i.a.createElement(l.EuiFlexItem,{grow:!1,"data-test-subj":"addToListsOption"},i.a.createElement(l.EuiPopover,{button:i.a.createElement(l.EuiButtonIcon,{iconType:"iInCircle",onClick:()=>u(!c)}),isOpen:c,closePopover:()=>u(!1),anchorPosition:"upCenter"},i.a.createElement("div",{style:{width:"300px"}},i.a.createElement(l.EuiText,{size:"s"},0===n.length?N(e):D)),i.a.createElement(l.EuiPopoverFooter,null,i.a.createElement(l.EuiButtonEmpty,{size:"s",iconType:"popout",iconSide:"right",onClick:()=>s("security",{openInNewTab:!0,path:"/exceptions"})},F))))),checked:"add_to_lists"===t,disabled:0===n.length&&e>0,onChange:()=>o("add_to_lists"),"data-test-subj":"addToListsRadioOption"}),"add_to_lists"===t&&(n.length>0||0===e)&&i.a.createElement(V,{showAllSharedLists:0===e,sharedExceptionLists:n,onListSelectionChange:r,"data-test-subj":"exceptionsAddToListTable"}))},H=i.a.memo(G);H.displayName="ExceptionsAddToListsOptions";const W=o()(l.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-oec11w-0"})(["",""],(()=>Object(r.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),Q=({rules:e,isBulkAction:t,selectedRadioOption:n,onListSelectionChange:r,onRuleSelectionChange:o,onRadioChange:s})=>{const c=Object(a.useMemo)((()=>null!=e&&1===e.length),[e]),d=Object(a.useMemo)((()=>{var t,n,a;if(null==e)return[];if(1===e.length)return null!==(t=null===(n=e[0].exceptions_list)||void 0===n?void 0:n.filter((e=>e.type===u.b.DETECTION)))&&void 0!==t?t:[];const i=null!==(a=null==e?void 0:e.map((e=>null!=e.exceptions_list?e.exceptions_list:[])))&&void 0!==a?a:[];i.sort(((e,t)=>e.length-t.length));const r=i.shift();return null!=r&&r.length?r.filter((e=>i.every((t=>t.some((({id:t})=>e.id===t)))))).filter((e=>e.type===u.b.DETECTION)):[]}),[e]),p=Object(a.useMemo)((()=>null!=e?e.length:0),[e]);return i.a.createElement(l.EuiPanel,{paddingSize:"none",hasShadow:!1,"data-test-subj":"exceptionItemAddToRuleOrListSection"},i.a.createElement(W,{size:"xs"},i.a.createElement("h3",null,I)),i.a.createElement(l.EuiSpacer,{size:"s"}),i.a.createElement(A,{possibleRules:e,isSingleRule:c,isBulkAction:t,selectedRadioOption:n,onRuleSelectionChange:o,onRadioChange:s}),i.a.createElement(H,{rulesCount:p,selectedRadioOption:n,sharedLists:d,onListsSelectionChange:r,onRadioChange:s}))},Y=i.a.memo(Q);Y.displayName="ExceptionsAddToRulesOrLists";var K=n(108),X=n(808),J=n(143);var Z=n(883);const ee=["query","machine_learning","saved_query","threat_match"];var te=n(353),ne=n(892);const ae=o()(l.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-v0j9bz-0"})(["",""],(()=>Object(r.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),ie=o()(l.EuiFlyoutBody).withConfig({displayName:"FlyoutBodySection",componentId:"sc-v0j9bz-1"})(["",""],(()=>Object(r.css)(["&.builder-section{overflow-y:scroll;}"]))),re=o()(l.EuiFlyoutHeader).withConfig({displayName:"FlyoutHeader",componentId:"sc-v0j9bz-2"})(["",""],(({theme:e})=>Object(r.css)(["border-bottom:1px solid ",";"],e.eui.euiColorLightShade))),oe=o()(l.EuiFlexGroup).withConfig({displayName:"FlyoutFooterGroup",componentId:"sc-v0j9bz-3"})(["",""],(({theme:e})=>Object(r.css)(["padding:",";"],e.eui.euiSizeS))),se=Object(a.memo)((function({rules:e,isBulkAction:t,isEndpointItem:n,alertData:r,showAlertCloseOptions:o,isAlertDataLoading:I,alertStatus:T,sharedListToAddTo:C,onCancel:M,onConfirm:A}){const{isLoading:_,indexPatterns:F,getExtendedFields:D}=Object(k.a)(e),[N,P]=(()=>{const{addSuccess:e,addError:t,addWarning:n}=Object(K.a)(),[i,r]=(()=>{const[e,t]=Object(a.useState)(!1),n=Object(a.useRef)(null);return Object(a.useEffect)((()=>{const e=new AbortController;return n.current=async(n,a)=>{t(!0);const i=await Promise.all(a.map((async t=>Object(J.a)({items:n,ruleId:t.id,signal:e.signal}))));return t(!1),i.flatMap((e=>e))},()=>{t(!1),e.abort()}}),[]),[e,n.current]})(),[o,s]=Object(X.a)(),[l,c]=Object(a.useState)(!1),p=Object(a.useRef)(null),m=Object(a.useCallback)((e=>e.every((e=>u.i.is(e)))),[]),f=Object(a.useCallback)((e=>e.every((e=>u.n.is(e)||u.h.is(e)))),[]);return Object(a.useEffect)((()=>{const n=new AbortController;return p.current=async({itemsToAdd:n,listType:a,selectedRulesToAddTo:i,addToRules:o,addToSharedLists:l,sharedLists:p})=>{try{let t=[];if(c(!0),o&&null!=r&&a!==u.b.ENDPOINT&&m(n)){t=await r(n,i);const a=i.map((({name:e})=>e)).join(", ");e({title:v,text:(y=a,d.i18n.translate("xpack.securitySolution.ruleExceptions.addExceptionFlyout.addRuleExceptionToastSuccessText",{values:{ruleName:y},defaultMessage:"Exception has been added to rules - {ruleName}."}))})}else if((a===u.b.ENDPOINT||l)&&null!=s&&f(n)){t=await s(n);const a=p.map((({name:e})=>e));e({title:h,text:(b=a.join(","),d.i18n.translate("xpack.securitySolution.ruleExceptions.addExceptionFlyout.closeAlerts.successDetails",{values:{listNames:b},defaultMessage:"Rule exception has been added to shared lists: {listNames}."}))})}return c(!1),t}catch(e){throw c(!1),t(e,{title:g}),e}var b,y},()=>{n.abort()}}),[e,t,n,r,s,m,f]),[l||o||i,p.current]})(),[R,L]=Object(Z.a)(),q=Object(te.b)(),B=Object(a.useMemo)((()=>null==e||1!==e.length||ee.includes(e[0].type)),[e]),$=Object(a.useMemo)((()=>t?"add_to_rules":1===(null==e?void 0:e.length)||void 0!==I?"add_to_rule":"select_rules_to_add_to"),[I,t,e]),V=Object(a.useMemo)((()=>n?u.b.ENDPOINT:C?u.b.DETECTION:u.b.RULE_DEFAULT),[n,C]),[{exceptionItemMeta:{name:U},listType:G,selectedOs:H,initialItems:W,exceptionItems:Q,disableBulkClose:se,bulkCloseAlerts:le,closeSingleAlert:ce,bulkCloseIndex:ue,addExceptionToRadioSelection:de,selectedRulesToAddTo:pe,exceptionListsToAddTo:me,newComment:fe,itemConditionValidationErrorExists:ge,errorSubmitting:be,expireTime:ye,expireErrorExists:he},ve]=Object(a.useReducer)(((e,t)=>{switch(t.type){case"setExceptionItemMeta":{const{value:n}=t;return{...e,exceptionItemMeta:{...e.exceptionItemMeta,[n[0]]:n[1]}}}case"setInitialExceptionItems":{const{items:n}=t;return{...e,initialItems:n}}case"setExceptionItems":{const{items:n}=t;return{...e,exceptionItems:n}}case"setConditionValidationErrorExists":{const{errorExists:n}=t;return{...e,itemConditionValidationErrorExists:n}}case"setComment":{const{comment:n}=t;return{...e,newComment:n}}case"setCloseSingleAlert":{const{close:n}=t;return{...e,closeSingleAlert:n}}case"setBulkCloseAlerts":{const{bulkClose:n}=t;return{...e,bulkCloseAlerts:n}}case"setBulkCloseIndex":{const{bulkCloseIndex:n}=t;return{...e,bulkCloseIndex:n}}case"setSelectedOsOptions":{const{selectedOs:n}=t;return{...e,selectedOs:n}}case"setAddExceptionToLists":{const{listsToAddTo:n}=t;return{...e,exceptionListsToAddTo:n}}case"setListOrRuleRadioOption":{const{option:n}=t;return{...e,addExceptionToRadioSelection:n,listType:"add_to_lists"===n?u.b.DETECTION:u.b.RULE_DEFAULT,selectedRulesToAddTo:"add_to_lists"===n?[]:e.selectedRulesToAddTo}}case"setSelectedRulesToAddTo":{const{rules:n}=t;return{...e,selectedRulesToAddTo:n}}case"setListType":{const{listType:n}=t;return{...e,listType:n}}case"setDisableBulkCloseAlerts":{const{disableBulkCloseAlerts:n}=t;return{...e,disableBulkClose:n}}case"setErrorSubmitting":{const{err:n}=t;return{...e,errorSubmitting:n}}case"setExpireTime":{const{expireTime:n}=t;return{...e,expireTime:n}}case"setExpireError":{const{errorExists:n}=t;return{...e,expireErrorExists:n}}default:return e}}),{...j,addExceptionToRadioSelection:$,listType:V,selectedRulesToAddTo:null!=e?e:[]}),Ee=Object(a.useMemo)((()=>null!=r),[r]),xe=Object(a.useCallback)((e=>{ve({type:"setInitialExceptionItems",items:e})}),[ve]),je=Object(a.useCallback)((e=>{ve({type:"setExceptionItems",items:e})}),[ve]),Oe=Object(a.useCallback)((e=>{ve({type:"setListOrRuleRadioOption",option:e})}),[ve]),Se=Object(a.useCallback)((e=>{ve({type:"setSelectedRulesToAddTo",rules:e})}),[ve]),ke=Object(a.useCallback)((e=>{ve({type:"setAddExceptionToLists",listsToAddTo:e})}),[ve]),we=Object(a.useCallback)((e=>{ve({type:"setExceptionItemMeta",value:e})}),[ve]),Ie=Object(a.useCallback)((e=>{ve({type:"setConditionValidationErrorExists",errorExists:e})}),[ve]),Te=Object(a.useCallback)((e=>{ve({type:"setSelectedOsOptions",selectedOs:e})}),[ve]),Ce=Object(a.useCallback)((e=>{ve({type:"setComment",comment:e})}),[ve]),Me=Object(a.useCallback)((e=>{ve({type:"setBulkCloseIndex",bulkCloseIndex:e})}),[ve]),Ae=Object(a.useCallback)((e=>{ve({type:"setCloseSingleAlert",close:e})}),[ve]),_e=Object(a.useCallback)((e=>{ve({type:"setBulkCloseAlerts",bulkClose:e})}),[ve]),Fe=Object(a.useCallback)((e=>{ve({type:"setDisableBulkCloseAlerts",disableBulkCloseAlerts:e})}),[ve]),De=Object(a.useCallback)((e=>{ve({type:"setErrorSubmitting",err:e})}),[ve]),Ne=Object(a.useCallback)((e=>{ve({type:"setExpireTime",expireTime:e})}),[ve]),Pe=Object(a.useCallback)((e=>{ve({type:"setExpireError",errorExists:e})}),[ve]);Object(a.useEffect)((()=>{if(r)switch(G){case u.b.ENDPOINT:return xe(Object(x.b)(c.k,U,r));case u.b.RULE_DEFAULT:{var t,n;const i=Object(x.k)({alertData:r,exceptionItemName:U,ruleCustomHighlightedFields:null!==(t=null==e||null===(n=e[0])||void 0===n?void 0:n.investigation_fields)&&void 0!==t?t:[]});if(i)return Ce((a=r._id,d.i18n.translate("xpack.securitySolution.ruleExceptions.addExceptionFlyout.addRuleExceptionFromAlertComment",{values:{alertId:a},defaultMessage:"Exception conditions are pre-filled with relevant data from an alert with the alert id (_id): {alertId}."}))),xe([i])}}var a}),[G,U,r,e,xe,Ce]);const Re=Object(a.useMemo)((()=>Ee?Object(x.n)(r):H?[...H]:[]),[Ee,r,H]),Le=Object(a.useCallback)((async()=>{if(null!=P)try{const t=["add_to_rule","add_to_rules","select_rules_to_add_to"].includes(de),n=!(null==C||!C.length)||"add_to_lists"===de&&!Object(s.isEmpty)(me),a=null!=C&&C.length?C:me,i=Object(z.b)({itemName:U,commentToAdd:fe,addToRules:t,addToSharedLists:n,sharedLists:a,listType:G,selectedOs:Re,expireTime:ye,items:Q}),o=await P({itemsToAdd:i,selectedRulesToAddTo:pe,listType:G,addToRules:t&&!Object(s.isEmpty)(pe),addToSharedLists:n,sharedLists:a}),l=ce&&r?r._id:void 0,c=t?pe.map((({rule_id:e})=>e)):(null!=e?e:[]).map((({rule_id:e})=>e));null==L||Object(s.isEmpty)(c)||!le&&!ce||await L(c,o,l,ue),q(),A(!0,ce,le)}catch(e){De(e)}}),[C,P,de,U,fe,me,G,Re,Q,pe,ce,r,e,L,le,A,ue,De,q,ye]),qe=Object(a.useMemo)((()=>N||R||null!=be||""===U.trim()||Q.every((e=>0===e.entries.length))||ge||he||"add_to_lists"===de&&Object(s.isEmpty)(me)||"select_rules_to_add_to"===de&&Object(s.isEmpty)(pe)&&G===u.b.RULE_DEFAULT),[N,R,be,U,Q,ge,de,me,he,pe,G]),Be=Object(a.useCallback)((()=>{De(null)}),[De]),ze=Object(a.useCallback)((()=>{M(!1)}),[M]),$e=Object(a.useMemo)((()=>G===u.b.ENDPOINT?f:m),[G]);return i.a.createElement(l.EuiFlyout,{size:"l",onClose:ze,"data-test-subj":"addExceptionFlyout"},i.a.createElement(re,null,i.a.createElement(l.EuiTitle,null,i.a.createElement("h2",{"data-test-subj":"exceptionFlyoutTitle"},$e)),i.a.createElement(l.EuiSpacer,{size:"m"})),i.a.createElement(ie,{className:"builder-section"},i.a.createElement(l.EuiSkeletonText,{"data-test-subj":"loadingAddExceptionFlyout",lines:4,isLoading:_},null!=be&&i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiCallOut,{title:g,color:"danger",iconType:"warning"},i.a.createElement(l.EuiText,null,y),i.a.createElement(l.EuiSpacer,{size:"s"}),i.a.createElement(l.EuiButton,{color:"danger",onClick:Be},b)),i.a.createElement(l.EuiSpacer,{size:"s"})),i.a.createElement(O.a,{exceptionItemName:U,onChange:we}),i.a.createElement(l.EuiHorizontalRule,null),i.a.createElement(S.a,{exceptionItemName:U,allowLargeValueLists:B,exceptionListItems:W,exceptionListType:G,indexPatterns:F,rules:e,selectedOs:H,showOsTypeOptions:G===u.b.ENDPOINT&&!Ee,isEdit:!1,onOsChange:Te,onExceptionItemAdd:je,onSetErrorExists:Ie,getExtendedFields:D}),G!==u.b.ENDPOINT&&!(null!=C&&C.length)&&i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiHorizontalRule,null),i.a.createElement(Y,{rules:e,isBulkAction:t,selectedRadioOption:de,onListSelectionChange:ke,onRuleSelectionChange:Se,onRadioChange:Oe})),i.a.createElement(l.EuiHorizontalRule,null),i.a.createElement(E.a,{accordionTitle:i.a.createElement(ae,{size:"xs"},i.a.createElement("h3",null,(Ve=fe?1:0,d.i18n.translate("xpack.securitySolution.ruleExceptions.addExceptionFlyout.commentsTitle",{values:{comments:Ve},defaultMessage:"Add comments ({comments})"})))),initialIsOpen:!!fe,newCommentValue:fe,newCommentOnChange:Ce}),G!==u.b.ENDPOINT&&i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiHorizontalRule,null),i.a.createElement(ne.a,{expireTime:ye,setExpireTime:Ne,setExpireError:Pe})),o&&i.a.createElement(i.a.Fragment,null,i.a.createElement(l.EuiHorizontalRule,null),i.a.createElement(w.a,{exceptionListType:G,shouldCloseSingleAlert:ce,shouldBulkCloseAlert:le,disableBulkClose:se,exceptionListItems:Q,alertData:r,alertStatus:T,isAlertDataLoading:null!=I&&I,onDisableBulkClose:Fe,onUpdateBulkCloseIndex:Me,onBulkCloseCheckboxChange:_e,onSingleAlertCloseCheckboxChange:Ae})))),i.a.createElement(l.EuiFlyoutFooter,null,i.a.createElement(oe,{justifyContent:"spaceBetween"},i.a.createElement(l.EuiButtonEmpty,{"data-test-subj":"cancelExceptionAddButton",onClick:ze},p),i.a.createElement(l.EuiButton,{"data-test-subj":"addExceptionConfirmButton",onClick:Le,isDisabled:qe,fill:!0},$e))));var Ve}))},function(e,t,n){"use strict";let a,i,r,o;n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"d",(function(){return o})),function(e){e.success="success",e.failure="failure",e.warning="warning",e.unsupported="unsupported"}(a||(a={})),function(e){e.lastSeen="lastSeen",e.hostName="hostName"}(i||(i={})),function(e){e.kpiHosts="hostsKpiHosts",e.kpiUniqueIps="hostsKpiUniqueIps"}(r||(r={})),function(e){e.details="hostDetails",e.hosts="hosts",e.overview="overviewHost",e.uncommonProcesses="uncommonProcesses"}(o||(o={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return H}));var a=n(42),i=n(40),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(121),u=n(142);const d="destination.ip",p="destination.port",m="event.category",f="file.name",g="host.name",b="kibana.alert.rule.name",y="kibana.alert.severity",h="process.parent.name",v="process.name",E="source.ip",x="source.port",j="user.name",O=[d,p,f,v,h,E,x],S=l()(i.EuiFlexGroup).withConfig({displayName:"AlertFieldFlexGroup",componentId:"sc-1itxfus-0"})(["flex-grow:0;gap:","px;"],(({$scopeId:e})=>e===u.f.active?0:3)),k=({contextId:e,eventId:t,field:n,fieldType:a="keyword",isAggregatable:r=!0,isDraggable:s,showSeparator:l,scopeId:u,value:d})=>o.a.createElement(S,{alignItems:"center","data-test-subj":"alertFieldBadge",$scopeId:u,gutterSize:"none"},o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(c.c,{contextId:`${e}-alert-field`,eventId:t,field:n,fieldType:a,isAggregatable:r,isDraggable:s,scopeId:u,value:d})),l&&o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement("span",{"data-test-subj":"separator"},", ")));k.displayName="AlertFieldBadgeComponent";const w=o.a.memo(k),I=({contextId:e,"data-test-subj":t="alertField",eventId:n,field:a,fieldType:r="keyword",isAggregatable:s=!0,isDraggable:l,prefix:c,suffix:u,scopeId:d,values:p})=>null!=p?o.a.createElement(S,{alignItems:"center","data-test-subj":t,$scopeId:d,gutterSize:"none"},null!=c&&o.a.createElement(i.EuiFlexItem,{"data-test-subj":"prefix",grow:!1},c),p.map(((t,c)=>o.a.createElement(i.EuiFlexItem,{key:`${t}-${c}`,grow:!1},o.a.createElement(w,{contextId:`${e}-alert-field`,eventId:n,field:a,fieldType:r,isAggregatable:s,isDraggable:l,showSeparator:c<p.length-1,scopeId:d,value:t})))),null!=u&&o.a.createElement(i.EuiFlexItem,{"data-test-subj":"suffix",grow:!1},u)):null;I.displayName="AlertFieldComponent";const T=o.a.memo(I);var C=n(106),M=n(127),A=n(275),_=n(5);const F=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.alertLabel",{defaultMessage:"alert"}),D=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.byLabel",{defaultMessage:"by"}),N=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.createdLabel",{defaultMessage:"created"}),P=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.destinationLabel",{defaultMessage:"destination"}),R=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.eventLabel",{defaultMessage:"event"}),L=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.fileLabel",{defaultMessage:"file"}),q=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.onLabel",{defaultMessage:"on"}),B=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.parentProcessLabel",{defaultMessage:"parent process"}),z=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.processLabel",{defaultMessage:"process"}),$=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.sourceLabel",{defaultMessage:"source"}),V=_.i18n.translate("xpack.securitySolution.renderers.alertRenderer.withLabel",{defaultMessage:"with"}),U=l()(i.EuiFlexGroup).withConfig({displayName:"AlertRendererFlexGroup",componentId:"sc-fjuibw-0"})(["gap:",";"],(({theme:e})=>e.eui.euiSizeXS)),G={id:C.d.alert,isInstance:e=>{return null!==(n=null==(t=Object(a.get)("event.kind",e))?void 0:t.some((e=>null!=e.toLocaleLowerCase&&"signal"===e.toLowerCase())))&&void 0!==n&&n;var t,n},renderRow:({contextId:e="alert-renderer",data:t,isDraggable:n,scopeId:r})=>{const s=Object(a.get)("_id",t),l=Object(a.get)(d,t),c=Object(a.get)(p,t),u=Object(a.get)(m,t),S=Object(a.get)(f,t),k=Object(a.get)(g,t),w=Object(a.get)(b,t),I=Object(a.get)(y,t),C=Object(a.get)(v,t),_=Object(a.get)(h,t),G=Object(a.get)(E,t),H=Object(a.get)(x,t),W=Object(a.get)(j,t);return o.a.createElement(A.a,null,o.a.createElement(M.b,{"data-test-subj":"alertRenderer"},o.a.createElement(U,{alignItems:"center",gutterSize:"none",justifyContent:"center",wrap:!0},o.a.createElement(T,{contextId:e,"data-test-subj":m,eventId:s,field:m,isDraggable:n,scopeId:r,values:u}),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement("span",{"data-test-subj":"event"},` ${R} `)),(({data:e,fieldNames:t})=>t.some((t=>Object(a.has)(t,e))))({data:t,fieldNames:O})&&o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement("span",{"data-test-subj":"with"},` ${V} `)),o.a.createElement(T,{contextId:e,"data-test-subj":v,eventId:s,field:v,isDraggable:n,prefix:` ${z} `,suffix:", ",scopeId:r,values:C}),o.a.createElement(T,{contextId:e,"data-test-subj":h,eventId:s,field:h,isDraggable:n,prefix:` ${B} `,suffix:", ",scopeId:r,values:_}),o.a.createElement(T,{contextId:e,"data-test-subj":f,eventId:s,field:f,isDraggable:n,prefix:` ${L} `,suffix:", ",scopeId:r,values:S}),o.a.createElement(T,{contextId:e,"data-test-subj":E,eventId:s,field:E,isDraggable:n,prefix:` ${$} `,scopeId:r,values:G}),o.a.createElement(T,{contextId:e,"data-test-subj":x,eventId:s,field:x,isDraggable:n,prefix:":",suffix:", ",scopeId:r,values:H}),o.a.createElement(T,{contextId:e,"data-test-subj":d,eventId:s,field:d,isDraggable:n,prefix:` ${P} `,scopeId:r,values:l}),o.a.createElement(T,{contextId:e,"data-test-subj":p,eventId:s,field:p,isDraggable:n,prefix:":",suffix:", ",scopeId:r,values:c}),o.a.createElement(T,{contextId:e,"data-test-subj":j,eventId:s,field:j,isDraggable:n,prefix:` ${D} `,scopeId:r,values:W}),o.a.createElement(T,{contextId:e,"data-test-subj":g,eventId:s,field:g,isDraggable:n,prefix:` ${q} `,scopeId:r,values:k}),o.a.createElement(T,{contextId:e,"data-test-subj":y,eventId:s,field:y,isDraggable:n,prefix:` ${N} `,suffix:` ${F} `,scopeId:r,values:I}),o.a.createElement(T,{contextId:e,"data-test-subj":b,eventId:s,field:b,isDraggable:n,suffix:".",scopeId:r,values:w}))))}},H=({data:e,rowRenderers:t})=>{var n;const a=null!==(n=t.find((t=>t.isInstance(e))))&&void 0!==n?n:null;return G.isInstance(e)?null!=a?(({a:e,b:t,id:n})=>({id:n,isInstance:n=>e.isInstance(n)||t.isInstance(n),renderRow:({contextId:n,data:a,isDraggable:i,scopeId:r})=>o.a.createElement(o.a.Fragment,null,e.isInstance(a)&&e.renderRow({contextId:n,data:a,isDraggable:i,scopeId:r}),t.isInstance(a)&&t.renderRow({contextId:n,data:a,isDraggable:i,scopeId:r}))}))({a:G,b:a,id:a.id}):G:a}},,function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return o})),n.d(t,"a",(function(){return H}));var a=n(48);const i=parseInt(a.euiThemeVars.euiSizeXL,10)-parseInt(a.euiThemeVars.euiSizeXS,10),r=e=>"signal"===e,o=e=>(e>0?e*i:i)+2*parseInt(a.euiThemeVars.euiDataGridCellPaddingM,10);var s=n(2),l=n.n(s),c=n(103),u=n(40),d=n(41),p=n.n(d),m=n(119),f=n(346),g=n(115),b=n(683),y=n(111),h=n(142),v=n(412),E=n(106),x=n(126),j=n(564),O=n(803);const S=({ariaLabel:e,showNotes:t,timelineType:n,toggleShowNotes:a})=>{const{kibanaSecuritySolutionsPrivileges:i}=Object(x.a)();return l.a.createElement(O.a,null,l.a.createElement(v.d,{ariaLabel:e,"data-test-subj":"add-note",isDisabled:!1===i.crud,showNotes:t,timelineType:n,toggleShowNotes:a,toolTip:n===E.l.template?j.g:j.h}))};S.displayName="AddEventNoteActionComponent";const k=l.a.memo(S);var w=n(170),I=n(804);const T=({ariaLabel:e,isAlert:t,noteIds:n,onPinClicked:a,eventIsPinned:r,timelineType:o})=>{const{kibanaSecuritySolutionsPrivileges:c}=Object(x.a)(),d=Object(s.useMemo)((()=>Object(f.g)({isPinned:r,isAlert:t,eventHasNotes:Object(f.b)(n),timelineType:o})),[r,t,n,o]);return l.a.createElement("div",{key:"timeline-action-pin-tool-tip"},l.a.createElement(w.l,{textAlign:"center",width:i},l.a.createElement(u.EuiToolTip,{"data-test-subj":"timeline-action-pin-tool-tip",content:d},l.a.createElement(I.a,{ariaLabel:e,allowUnpinning:!Object(f.b)(n),"data-test-subj":"pin-event",isDisabled:!1===c.crud,isAlert:t,onClick:a,pinned:r,timelineType:o}))))};T.displayName="PinEventActionComponent";const C=l.a.memo(T);var M=n(105),A=n(133),_=n(159),F=n(17),D=n(178),N=n(196),P=n(12),R=n(124),L=n(875),q=n(928),B=n(363),z=n(199),$=n(272),V=n(291);const U=p.a.div.withConfig({displayName:"ActionsContainer",componentId:"sc-3eeodk-0"})(["align-items:center;display:flex;"]),G=({ariaRowindex:e,checked:t,columnValues:n,ecsData:a,eventId:o,eventIdToNoteIds:d,isEventPinned:p=!1,isEventViewer:v=!1,loadingEventIds:E,onEventDetailsPanelOpened:x,onRowSelected:O,onRuleChange:S,showCheckboxes:I,showNotes:T,timelineId:G,toggleShowNotes:H,refetch:W,setEventsLoading:Q})=>{const Y=Object(c.useDispatch)(),K=Object(R.a)("tGridEnabled"),X=Object(s.useMemo)((()=>y.b.getTimelineByIdSelector()),[]),J=Object(M.b)((e=>(Object(g.isTimelineScope)(G)?X(e,G):A.b).timelineType)),{startTransaction:Z}=Object(_.b)(),ee=Object(F.b)().isEnterprise(),te=Object(s.useCallback)((e=>Y(y.a.pinEvent({id:G,eventId:e}))),[Y,G]),ne=Object(s.useCallback)((e=>Y(y.a.unPinEvent({id:G,eventId:e}))),[Y,G]),ae=Object(s.useCallback)((e=>O({eventIds:[o],isSelected:e.currentTarget.checked})),[o,O]),ie=Object(s.useCallback)((()=>Object(f.f)({allowUnpinning:!d||!Object(f.b)(d[o]),eventId:o,onPinEvent:te,onUnPinEvent:ne,isEventPinned:p})),[d,o,p,te,ne]),re=Object(f.e)(a),oe=Object(s.useMemo)((()=>{var e,t,n,i;return"signal"!==re&&!(null!==(e=a.event)&&void 0!==e&&null!==(t=e.kind)&&void 0!==t&&t.includes("event")&&null!==(n=a.agent)&&void 0!==n&&null!==(i=n.type)&&void 0!==i&&i.includes("endpoint"))}),[a,re]),se=Object(s.useMemo)((()=>!Object(b.a)(a)),[a]),{setGlobalFullScreen:le}=Object(D.a)(),{setTimelineFullScreen:ce}=Object(D.c)(),ue=Object(g.getScopedActions)(G),de=Object(s.useCallback)((()=>{Z({name:N.a.OPEN_ANALYZER});const e=document.querySelector(".euiDataGrid--fullScreen");ue&&Y(ue.updateGraphEventId({id:G,graphEventId:a._id})),G===h.f.active?(e&&ce(!0),Y(Object(P.setActiveTabTimeline)({id:G,activeTab:m.f.graph}))):e&&le(!0)}),[Z,ue,G,Y,a._id,ce,le]),pe=Object(s.useMemo)((()=>{var e,t,n,i,r,o,s,l,c,u;const{process:d,_id:p,_index:m,timestamp:f,kibana:g}=a,b=null==d||null===(e=d.entry_leader)||void 0===e||null===(t=e.entity_id)||void 0===t?void 0:t[0],y=null==d||null===(n=d.entry_leader)||void 0===n||null===(i=n.start)||void 0===i?void 0:i[0],h=(null==g||null===(r=g.alert)||void 0===r||null===(o=r.ancestors)||void 0===o||null===(s=o.index)||void 0===s?void 0:s[0])||m;if(void 0===h||void 0===b||void 0===y)return null;const v=null==d||null===(l=d.entity_id)||void 0===l?void 0:l[0],E="signal"===re||"eql"===re?p:void 0;return{index:h,sessionEntityId:b,sessionStartTime:y,jumpToEntityId:v,jumpToCursor:E&&(null===(c=a.kibana)||void 0===c||null===(u=c.alert.original_time)||void 0===u?void 0:u[0])||f,investigatedAlertId:E}}),[a,re]),me=Object(s.useCallback)((()=>{const e=document.querySelector(".euiDataGrid--fullScreen");Z({name:N.a.OPEN_SESSION_VIEW}),G===h.f.active?(e&&ce(!0),null!==pe&&Y(Object(P.setActiveTabTimeline)({id:G,activeTab:m.f.session}))):e&&le(!0),null!==pe&&ue&&Y(ue.updateSessionViewConfig({id:G,sessionViewConfig:pe}))}),[Z,G,pe,ce,Y,le,ue]),{activeStep:fe,isTourShown:ge,incrementStep:be}=Object(B.b)(),ye=Object(s.useMemo)((()=>ge(z.b.alertsCases)&&"signal"===re&&Object($.c)(G)&&1===e),[ge,e,re,G]),he=Object(s.useCallback)((()=>{ye&&fe===z.a.expandEvent&&ge(z.b.alertsCases)&&be(z.b.alertsCases),x()}),[fe,be,ye,ge,x]);return l.a.createElement(U,null,I&&!K&&l.a.createElement("div",{key:"select-event-container","data-test-subj":"select-event-container"},l.a.createElement(w.l,{textAlign:"center",width:i},E.includes(o)?l.a.createElement(u.EuiLoadingSpinner,{size:"m","data-test-subj":"event-loader"}):l.a.createElement(u.EuiCheckbox,{"aria-label":j.d({ariaRowindex:e,columnValues:n,checked:t}),"data-test-subj":"select-event",id:o,checked:t,onChange:ae}))),l.a.createElement(V.a,{isTourAnchor:ye,onClick:he,step:z.a.expandEvent,tourId:z.b.alertsCases},l.a.createElement("div",{key:"expand-event"},l.a.createElement(w.l,{textAlign:"center",width:i},l.a.createElement(u.EuiToolTip,{"data-test-subj":"expand-event-tool-tip",content:j.m},l.a.createElement(u.EuiButtonIcon,{"aria-label":j.n({ariaRowindex:e,columnValues:n}),"data-test-subj":"expand-event",iconType:"expand",onClick:he,size:"s"}))))),l.a.createElement(l.a.Fragment,null,G!==h.f.active&&l.a.createElement(q.a,{ariaLabel:j.k({ariaRowindex:e,columnValues:n}),key:"investigate-in-timeline",ecsRowData:a}),!v&&H&&l.a.createElement(l.a.Fragment,null,l.a.createElement(k,{ariaLabel:j.c({ariaRowindex:e,columnValues:n}),key:"add-event-note",showNotes:null!=T&&T,toggleShowNotes:H,timelineType:J}),l.a.createElement(C,{ariaLabel:j.j({ariaRowindex:e,columnValues:n,isEventPinned:p}),isAlert:r(re),key:"pin-event",onPinClicked:ie,noteIds:d&&d[o]||[],eventIsPinned:p,timelineType:J})),l.a.createElement(L.b,{ariaLabel:j.f({ariaRowindex:e,columnValues:n}),ariaRowindex:e,columnValues:n,key:"alert-context-menu",ecsRowData:a,scopeId:G,disabled:oe,onRuleChange:S,refetch:W}),!1===se?l.a.createElement("div",null,l.a.createElement(w.l,{textAlign:"center",width:i},l.a.createElement(u.EuiToolTip,{"data-test-subj":"view-in-analyzer-tool-tip",content:j.a},l.a.createElement(u.EuiButtonIcon,{"aria-label":j.b({ariaRowindex:e,columnValues:n}),"data-test-subj":"view-in-analyzer",iconType:"analyzeEvent",onClick:de,size:"s"})))):null,null===pe||!ee&&G!==m.e.kubernetesPageSessions?null:l.a.createElement("div",null,l.a.createElement(w.l,{textAlign:"center",width:i},l.a.createElement(u.EuiToolTip,{"data-test-subj":"expand-event-tool-tip",content:j.i},l.a.createElement(u.EuiButtonIcon,{"aria-label":j.n({ariaRowindex:e,columnValues:n}),"data-test-subj":"session-view-button",iconType:"sessionViewer",onClick:me,size:"s"}))))))};G.displayName="ActionsComponent";const H=l.a.memo(G);n(652)},function(e,t,n){"use strict";n.d(t,"a",(function(){return T}));var a=n(388),i=n(42),r=n(2),o=n.n(r),s=n(103),l=n(3),c=n(130),u=n.n(c),d=n(138),p=n(378),m=n(139),f=n(187);const g=e=>e.query,b=e=>e.savedQuery;var y=n(111),h=n(102),v=n(475),E=n(400),x=n(280),j=n(122),O=n(160),S=n(221),k=n(124);const w=Object(r.memo)((({end:e,filterQuery:t,fromStr:n,hideFilterBar:c=!1,hideQueryInput:m=!1,id:f,indexPattern:g,isLoading:b=!1,pollForSignalIndex:y,queries:w,savedQuery:I,setSavedQuery:T,setSearchBarFilter:C,start:M,toStr:A,updateSearch:_,dataTestSubj:F})=>{const{data:{query:{timefilter:{timefilter:D},filterManager:N}},unifiedSearch:{ui:{SearchBar:P}}}=Object(h.j)().services,R=Object(s.useDispatch)(),L=Object(r.useCallback)((()=>{R(v.b.setUsersTablesActivePageToZero()),R(E.a.setHostTablesActivePageToZero()),R(x.b.setNetworkTablesActivePageToZero())}),[R]);(()=>{const e=Object(O.d)(S.a.savedQuery),t=Object(O.d)(S.a.appQuery),n=Object(O.d)(S.a.filters),a=Object(r.useMemo)((()=>j.d.globalQuerySelector()),[]),o=Object(r.useMemo)((()=>j.d.globalFiltersQuerySelector()),[]),l=Object(r.useMemo)((()=>j.d.globalSavedQuerySelector()),[]),c=Object(s.useSelector)(a),u=Object(s.useSelector)(o),d=Object(s.useSelector)(l);Object(r.useEffect)((()=>{var a;null!=d&&""!==d.id?(e(null!==(a=null==d?void 0:d.id)&&void 0!==a?a:null),t(null),n(null)):(e(null),t(Object(i.isEmpty)(c.query)?null:c),n(Object(i.isEmpty)(u)?null:u))}),[d,c,u,e,t,n])})(),(()=>{const e=Object(O.d)(S.a.timerange),t=Object(r.useMemo)((()=>d.d.inputsSelector()),[]),n=Object(s.useSelector)(t),a=Object(k.a)("socTrendsEnabled"),{linkTo:i,timerange:o}=n.global,{linkTo:l,timerange:c}=n.timeline,u=Object(r.useMemo)((()=>{if(a&&n.socTrends){const{linkTo:e,timerange:t}=n.socTrends;return{socTrends:{[S.a.timerange]:t,linkTo:e}}}return{}}),[n.socTrends,a]);Object(r.useEffect)((()=>{e({global:{[S.a.timerange]:o,linkTo:i},timeline:{[S.a.timerange]:c,linkTo:l},...u})}),[e,i,o,l,c,u])})(),Object(r.useEffect)((()=>{null!=n&&null!=A?D.setTime({from:n,to:A}):null!=M&&null!=e&&(L(),D.setTime({from:new Date(M).toISOString(),to:new Date(e).toISOString()}))}),[e,n,M,D,A,L]);const q=Object(r.useCallback)((i=>{null!=y&&y();const r=i.dateRange.from.includes("now")||i.dateRange.to.includes("now");let o={id:f,end:null!=A?A:new Date(e).toISOString(),start:null!=n?n:new Date(M).toISOString(),isInvalid:!1,isQuickSelection:r,updateTime:!1,filterManager:N,setTablesActivePageToZero:L},s=!1;(!r||n===i.dateRange.from&&A===i.dateRange.to)&&(r||M===Object(p.c)(i.dateRange.from)&&e===Object(p.c)(i.dateRange.to))||(s=!0,o.updateTime=!0,o.end=i.dateRange.to,o.start=i.dateRange.from),null==i.query||u()(i.query,t)||(s=!0,o=Object(a.set)("query",i.query,o)),s||(r&&i.dateRange.to!==i.dateRange.from?(o.updateTime=!0,o.end=i.dateRange.to,o.start=i.dateRange.from):w.forEach((e=>e.refetch&&e.refetch()))),window.setTimeout((()=>_(o)),0)}),[f,y,A,e,n,M,N,t,w,_,L]),B=Object(r.useCallback)((e=>{e.dateRange.from.includes("now")||e.dateRange.to.includes("now")?_({id:f,end:e.dateRange.to,start:e.dateRange.from,isInvalid:!1,isQuickSelection:!0,updateTime:!0,filterManager:N,setTablesActivePageToZero:L}):w.forEach((e=>e.refetch&&e.refetch()))}),[_,f,N,w,L]),z=Object(r.useCallback)((e=>{T({id:f,savedQuery:e})}),[f,T]),$=Object(r.useCallback)((t=>{const i=!!t.attributes.timefilter&&(t.attributes.timefilter.from.includes("now")||t.attributes.timefilter.to.includes("now"));let r={id:f,filters:t.attributes.filters||[],end:null!=A?A:new Date(e).toISOString(),start:null!=n?n:new Date(M).toISOString(),isInvalid:!1,isQuickSelection:i,updateTime:!1,filterManager:N,setTablesActivePageToZero:L};t.attributes.timefilter&&(r.end=t.attributes.timefilter?t.attributes.timefilter.to:r.end,r.start=t.attributes.timefilter?t.attributes.timefilter.from:r.start,r.updateTime=!0),r=Object(a.set)("query",t.attributes.query,r),r=Object(a.set)("savedQuery",t,r),_(r)}),[f,A,e,n,M,N,_,L]),V=Object(r.useCallback)((()=>{null!=I&&_({id:f,filters:[],end:null!=A?A:new Date(e).toISOString(),start:null!=n?n:new Date(M).toISOString(),isInvalid:!1,isQuickSelection:!1,updateTime:!1,query:{query:"",language:I.attributes.query.language},resetSavedQuery:!0,savedQuery:void 0,filterManager:N,setTablesActivePageToZero:L})}),[I,_,f,A,e,n,M,N,L]);Object(r.useEffect)((()=>{let e=!0;const t=new l.Subscription;return t.add(N.getUpdates$().subscribe({next:()=>{if(e){const e=N.getFilters();C({id:f,filters:e}),L()}}})),()=>{e=!1,t.unsubscribe()}}),[]);const U=Object(r.useMemo)((()=>[g]),[g]),G=Object(r.useCallback)((({query:e,dateRange:t})=>{const n=t.from.includes("now")||t.to.includes("now");_({end:t.to,filterManager:N,id:f,isInvalid:!1,isQuickSelection:n,query:e,setTablesActivePageToZero:L,start:t.from,updateTime:!0})}),[N,f,L,_]);return o.a.createElement("div",{"data-test-subj":`${f}DatePicker`},o.a.createElement(P,{appName:"siem",isLoading:b,indexPatterns:U,query:t,onClearSavedQuery:V,onQuerySubmit:q,onRefresh:B,onSaved:z,onTimeRangeChange:G,onSavedQueryUpdated:$,savedQuery:I,showFilterBar:!c,showDatePicker:!0,showQueryInput:!m,showSaveQuery:!0,dataTestSubj:F}))}),((e,t)=>e.end===t.end&&e.filterQuery===t.filterQuery&&e.fromStr===t.fromStr&&e.id===t.id&&e.isLoading===t.isLoading&&e.savedQuery===t.savedQuery&&e.setSavedQuery===t.setSavedQuery&&e.setSearchBarFilter===t.setSearchBarFilter&&e.start===t.start&&e.toStr===t.toStr&&e.updateSearch===t.updateSearch&&e.dataTestSubj===t.dataTestSubj&&u()(e.indexPattern,t.indexPattern)&&u()(e.queries,t.queries)));w.displayName="SiemSearchBar";const I=e=>({end:t,filters:n,id:a,isQuickSelection:i,query:r,resetSavedQuery:o,savedQuery:s,start:l,timelineId:c,updateTime:u=!1,filterManager:m,setTablesActivePageToZero:f})=>{if(u){const n=Object(p.c)(l);let r=Object(p.c)(t,{roundUp:!0});i?e(t===l?d.b.setAbsoluteRangeDatePicker({id:a,fromStr:l,toStr:t,from:n,to:r}):d.b.setRelativeRangeDatePicker({id:a,fromStr:l,toStr:t,from:n,to:r})):(r=Object(p.c)(t),e(d.b.setAbsoluteRangeDatePicker({id:a,from:Object(p.c)(l),to:Object(p.c)(t)}))),null!=c&&e(y.a.updateRange({id:c,start:n,end:r}))}null!=r&&e(d.b.setFilterQuery({id:a,...r})),null!=n&&m.setFilters(n),(null!=s||o)&&e(d.b.setSavedQuery({id:a,savedQuery:s})),f()},T=Object(s.connect)((()=>{const e=Object(f.b)(),t=Object(f.c)(),n=Object(f.d)(),a=Object(f.h)(),r=Object(f.i)(),o=Object(f.j)(),s=Object(m.createSelector)(g,(e=>e)),l=Object(m.createSelector)(b,(e=>e));return(c,{id:u})=>{const d=Object(i.getOr)({},`inputs.${u}`,c);return{end:e(d),fromStr:t(d),filterQuery:s(d),isLoading:n(d),queries:a(c,u),savedQuery:l(d),start:r(d),toStr:o(d)}}}),(e=>({updateSearch:I(e),setSavedQuery:({id:t,savedQuery:n})=>e(d.b.setSavedQuery({id:t,savedQuery:n})),setSearchBarFilter:({id:t,filters:n})=>e(d.b.setSearchBarFilter({id:t,filters:n}))})))(w)},function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var a=n(40),i=n(287),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(55),u=n.n(c),d=n(4),p=n(121),m=n(102),f=n(327),g=n(228);const b=l()(a.EuiFlexItem).withConfig({displayName:"CountFlexItem",componentId:"sc-1yje3m6-0"})(["",""],(({theme:e})=>`margin-right: ${e.eui.euiSizeS};`)),y=o.a.memo((({value:e})=>Object(g.a)(e)?o.a.createElement(o.a.Fragment,null,e):o.a.createElement("em",{"data-test-subj":"value-wrapper-empty"},f.c)));y.displayName="ValueWrapper";const h=({legendItem:e})=>{const[t]=Object(m.p)(d.O),{color:n,count:i,dataProviderId:r,field:s,scopeId:l,value:c}=e;return o.a.createElement(a.EuiText,{size:"xs"},o.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none",responsive:!1},null!=n&&o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(a.EuiHealth,{"data-test-subj":"legend-color",color:n})),o.a.createElement(a.EuiFlexItem,{grow:!0},o.a.createElement(a.EuiFlexGroup,{alignItems:"center",justifyContent:"spaceBetween",gutterSize:"none",responsive:!1},o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(p.b,{"data-test-subj":`legend-item-${r}`,field:s,hideTopN:!0,id:r,isDraggable:!1,scopeId:l,value:c},null==e.render?o.a.createElement(y,{value:c}):e.render({field:s,value:c}))),null!=i&&o.a.createElement(b,{"data-test-subj":"legendItemCount",grow:!1},u()(i).format(t))))))};h.displayName="DraggableLegendItemComponent";const v=o.a.memo(h),E=l.a.div.withConfig({displayName:"DraggableLegendContainer",componentId:"sc-94chus-0"})(["height:",";overflow:auto;scrollbar-width:thin;width:100%;@media only screen and (min-width:","){width:165px;}min-width:",";&::-webkit-scrollbar{height:",";width:",";}&::-webkit-scrollbar-thumb{background-clip:content-box;background-color:",";border:"," solid transparent;}&::-webkit-scrollbar-corner,&::-webkit-scrollbar-track{background-color:transparent;}"],(({height:e})=>`${e}px`),(({theme:e})=>e.eui.euiBreakpoints.m),(({$minWidth:e})=>`${e}px`),(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>Object(i.rgba)(e.eui.euiColorDarkShade,.5)),(({theme:e})=>e.eui.euiScrollBarCorner)),x=({className:e,height:t=0,legendItems:n,minWidth:i=165})=>0===n.length?null:o.a.createElement(E,{className:e,"data-test-subj":"draggable-legend",height:0===t?175:t,$minWidth:i},o.a.createElement(a.EuiText,{size:"xs"},o.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"none"},n.map((e=>o.a.createElement(a.EuiFlexItem,{key:e.dataProviderId,grow:!1},o.a.createElement(v,{legendItem:e}),o.a.createElement(a.EuiSpacer,{"data-test-subj":"draggable-legend-spacer",size:"s"})))))));x.displayName="DraggableLegendComponent";const j=o.a.memo(x)},function(e,t,n){"use strict";let a;n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i})),function(e){e.name="name",e.domain="domain",e.lastSeen="lastSeen"}(a||(a={}));const i={bool:{must_not:[{term:{"event.kind":"asset"}}]}}},function(e,t,n){"use strict";const a=n(301),i={};e.exports=function(e,t,n){if(!1===t||null==t)return e;"string"==typeof(n=n||{})&&(n={separator:n});const r=Array.isArray(t);a(!r||!n.separator,"Separator option no valid for array-based chain");const o=r?t:t.split(n.separator||".");let s=e;for(let e=0;e<o.length;++e){let r=o[e];const l=n.iterables&&i.iterables(s);if(Array.isArray(s)||"set"===l){const e=Number(r);Number.isInteger(e)&&(r=e<0?s.length+e:e)}if(!s||"function"==typeof s&&!1===n.functions||!l&&void 0===s[r]){a(!n.strict||e+1===o.length,"Missing segment",r,"in reach path ",t),a("object"==typeof s||!0===n.functions||"function"!=typeof s,"Invalid segment",r,"in reach path ",t),s=n.default;break}s=l?"set"===l?[...s][r]:s.get(r):s[r]}return s},i.iterables=function(e){return e instanceof Set?"set":e instanceof Map?"map":void 0}},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"d",(function(){return c}));var a=n(374),i=n(42);const r=[a.b.DATE,a.b.IP,a.b.STRING,a.b.NUMBER,a.b.BOOLEAN],o=e=>r.includes(e),s=e=>e.every((e=>Object(i.isString)(e)||Object(i.isNumber)(e)||Object(i.isBoolean)(e)))&&(e=>e.every((t=>typeof t==typeof e[0])))(e),l=e=>e.filter((e=>null!=e)),c=e=>Array.isArray(e)?e:[e]},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("cellActions.actions.incompatibility.warningMessage",{defaultMessage:"The action can not be executed because the value and type are incompatible"})},function(e,t,n){"use strict";n.d(t,"c",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(43),i=n(112),r=n(771),o=n(351);let s;!function(e){e.message="message",e["status-change"]="status-change",e["execution-metrics"]="execution-metrics"}(s||(s={}));const l=Object(i.u)("RuleExecutionEventType",s),c=Object.values(s),u=(Object(r.a)(s),a.type({timestamp:i.h,sequence:a.number,level:o.c,type:l,message:a.string}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(43),i=n(112);const r=a.type({execution_uuid:a.string,timestamp:i.h,duration_ms:a.number,status:a.string,message:a.string,num_active_alerts:a.number,num_new_alerts:a.number,num_recovered_alerts:a.number,num_triggered_actions:a.number,num_succeeded_actions:a.number,num_errored_actions:a.number,total_search_duration_ms:a.number,es_search_duration_ms:a.number,schedule_delay_ms:a.number,timed_out:a.boolean,indexing_duration_ms:a.number,search_duration_ms:a.number,gap_duration_s:a.number,security_status:a.string,security_message:a.string}),o=a.keyof({timestamp:i.h,duration_ms:a.number,gap_duration_s:a.number,indexing_duration_ms:a.number,search_duration_ms:a.number,schedule_delay_ms:a.number})},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.trace="trace",e.debug="debug",e.info="info",e.warn="warn",e.error="error",e.off="off"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(43),i=n(112),r=n(262),o=n(352);const s=a.type({last_execution:a.type({date:i.h,status:r.c,status_order:r.b,message:a.string,metrics:o.a})})},function(e,t,n){"use strict";n.d(t,"k",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"n",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"i",(function(){return c})),n.d(t,"l",(function(){return u})),n.d(t,"m",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"g",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"r",(function(){return g})),n.d(t,"f",(function(){return b})),n.d(t,"s",(function(){return y})),n.d(t,"o",(function(){return h})),n.d(t,"h",(function(){return v})),n.d(t,"j",(function(){return E})),n.d(t,"p",(function(){return x})),n.d(t,"q",(function(){return j})),n.d(t,"b",(function(){return S}));var a=n(43),i=n(112);a.string,a.boolean;const r=a.string,o=(a.union([r,a[void 0]]),i.n),s=a.keyof({open:null,closed:null,acknowledged:null,"in-progress":null}),l=a.keyof({abort:null,proceed:null}),c=a.string,u=(a.union([c,a[void 0]]),a.array(a.string)),d=a.object,p=a.array(a.string),m=a.array(a.string),f=(a.union([m,a[void 0]]),i.h),g=i.h,b=a.string,y=a.string,h=i.n,v=a.string,E=(i.n,i.n,i.n),x=a.boolean,j=i.n,O=a.record(a.string,a.type({all:a.boolean,maintenance:a.boolean,manage_ilm:a.boolean,read:a.boolean,create_index:a.boolean,read_cross_cluster:a.boolean,index:a.boolean,monitor:a.boolean,delete:a.boolean,manage:a.boolean,delete_index:a.boolean,create_doc:a.boolean,view_index_metadata:a.boolean,create:a.boolean,manage_follow_index:a.boolean,manage_leader_index:a.boolean,write:a.boolean})),S=(a.type({index:O}),a.type({username:a.string,has_all_requested:a.boolean,cluster:a.type({monitor_ml:a.boolean,manage_ccr:a.boolean,manage_index_templates:a.boolean,monitor_watcher:a.boolean,monitor_transform:a.boolean,read_ilm:a.boolean,manage_security:a.boolean,manage_own_api_key:a.boolean,manage_saml:a.boolean,all:a.boolean,manage_ilm:a.boolean,manage_ingest_pipelines:a.boolean,read_ccr:a.boolean,manage_rollup:a.boolean,monitor:a.boolean,manage_watcher:a.boolean,manage:a.boolean,manage_transform:a.boolean,manage_token:a.boolean,manage_ml:a.boolean,manage_pipeline:a.boolean,monitor_rollup:a.boolean,transport_client:a.boolean,create_snapshot:a.boolean}),index:O,is_authenticated:a.boolean,has_encryption_key:a.boolean}),a.type({tags_to_add:a.array(a.string),tags_to_remove:a.array(a.string)}))},function(e,t,n){"use strict";n.d(t,"c",(function(){return l})),n.d(t,"a",(function(){return p})),n.d(t,"e",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"d",(function(){return g}));var a=n(42),i=n(12),r=n(148);const o=e=>Object(a.omit)("and",e),s=e=>null!=e,l=e=>e.reduce(((e,t)=>[...e,[o(t),...t.and]]),[]),c=e=>Number(e.substring(e.lastIndexOf(".")+1)),u=({index:e,dataProviderGroups:t})=>e>=0&&e<t.length,d=e=>e.reduce(((e,t)=>[...e,{...t[0],and:t.slice(1)}]),[]),p=[[]],m=({dataProviders:e,destination:t,dispatch:n,source:a,timelineId:r})=>{if(!s(t))return;const o=[...l(e),...p];(({destination:e,source:t})=>t.droppableId===e.droppableId)({source:a,destination:t})?(({dataProviderGroups:e,destination:t,dispatch:n,source:a,timelineId:r})=>{const o=c(a.droppableId);if(u({index:o,dataProviderGroups:e})){const s=(({endIndex:e,group:t,startIndex:n})=>{const a=[...t],[i]=a.splice(n,1);return a.splice(e,0,i),a})({group:e[o],startIndex:a.index,endIndex:t.index}),l=e.reduce(((e,t,n)=>[...e,n===o?[...s]:[...t]]),[]);n(Object(i.updateProviders)({id:r,providers:d(l.filter((e=>e.length)))}))}})({dataProviderGroups:o,destination:t,dispatch:n,source:a,timelineId:r}):(({dataProviderGroups:e,destination:t,dispatch:n,source:a,timelineId:r})=>{const o=c(a.droppableId),s=c(t.droppableId);if(u({index:o,dataProviderGroups:e})&&u({index:s,dataProviderGroups:e})){const l=e[o],c=e[s],u=a.index,p=t.index,{updatedDestinationGroup:m,updatedSourcererScope:f}=(({destinationGroup:e,moveProviderFromSourceIndex:t,moveProviderToDestinationIndex:n,sourceGroup:a})=>{const i=[...a],r=[...e],[o]=i.splice(t,1);return r.splice(n,0,o),{updatedDestinationGroup:r.filter(((e,t)=>e.id!==o.id||t===n)),updatedSourcererScope:i}})({destinationGroup:c,moveProviderFromSourceIndex:u,moveProviderToDestinationIndex:p,sourceGroup:l}),g=e.reduce(((e,t,n)=>[...e,n===o?[...f]:n===s?[...m]:[...t]]),[]);n(Object(i.updateProviders)({id:r,providers:d(g.filter((e=>e.length)))}))}})({dataProviderGroups:o,destination:t,dispatch:n,source:a,timelineId:r})},f=({dataProviders:e,destination:t,dispatch:n,onAddedToTimeline:a,providerToAdd:r,timelineId:m})=>{0===e.length?(({dispatch:e,onAddedToTimeline:t,providerToAdd:n,timelineId:a})=>{e(Object(i.updateProviders)({id:a,providers:[n]})),t(n.name)})({dispatch:n,onAddedToTimeline:a,providerToAdd:r,timelineId:m}):(({dataProviders:e,destination:t,dispatch:n,onAddedToTimeline:a,providerToAdd:r,timelineId:m})=>{const f=[...l(e),...p];if(!s(t))return;const g=c(t.droppableId);if(u({index:g,dataProviderGroups:f})){const e=[...f[g]];e.splice(t.index,0,o(r));const s=e.filter(((e,n)=>e.id!==r.id||n===t.index)),l=f.reduce(((e,t,n)=>[...e,n===g?[...s]:[...t]]),[]);n(Object(i.updateProviders)({id:m,providers:d(l.filter((e=>e.length)))})),a(r.name)}})({dataProviders:e,destination:t,dispatch:n,onAddedToTimeline:a,providerToAdd:r,timelineId:m})},g=e=>Object(r.k)(e)?e.length?`( ${e.join(" OR ")} )`:"":e},function(e,t,n){var a=n(613),i=n(977),r=n(978),o=n(617),s=n(996),l=n(621),c=n(997),u=n(623),d=n(624),p=n(627),m=Math.max;e.exports=function(e,t,n,f,g,b,y,h){var v=2&t;if(!v&&"function"!=typeof e)throw new TypeError("Expected a function");var E=f?f.length:0;if(E||(t&=-97,f=g=void 0),y=void 0===y?y:m(p(y),0),h=void 0===h?h:p(h),E-=g?g.length:0,64&t){var x=f,j=g;f=g=void 0}var O=v?void 0:l(e),S=[e,t,n,f,g,x,j,b,y,h];if(O&&c(S,O),e=S[0],t=S[1],n=S[2],f=S[3],g=S[4],!(h=S[9]=void 0===S[9]?v?0:e.length:m(S[9]-E,0))&&24&t&&(t&=-25),t&&1!=t)k=8==t||16==t?r(e,t,h):32!=t&&33!=t||g.length?o.apply(void 0,S):s(e,t,n,f);else var k=i(e,t,n);return d((O?a:u)(k,S),e,t)}},function(e,t,n){e.exports=n(33)(3657)},function(e,t,n){e.exports=n(33)(360)},function(e,t,n){var a=n(436),i=n(439),r=4294967295;function o(e){this.__wrapped__=e,this.__actions__=[],this.__dir__=1,this.__filtered__=!1,this.__iteratees__=[],this.__takeCount__=r,this.__views__=[]}o.prototype=a(i.prototype),o.prototype.constructor=o,e.exports=o},function(e,t){e.exports=function(){}},function(e,t,n){e.exports=n(33)(282)},function(e,t,n){e.exports=n(33)(3647)},function(e,t,n){e.exports=n(33)(1609)},function(e,t){var n="__lodash_placeholder__";e.exports=function(e,t){for(var a=-1,i=e.length,r=0,o=[];++a<i;){var s=e[a];s!==t&&s!==n||(e[a]=n,o[r++]=a)}return o}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>{if(null==e||!e.isPreconfigured)return null==e?void 0:e.config}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useFirstMountState=void 0;var a=n(2);t.useFirstMountState=function(){var e=a.useRef(!0);return e.current?(e.current=!1,!0):e.current}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.resolveHookState=void 0,t.resolveHookState=function(e,t){return"function"==typeof e?e(t):e}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146).isClient?window:null,r=function(e){return!!e.addEventListener},o=function(e){return!!e.on};t.default=function(e,t,n,s){void 0===n&&(n=i),a.useEffect((function(){if(t&&n)return r(n)?n.addEventListener(e,t,s):o(n)&&n.on(e,t,s),function(){r(n)?n.removeEventListener(e,t,s):o(n)&&n.off(e,t,s)}}),[e,t,n,JSON.stringify(s)])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(361));t.default=function(e){var t=i.useRef(e);t.current=e,r.default((function(){return function(){return t.current()}}))}},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(42);const i=e=>e.replace(/:/g,"-"),r=e=>e.replace(/-/g,":"),o=e=>Object(a.isUndefined)(e)?void 0:Object(a.castArray)(e)},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a,i=(a=n(2))&&"object"==typeof a&&"default"in a?a:{default:a},r=e=>"checkbox"===e.type,o=e=>e instanceof Date,s=e=>null==e;const l=e=>"object"==typeof e;var c=e=>!s(e)&&!Array.isArray(e)&&l(e)&&!o(e),u=e=>c(e)&&e.target?r(e.target)?e.target.checked:e.target.value:e,d=(e,t)=>e.has((e=>e.substring(0,e.search(/\.\d+(\.|$)/))||e)(t)),p="undefined"!=typeof window&&void 0!==window.HTMLElement&&"undefined"!=typeof document;function m(e){let t;const n=Array.isArray(e);if(e instanceof Date)t=new Date(e);else if(e instanceof Set)t=new Set(e);else{if(p&&(e instanceof Blob||e instanceof FileList)||!n&&!c(e))return e;if(t=n?[]:{},n||(e=>{const t=e.constructor&&e.constructor.prototype;return c(t)&&t.hasOwnProperty("isPrototypeOf")})(e))for(const n in e)e.hasOwnProperty(n)&&(t[n]=m(e[n]));else t=e}return t}var f=e=>Array.isArray(e)?e.filter(Boolean):[],g=e=>void 0===e,b=(e,t,n)=>{if(!t||!c(e))return n;const a=f(t.split(/[,[\].]+?/)).reduce(((e,t)=>s(e)?e:e[t]),e);return g(a)||a===e?g(e[t])?n:e[t]:a};const y="blur",h="focusout",v="change",E="onChange",x="onSubmit",j="all",O="pattern",S="required",k=i.default.createContext(null),w=()=>i.default.useContext(k);var I=(e,t,n,a=!0)=>{const i={defaultValues:t._defaultValues};for(const r in e)Object.defineProperty(i,r,{get:()=>{const i=r;return t._proxyFormState[i]!==j&&(t._proxyFormState[i]=!a||j),n&&(n[i]=!0),e[i]}});return i},T=e=>c(e)&&!Object.keys(e).length,C=(e,t,n,a)=>{n(e);const{name:i,...r}=e;return T(r)||Object.keys(r).length>=Object.keys(t).length||Object.keys(r).find((e=>t[e]===(!a||j)))},M=e=>Array.isArray(e)?e:[e],A=(e,t,n)=>n&&t?e===t:!e||!t||e===t||M(e).some((e=>e&&(e.startsWith(t)||t.startsWith(e))));function _(e){const t=i.default.useRef(e);t.current=e,i.default.useEffect((()=>{const n=!e.disabled&&t.current.subject&&t.current.subject.subscribe({next:t.current.next});return()=>{n&&n.unsubscribe()}}),[e.disabled])}function F(e){const t=w(),{control:n=t.control,disabled:a,name:r,exact:o}=e||{},[s,l]=i.default.useState(n._formState),c=i.default.useRef(!0),u=i.default.useRef({isDirty:!1,isLoading:!1,dirtyFields:!1,touchedFields:!1,isValidating:!1,isValid:!1,errors:!1}),d=i.default.useRef(r);return d.current=r,_({disabled:a,next:e=>c.current&&A(d.current,e.name,o)&&C(e,u.current,n._updateFormState)&&l({...n._formState,...e}),subject:n._subjects.state}),i.default.useEffect((()=>(c.current=!0,u.current.isValid&&n._updateValid(!0),()=>{c.current=!1})),[n]),I(s,n,u.current,!1)}var D=e=>"string"==typeof e,N=(e,t,n,a,i)=>D(e)?(a&&t.watch.add(e),b(n,e,i)):Array.isArray(e)?e.map((e=>(a&&t.watch.add(e),b(n,e)))):(a&&(t.watchAll=!0),n);function P(e){const t=w(),{control:n=t.control,name:a,defaultValue:r,disabled:o,exact:s}=e||{},l=i.default.useRef(a);l.current=a,_({disabled:o,subject:n._subjects.values,next:e=>{A(l.current,e.name,s)&&u(m(N(l.current,n._names,e.values||n._formValues,!1,r)))}});const[c,u]=i.default.useState(n._getWatch(a,r));return i.default.useEffect((()=>n._removeUnmounted())),c}var R=e=>/^\w*$/.test(e),L=e=>f(e.replace(/["|']|\]/g,"").split(/\.|\[/));function q(e,t,n){let a=-1;const i=R(t)?[t]:L(t),r=i.length,o=r-1;for(;++a<r;){const t=i[a];let r=n;if(a!==o){const n=e[t];r=c(n)||Array.isArray(n)?n:isNaN(+i[a+1])?{}:[]}e[t]=r,e=e[t]}return e}function B(e){const t=w(),{name:n,control:a=t.control,shouldUnregister:r}=e,o=d(a._names.array,n),s=P({control:a,name:n,defaultValue:b(a._formValues,n,b(a._defaultValues,n,e.defaultValue)),exact:!0}),l=F({control:a,name:n}),c=i.default.useRef(a.register(n,{...e.rules,value:s}));return c.current=a.register(n,e.rules),i.default.useEffect((()=>{const e=a._options.shouldUnregister||r,t=(e,t)=>{const n=b(a._fields,e);n&&(n._f.mount=t)};if(t(n,!0),e){const e=m(b(a._options.defaultValues,n));q(a._defaultValues,n,e),g(b(a._formValues,n))&&q(a._formValues,n,e)}return()=>{(o?e&&!a._state.action:e)?a.unregister(n):t(n,!1)}}),[n,a,o,r]),{field:{name:n,value:s,onChange:i.default.useCallback((e=>c.current.onChange({target:{value:u(e),name:n},type:v})),[n]),onBlur:i.default.useCallback((()=>c.current.onBlur({target:{value:b(a._formValues,n),name:n},type:y})),[n,a]),ref:e=>{const t=b(a._fields,n);t&&e&&(t._f.ref={focus:()=>e.focus(),select:()=>e.select(),setCustomValidity:t=>e.setCustomValidity(t),reportValidity:()=>e.reportValidity()})}},formState:l,fieldState:Object.defineProperties({},{invalid:{enumerable:!0,get:()=>!!b(l.errors,n)},isDirty:{enumerable:!0,get:()=>!!b(l.dirtyFields,n)},isTouched:{enumerable:!0,get:()=>!!b(l.touchedFields,n)},error:{enumerable:!0,get:()=>b(l.errors,n)}})}}const z="post";var $=(e,t,n,a,i)=>t?{...n[e],types:{...n[e]&&n[e].types?n[e].types:{},[a]:i||!0}}:{};const V=(e,t,n)=>{for(const a of n||Object.keys(e)){const n=b(e,a);if(n){const{_f:e,...a}=n;if(e&&t(e.name)){if(e.ref.focus){e.ref.focus();break}if(e.refs&&e.refs[0].focus){e.refs[0].focus();break}}else c(a)&&V(a,t)}}};var U=()=>{const e="undefined"==typeof performance?Date.now():1e3*performance.now();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(t=>{const n=(16*Math.random()+e)%16|0;return("x"==t?n:3&n|8).toString(16)}))},G=(e,t,n={})=>n.shouldFocus||g(n.shouldFocus)?n.focusName||`${e}.${g(n.focusIndex)?t:n.focusIndex}.`:"",H=e=>({isOnSubmit:!e||e===x,isOnBlur:"onBlur"===e,isOnChange:e===E,isOnAll:e===j,isOnTouch:"onTouched"===e}),W=(e,t,n)=>!n&&(t.watchAll||t.watch.has(e)||[...t.watch].some((t=>e.startsWith(t)&&/^\.\w+/.test(e.slice(t.length))))),Q=(e,t,n)=>{const a=f(b(e,n));return q(a,"root",t[n]),q(e,n,a),e},Y=e=>"boolean"==typeof e,K=e=>"file"===e.type,X=e=>"function"==typeof e,J=e=>{if(!p)return!1;const t=e?e.ownerDocument:0;return e instanceof(t&&t.defaultView?t.defaultView.HTMLElement:HTMLElement)},Z=e=>D(e),ee=e=>"radio"===e.type,te=e=>e instanceof RegExp;const ne={value:!1,isValid:!1},ae={value:!0,isValid:!0};var ie=e=>{if(Array.isArray(e)){if(e.length>1){const t=e.filter((e=>e&&e.checked&&!e.disabled)).map((e=>e.value));return{value:t,isValid:!!t.length}}return e[0].checked&&!e[0].disabled?e[0].attributes&&!g(e[0].attributes.value)?g(e[0].value)||""===e[0].value?ae:{value:e[0].value,isValid:!0}:ae:ne}return ne};const re={isValid:!1,value:null};var oe=e=>Array.isArray(e)?e.reduce(((e,t)=>t&&t.checked&&!t.disabled?{isValid:!0,value:t.value}:e),re):re;function se(e,t,n="validate"){if(Z(e)||Array.isArray(e)&&e.every(Z)||Y(e)&&!e)return{type:n,message:Z(e)?e:"",ref:t}}var le=e=>c(e)&&!te(e)?e:{value:e,message:""},ce=async(e,t,n,a,i)=>{const{ref:o,refs:l,required:u,maxLength:d,minLength:p,min:m,max:f,pattern:y,validate:h,name:v,valueAsNumber:E,mount:x,disabled:j}=e._f,k=b(t,v);if(!x||j)return{};const w=l?l[0]:o,I=e=>{a&&w.reportValidity&&(w.setCustomValidity(Y(e)?"":e||""),w.reportValidity())},C={},M=ee(o),A=r(o),_=M||A,F=(E||K(o))&&g(o.value)&&g(k)||J(o)&&""===o.value||""===k||Array.isArray(k)&&!k.length,N=$.bind(null,v,n,C),P=(e,t,n,a="maxLength",i="minLength")=>{const r=e?t:n;C[v]={type:e?a:i,message:r,ref:o,...N(e?a:i,r)}};if(i?!Array.isArray(k)||!k.length:u&&(!_&&(F||s(k))||Y(k)&&!k||A&&!ie(l).isValid||M&&!oe(l).isValid)){const{value:e,message:t}=Z(u)?{value:!!u,message:u}:le(u);if(e&&(C[v]={type:S,message:t,ref:w,...N(S,t)},!n))return I(t),C}if(!(F||s(m)&&s(f))){let e,t;const a=le(f),i=le(m);if(s(k)||isNaN(k)){const n=o.valueAsDate||new Date(k),r=e=>new Date((new Date).toDateString()+" "+e),s="time"==o.type,l="week"==o.type;D(a.value)&&k&&(e=s?r(k)>r(a.value):l?k>a.value:n>new Date(a.value)),D(i.value)&&k&&(t=s?r(k)<r(i.value):l?k<i.value:n<new Date(i.value))}else{const n=o.valueAsNumber||(k?+k:k);s(a.value)||(e=n>a.value),s(i.value)||(t=n<i.value)}if((e||t)&&(P(!!e,a.message,i.message,"max","min"),!n))return I(C[v].message),C}if((d||p)&&!F&&(D(k)||i&&Array.isArray(k))){const e=le(d),t=le(p),a=!s(e.value)&&k.length>+e.value,i=!s(t.value)&&k.length<+t.value;if((a||i)&&(P(a,e.message,t.message),!n))return I(C[v].message),C}if(y&&!F&&D(k)){const{value:e,message:t}=le(y);if(te(e)&&!k.match(e)&&(C[v]={type:O,message:t,ref:o,...N(O,t)},!n))return I(t),C}if(h)if(X(h)){const e=se(await h(k,t),w);if(e&&(C[v]={...e,...N("validate",e.message)},!n))return I(e.message),C}else if(c(h)){let e={};for(const a in h){if(!T(e)&&!n)break;const i=se(await h[a](k,t),w,a);i&&(e={...i,...N(a,i.message)},I(i.message),n&&(C[v]=e))}if(!T(e)&&(C[v]={ref:w,...e},!n))return C}return I(!0),C};function ue(e,t){return[...e,...M(t)]}var de=e=>Array.isArray(e)?e.map((()=>{})):void 0;function pe(e,t,n){return[...e.slice(0,t),...M(n),...e.slice(t)]}var me=(e,t,n)=>Array.isArray(e)?(g(e[n])&&(e[n]=void 0),e.splice(n,0,e.splice(t,1)[0]),e):[];function fe(e,t){return[...M(t),...M(e)]}var ge=(e,t)=>g(t)?[]:function(e,t){let n=0;const a=[...e];for(const e of t)a.splice(e-n,1),n++;return f(a).length?a:[]}(e,M(t).sort(((e,t)=>e-t))),be=(e,t,n)=>{e[t]=[e[n],e[n]=e[t]][0]};function ye(e,t){const n=Array.isArray(t)?t:R(t)?[t]:L(t),a=1===n.length?e:function(e,t){const n=t.slice(0,-1).length;let a=0;for(;a<n;)e=g(e)?a++:e[t[a++]];return e}(e,n),i=n.length-1,r=n[i];return a&&delete a[r],0!==i&&(c(a)&&T(a)||Array.isArray(a)&&function(e){for(const t in e)if(e.hasOwnProperty(t)&&!g(e[t]))return!1;return!0}(a))&&ye(e,n.slice(0,-1)),e}var he=(e,t,n)=>(e[t]=n,e);function ve(){let e=[];return{get observers(){return e},next:t=>{for(const n of e)n.next&&n.next(t)},subscribe:t=>(e.push(t),{unsubscribe:()=>{e=e.filter((e=>e!==t))}}),unsubscribe:()=>{e=[]}}}var Ee=e=>s(e)||!l(e);function xe(e,t){if(Ee(e)||Ee(t))return e===t;if(o(e)&&o(t))return e.getTime()===t.getTime();const n=Object.keys(e),a=Object.keys(t);if(n.length!==a.length)return!1;for(const i of n){const n=e[i];if(!a.includes(i))return!1;if("ref"!==i){const e=t[i];if(o(n)&&o(e)||c(n)&&c(e)||Array.isArray(n)&&Array.isArray(e)?!xe(n,e):n!==e)return!1}}return!0}var je=e=>"select-multiple"===e.type,Oe=e=>J(e)&&e.isConnected,Se=e=>{for(const t in e)if(X(e[t]))return!0;return!1};function ke(e,t={}){const n=Array.isArray(e);if(c(e)||n)for(const n in e)Array.isArray(e[n])||c(e[n])&&!Se(e[n])?(t[n]=Array.isArray(e[n])?[]:{},ke(e[n],t[n])):s(e[n])||(t[n]=!0);return t}function we(e,t,n){const a=Array.isArray(e);if(c(e)||a)for(const a in e)Array.isArray(e[a])||c(e[a])&&!Se(e[a])?g(t)||Ee(n[a])?n[a]=Array.isArray(e[a])?ke(e[a],[]):{...ke(e[a])}:we(e[a],s(t)?{}:t[a],n[a]):n[a]=!xe(e[a],t[a]);return n}var Ie=(e,t)=>we(e,t,ke(t)),Te=(e,{valueAsNumber:t,valueAsDate:n,setValueAs:a})=>g(e)?e:t?""===e?NaN:e?+e:e:n&&D(e)?new Date(e):a?a(e):e;function Ce(e){const t=e.ref;if(!(e.refs?e.refs.every((e=>e.disabled)):t.disabled))return K(t)?t.files:ee(t)?oe(e.refs).value:je(t)?[...t.selectedOptions].map((({value:e})=>e)):r(t)?ie(e.refs).value:Te(g(t.value)?e.ref.value:t.value,e)}var Me=e=>g(e)?e:te(e)?e.source:c(e)?te(e.value)?e.value.source:e.value:e;function Ae(e,t,n){const a=b(e,n);if(a||R(n))return{error:a,name:n};const i=n.split(".");for(;i.length;){const a=i.join("."),r=b(t,a),o=b(e,a);if(r&&!Array.isArray(r)&&n!==a)return{name:n};if(o&&o.type)return{name:a,error:o};i.pop()}return{name:n}}const _e={mode:x,reValidateMode:E,shouldFocusError:!0};function Fe(e={},t){let n,a={..._e,...e},i={submitCount:0,isDirty:!1,isLoading:X(a.defaultValues),isValidating:!1,isSubmitted:!1,isSubmitting:!1,isSubmitSuccessful:!1,isValid:!1,touchedFields:{},dirtyFields:{},errors:{}},l={},v=(c(a.defaultValues)||c(a.values))&&m(a.defaultValues||a.values)||{},E=a.shouldUnregister?{}:m(v),x={action:!1,mount:!1,watch:!1},O={mount:new Set,unMount:new Set,array:new Set,watch:new Set},S=0;const k={isDirty:!1,dirtyFields:!1,touchedFields:!1,isValidating:!1,isValid:!1,errors:!1},w={values:ve(),array:ve(),state:ve()},I=e.resetOptions&&e.resetOptions.keepDirtyValues,C=H(a.mode),A=H(a.reValidateMode),_=a.criteriaMode===j,F=async e=>{if(k.isValid||e){const e=a.resolver?T((await z()).errors):await $(l,!0);e!==i.isValid&&w.state.next({isValid:e})}},P=e=>k.isValidating&&w.state.next({isValidating:e}),R=(e,t,n,a)=>{const i=b(l,e);if(i){const r=b(E,e,g(n)?b(v,e):n);g(r)||a&&a.defaultChecked||t?q(E,e,t?r:Ce(i._f)):Z(e,r),x.mount&&F()}},L=(e,t,n,a,r)=>{let o=!1,s=!1;const l={name:e};if(!n||a){k.isDirty&&(s=i.isDirty,i.isDirty=l.isDirty=U(),o=s!==l.isDirty);const n=xe(b(v,e),t);s=b(i.dirtyFields,e),n?ye(i.dirtyFields,e):q(i.dirtyFields,e,!0),l.dirtyFields=i.dirtyFields,o=o||k.dirtyFields&&s!==!n}if(n){const t=b(i.touchedFields,e);t||(q(i.touchedFields,e,n),l.touchedFields=i.touchedFields,o=o||k.touchedFields&&t!==n)}return o&&r&&w.state.next(l),o?l:{}},B=(t,a,r,o)=>{const s=b(i.errors,t),l=k.isValid&&Y(a)&&i.isValid!==a;var c;if(e.delayError&&r?(c=()=>((e,t)=>{q(i.errors,e,t),w.state.next({errors:i.errors})})(t,r),n=e=>{clearTimeout(S),S=setTimeout(c,e)},n(e.delayError)):(clearTimeout(S),n=null,r?q(i.errors,t,r):ye(i.errors,t)),(r?!xe(s,r):s)||!T(o)||l){const e={...o,...l&&Y(a)?{isValid:a}:{},errors:i.errors,name:t};i={...i,...e},w.state.next(e)}P(!1)},z=async e=>a.resolver(E,a.context,((e,t,n,a)=>{const i={};for(const n of e){const e=b(t,n);e&&q(i,n,e._f)}return{criteriaMode:n,names:[...e],fields:i,shouldUseNativeValidation:a}})(e||O.mount,l,a.criteriaMode,a.shouldUseNativeValidation)),$=async(e,t,n={valid:!0})=>{for(const r in e){const o=e[r];if(o){const{_f:e,...r}=o;if(e){const r=O.array.has(e.name),s=await ce(o,E,_,a.shouldUseNativeValidation&&!t,r);if(s[e.name]&&(n.valid=!1,t))break;!t&&(b(s,e.name)?r?Q(i.errors,s,e.name):q(i.errors,e.name,s[e.name]):ye(i.errors,e.name))}r&&await $(r,t,n)}}return n.valid},U=(e,t)=>(e&&t&&q(E,e,t),!xe(re(),v)),G=(e,t,n)=>N(e,O,{...x.mount?E:g(t)?v:D(e)?{[e]:t}:t},n,t),Z=(e,t,n={})=>{const a=b(l,e);let i=t;if(a){const n=a._f;n&&(!n.disabled&&q(E,e,Te(t,n)),i=J(n.ref)&&s(t)?"":t,je(n.ref)?[...n.ref.options].forEach((e=>e.selected=i.includes(e.value))):n.refs?r(n.ref)?n.refs.length>1?n.refs.forEach((e=>(!e.defaultChecked||!e.disabled)&&(e.checked=Array.isArray(i)?!!i.find((t=>t===e.value)):i===e.value))):n.refs[0]&&(n.refs[0].checked=!!i):n.refs.forEach((e=>e.checked=e.value===i)):K(n.ref)?n.ref.value="":(n.ref.value=i,n.ref.type||w.values.next({name:e,values:{...E}})))}(n.shouldDirty||n.shouldTouch)&&L(e,i,n.shouldTouch,n.shouldDirty,!0),n.shouldValidate&&ie(e)},te=(e,t,n)=>{for(const a in t){const i=t[a],r=`${e}.${a}`,s=b(l,r);!O.array.has(e)&&Ee(i)&&(!s||s._f)||o(i)?Z(r,i,n):te(r,i,n)}},ne=(e,n,a={})=>{const r=b(l,e),o=O.array.has(e),c=m(n);q(E,e,c),o?(w.array.next({name:e,values:{...E}}),(k.isDirty||k.dirtyFields)&&a.shouldDirty&&w.state.next({name:e,dirtyFields:Ie(v,E),isDirty:U(e,c)})):!r||r._f||s(c)?Z(e,c,a):te(e,c,a),W(e,O)&&w.state.next({...i}),w.values.next({name:e,values:{...E}}),!x.mount&&t()},ae=async e=>{const t=e.target;let r=t.name,o=!0;const s=b(l,r);if(s){let d,p;const m=t.type?Ce(s._f):u(e),f=e.type===y||e.type===h,g=!((c=s._f).mount&&(c.required||c.min||c.max||c.maxLength||c.minLength||c.pattern||c.validate)||a.resolver||b(i.errors,r)||s._f.deps)||((e,t,n,a,i)=>!i.isOnAll&&(!n&&i.isOnTouch?!(t||e):(n?a.isOnBlur:i.isOnBlur)?!e:!(n?a.isOnChange:i.isOnChange)||e))(f,b(i.touchedFields,r),i.isSubmitted,A,C),v=W(r,O,f);q(E,r,m),f?(s._f.onBlur&&s._f.onBlur(e),n&&n(0)):s._f.onChange&&s._f.onChange(e);const x=L(r,m,f,!1),j=!T(x)||v;if(!f&&w.values.next({name:r,type:e.type,values:{...E}}),g)return k.isValid&&F(),j&&w.state.next({name:r,...v?{}:x});if(!f&&v&&w.state.next({...i}),P(!0),a.resolver){const{errors:e}=await z([r]),t=Ae(i.errors,l,r),n=Ae(e,l,t.name||r);d=n.error,r=n.name,p=T(e)}else d=(await ce(s,E,_,a.shouldUseNativeValidation))[r],o=isNaN(m)||m===b(E,r,m),o&&(d?p=!1:k.isValid&&(p=await $(l,!0)));o&&(s._f.deps&&ie(s._f.deps),B(r,p,d,x))}var c},ie=async(e,t={})=>{let n,r;const o=M(e);if(P(!0),a.resolver){const t=await(async e=>{const{errors:t}=await z();if(e)for(const n of e){const e=b(t,n);e?q(i.errors,n,e):ye(i.errors,n)}else i.errors=t;return t})(g(e)?e:o);n=T(t),r=e?!o.some((e=>b(t,e))):n}else e?(r=(await Promise.all(o.map((async e=>{const t=b(l,e);return await $(t&&t._f?{[e]:t}:t)})))).every(Boolean),(r||i.isValid)&&F()):r=n=await $(l);return w.state.next({...!D(e)||k.isValid&&n!==i.isValid?{}:{name:e},...a.resolver||!e?{isValid:n}:{},errors:i.errors,isValidating:!1}),t.shouldFocus&&!r&&V(l,(e=>e&&b(i.errors,e)),e?o:O.mount),r},re=e=>{const t={...v,...x.mount?E:{}};return g(e)?t:D(e)?b(t,e):e.map((e=>b(t,e)))},oe=(e,t)=>({invalid:!!b((t||i).errors,e),isDirty:!!b((t||i).dirtyFields,e),isTouched:!!b((t||i).touchedFields,e),error:b((t||i).errors,e)}),se=(e,t,n)=>{const a=(b(l,e,{_f:{}})._f||{}).ref;q(i.errors,e,{...t,ref:a}),w.state.next({name:e,errors:i.errors,isValid:!1}),n&&n.shouldFocus&&a&&a.focus&&a.focus()},le=(e,t={})=>{for(const n of e?M(e):O.mount)O.mount.delete(n),O.array.delete(n),t.keepValue||(ye(l,n),ye(E,n)),!t.keepError&&ye(i.errors,n),!t.keepDirty&&ye(i.dirtyFields,n),!t.keepTouched&&ye(i.touchedFields,n),!a.shouldUnregister&&!t.keepDefaultValue&&ye(v,n);w.values.next({values:{...E}}),w.state.next({...i,...t.keepDirty?{isDirty:U()}:{}}),!t.keepIsValid&&F()},ue=(e,t={})=>{let n=b(l,e);const i=Y(t.disabled);return q(l,e,{...n||{},_f:{...n&&n._f?n._f:{ref:{name:e}},name:e,mount:!0,...t}}),O.mount.add(e),n?i&&q(E,e,t.disabled?void 0:b(E,e,Ce(n._f))):R(e,!0,t.value),{...i?{disabled:t.disabled}:{},...a.progressive?{required:!!t.required,min:Me(t.min),max:Me(t.max),minLength:Me(t.minLength),maxLength:Me(t.maxLength),pattern:Me(t.pattern)}:{},name:e,onChange:ae,onBlur:ae,ref:i=>{if(i){ue(e,t),n=b(l,e);const a=g(i.value)&&i.querySelectorAll&&i.querySelectorAll("input,select,textarea")[0]||i,o=(e=>ee(e)||r(e))(a),s=n._f.refs||[];if(o?s.find((e=>e===a)):a===n._f.ref)return;q(l,e,{_f:{...n._f,...o?{refs:[...s.filter(Oe),a,...Array.isArray(b(v,e))?[{}]:[]],ref:{type:a.type,name:e}}:{ref:a}}}),R(e,!1,void 0,a)}else n=b(l,e,{}),n._f&&(n._f.mount=!1),(a.shouldUnregister||t.shouldUnregister)&&(!d(O.array,e)||!x.action)&&O.unMount.add(e)}}},de=()=>a.shouldFocusError&&V(l,(e=>e&&b(i.errors,e)),O.mount),pe=(e,t)=>async n=>{n&&(n.preventDefault&&n.preventDefault(),n.persist&&n.persist());let r=m(E);if(w.state.next({isSubmitting:!0}),a.resolver){const{errors:e,values:t}=await z();i.errors=e,r=t}else await $(l);ye(i.errors,"root"),T(i.errors)?(w.state.next({errors:{}}),await e(r,n)):(t&&await t({...i.errors},n),de(),setTimeout(de)),w.state.next({isSubmitted:!0,isSubmitting:!1,isSubmitSuccessful:T(i.errors),submitCount:i.submitCount+1,errors:i.errors})},me=(n,a={})=>{const r=n||v,o=m(r),s=n&&!T(n)?o:v;if(a.keepDefaultValues||(v=r),!a.keepValues){if(a.keepDirtyValues||I)for(const e of O.mount)b(i.dirtyFields,e)?q(s,e,b(E,e)):ne(e,b(s,e));else{if(p&&g(n))for(const e of O.mount){const t=b(l,e);if(t&&t._f){const e=Array.isArray(t._f.refs)?t._f.refs[0]:t._f.ref;if(J(e)){const t=e.closest("form");if(t){t.reset();break}}}}l={}}E=e.shouldUnregister?a.keepDefaultValues?m(v):{}:m(s),w.array.next({values:{...s}}),w.values.next({values:{...s}})}O={mount:new Set,unMount:new Set,array:new Set,watch:new Set,watchAll:!1,focus:""},!x.mount&&t(),x.mount=!k.isValid||!!a.keepIsValid,x.watch=!!e.shouldUnregister,w.state.next({submitCount:a.keepSubmitCount?i.submitCount:0,isDirty:a.keepDirty?i.isDirty:!(!a.keepDefaultValues||xe(n,v)),isSubmitted:!!a.keepIsSubmitted&&i.isSubmitted,dirtyFields:a.keepDirtyValues?i.dirtyFields:a.keepDefaultValues&&n?Ie(v,n):{},touchedFields:a.keepTouched?i.touchedFields:{},errors:a.keepErrors?i.errors:{},isSubmitting:!1,isSubmitSuccessful:!1})},fe=(e,t)=>me(X(e)?e(E):e,t);return{control:{register:ue,unregister:le,getFieldState:oe,handleSubmit:pe,setError:se,_executeSchema:z,_getWatch:G,_getDirty:U,_updateValid:F,_removeUnmounted:()=>{for(const e of O.unMount){const t=b(l,e);t&&(t._f.refs?t._f.refs.every((e=>!Oe(e))):!Oe(t._f.ref))&&le(e)}O.unMount=new Set},_updateFieldArray:(e,t=[],n,a,r=!0,o=!0)=>{if(a&&n){if(x.action=!0,o&&Array.isArray(b(l,e))){const t=n(b(l,e),a.argA,a.argB);r&&q(l,e,t)}if(o&&Array.isArray(b(i.errors,e))){const t=n(b(i.errors,e),a.argA,a.argB);r&&q(i.errors,e,t),((e,t)=>{!f(b(e,t)).length&&ye(e,t)})(i.errors,e)}if(k.touchedFields&&o&&Array.isArray(b(i.touchedFields,e))){const t=n(b(i.touchedFields,e),a.argA,a.argB);r&&q(i.touchedFields,e,t)}k.dirtyFields&&(i.dirtyFields=Ie(v,E)),w.state.next({name:e,isDirty:U(e,t),dirtyFields:i.dirtyFields,errors:i.errors,isValid:i.isValid})}else q(E,e,t)},_getFieldArray:t=>f(b(x.mount?E:v,t,e.shouldUnregister?b(v,t,[]):[])),_reset:me,_resetDefaultValues:()=>X(a.defaultValues)&&a.defaultValues().then((e=>{fe(e,a.resetOptions),w.state.next({isLoading:!1})})),_updateFormState:e=>{i={...i,...e}},_subjects:w,_proxyFormState:k,get _fields(){return l},get _formValues(){return E},get _state(){return x},set _state(e){x=e},get _defaultValues(){return v},get _names(){return O},set _names(e){O=e},get _formState(){return i},set _formState(e){i=e},get _options(){return a},set _options(e){a={...a,...e}}},trigger:ie,register:ue,handleSubmit:pe,watch:(e,t)=>X(e)?w.values.subscribe({next:n=>e(G(void 0,t),n)}):G(e,t,!0),setValue:ne,getValues:re,reset:fe,resetField:(e,t={})=>{b(l,e)&&(g(t.defaultValue)?ne(e,b(v,e)):(ne(e,t.defaultValue),q(v,e,t.defaultValue)),t.keepTouched||ye(i.touchedFields,e),t.keepDirty||(ye(i.dirtyFields,e),i.isDirty=t.defaultValue?U(e,b(v,e)):U()),t.keepError||(ye(i.errors,e),k.isValid&&F()),w.state.next({...i}))},clearErrors:e=>{e&&M(e).forEach((e=>ye(i.errors,e))),w.state.next({errors:e?i.errors:{}})},unregister:le,setError:se,setFocus:(e,t={})=>{const n=b(l,e),a=n&&n._f;if(a){const e=a.refs?a.refs[0]:a.ref;e.focus&&(e.focus(),t.shouldSelect&&e.select())}},getFieldState:oe}}t.Controller=e=>e.render(B(e)),t.Form=function(e){const t=w(),[n,a]=i.default.useState(!1),{control:r=t.control,onSubmit:o,children:s,action:l,method:c=z,headers:u,encType:d,onError:p,render:m,onSuccess:f,validateStatus:g,...y}=e,h=async t=>{let n=!1,a="";await r.handleSubmit((async e=>{const i=new FormData;let s="";try{s=JSON.stringify(e)}catch(e){}for(const t of r._names.mount)i.append(t,b(e,t));if(o&&o({data:e,event:t,method:c,formData:i,formDataJson:s}),l)try{const e=[u&&u["Content-Type"],d].some((e=>e&&e.includes("json"))),t=await fetch(l,{method:c,headers:{...u,...d?{"Content-Type":d}:{}},body:e?s:i});t&&(g?!g(t.status):t.status<200||t.status>=300)?(n=!0,p&&p({response:t}),a=String(t.status)):f&&f({response:t})}catch(e){n=!0,p&&p({error:e})}}))(t),n&&e.control&&(e.control._subjects.state.next({isSubmitSuccessful:!1}),e.control.setError("root.server",{type:a}))};return i.default.useEffect((()=>{a(!0)}),[]),m?i.default.createElement(i.default.Fragment,null,m({submit:h})):i.default.createElement("form",{noValidate:n,action:l,method:c,encType:d,onSubmit:h,...y},s)},t.FormProvider=e=>{const{children:t,...n}=e;return i.default.createElement(k.Provider,{value:n},t)},t.appendErrors=$,t.get=b,t.set=q,t.useController=B,t.useFieldArray=function(e){const t=w(),{control:n=t.control,name:a,keyName:r="id",shouldUnregister:o}=e,[s,l]=i.default.useState(n._getFieldArray(a)),c=i.default.useRef(n._getFieldArray(a).map(U)),u=i.default.useRef(s),d=i.default.useRef(a),p=i.default.useRef(!1);d.current=a,u.current=s,n._names.array.add(a),e.rules&&n.register(a,e.rules),_({next:({values:e,name:t})=>{if(t===d.current||!t){const t=b(e,d.current);Array.isArray(t)&&(l(t),c.current=t.map(U))}},subject:n._subjects.array});const f=i.default.useCallback((e=>{p.current=!0,n._updateFieldArray(a,e)}),[n,a]);return i.default.useEffect((()=>{if(n._state.action=!1,W(a,n._names)&&n._subjects.state.next({...n._formState}),p.current&&(!H(n._options.mode).isOnSubmit||n._formState.isSubmitted))if(n._options.resolver)n._executeSchema([a]).then((e=>{const t=b(e.errors,a),i=b(n._formState.errors,a);(i?!t&&i.type||t&&(i.type!==t.type||i.message!==t.message):t&&t.type)&&(t?q(n._formState.errors,a,t):ye(n._formState.errors,a),n._subjects.state.next({errors:n._formState.errors}))}));else{const e=b(n._fields,a);e&&e._f&&ce(e,n._formValues,n._options.criteriaMode===j,n._options.shouldUseNativeValidation,!0).then((e=>!T(e)&&n._subjects.state.next({errors:Q(n._formState.errors,e,a)})))}n._subjects.values.next({name:a,values:{...n._formValues}}),n._names.focus&&V(n._fields,(e=>!!e&&e.startsWith(n._names.focus||""))),n._names.focus="",n._updateValid()}),[s,a,n]),i.default.useEffect((()=>(!b(n._formValues,a)&&n._updateFieldArray(a),()=>{(n._options.shouldUnregister||o)&&n.unregister(a)})),[a,n,r,o]),{swap:i.default.useCallback(((e,t)=>{const i=n._getFieldArray(a);be(i,e,t),be(c.current,e,t),f(i),l(i),n._updateFieldArray(a,i,be,{argA:e,argB:t},!1)}),[f,a,n]),move:i.default.useCallback(((e,t)=>{const i=n._getFieldArray(a);me(i,e,t),me(c.current,e,t),f(i),l(i),n._updateFieldArray(a,i,me,{argA:e,argB:t},!1)}),[f,a,n]),prepend:i.default.useCallback(((e,t)=>{const i=M(m(e)),r=fe(n._getFieldArray(a),i);n._names.focus=G(a,0,t),c.current=fe(c.current,i.map(U)),f(r),l(r),n._updateFieldArray(a,r,fe,{argA:de(e)})}),[f,a,n]),append:i.default.useCallback(((e,t)=>{const i=M(m(e)),r=ue(n._getFieldArray(a),i);n._names.focus=G(a,r.length-1,t),c.current=ue(c.current,i.map(U)),f(r),l(r),n._updateFieldArray(a,r,ue,{argA:de(e)})}),[f,a,n]),remove:i.default.useCallback((e=>{const t=ge(n._getFieldArray(a),e);c.current=ge(c.current,e),f(t),l(t),n._updateFieldArray(a,t,ge,{argA:e})}),[f,a,n]),insert:i.default.useCallback(((e,t,i)=>{const r=M(m(t)),o=pe(n._getFieldArray(a),e,r);n._names.focus=G(a,e,i),c.current=pe(c.current,e,r.map(U)),f(o),l(o),n._updateFieldArray(a,o,pe,{argA:e,argB:de(t)})}),[f,a,n]),update:i.default.useCallback(((e,t)=>{const i=m(t),r=he(n._getFieldArray(a),e,i);c.current=[...r].map(((t,n)=>t&&n!==e?c.current[n]:U())),f(r),l([...r]),n._updateFieldArray(a,r,he,{argA:e,argB:i},!0,!1)}),[f,a,n]),replace:i.default.useCallback((e=>{const t=M(m(e));c.current=t.map(U),f([...t]),l([...t]),n._updateFieldArray(a,[...t],(e=>e),{},!0,!1)}),[f,a,n]),fields:i.default.useMemo((()=>s.map(((e,t)=>({...e,[r]:c.current[t]||U()})))),[s,r])}},t.useForm=function(e={}){const t=i.default.useRef(),[n,a]=i.default.useState({isDirty:!1,isValidating:!1,isLoading:X(e.defaultValues),isSubmitted:!1,isSubmitting:!1,isSubmitSuccessful:!1,isValid:!1,submitCount:0,dirtyFields:{},touchedFields:{},errors:{},defaultValues:X(e.defaultValues)?void 0:e.defaultValues});t.current||(t.current={...Fe(e,(()=>a((e=>({...e}))))),formState:n});const r=t.current.control;return r._options=e,_({subject:r._subjects.state,next:e=>{C(e,r._proxyFormState,r._updateFormState,!0)&&a({...r._formState})}}),i.default.useEffect((()=>{e.values&&!xe(e.values,r._defaultValues)?r._reset(e.values,r._options.resetOptions):r._resetDefaultValues()}),[e.values,r]),i.default.useEffect((()=>{r._state.mount||(r._updateValid(),r._state.mount=!0),r._state.watch&&(r._state.watch=!1,r._subjects.state.next({...r._formState})),r._removeUnmounted()})),t.current.formState=I(n,r),t.current},t.useFormContext=w,t.useFormState=F,t.useWatch=P},function(e,t){const n=Object.freeze({loose:!0}),a=Object.freeze({});e.exports=e=>e?"object"!=typeof e?n:e:a},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(654),s=n(453);const l=Object(a.forwardRef)((({onChange:e,value:t,ariaLabel:n,editorId:l,dataTestSubj:c,height:u,autoFocusDisabled:d,setIsMarkdownInvalid:p},m)=>{const[f,g]=Object(a.useState)([]),b=Object(a.useCallback)(((e,{messages:t})=>{g(e?[e]:t),p(!!e)}),[p]),y=Object(a.useRef)(null);Object(a.useEffect)((()=>{var e,t;d||null===(e=y.current)||void 0===e||null===(t=e.textarea)||void 0===t||t.focus()}),[d]);const h=Object(s.b)("investigation_guide"),v=Object(a.useMemo)((()=>Object(o.d)({insightsUpsellingMessage:h})),[h]);return Object(a.useImperativeHandle)(m,(()=>{var e,t;if(!y.current)return null;const n=null===(e=y.current)||void 0===e||null===(t=e.textarea)||void 0===t?void 0:t.closest(".euiMarkdownEditor");return{...y.current,toolbar:null==n?void 0:n.querySelector(".euiMarkdownEditorToolbar")}})),i.a.createElement(r.EuiMarkdownEditor,{ref:y,"aria-label":n,editorId:l,onChange:e,value:t,uiPlugins:v,parsingPluginList:o.a,processingPluginList:o.c,onParse:b,errors:f,"data-test-subj":c,height:u})}));l.displayName="MarkdownEditorComponent";const c=Object(a.memo)(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c}));var a=n(2),i=n(10),r=n.n(i),o=n(535);const s=e=>{const t=Object(o.b)(),n=r()(t.sections$,t.getSectionsValue());return Object(a.useMemo)((()=>{var t;return null!==(t=null==n?void 0:n.get(e))&&void 0!==t?t:null}),[e,n])},l=e=>{const t=Object(o.b)(),n=r()(t.messages$,t.getMessagesValue());return Object(a.useMemo)((()=>{var t;return null!==(t=null==n?void 0:n.get(e))&&void 0!==t?t:null}),[e,n])},c=e=>{const t=Object(o.b)(),n=Object(a.useMemo)((()=>t.getPageUpselling(e)),[e,t]);return null!=n?n:null}},function(e,t,n){"use strict";n.d(t,"a",(function(){return v}));var a=n(40),i=n(55),r=n.n(i),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(45),d=n(4),p=n(455),m=n(116),f=n(110);const g=c()(a.EuiDescriptionList).withConfig({displayName:"DescriptionListStyled",componentId:"sc-67qpo8-0"})(["@media only screen and (min-width:","){.euiDescriptionList__title{width:30% !important;}.euiDescriptionList__description{width:70% !important;}}"],(e=>e.theme.eui.euiBreakpoints.s));g.displayName="DescriptionListStyled";const b=c()(a.EuiModal).withConfig({displayName:"MyEuiModal",componentId:"sc-67qpo8-1"})(["width:min(768px,calc(100vw - 16px));min-height:41vh;.euiModal__flex{width:60vw;}.euiCodeBlock{height:auto !important;max-width:718px;}"]);b.displayName="MyEuiModal";const y=function(e){try{return e.map((e=>JSON.parse(e)))}catch{return[]}},h=(e=[])=>1===e.length&&e[0]===d.Sb?s.a.createElement("i",null,p.f):e.length>0?e.filter((e=>e!==d.Sb)).join(", "):p.k,v=({adHocDataViews:e,additionalRequests:t,additionalResponses:n,closeModal:i,inputId:l,request:c,response:d,title:v})=>{var E,x,j,O;const{pathname:S}=Object(u.useLocation)(),{selectedPatterns:k}=Object(m.d)("timeline"===l?f.SourcererScopeName.timeline:Object(m.a)(S)),w=[c,...null!=t?t:[]],I=[d,...null!=n?n:[]],T=y(w),C=y(I),M=Object(o.useMemo)((()=>{var e,t;return(null!==(e=null===(t=T[0])||void 0===t?void 0:t.index)&&void 0!==e?e:[]).every((e=>k.includes(e.trim())))}),[T,k]),A=[{title:s.a.createElement("span",{"data-test-subj":"index-pattern-title"},p.b," ",s.a.createElement(a.EuiIconTip,{color:"subdued",content:p.c,type:"iInCircle"})),description:s.a.createElement("span",{"data-test-subj":"index-pattern-description"},s.a.createElement("p",null,h(null!=e&&e.length>0?e:null!==(E=null===(x=T[0])||void 0===x?void 0:x.index)&&void 0!==E?E:[])),!M&&s.a.createElement("p",null,s.a.createElement("small",null,s.a.createElement("i",{"data-test-subj":"not-sourcerer-msg"},p.e))))},{title:s.a.createElement("span",{"data-test-subj":"query-time-title"},p.g," ",s.a.createElement(a.EuiIconTip,{color:"subdued",content:p.h,type:"iInCircle"})),description:s.a.createElement("span",{"data-test-subj":"query-time-description"},0===(null===(j=C[0])||void 0===j?void 0:j.took)?"0ms":null!==(O=C[0])&&void 0!==O&&O.took?`${r()(C[0].took).format("0,0")}ms`:p.k)},{title:s.a.createElement("span",{"data-test-subj":"request-timestamp-title"},p.i," ",s.a.createElement(a.EuiIconTip,{color:"subdued",content:p.j,type:"iInCircle"})),description:s.a.createElement("span",{"data-test-subj":"request-timestamp-description"},(new Date).toISOString())}],_=[{id:"statistics",name:"Statistics",content:s.a.createElement(s.a.Fragment,null,s.a.createElement(a.EuiSpacer,null),s.a.createElement(g,{listItems:A,type:"column"}))},{id:"request",name:"Request",content:T.length>0?T.map(((e,t)=>s.a.createElement(o.Fragment,{key:t},s.a.createElement(a.EuiSpacer,null),s.a.createElement(a.EuiCodeBlock,{language:"js",fontSize:"m",paddingSize:"m",color:"dark",overflowHeight:300,isCopyable:!0},(e=>{try{return JSON.stringify(e,null,2)}catch{return p.k}})(e.body))))):s.a.createElement(a.EuiCodeBlock,null,p.k)},{id:"response",name:"Response",content:C.length>0?I.map(((e,t)=>s.a.createElement(o.Fragment,{key:t},s.a.createElement(a.EuiSpacer,null),s.a.createElement(a.EuiCodeBlock,{language:"js",fontSize:"m",paddingSize:"m",color:"dark",overflowHeight:300,isCopyable:!0},e)))):s.a.createElement(a.EuiCodeBlock,null,p.k)}];return s.a.createElement(b,{onClose:i,"data-test-subj":"modal-inspect-euiModal"},s.a.createElement(a.EuiModalHeader,null,s.a.createElement(a.EuiModalHeaderTitle,null,p.d," ",v)),s.a.createElement(a.EuiModalBody,null,s.a.createElement(a.EuiTabbedContent,{tabs:_,initialSelectedTab:_[0],autoFocus:"selected"})),s.a.createElement(a.EuiModalFooter,null,s.a.createElement(a.EuiButton,{onClick:i,fill:!0,"data-test-subj":"modal-inspect-close"},p.a)))}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"k",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"h",(function(){return d})),n.d(t,"i",(function(){return p})),n.d(t,"j",(function(){return m})),n.d(t,"f",(function(){return f}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.inspectDescription",{defaultMessage:"Inspect"}),r=a.i18n.translate("xpack.securitySolution.inspect.modal.closeTitle",{defaultMessage:"Close"}),o=a.i18n.translate("xpack.securitySolution.inspect.modal.somethingWentWrongDescription",{defaultMessage:"Sorry about that, something went wrong."}),s=a.i18n.translate("xpack.securitySolution.inspect.modal.indexPatternLabel",{defaultMessage:"Index pattern"}),l=a.i18n.translate("xpack.securitySolution.inspect.modal.indexPatternDescription",{defaultMessage:"The index pattern that connected to the Elasticsearch indices. These indices can be configured in Kibana > Advanced Settings."}),c=a.i18n.translate("xpack.securitySolution.inspectPatternDifferent",{defaultMessage:"This element has a unique index pattern separate from the data view setting."}),u=a.i18n.translate("xpack.securitySolution.inspect.modal.queryTimeLabel",{defaultMessage:"Query time"}),d=a.i18n.translate("xpack.securitySolution.inspect.modal.queryTimeDescription",{defaultMessage:"The time it took to process the query. Does not include the time to send the request or parse it in the browser."}),p=a.i18n.translate("xpack.securitySolution.inspect.modal.reqTimestampLabel",{defaultMessage:"Request timestamp"}),m=a.i18n.translate("xpack.securitySolution.inspect.modal.reqTimestampDescription",{defaultMessage:"Time when the start of the request has been logged"}),f=a.i18n.translate("xpack.securitySolution.inspect.modal.noAlertIndexFound",{defaultMessage:"No alert index found"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"c",(function(){return u}));var a=n(57),i=n(42),r=n(293);const o=e=>e.toLocaleString(),s=({chartHeight:e,from:t,legendPosition:n,to:i,onBrushEnd:s,yTickFormatter:l,showLegend:c})=>({series:{xScaleType:a.ScaleType.Time,yScaleType:a.ScaleType.Linear,stackAccessors:["g"]},axis:{xTickFormatter:Object(r.a)([t,i]),yTickFormatter:null!=l?l:o,tickSize:8},settings:{legendPosition:null!=n?n:a.Position.Right,onBrushEnd:s,showLegend:null==c||c,showLegendExtra:!0,theme:{scales:{barsPadding:.08},chartMargins:{left:0,right:0,top:0,bottom:0},chartPaddings:{left:0,right:0,top:0,bottom:0}}},customHeight:null!=e?e:174}),l=["#1EA593","#2B70F7","#CE0060","#38007E","#FCA5D3","#F37020","#E49E29","#B0916F","#7B000B","#34130C","#GGGGGG"],c=([e,t])=>({key:e,value:t}),u=(e,t)=>{if(!e)return[];const n=Object(i.groupBy)("g",e),a=Object(i.toPairs)(n);return Object(i.map)(c,a).map(((e,n)=>{var a;const r=Object(i.get)(e.key,t);return{...e,color:null!==(a=null==r?void 0:r.color)&&void 0!==a?a:l[n]}}))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"i",(function(){return u})),n.d(t,"j",(function(){return d})),n.d(t,"b",(function(){return p})),n.d(t,"k",(function(){return m})),n.d(t,"l",(function(){return f})),n.d(t,"m",(function(){return g})),n.d(t,"n",(function(){return b})),n.d(t,"o",(function(){return y})),n.d(t,"e",(function(){return h}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.dataQualityDashboard.addToCaseSuccessToast",{defaultMessage:"Successfully added data quality results to the case"}),r=(a.i18n.translate("xpack.securitySolution.dataQualityDashboard.betaBadge",{defaultMessage:"Beta"}),a.i18n.translate("xpack.securitySolution.overview.ilmPhaseCold",{defaultMessage:"cold"})),o=a.i18n.translate("xpack.securitySolution.dataQualityDashboard.pageTitle",{defaultMessage:"Data Quality"}),s=a.i18n.translate("xpack.securitySolution.dataQualityDashboard.elasticCommonSchemaReferenceLink",{defaultMessage:"Elastic Common Schema (ECS)"}),l=(a.i18n.translate("xpack.securitySolution.overview.eventsTitle",{defaultMessage:"Event count"}),a.i18n.translate("xpack.securitySolution.overview.ilmPhaseFrozen",{defaultMessage:"frozen"})),c=a.i18n.translate("xpack.securitySolution.overview.ilmPhaseHot",{defaultMessage:"hot"}),u=a.i18n.translate("xpack.securitySolution.overview.newsFeedSidebarTitle",{defaultMessage:"Security news"}),d=a.i18n.translate("xpack.securitySolution.overview.recentTimelinesSidebarTitle",{defaultMessage:"Recent timelines"}),p=a.i18n.translate("xpack.securitySolution.overview.signalCountTitle",{defaultMessage:"Alert trend"}),m=e=>a.i18n.translate("xpack.securitySolution.overview.topNLabel",{values:{fieldName:e},defaultMessage:"Top {fieldName}"}),f=a.i18n.translate("xpack.securitySolution.overview.ilmPhaseUnmanaged",{defaultMessage:"unmanaged"}),g=a.i18n.translate("xpack.securitySolution.overview.viewAlertsButtonLabel",{defaultMessage:"View alerts"}),b=a.i18n.translate("xpack.securitySolution.overview.viewEventsButtonLabel",{defaultMessage:"View events"}),y=a.i18n.translate("xpack.securitySolution.overview.ilmPhaseWarm",{defaultMessage:"warm"}),h=a.i18n.translate("xpack.securitySolution.detectionResponse.pageTitle",{defaultMessage:"Detection & Response"});a.i18n.translate("xpack.securitySolution.entityAnalytics.technicalPreviewLabel",{defaultMessage:"Technical Preview"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"c",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.exceptions.commentEventLabel",{defaultMessage:"added a comment"}),r=a.i18n.translate("xpack.securitySolution.exceptions.operatingSystemFullLabel",{defaultMessage:"Operating System"}),o=(a.i18n.translate("xpack.securitySolution.exceptions.viewer.addToEndpointListLabel",{defaultMessage:"Add endpoint exception"}),a.i18n.translate("xpack.securitySolution.exceptions.viewer.addToDetectionsListLabel",{defaultMessage:"Add rule exception"}),a.i18n.translate("xpack.securitySolution.exceptions.viewer.addCommentPlaceholder",{defaultMessage:"Add a new comment..."}),a.i18n.translate("xpack.securitySolution.exceptions.viewer.addToClipboard",{defaultMessage:"Comment"})),s=(a.i18n.translate("xpack.securitySolution.exceptions.clearExceptionsLabel",{defaultMessage:"Remove Exception List"}),a.i18n.translate("xpack.securitySolution.exceptions.fetchError",{defaultMessage:"Error fetching exception list"}),a.i18n.translate("xpack.securitySolution.exceptions.errorLabel",{defaultMessage:"Error"}),a.i18n.translate("xpack.securitySolution.exceptions.cancelLabel",{defaultMessage:"Cancel"}),a.i18n.translate("xpack.securitySolution.exceptions.modalErrorAccordionText",{defaultMessage:"Show rule reference information:"}),a.i18n.translate("xpack.securitySolution.exceptions.disassociateExceptionListError",{defaultMessage:"Failed to remove exception list"}),a.i18n.translate("xpack.securitySolution.exceptions.operatingSystemWindows",{defaultMessage:"Windows"})),l=a.i18n.translate("xpack.securitySolution.exceptions.operatingSystemMac",{defaultMessage:"macOS"}),c=a.i18n.translate("xpack.securitySolution.exceptions.operatingSystemWindowsAndMac",{defaultMessage:"Windows and macOS"}),u=a.i18n.translate("xpack.securitySolution.exceptions.operatingSystemLinux",{defaultMessage:"Linux"}),d=a.i18n.translate("xpack.securitySolution.exceptions.fetchingReferencesErrorToastTitle",{defaultMessage:"Error fetching exception references"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"g",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"i",(function(){return d})),n.d(t,"f",(function(){return p}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.timeline.categoryTooltip",{defaultMessage:"Category"}),r=a.i18n.translate("xpack.securitySolution.timeline.descriptionTooltip",{defaultMessage:"Description"}),o=a.i18n.translate("xpack.securitySolution.timeline.fieldTooltip",{defaultMessage:"Field"}),s=a.i18n.translate("xpack.securitySolution.timeline.fullScreenButton",{defaultMessage:"Full screen"}),l=a.i18n.translate("xpack.securitySolution.timeline.hideColumnLabel",{defaultMessage:"Hide column"}),c=a.i18n.translate("xpack.securitySolution.timeline.sortAZLabel",{defaultMessage:"Sort A-Z"}),u=a.i18n.translate("xpack.securitySolution.timeline.sortZALabel",{defaultMessage:"Sort Z-A"}),d=a.i18n.translate("xpack.securitySolution.timeline.typeTooltip",{defaultMessage:"Type"}),p=a.i18n.translate("xpack.securitySolution.timeline.flyout.pane.removeColumnButtonLabel",{defaultMessage:"Remove column"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"f",(function(){return l}));const a="network.bytes",i="network.community_id",r="network.direction",o="network.packets",s="network.protocol",l="network.transport"},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"c",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.isolateHost",{defaultMessage:"Isolate host"}),r=a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.unisolateHost",{defaultMessage:"Release host"}),o=e=>a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.isolateHost.casesAssociatedWithAlert",{defaultMessage:"{caseCount} {caseCount, plural, one {case} other {cases}} associated with this host",values:{caseCount:e}}),s=a.i18n.translate("xpack.securitySolution.endpoint.hostIsolation.returnToAlertDetails",{defaultMessage:"Return to alert details"})},function(e,t,n){const a=n(192);e.exports=(e,t,n)=>a(e,t,n)>0},function(e,t,n){const a=Symbol("SemVer ANY");class Comparator{static get ANY(){return a}constructor(e,t){if(t=i(t),e instanceof Comparator){if(e.loose===!!t.loose)return e;e=e.value}e=e.trim().split(/\s+/).join(" "),l("comparator",e,t),this.options=t,this.loose=!!t.loose,this.parse(e),this.semver===a?this.value="":this.value=this.operator+this.semver.version,l("comp",this)}parse(e){const t=this.options.loose?r[o.COMPARATORLOOSE]:r[o.COMPARATOR],n=e.match(t);if(!n)throw new TypeError(`Invalid comparator: ${e}`);this.operator=void 0!==n[1]?n[1]:"","="===this.operator&&(this.operator=""),n[2]?this.semver=new c(n[2],this.options.loose):this.semver=a}toString(){return this.value}test(e){if(l("Comparator.test",e,this.options.loose),this.semver===a||e===a)return!0;if("string"==typeof e)try{e=new c(e,this.options)}catch(e){return!1}return s(e,this.operator,this.semver,this.options)}intersects(e,t){if(!(e instanceof Comparator))throw new TypeError("a Comparator is required");return""===this.operator?""===this.value||new u(e.value,t).test(this.value):""===e.operator?""===e.value||new u(this.value,t).test(e.semver):!((t=i(t)).includePrerelease&&("<0.0.0-0"===this.value||"<0.0.0-0"===e.value)||!t.includePrerelease&&(this.value.startsWith("<0.0.0")||e.value.startsWith("<0.0.0"))||(!this.operator.startsWith(">")||!e.operator.startsWith(">"))&&(!this.operator.startsWith("<")||!e.operator.startsWith("<"))&&(this.semver.version!==e.semver.version||!this.operator.includes("=")||!e.operator.includes("="))&&!(s(this.semver,"<",e.semver,t)&&this.operator.startsWith(">")&&e.operator.startsWith("<"))&&!(s(this.semver,">",e.semver,t)&&this.operator.startsWith("<")&&e.operator.startsWith(">")))}}e.exports=Comparator;const i=n(451),{safeRe:r,t:o}=n(310),s=n(838),l=n(325),c=n(157),u=n(205)},function(e,t,n){const a=n(205);e.exports=(e,t,n)=>{try{t=new a(t,n)}catch(e){return!1}return t.test(e)}},function(e,t,n){"use strict";var a=String.fromCharCode;e.exports=a},function(e,t,n){"use strict";var a=n(147),i=n(154),r={tokenize:function(e,t,n){return i(e,(function(e){return null===e||a(e)?t(e):n(e)}),"linePrefix")},partial:!0};e.exports=r},function(e,t,n){"use strict";var a=n(841);e.exports=function(e,t){var n=e[e.length-1];return n&&n[1].type===t?a(n[2].sliceStream(n[1])):0}},function(e,t,n){"use strict";var a=n(253)(/[\dA-Za-z]/);e.exports=a},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n.n(a),r=n(41);const o=n.n(r).a.div.withConfig({displayName:"StyledDiv",componentId:"sc-1qyhc9r-0"})(["padding-left:",";"],(({addPadding:e})=>e&&"53px"));o.defaultProps={addPadding:!1};const s=i.a.memo(o);s.displayName="StepContentWrapper"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(27),i=n(46),r=n(2),o=n(143),s=n(354);const l=["GET",a.INTERNAL_ALERTING_API_FIND_RULES_PATH],c=(e,t)=>Object(i.useQuery)([...l,...e],(({signal:t})=>Object(o.k)({ids:e,signal:t})),{...s.a,...t}),u=()=>{const e=Object(i.useQueryClient)();return Object(r.useCallback)((()=>e.invalidateQueries(l,{refetchType:"active"})),[e])}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"f",(function(){return r})),n.d(t,"j",(function(){return o})),n.d(t,"i",(function(){return s})),n.d(t,"m",(function(){return l})),n.d(t,"h",(function(){return c})),n.d(t,"k",(function(){return u})),n.d(t,"l",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"n",(function(){return m})),n.d(t,"s",(function(){return f})),n.d(t,"t",(function(){return g})),n.d(t,"q",(function(){return b})),n.d(t,"r",(function(){return y})),n.d(t,"p",(function(){return h})),n.d(t,"o",(function(){return v})),n.d(t,"b",(function(){return E})),n.d(t,"c",(function(){return x})),n.d(t,"a",(function(){return j})),n.d(t,"g",(function(){return O}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.customQueryFieldRequiredError",{defaultMessage:"A custom query is required."}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.eqlQueryFieldRequiredError",{defaultMessage:"An EQL query is required."}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.customQueryFieldInvalidError",{defaultMessage:"The KQL is invalid"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.indicesHelperDescription",{defaultMessage:"Enter the pattern of Elasticsearch indices where you would like this rule to run. By default, these will include index patterns defined in Security Solution advanced settings."}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.resetDefaultIndicesButton",{defaultMessage:"Reset to default index patterns"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.importTimelineQueryButton",{defaultMessage:"Import query from saved timeline"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.mlJobSelectPlaceholderText",{defaultMessage:"Select a job"}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldQuerBarLabel",{defaultMessage:"Custom query"}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.EqlQueryBarLabel",{defaultMessage:"EQL query"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.SavedQueryFormRowLabel",{defaultMessage:"Saved query"}),f=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldShouldLoadQueryDynamicallyLabel",{defaultMessage:'Load saved query "{savedQueryName}" dynamically on each rule execution',values:{savedQueryName:e}}),g=()=>a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldShouldLoadQueryDynamicallyLabelWithoutName",{defaultMessage:"Load saved query dynamically on each rule execution"}),b=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.threatMatchingIcesHelperDescription",{defaultMessage:"Select threat indices"}),y=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.customThreatQueryFieldRequiredError",{defaultMessage:"At least one indicator match is required."}),h=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.customThreatQueryFieldRequiredEmptyError",{defaultMessage:"All matches require both a field and threat index field."}),v=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.source",{defaultMessage:"Source"}),E=(a.i18n.translate("xpack.securitySolution.detections.dataSource.popover.title",{defaultMessage:"Select a data source"}),a.i18n.translate("xpack.securitySolution.detections.dataSource.popover.subTitle",{defaultMessage:"Data sources"}),a.i18n.translate("xpack.securitySolution.detections.dataSource.popover.content",{defaultMessage:"Rules can now query index patterns or data views."}),a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.rulePreviewTitle",{defaultMessage:"Rule Preview"}),a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsLabel",{defaultMessage:"If a suppression field is missing"})),x=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsSuppressLabel",{defaultMessage:"Suppress and group alerts for events with missing fields"}),j=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsDoNotSuppressLabel",{defaultMessage:"Do not suppress alerts for events with missing fields"}),O=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.groupBy.licenseWarning",{defaultMessage:"Alert suppression is enabled with Platinum license or above"})},,function(e,t,n){"use strict";n.d(t,"a",(function(){return M}));var a=n(2),i=n.n(a),r=n(40),o=n(117),s=n(42),l=n(41),c=n.n(l),u=n(1078),d=n(798),p=n(132),m=n(799);const f=(e=[])=>e.filter((e=>!Object(s.isEmpty)(e))).map((e=>{const t=(e=>{const[t,n]=Object(m.a)(e);return null!=t&&null!=n?`${t}: "${n}"`:""})(e);return i.a.createElement(r.EuiFlexItem,{key:t,grow:!1},t)}));var g=n(5);const b=g.i18n.translate("xpack.securitySolution.ml.score.influencedByTitle",{defaultMessage:"Influenced By"}),y=g.i18n.translate("xpack.securitySolution.ml.score.maxAnomalyScoreTitle",{defaultMessage:"Max Anomaly Score"}),h=g.i18n.translate("xpack.securitySolution.ml.score.anomalyJobTitle",{defaultMessage:"Job"}),v=g.i18n.translate("xpack.securitySolution.ml.score.viewInMachineLearningLink",{defaultMessage:"View in Machine Learning"}),E=g.i18n.translate("xpack.securitySolution.ml.score.detectedTitle",{defaultMessage:"Detected"}),x=g.i18n.translate("xpack.securitySolution.ml.score.narrowToThisDateRangeLink",{defaultMessage:"Narrow to this date range"}),j=g.i18n.translate("xpack.securitySolution.ml.score.anomalousEntityTitle",{defaultMessage:"Anomalous Entity"});var O=n(1079);const S=c()(r.EuiText).withConfig({displayName:"LargeScore",componentId:"sc-vz3ecp-0"})(["font-size:45px;font-weight:lighter;"]);S.displayName="LargeScore";const k=(e,t,n,a,o,s)=>[{title:y,description:i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(S,null,Object(d.a)(e.severity)))},{title:i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"m"}),h),description:i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},i.a.createElement(r.EuiFlexItem,{grow:!1},s),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(O.a,{score:e,startDate:t,endDate:n,linkName:v})))},{title:E,description:i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(p.c,{value:new Date(e.time)})),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiLink,{"data-test-subj":"anomaly-description-narrow-range-link",onClick:()=>{o(e,a)},target:"_blank"},x)))},{title:j,description:i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},i.a.createElement(r.EuiFlexItem,{grow:!1},`${e.entityName}: "${e.entityValue}"`))},{title:b,description:i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},f(e.influencers))}],w=c()(r.EuiIcon).withConfig({displayName:"Icon",componentId:"sc-1ms1asc-0"})(["vertical-align:text-bottom;cursor:pointer;"]);w.displayName="Icon";const I=({startDate:e,endDate:t,index:n=0,score:o,interval:s,narrowDateRange:l,jobName:c})=>{const[d,p]=Object(a.useState)(!1);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiFlexItem,{grow:!1,"data-test-subj":"anomaly-score"},i.a.createElement(u.a,{index:n,score:o})),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiPopover,{"data-test-subj":"anomaly-score-popover",id:"anomaly-score-popover",isOpen:d,onClick:()=>p(!d),closePopover:()=>p(!d),button:i.a.createElement(w,{type:"iInCircle"}),repositionOnScroll:!0},i.a.createElement(r.EuiDescriptionList,{"data-test-subj":"anomaly-description-list",listItems:k(o,e,t,s,l,c)}))))};I.displayName="AnomalyScoreComponent";const T=i.a.memo(I);T.displayName="AnomalyScore";const C=({anomalies:e,startDate:t,endDate:n,isLoading:a,narrowDateRange:l,limit:c,jobNameById:u})=>a?i.a.createElement(r.EuiLoadingSpinner,{"data-test-subj":"anomaly-score-spinner",size:"m"}):null==e||0===e.anomalies.length?Object(o.d)():i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",responsive:!1,"data-test-subj":"anomaly-scores"},((e,t)=>{const n=e.reduce(((e,t)=>{const n=t.jobId,a=t.severity;return(null==e[n]||e[n].severity<a)&&(e[n]=t),e}),{}),a=Object(s.toArray)(n).sort(((e,t)=>t.severity-e.severity));return null==t?a:a.slice(0,t)})(e.anomalies,c).map(((a,r)=>{var o;const s=(e=>`${e.jobId}-${e.severity}-${e.entityName}-${e.entityValue}`)(a);return i.a.createElement(T,{key:s,startDate:t,endDate:n,index:r,score:a,jobName:null!==(o=u[a.jobId])&&void 0!==o?o:a.jobId,interval:e.interval,narrowDateRange:l})}))));C.displayName="AnomalyScoresComponent";const M=i.a.memo(C);M.displayName="AnomalyScores"},,function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"e",(function(){return a})),n.d(t,"a",(function(){return j})),n.d(t,"d",(function(){return O}));var a={};n.r(a),n.d(a,"allUsersSelector",(function(){return c})),n.d(a,"userRiskScoreSelector",(function(){return u})),n.d(a,"userRiskScoreSeverityFilterSelector",(function(){return d})),n.d(a,"authenticationsSelector",(function(){return p})),n.d(a,"usersAnomaliesJobIdFilterSelector",(function(){return m})),n.d(a,"usersAnomaliesIntervalSelector",(function(){return f}));var i=n(524),r=n(184),o=n(139);const s=e=>e.users.page,l=(e,t)=>e.users[t],c=()=>Object(o.createSelector)(s,(e=>e.queries[r.UsersTableType.allUsers])),u=()=>Object(o.createSelector)(s,(e=>e.queries[r.UsersTableType.risk])),d=()=>Object(o.createSelector)(s,(e=>e.queries[r.UsersTableType.risk].severitySelection)),p=()=>Object(o.createSelector)(s,(e=>e.queries[r.UsersTableType.authentications])),m=()=>Object(o.createSelector)(l,(e=>e.queries[r.UsersTableType.anomalies].jobIdSelection)),f=()=>Object(o.createSelector)(l,(e=>e.queries[r.UsersTableType.anomalies].intervalSelection));var g=n(208),b=n(388),y=n(314);const h=e=>({...e.page.queries,[r.UsersTableType.allUsers]:{...e.page.queries[r.UsersTableType.allUsers],activePage:y.a}});var v=n(536),E=n(113),x=n(425);const j={page:{queries:{[r.UsersTableType.allUsers]:{activePage:y.a,limit:y.b,sort:{field:x.b.lastSeen,direction:v.a.desc}},[r.UsersTableType.authentications]:{activePage:y.a,limit:y.b},[r.UsersTableType.risk]:{activePage:y.a,limit:y.b,sort:{field:E.x.userRiskScore,direction:v.a.desc},severitySelection:[]},[r.UsersTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"},[r.UsersTableType.events]:{activePage:y.a,limit:y.b}}},details:{queries:{[r.UsersTableType.anomalies]:{jobIdSelection:[],intervalSelection:"auto"},[r.UsersTableType.events]:{activePage:y.a,limit:y.b}}}},O=Object(g.reducerWithInitialState)(j).case(i.setUsersTablesActivePageToZero,(e=>({...e,page:{...e.page,queries:h(e)}}))).case(i.updateTableActivePage,((e,{activePage:t,tableType:n})=>({...e,page:{...e.page,queries:{...e.page.queries,[n]:{...e.page.queries[n],activePage:t}}}}))).case(i.updateTableLimit,((e,{limit:t,tableType:n})=>({...e,page:{...e.page,queries:{...e.page.queries,[n]:{...e.page.queries[n],limit:t}}}}))).case(i.updateTableSorting,((e,{sort:t,tableType:n})=>({...e,page:{...e.page,queries:{...e.page.queries,[n]:{...e.page.queries[n],sort:t,activePage:y.a}}}}))).case(i.updateUserRiskScoreSeverityFilter,((e,{severitySelection:t})=>({...e,page:{...e.page,queries:{...e.page.queries,[r.UsersTableType.risk]:{...e.page.queries[r.UsersTableType.risk],severitySelection:t,activePage:y.a}}}}))).case(i.updateUsersAnomaliesJobIdFilter,((e,{jobIds:t,usersType:n})=>"page"===n?Object(b.set)("page.queries.anomalies.jobIdSelection",t,e):Object(b.set)("details.queries.anomalies.jobIdSelection",t,e))).case(i.updateUsersAnomaliesInterval,((e,{interval:t,usersType:n})=>"page"===n?Object(b.set)("page.queries.anomalies.intervalSelection",t,e):Object(b.set)("details.queries.anomalies.intervalSelection",t,e))).build()},function(e,t,n){"use strict";n.d(t,"a",(function(){return O})),n.d(t,"c",(function(){return S})),n.d(t,"d",(function(){return k})),n.d(t,"b",(function(){return I}));var a=n(40),i=n(220),r=n(2),o=n.n(r),s=n(104),l=n.n(s),c=n(103),u=n(105),d=n(122),p=n(182),m=n(138),f=n(114),g=n(110),b=n(118),y=n(106),h=n(135),v=n(242),E=n(12);const x=({asEmptyButton:e,children:t,dataProviders:n,filters:i,timeRange:s,keepDataView:x,...j})=>{const O=Object(c.useDispatch)(),S=Object(r.useMemo)((()=>d.e.getSourcererDataViewsSelector()),[]),{defaultDataView:k,signalIndexName:w}=Object(u.a)((e=>S(e))),I=n&&n.find((e=>"template"===e.type)),T=Object(v.a)({timelineId:b.c.active,timelineType:I?y.l.template:y.l.default}),C=Object(r.useCallback)((()=>{if(n||i){if(s?T({timeRange:s}):T(),n)switch(O(Object(E.updateDataView)({id:b.c.active,dataViewId:"security-solution-default",indexNames:["logs-*"]})),n[0].queryType){case"eql":O(Object(E.updateEqlOptions)({id:b.c.active,field:"query",value:n[0].kqlQuery})),O(Object(E.setActiveTabTimeline)({id:b.c.active,activeTab:b.d.eql}));break;case"kql":O(Object(E.applyKqlFilterQuery)({id:b.c.active,filterQuery:{kuery:{kind:"kuery",expression:n[0].kqlQuery},serializedQuery:n[0].kqlQuery}})),O(Object(E.setActiveTabTimeline)({id:b.c.active,activeTab:b.d.query}));break;case"dsl":const e={meta:{type:"custom",disabled:!1,negate:!1,alias:n[0].name,key:"query",value:n[0].kqlQuery},query:JSON.parse(n[0].kqlQuery)};O(Object(E.setFilters)({id:b.c.active,filters:[e]})),O(Object(E.setActiveTabTimeline)({id:b.c.active,activeTab:b.d.query}))}i&&O(Object(E.setFilters)({id:b.c.active,filters:i})),x||O(p.d.setSelectedDataView({id:g.SourcererScopeName.timeline,selectedDataViewId:k.id,selectedPatterns:[w||""]})),O(m.b.removeLinkTo([f.a.timeline,f.a.global]))}}),[n,T,O,k.id,w,i,s,x]);return e?o.a.createElement(a.EuiButtonEmpty,{"aria-label":h.h,onClick:C,color:"text",flush:"both",size:"xs"},t):o.a.createElement(a.EuiButton,l()({"aria-label":h.h,onClick:C},j),t)};x.displayName="SendToTimelineButton";var j=n(721);const O="securityAssistant",S=e=>e.map((e=>`Rule Name:${e.name}\nRule Description:${e.description}`)).join("\n\n"),k=e=>e.filter((({field:e})=>!e.startsWith("signal."))).reduce(((e,{field:t,values:n})=>({...e,[t]:null!=n?n:[]})),{}),w=["kql","dsl","eql"],I=e=>e.messages.map((({content:t})=>Object(i.i)((({messageContent:e,replacements:t})=>null!=t?Object.keys(t).reduce(((e,n)=>e.replaceAll(n,t[n])),e):e)({messageContent:t,replacements:e.replacements})))).map(((t,n)=>t.map(((t,i)=>{var r;return{...t,getControlContainer:()=>document.querySelectorAll(`.message-${n} .euiCodeBlock__controls`)[i],button:w.includes(t.type)?o.a.createElement(x,{asEmptyButton:!0,dataProviders:[{id:"assistant-data-provider",name:`Assistant Query from conversation ${e.id}`,enabled:!0,excluded:!1,queryType:t.type,kqlQuery:null!==(r=t.content)&&void 0!==r?r:"",queryMatch:{field:"host.name",operator:":",value:"test"},and:[]}],keepDataView:!0},o.a.createElement(a.EuiToolTip,{position:"right",content:j.f},o.a.createElement(a.EuiIcon,{type:"timeline"}))):null}}))))},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"a",(function(){return l}));var a=n(8),i=n(110),r=n(340);const o=(e,t,n,a)=>{const o=null!=e&&null!==e.id?e.patternList:[];if(!a)return Object(r.b)(o);switch(t){case i.SourcererScopeName.default:return Object(r.b)(o.filter((e=>e!==n)));case i.SourcererScopeName.detections:return null!=n?[n]:[];case i.SourcererScopeName.timeline:return Object(r.b)(o)}},s=(e,t,n)=>{var s;const{id:l,...c}=t,u=e.kibanaDataViews.find((e=>e.id===c.selectedDataViewId)),d=Object(r.a)(c.selectedPatterns);let p=[];if(null==u||u.id===e.defaultDataView.id){const t=Object(r.a)((null!=u?u:e.defaultDataView).title.split(","));p=d.filter((e=>!t.includes(e)))}const m=n&&null!=u&&0===p.length&&u.id!==e.defaultDataView.id&&u.patternList.length>0?d.filter((t=>null!=u&&u.patternList.includes(t)||null==e.signalIndexName||e.signalIndexName===t)):d;return{[l]:{...e.sourcererScopes[l],...c,selectedDataViewId:null!==(s=null==u?void 0:u.id)&&void 0!==s?s:null,selectedPatterns:m,missingPatterns:p,...Object(a.isEmpty)(m)&&l!==i.SourcererScopeName.timeline?{selectedPatterns:o(null!=u?u:e.defaultDataView,l,e.signalIndexName,(null!=u?u:e.defaultDataView).id===e.defaultDataView.id)}:{},loading:!1}}},l=({patternList:e,scopeId:t,signalIndexName:n,isDefaultDataViewSelected:a})=>t===i.SourcererScopeName.detections?e.includes(`${n}`):t===i.SourcererScopeName.default&&a?e.filter((e=>e!==n)).length>0:e.length>0},function(e,t,n){"use strict";const a=n(1152),i=n(1153),r=n(1154);function o(e){if("string"!=typeof e||1!==e.length)throw new TypeError("arrayFormatSeparator must be single character string")}function s(e,t){return t.encode?t.strict?a(e):encodeURIComponent(e):e}function l(e,t){return t.decode?i(e):e}function c(e){return Array.isArray(e)?e.sort():"object"==typeof e?c(Object.keys(e)).sort(((e,t)=>Number(e)-Number(t))).map((t=>e[t])):e}function u(e){const t=e.indexOf("#");return-1!==t&&(e=e.slice(0,t)),e}function d(e){const t=(e=u(e)).indexOf("?");return-1===t?"":e.slice(t+1)}function p(e,t){return t.parseNumbers&&!Number.isNaN(Number(e))&&"string"==typeof e&&""!==e.trim()?e=Number(e):!t.parseBooleans||null===e||"true"!==e.toLowerCase()&&"false"!==e.toLowerCase()||(e="true"===e.toLowerCase()),e}function m(e,t){o((t=Object.assign({decode:!0,sort:!0,arrayFormat:"none",arrayFormatSeparator:",",parseNumbers:!1,parseBooleans:!1},t)).arrayFormatSeparator);const n=function(e){let t;switch(e.arrayFormat){case"index":return(e,n,a)=>{t=/\[(\d*)\]$/.exec(e),e=e.replace(/\[\d*\]$/,""),t?(void 0===a[e]&&(a[e]={}),a[e][t[1]]=n):a[e]=n};case"bracket":return(e,n,a)=>{t=/(\[\])$/.exec(e),e=e.replace(/\[\]$/,""),t?void 0!==a[e]?a[e]=[].concat(a[e],n):a[e]=[n]:a[e]=n};case"comma":case"separator":return(t,n,a)=>{const i="string"==typeof n&&n.split("").indexOf(e.arrayFormatSeparator)>-1?n.split(e.arrayFormatSeparator).map((t=>l(t,e))):null===n?n:l(n,e);a[t]=i};default:return(e,t,n)=>{void 0!==n[e]?n[e]=[].concat(n[e],t):n[e]=t}}}(t),a=Object.create(null);if("string"!=typeof e)return a;if(!(e=e.trim().replace(/^[?#&]/,"")))return a;for(const i of e.split("&")){let[e,o]=r(t.decode?i.replace(/\+/g," "):i,"=");o=void 0===o?null:["comma","separator"].includes(t.arrayFormat)?o:l(o,t),n(l(e,t),o,a)}for(const e of Object.keys(a)){const n=a[e];if("object"==typeof n&&null!==n)for(const e of Object.keys(n))n[e]=p(n[e],t);else a[e]=p(n,t)}return!1===t.sort?a:(!0===t.sort?Object.keys(a).sort():Object.keys(a).sort(t.sort)).reduce(((e,t)=>{const n=a[t];return Boolean(n)&&"object"==typeof n&&!Array.isArray(n)?e[t]=c(n):e[t]=n,e}),Object.create(null))}t.extract=d,t.parse=m,t.stringify=(e,t)=>{if(!e)return"";o((t=Object.assign({encode:!0,strict:!0,arrayFormat:"none",arrayFormatSeparator:","},t)).arrayFormatSeparator);const n=n=>t.skipNull&&null==e[n]||t.skipEmptyString&&""===e[n],a=function(e){switch(e.arrayFormat){case"index":return t=>(n,a)=>{const i=n.length;return void 0===a||e.skipNull&&null===a||e.skipEmptyString&&""===a?n:null===a?[...n,[s(t,e),"[",i,"]"].join("")]:[...n,[s(t,e),"[",s(i,e),"]=",s(a,e)].join("")]};case"bracket":return t=>(n,a)=>void 0===a||e.skipNull&&null===a||e.skipEmptyString&&""===a?n:null===a?[...n,[s(t,e),"[]"].join("")]:[...n,[s(t,e),"[]=",s(a,e)].join("")];case"comma":case"separator":return t=>(n,a)=>null==a||0===a.length?n:0===n.length?[[s(t,e),"=",s(a,e)].join("")]:[[n,s(a,e)].join(e.arrayFormatSeparator)];default:return t=>(n,a)=>void 0===a||e.skipNull&&null===a||e.skipEmptyString&&""===a?n:null===a?[...n,s(t,e)]:[...n,[s(t,e),"=",s(a,e)].join("")]}}(t),i={};for(const t of Object.keys(e))n(t)||(i[t]=e[t]);const r=Object.keys(i);return!1!==t.sort&&r.sort(t.sort),r.map((n=>{const i=e[n];return void 0===i?"":null===i?s(n,t):Array.isArray(i)?i.reduce(a(n),[]).join("&"):s(n,t)+"="+s(i,t)})).filter((e=>e.length>0)).join("&")},t.parseUrl=(e,t)=>{t=Object.assign({decode:!0},t);const[n,a]=r(e,"#");return Object.assign({url:n.split("?")[0]||"",query:m(d(e),t)},t&&t.parseFragmentIdentifier&&a?{fragmentIdentifier:l(a,t)}:{})},t.stringifyUrl=(e,n)=>{n=Object.assign({encode:!0,strict:!0},n);const a=u(e.url).split("?")[0]||"",i=t.extract(e.url),r=t.parse(i,{sort:!1}),o=Object.assign(r,e.query);let l=t.stringify(o,n);l&&(l=`?${l}`);let c=function(e){let t="";const n=e.indexOf("#");return-1!==n&&(t=e.slice(n)),t}(e.url);return e.fragmentIdentifier&&(c=`#${s(e.fragmentIdentifier,n)}`),`${a}${l}${c}`}},function(e,t,n){"use strict";n.d(t,"a",(function(){return g})),n.d(t,"b",(function(){return y}));var a=n(42),i=n(240),r=n.n(i),o=n(2),s=n(103),l=n(518),c=n(114),u=n(531),d=n(138),p=n(710),m=n(106),f=n(209);const g="FETCH_ALL_TIMELINES",b=r()(((e,t)=>t.map((e=>{var t;return{created:e.created,description:e.description,eventIdToNoteIds:null!=e.eventIdToNoteIds?e.eventIdToNoteIds.reduce(((e,t)=>{if(null!=t.eventId){const n=Object(a.getOr)([],t.eventId,e);return{...e,[t.eventId]:[...n,t.noteId]}}return e}),{}):null,excludedRowRendererIds:e.excludedRowRendererIds,favorite:e.favorite,noteIds:e.noteIds,notes:null!=e.notes?e.notes.map((e=>({...e,savedObjectId:e.noteId}))):null,pinnedEventIds:null!=e.pinnedEventIds?e.pinnedEventIds.reduce(((e,t)=>({...e,[t]:!0})),{}):null,savedObjectId:e.savedObjectId,status:e.status,title:e.title,updated:e.updated,updatedBy:e.updatedBy,timelineType:null!==(t=e.timelineType)&&void 0!==t?t:m.l.default,templateTimelineId:e.templateTimelineId,queryType:Object(l.b)(e)}})))),y=()=>{const e=Object(s.useDispatch)(),[,t]=Object(u.f)(),[n,a]=Object(o.useState)({loading:!1,totalCount:0,timelines:null,customTemplateTimelineCount:0,defaultTimelineCount:0,elasticTemplateTimelineCount:0,templateTimelineCount:0,favoriteCount:0}),i=Object(o.useCallback)((async({onlyUserFavorite:n,pageInfo:i,search:r,sort:o,status:s,timelineType:l})=>{let m=!1;const y=new AbortController,h=async()=>{try{var v,E,x,j,O,S,k;a((e=>({...e,loading:!0})));const t={onlyUserFavorite:n,pageInfo:i,search:r,sort:o,status:s,timelineType:l},u=await Object(f.c)(t,y.signal),p=null!==(v=null==u?void 0:u.totalCount)&&void 0!==v?v:0,w=null!==(E=null==u?void 0:u.timeline)&&void 0!==E?E:[],I=null!==(x=null==u?void 0:u.customTemplateTimelineCount)&&void 0!==x?x:0,T=null!==(j=null==u?void 0:u.defaultTimelineCount)&&void 0!==j?j:0,C=null!==(O=null==u?void 0:u.elasticTemplateTimelineCount)&&void 0!==O?O:0,M=null!==(S=null==u?void 0:u.templateTimelineCount)&&void 0!==S?S:0,A=null!==(k=null==u?void 0:u.favoriteCount)&&void 0!==k?k:0;m||(e(d.b.setQuery({inputId:c.a.global,id:g,loading:!1,refetch:h,inspect:null})),a({loading:!1,totalCount:p,timelines:b(JSON.stringify(t),w),customTemplateTimelineCount:I,defaultTimelineCount:T,elasticTemplateTimelineCount:C,templateTimelineCount:M,favoriteCount:A}))}catch(e){m||(Object(u.e)({title:p.c,error:e.body&&e.body.message?new Error(e.body.message):e,dispatchToaster:t}),a({loading:!1,totalCount:0,timelines:[],customTemplateTimelineCount:0,defaultTimelineCount:0,elasticTemplateTimelineCount:0,templateTimelineCount:0,favoriteCount:0}))}};return h(),()=>{m=!0,y.abort()}}),[e,t]);return Object(o.useEffect)((()=>()=>{e(d.b.deleteOneQuery({inputId:c.a.global,id:g}))}),[e]),{...n,fetchAllTimeline:i}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=function(){const e=this.Parser,t=e.prototype.blockTokenizers,n=e.prototype.blockMethods;t.osquery=function(e,t,n){if(!1===t.startsWith("!{osquery"))return!1;const a=t[9];if("{"!==a&&"}"!==a)return!1;if(n)return!0;let i="!{osquery",r={};if("{"===a){let n="",a=0;for(let e=9;e<t.length;e++){const i=t[e];if("{"===i)a++,n+=i;else if("}"===i){if(a--,-1===a)break;n+=i}else n+=i}i+=n;try{r=JSON.parse(n)}catch(t){const n=e.now();this.file.fail(`Unable to parse osquery JSON configuration: ${t}`,{line:n.line,column:n.column+9})}}return i+="}",e(i)({type:"osquery",configuration:r})},n.splice(n.indexOf("text"),0,"osquery")}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(125),c=n(452);const u=o()(s.EuiFlexGroup).withConfig({displayName:"BottomContentWrapper",componentId:"sc-1819ayg-0"})(["",""],(({theme:e})=>`\n    padding: ${e.eui.euiSizeM} 0;\n  `)),d=i.a.memo(Object(a.forwardRef)((({id:e,field:t,dataTestSubj:n,idAria:r,bottomRightContent:o},d)=>{const{isInvalid:p,errorMessage:m}=Object(l.i)(t),[f,g]=Object(a.useState)(!1);return i.a.createElement(s.EuiFormRow,{"data-test-subj":n,describedByIds:r?[r]:void 0,error:m,fullWidth:!0,helpText:t.helpText,isInvalid:p||f,label:t.label,labelAppend:t.labelAppend},i.a.createElement(i.a.Fragment,null,i.a.createElement(c.a,{ref:d,ariaLabel:r,editorId:e,onChange:t.setValue,value:t.value,"data-test-subj":`${n}-markdown-editor`,setIsMarkdownInvalid:g}),o&&i.a.createElement(u,{justifyContent:"flexEnd"},i.a.createElement(s.EuiFlexItem,{grow:!1},o))))})));d.displayName="MarkdownEditorForm"},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n(103),r=n(105),o=n(102),s=n(122),l=n(182),c=n(114);const u=({inputId:e,queryId:t,skip:n})=>{const u=Object(i.useDispatch)(),{data:d}=Object(o.j)().services,p=Object(a.useRef)(d.search.session),m=s.d.globalQueryByIdSelector(),f=s.d.timelineQueryByIdSelector(),{selectedInspectIndex:g}=Object(r.a)((n=>e===c.a.global?m(n,t):f(n,t))),b=Object(a.useCallback)((()=>{const e=p.current.start();u(l.c.setInspectionParameter({id:t,selectedInspectIndex:g,isInspected:!1,inputId:c.a.global,searchSessionId:n?void 0:e}))}),[u,t,g,n]),y=Object(a.useCallback)((()=>{u(l.c.deleteOneQuery({inputId:c.a.global,id:t}))}),[u,t]);return{session:p,refetchByRestartingSession:b,refetchByDeletingSession:y}}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return l}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.stackByOptions.stackByLabel",{defaultMessage:"Stack by"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.stackByOptions.groupByLabel",{defaultMessage:"Group by"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.stackByOptions.stackByPlaceholder",{defaultMessage:"Select a field to stack by"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.stackByOptions.stackByAriaLabel",{defaultMessage:"Stack the alerts histogram by a field value"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.stackByOptions.groupByTopLabel",{defaultMessage:"Group by top"})},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"f",(function(){return r})),n.d(t,"g",(function(){return o})),n.d(t,"h",(function(){return s})),n.d(t,"i",(function(){return l})),n.d(t,"j",(function(){return c})),n.d(t,"k",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"d",(function(){return p})),n.d(t,"n",(function(){return m})),n.d(t,"m",(function(){return f})),n.d(t,"o",(function(){return g})),n.d(t,"p",(function(){return b})),n.d(t,"q",(function(){return y})),n.d(t,"t",(function(){return h})),n.d(t,"s",(function(){return v})),n.d(t,"u",(function(){return E})),n.d(t,"w",(function(){return x})),n.d(t,"a",(function(){return j})),n.d(t,"b",(function(){return O})),n.d(t,"v",(function(){return S})),n.d(t,"r",(function(){return k})),n.d(t,"l",(function(){return w}));var a=n(5);a.i18n.translate("xpack.securitySolution.dataProviders.and",{defaultMessage:"AND"});const i=a.i18n.translate("xpack.securitySolution.dataProviders.deleteDataProvider",{defaultMessage:"Delete"}),r=a.i18n.translate("xpack.securitySolution.dataProviders.dropAnything",{defaultMessage:"Drop anything"}),o=(a.i18n.translate("xpack.securitySolution.dataProviders.edit",{defaultMessage:"Edit"}),a.i18n.translate("xpack.securitySolution.dataProviders.editMenuItem",{defaultMessage:"Edit filter"})),s=a.i18n.translate("xpack.securitySolution.dataProviders.editTitle",{defaultMessage:"EDIT FILTER"}),l=a.i18n.translate("xpack.securitySolution.dataProviders.excludeDataProvider",{defaultMessage:"Exclude results"}),c=a.i18n.translate("xpack.securitySolution.dataProviders.existsLabel",{defaultMessage:"exists"}),u=(a.i18n.translate("xpack.securitySolution.dataProviders.fieldLabel",{defaultMessage:"Field"}),a.i18n.translate("xpack.securitySolution.dataProviders.filterForFieldPresentLabel",{defaultMessage:"Filter for field present"})),d=a.i18n.translate("xpack.securitySolution.dataProviders.convertToFieldLabel",{defaultMessage:"Convert to field"}),p=a.i18n.translate("xpack.securitySolution.dataProviders.convertToTemplateFieldLabel",{defaultMessage:"Convert to template field"}),m=a.i18n.translate("xpack.securitySolution.dataProviders.highlighted",{defaultMessage:"highlighted"}),f=a.i18n.translate("xpack.securitySolution.dataProviders.hereToBuildAn",{defaultMessage:"here to build an"}),g=a.i18n.translate("xpack.securitySolution.dataProviders.includeDataProvider",{defaultMessage:"Include results"}),b=a.i18n.translate("xpack.securitySolution.dataProviders.not",{defaultMessage:"NOT"}),y=(a.i18n.translate("xpack.securitySolution.dataProviders.or",{defaultMessage:"or"}),a.i18n.translate("xpack.securitySolution.dataProviders.query",{defaultMessage:"query"})),h=(a.i18n.translate("xpack.securitySolution.dataProviders.toggle",{defaultMessage:"toggle"}),a.i18n.translate("xpack.securitySolution.dataProviders.reEnableDataProvider",{defaultMessage:"Re-enable"})),v=a.i18n.translate("xpack.securitySolution.dataProviders.removeDataProvider",{defaultMessage:"Remove Data Provider"}),E=({field:e,value:t})=>a.i18n.translate("xpack.securitySolution.dataProviders.showOptionsDataProviderAriaLabel",{values:{field:e,value:t},defaultMessage:"{field} {value} Press enter for options, or press space to begin dragging"}),x=a.i18n.translate("xpack.securitySolution.dataProviders.temporaryDisableDataProvider",{defaultMessage:"Temporarily disable"}),j=(a.i18n.translate("xpack.securitySolution.dataProviders.valuePlaceholder",{defaultMessage:"value"}),a.i18n.translate("xpack.securitySolution.dataProviders.addFieldPopoverButtonLabel",{defaultMessage:"Add field"})),O=a.i18n.translate("xpack.securitySolution.dataProviders.addTemplateFieldPopoverButtonLabel",{defaultMessage:"Add template field"}),S=a.i18n.translate("xpack.securitySolution.dataProviders.templateFieldLabel",{defaultMessage:"Template field"}),k=a.i18n.translate("xpack.securitySolution.dataProviders.queryAreaAriaLabel",{defaultMessage:"You are in the timeline query area, which contains groups of data providers that query for events"}),w=e=>a.i18n.translate("xpack.securitySolution.dataProviders.groupAreaAriaLabel",{values:{group:e},defaultMessage:"You are in group {group}"})},,,function(e,t,n){"use strict";var a=n(368);n.d(t,"e",(function(){return a.d})),n.d(t,"d",(function(){return a.c})),n.d(t,"c",(function(){return a.b}));var i=n(226);n.d(t,"a",(function(){return i.b})),n.d(t,"b",(function(){return i.d}))},,function(e,t,n){const a=n(192);e.exports=(e,t,n)=>a(e,t,n)>=0},,,function(e,t,n){"use strict";n.d(t,"a",(function(){return g}));var a=n(2),i=n.n(a),r=n(113),o=n(41),s=n.n(o),l=(n(21),n(40)),c=n(19);const u=({text:e,className:t})=>{const{euiTheme:n}=Object(l.useEuiTheme)();return i.a.createElement(d,{label:null!=e?e:c.a,size:"s",className:t,$_css:n.size.s,$_css2:n.colors.text,$_css3:n.size.xxs})};var d=s()(l.EuiBetaBadge).withConfig({displayName:"_StyledEuiBetaBadge",componentId:"sc-ftlp1b-0"})(["margin-left:",";color:",";vertical-align:middle;margin-bottom:",";"],(e=>e.$_css),(e=>e.$_css2),(e=>e.$_css3)),p=n(800),m=n(1040);const f=({riskScoreEntity:e,title:t,showTechnicalPreviewBadge:n=!1})=>i.a.createElement(i.a.Fragment,null,null!=t?t:e===r.w.user?p.f:p.b,n&&i.a.createElement(u,{text:m.d,className:"eui-alignMiddle"})),g=i.a.memo(f);g.displayName="RiskScoreHeaderTitle"},,function(e,t,n){"use strict";n.d(t,"d",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"b",(function(){return d}));var a=n(4);const i=`${a.gb}/prepackaged`,r=`${a.Cb}/prebuilt_rules`,o=`${i}/_status`,s=`${r}/status`,l=`${r}/upgrade/_review`,c=`${r}/upgrade/_perform`,u=`${r}/installation/_review`,d=`${r}/installation/_perform`},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(13),r=n(102);const o=()=>{const e=Object(r.j)(),{http:t}=e.services,[n,o]=Object(a.useState)(Object(i.createSavedQueryService)(t));return Object(a.useEffect)((()=>{o(Object(i.createSavedQueryService)(t))}),[t]),n}},function(e,t,n){e.exports=n(33)(1061)},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("xpack.securitySolution.exitFullScreenButton",{defaultMessage:"Exit full screen"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n(45),r=n(105),o=n(187),s=n(110),l=n(116),c=n(122);function u(e){const t=Object(a.useMemo)((()=>Object(o.i)()),[]),n=Object(a.useMemo)((()=>Object(o.b)()),[]),u=Object(a.useMemo)((()=>Object(o.d)()),[]),d=Object(r.a)((t=>u(e?t.inputs.timeline:t.inputs.global))),p=Object(r.a)((n=>t(e?n.inputs.timeline:n.inputs.global))),m=Object(r.a)((t=>n(e?t.inputs.timeline:t.inputs.global))),f=Object(a.useMemo)((()=>c.e.defaultDataViewSelector()),[]),g=Object(r.a)(f),{pathname:b}=Object(i.useLocation)(),{selectedPatterns:y}=Object(l.d)(Object(l.a)(b)),{selectedPatterns:h}=Object(l.d)(s.SourcererScopeName.timeline);return{selectedPatterns:Object(a.useMemo)((()=>e?[...new Set([...h,...g.patternList])]:[...new Set([...y,...g.patternList])]),[e,h,y,g.patternList]),from:p,to:m,shouldUpdate:d}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return r}));const a={critical:"#E7664C",high:"#DA8B45",medium:"#D6BF57",low:"#54B399"},i=4,r=(e=0)=>Math.ceil(Math.min(e||0,100)/i)},function(e,t,n){"use strict";n.d(t,"a",(function(){return O}));var a=n(2),i=n(103),r=n(5),o=n(129),s=n(120),l=n(214),c=n(133),u=n(102),d=n(118),p=n(106),m=n(111),f=n(1045),g=n(164),b=n(242),y=n(135),h=n(105),v=n(115),E=n(108),x=n(159),j=n(196);const O=({ecsRowData:e,onInvestigateInTimelineAlertClick:t})=>{const{addError:n}=Object(E.a)(),{data:{search:O,query:S}}=Object(u.j)().services,k=Object(i.useDispatch)(),{startTransaction:w}=Object(x.b)(),{services:I}=Object(u.j)(),{getExceptionFilterFromIds:T}=Object(l.c)(I.http),C=Object(a.useCallback)((async e=>{const t=(e=>{var t;let n=null!==(t=Object(v.getField)(e,o.y))&&void 0!==t?t:[],a=[];try{if(Array.isArray(n)&&0===n.length){var i;const t=null!==(i=Object(v.getField)(e,o.G))&&void 0!==i?i:{};if(t.length>0){var r;const e=JSON.parse(t[0]);n=null!==(r=null==e?void 0:e.exceptions_list)&&void 0!==r?r:[]}}else if(n&&n.list_id)return n.list_id.map(((e,t)=>{const a=n.type[t];return{exception_list_id:e,namespace_type:n.namespace_type[t],type:a}})).filter((e=>e.type===s.b.DETECTION))}catch(e){}return a=n.reduce(((e,t)=>{try{const n="string"==typeof t?JSON.parse(t):t;if(n.type===s.b.DETECTION){const t={exception_list_id:n.list_id,namespace_type:n.namespace_type};e.push(t)}}catch{}return e}),[]),a})(e);let a;return t.length>0&&await T({exceptionListIds:t,excludeExceptions:!0,chunkSize:20,alias:"Exceptions",onSuccess:e=>{a=e},onError:e=>{n(e,{title:r.i18n.translate("xpack.securitySolution.detectionEngine.alerts.fetchExceptionFilterFailure",{defaultMessage:"Error fetching exception filter."})})}}),a}),[n,T]),M=Object(a.useMemo)((()=>S.filterManager),[S.filterManager]),A=Object(a.useMemo)((()=>m.b.getTimelineByIdSelector()),[]),{filterManager:_}=Object(h.a)((e=>{var t,n;return null!==(t=A(e,null!==(n=d.c.active)&&void 0!==n?n:""))&&void 0!==t?t:c.b})),F=Object(a.useMemo)((()=>null!=_?_:M),[_,M]),D=Object(a.useCallback)((e=>k(m.a.updateIsLoading(e))),[k]),N=Object(b.a)({timelineId:d.c.active,timelineType:p.l.default}),P=Object(a.useCallback)((({from:e,timeline:t,to:n,ruleNote:a})=>{var i;N(),D({id:d.c.active,isLoading:!1}),Object(g.b)(k)({duplicate:!0,from:e,id:d.c.active,notes:[],timeline:{...t,filterManager:F,indexNames:null!==(i=t.indexNames)&&void 0!==i?i:[],show:!0},to:n,ruleNote:a})()}),[k,F,D,N]),R=Object(a.useCallback)((async()=>{w({name:j.a.INVESTIGATE_IN_TIMELINE}),t&&t(),null!=e&&await Object(f.a)({createTimeline:P,ecsData:e,searchStrategyClient:O,updateTimelineIsLoading:D,getExceptionFilter:C})}),[w,P,e,t,O,D,C]);return{investigateInTimelineActionItems:Object(a.useMemo)((()=>[{key:"investigate-in-timeline-action-item","data-test-subj":"investigate-in-timeline-action-item",disabled:null==e,onClick:R,name:y.h}]),[e,R]),investigateInTimelineAlertClick:R}}},function(e,t,n){"use strict";n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d})),n.d(t,"b",(function(){return m})),n.d(t,"a",(function(){return f}));var a=n(42),i=n(49),r=n(106),o=n(150);const s=["host.name","host.hostname","host.domain","host.id","host.ip","client.ip","destination.ip","server.ip","source.ip","network.community_id","user.name","process.name"],l=(e,t,n=console)=>{var a,i;const r=null!==(a=null===(i=t.find((t=>t.field===e)))||void 0===i?void 0:i.values)&&void 0!==a?a:null;return null==r?[]:"string"==typeof r?[r]:Array.isArray(r)&&r.every((e=>"string"==typeof e))?r:(n.trace("Data type that is not a string or string array detected:",r,"when trying to access field:",e,"from data object of:",t),[])},c=(e,t=[])=>{let n=t;return"is"===e.function&&s.includes(e.arguments[0].value)&&(n=[...n,{field:e.arguments[0].value,valueToChange:e.arguments[1].value}]),e.arguments.reduce(((e,t)=>"is"===t.function&&s.includes(t.arguments[0].value)?[...e,{field:t.arguments[0].value,valueToChange:t.arguments[1].value}]:t.arguments?c(t,e):e),n)},u=(e,t,n=r.l.default)=>n===r.l.default?""!==e.trim()?c(Object(i.fromKueryExpression)(e)).reduce(((e,n)=>{const a=l(n.field,t);return a.length?e.replace(n.valueToChange,a[0]):e}),e):"":e.trim(),d=(e,t)=>e.map((e=>{if("phrase"===e.meta.type&&null!=e.meta.key&&s.includes(e.meta.key)){const n=l(e.meta.key,t);n.length&&(e.meta.params={query:n[0]},e.query={match_phrase:{[e.meta.key]:n[0]}})}return e})),p=(e,t,n=r.l.default)=>{if(n!==r.l.template){if(s.includes(e.queryMatch.field)){const n=l(e.queryMatch.field,t);n.length&&(e.id=e.id.replace(e.name,n[0]),e.name=n[0],e.queryMatch.value=n[0],e.queryMatch.displayField=void 0,e.queryMatch.displayValue=void 0)}return e.type=o.a.default,e}if(n===r.l.template){var a;if(e.type===o.a.template&&":"===e.queryMatch.operator){const n=l(e.queryMatch.field,t);return n.length||(e.enabled=!1),e.id=e.id.replace(e.name,n[0]),e.name=n[0],e.queryMatch.value=n[0],e.queryMatch.displayField=void 0,e.queryMatch.displayValue=void 0,e.type=o.a.default,e}return e.type=null!==(a=e.type)&&void 0!==a?a:o.a.default,e}return e},m=(e,t,n=r.l.default)=>e.map((e=>{const i=p(e,t,n);return null==i.and||Object(a.isEmpty)(i.and)||(i.and=i.and.map((e=>p(e,t,n)))),i})),f=(e,t)=>[{range:{"@timestamp":{gte:e,lt:t,format:"strict_date_optional_time"}},meta:{type:"range",disabled:!1,negate:!1,alias:null,key:"@timestamp",params:{gte:e,lt:t,format:"strict_date_optional_time"}},$state:{store:i.FilterStateStore.APP_STATE}}]},function(e,t,n){"use strict";n.d(t,"a",(function(){return g}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(41),c=n.n(l),u=n(488),d=n(107);const p=c()(s.EuiContextMenuItem).withConfig({displayName:"StyledEuiContextMenuItem",componentId:"sc-t3r55d-0"})([".additional-info{display:none;max-width:50%;}&:hover{.additional-info{display:block !important;}}"]),m=c()("div").withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-t3r55d-1"})(["max-width:50%;padding-right:",";"],(e=>e.theme.eui.euiSizeS)),f=c()(s.EuiText).withConfig({displayName:"StyledEuiText",componentId:"sc-t3r55d-2"})(["padding:",";line-height:",";"],(e=>e.theme.eui.euiSizeM),(e=>e.theme.eui.euiFontSizeM)),g=Object(r.memo)((({navigateAppId:e,navigateOptions:t,onClick:n,textTruncate:a,hoverInfo:l,children:c,isNavigationDisabled:g=!1,...b})=>{const y=Object(u.a)(null!=e?e:"",{...t,onClick:n}),h=Object(d.a)(b["data-test-subj"]),v=Object(r.useMemo)((()=>{const e="additional-info "+("object"!=typeof l?"eui-textTruncate":"");return l?o.a.createElement(m,{className:e},l):null}),[l]),E=a?o.a.createElement(o.a.Fragment,null,o.a.createElement("div",i()({className:"eui-textTruncate","data-test-subj":h("truncateWrapper")},"string"==typeof c?{title:c}:{}),c),v):o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiFlexItem,null,c),v);return g?o.a.createElement(f,{size:"s",className:"eui-textTruncate","data-test-subj":b["data-test-subj"]},E):o.a.createElement(p,i()({},b,{onClick:e?y:n}),o.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},E))}));g.displayName="EuiContextMenuItemNavByRouter"},function(e,t,n){"use strict";n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return c}));var a=n(46),i=n(102),r=n(173),o=n(504),s=n(934);function l({onError:e,page:t,perPage:n}={page:1,perPage:r.c}){const o=Object(i.i)();return Object(a.useQuery)(["endpointSpecificPolicies",t,n],(()=>Object(s.a)(o,{query:{page:t,perPage:n,withAgentCount:!0}})),e?{onError:e}:void 0)}function c({customQueryOptions:e}){const t=Object(i.i)();return Object(a.useQuery)(["endpointPackageVersion",e],(()=>Object(o.c)(t)),e)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"e",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"c",(function(){return d}));var a=n(65);const i="/api/fleet",r=`${i}/package_policies`,o=`${i}/agent_status`,s=(e,t,n)=>e.get(`${r}/${t}`,n),l=(e,t,n)=>e.post(`${r}/_bulk_get`,{...n,body:JSON.stringify({ids:t,ignoreMissing:!0})}),c=(e,t,n,a={})=>e.put(`${r}/${t}`,{...a,body:JSON.stringify(n)}),u=(e,t,n={})=>e.get(o,{...n,query:{policyId:t}}),d=async e=>{const t=a.epmRouteService.getInfoPath("endpoint"),n=(await e.get(t)).item;if(!n)throw new Error("Endpoint package was not found.");return n}},,function(e,t,n){"use strict";n.d(t,"b",(function(){return a.b})),n.d(t,"a",(function(){return a.a})),n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return u})),n.d(t,"e",(function(){return E})),n.d(t,"g",(function(){return x.b})),n.d(t,"f",(function(){return x.a}));var a=n(172),i=n(43),r=n(128);i.array(r.r);const o=i.exact(i.partial({rule_id:r.E,id:r.z}));i.array(o),i.array(r.A),i.array(r.G),i.array(i.union([r.D,r.ab]));var s=n(112);let l;!function(e){e.Enabled="enabled",e.Disabled="disabled"}(l||(l={}));const c=Object(s.u)("CoverageOverviewRuleActivity",l);let u;!function(e){e.Prebuilt="prebuilt",e.Custom="custom"}(u||(u={}));const d=Object(s.u)("CoverageOverviewRuleSource",u),p=i.partial({search_term:s.k,activity:Object(s.j)(c),source:Object(s.j)(d)}),m=(i.exact(i.partial({filter:p})),i.type({name:i.string,activity:c}));i.exact(i.type({coverage:i.record(i.string,Object(s.j)(i.string)),unmapped_rule_ids:i.array(i.string),rules_data:i.record(i.string,m)})),r.r,r.D,r.D,r.A,r.D,r.D,r.G,r.D;var f=n(120);const g={exported_count:i.number,exported_rules_count:i.number,missing_rules:i.array(i.exact(i.type({rule_id:s.k}))),missing_rules_count:i.number},b=i.intersection([i.exact(i.type({id:s.k,type:s.k})),i.exact(i.partial({reason:i.string}))]),y={exported_action_connector_count:i.number,missing_action_connection_count:i.number,missing_action_connections:i.array(i.exact(i.type({id:s.k,type:s.k}))),excluded_action_connection_count:i.number,excluded_action_connections:i.array(b)};i.intersection([i.exact(i.type(g)),i.exact(i.partial(f.p)),i.exact(i.partial(y))]);var h=n(193);const v=i.array(i.exact(i.type({rule_id:r.E}))),E=(i.union([i.exact(i.type({objects:v})),i.null]),i.exact(i.partial({file_name:h.a,exclude_export_details:s.d})),i.union([i.literal("created_at"),i.literal("createdAt"),i.literal("enabled"),i.literal("execution_summary.last_execution.date"),i.literal("execution_summary.last_execution.metrics.execution_gap_duration_s"),i.literal("execution_summary.last_execution.metrics.total_indexing_duration_ms"),i.literal("execution_summary.last_execution.metrics.total_search_duration_ms"),i.literal("execution_summary.last_execution.status"),i.literal("name"),i.literal("risk_score"),i.literal("riskScore"),i.literal("severity"),i.literal("updated_at"),i.literal("updatedAt")]));i.union([E,i[void 0]]),i.exact(i.partial({fields:r.bb,filter:r.db,sort_field:E,sort_order:r.K,page:h.b,per_page:h.c})),i.exact(i.type({rules_summary:i.type({custom_count:s.n,prebuilt_installed_count:s.n}),aggregated_fields:i.type({tags:i.array(i.string)})})),i.exact(i.partial({overwrite:s.d,overwrite_exceptions:s.d,overwrite_action_connectors:s.d,as_new_list:s.d})),i.exact(i.type({exceptions_success:i.boolean,exceptions_success_count:s.n,exceptions_errors:i.array(r.ab),rules_count:s.n,success:i.boolean,success_count:s.n,errors:i.array(r.ab),action_connectors_errors:i.array(r.ab),action_connectors_warnings:i.array(r.nb),action_connectors_success:i.boolean,action_connectors_success_count:s.n})),i.intersection([r.b,r.T,i.exact(i.type({rule_id:r.E})),i.exact(i.partial({id:r.z,immutable:s.m,updated_at:r.lb,updated_by:r.mb,created_at:r.Y,created_by:r.Z,related_integrations:r.o,required_fields:r.p,revision:r.eb,setup:r.I}))]);var x=n(547);i.array(i.string)},function(e,t,n){"use strict";n.d(t,"a",(function(){return K})),n.d(t,"b",(function(){return X}));var a=n(2),i=n.n(a),r=n(40),o=n(223),s=n(235),l=n(261),c=n(103),u=n(47),d=n(115),p=n(249),m=n(797),f=n(367),g=n(149),b=n(123),y=n(113),h=n(212),v=n(224),E=n(165),x=n(114),j=n(134),O=n(116),S=n(298),k=n(151),w=n(647),I=n(218),T=n(386),C=n(510),M=n(194),A=n(5);const _=A.i18n.translate("xpack.securitySolution.flyout.entities.failRelatedHostsDescription",{defaultMessage:"Failed to run search on related hosts"});var F=n(124),D=n(162),N=n(117),P=n(191),R=n(225),L=n(1081),q=n(414);const B=Object(I.a)(m.a),z=Object(I.a)(g.c),$=({userName:e,timestamp:t,scopeId:n})=>{const{to:s,from:l,deleteQuery:m,setQuery:I,isInitializing:A}=Object(j.a)(),{selectedPatterns:$}=Object(O.d)(),V=Object(c.useDispatch)(),U=Object(a.useMemo)((()=>`entities-users-details-${Object(u.v4)()}`),[]),G=Object(a.useMemo)((()=>`entities-users-related-hosts-${Object(u.v4)()}`),[]),H=Object(q.a)("entity-analytics"),W=Object(D.a)().isPlatinumOrTrialLicense&&H,Q=Object(a.useCallback)(((e,t)=>{const n=Object(S.a)(e,t);V(Object(k.setAbsoluteRangeDatePicker)({id:x.a.global,from:n.from,to:n.to}))}),[V]),[Y,{inspect:K,userDetails:X,refetch:J}]=Object(T.b)({id:U,startDate:l,endDate:s,userName:e,indexNames:$,skip:0===$.length}),{loading:Z,inspect:ee,relatedHosts:te,totalCount:ne,refetch:ae}=(({userName:e,indexNames:t,from:n,skip:i=!1})=>{const{loading:r,result:o,search:s,refetch:l,inspect:c}=Object(M.a)({factoryQueryType:C.a.relatedHosts,initialResult:{totalCount:0,relatedHosts:[]},errorMessage:_,abort:i}),u=Object(F.a)("riskScoringRoutesEnabled"),d=Object(a.useMemo)((()=>({inspect:c,totalCount:o.totalCount,relatedHosts:o.relatedHosts,refetch:l,loading:r})),[c,l,o.totalCount,o.relatedHosts,r]),p=Object(a.useMemo)((()=>({defaultIndex:t,factoryQueryType:C.a.relatedHosts,userName:e,from:n,isNewRiskScoreModuleAvailable:u})),[t,n,e,u]);return Object(a.useEffect)((()=>{i||s(p)}),[p,s,i]),d})({userName:e,indexNames:$,from:t,skip:0===$.length}),ie=Object(a.useMemo)((()=>[{field:"host",name:o.C,render:e=>i.a.createElement(r.EuiText,{grow:!1,size:"xs"},i.a.createElement(E.c,{data:{value:e,field:"host.name"},mode:E.a.HOVER_RIGHT,triggerId:E.d.DEFAULT,visibleCellActions:5,sourcererScopeId:Object(d.getSourcererScopeId)(n),metadata:{scopeId:n},showActionTooltips:!0},e))},{field:"ip",name:o.B,render:e=>i.a.createElement(v.a,{rowItems:e,attrName:"host.ip",idPrefix:"",isDraggable:!1,render:e=>null!=e?i.a.createElement(b.h,{ip:e}):Object(N.d)()})},...W?[{field:"risk",name:i.a.createElement(r.EuiToolTip,{content:L.c},i.a.createElement(i.a.Fragment,null,Object(R.b)(y.w.host)," ",i.a.createElement(r.EuiIcon,{color:"subdued",type:"iInCircle",className:"eui-alignTop"}))),truncateText:!1,mobileOptions:{show:!0},sortable:!1,render:e=>null!=e?i.a.createElement(h.b,{severity:e}):Object(N.d)()}]:[]]),[W,n]),re=Object(a.useMemo)((()=>i.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"m"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiIcon,{type:"storage"})),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiTitle,{size:"xxxs"},i.a.createElement(r.EuiText,null,`${o.E}: ${ne}`))))),[ne]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiTitle,{size:"xs"},i.a.createElement("h4",null,o.N)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(p.a,{header:{title:e,iconType:"user",headerContent:re},expand:{expandable:!0,expandedOnFirstRender:!0},"data-test-subj":P.I},i.a.createElement(r.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,o.L)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(f.a,{criteriaFields:Object(w.a)(X),startDate:l,endDate:s,skip:A},(({isLoadingAnomaliesData:t,anomaliesData:n,jobNameById:a})=>i.a.createElement(B,{id:U,isInDetailsSidePanel:!1,data:X,anomaliesData:n,isLoadingAnomaliesData:t,loading:Y,startDate:l,endDate:s,narrowDateRange:Q,setQuery:I,refetch:J,inspect:K,userName:e,indexPatterns:$,jobNameById:a}))),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiPanel,{hasBorder:!0},i.a.createElement(r.EuiFlexGroup,{direction:"row",gutterSize:"xs",alignItems:"center"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,o.E))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiToolTip,{content:o.F(e)},i.a.createElement(r.EuiIcon,{color:"subdued",type:"iInCircle",className:"eui-alignTop"})))),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(z,{id:G,inspect:ee,loading:Z,setQuery:I,deleteQuery:m,refetch:ae},i.a.createElement(r.EuiInMemoryTable,{columns:ie,items:te,loading:Z,"data-test-subj":P.H,pagination:{pageSize:4,showPerPageOptions:!1},message:o.D}),i.a.createElement(g.b,{queryId:G,title:o.E,inspectIndex:0})))))};var V=n(879),U=n(663);const G=A.i18n.translate("xpack.securitySolution.flyout.entities.failRelatedUsersDescription",{defaultMessage:"Failed to run search on related users"});var H=n(1388);const W=Object(I.a)(V.a),Q=Object(I.a)(g.c),Y=({hostName:e,timestamp:t,scopeId:n})=>{const{to:s,from:l,deleteQuery:m,setQuery:I,isInitializing:T}=Object(j.a)(),{selectedPatterns:A}=Object(O.d)(),_=Object(c.useDispatch)(),L=Object(a.useMemo)((()=>`entities-hosts-details-${Object(u.v4)()}`),[]),B=Object(a.useMemo)((()=>`entities-hosts-related-users-${Object(u.v4)()}`),[]),z=Object(q.a)("entity-analytics"),$=Object(D.a)().isPlatinumOrTrialLicense&&z,V=Object(a.useCallback)(((e,t)=>{const n=Object(S.a)(e,t);_(Object(k.setAbsoluteRangeDatePicker)({id:x.a.global,from:n.from,to:n.to}))}),[_]),[Y,{inspect:K,hostDetails:X,refetch:J}]=Object(U.b)({id:L,startDate:l,endDate:s,hostName:e,indexNames:A,skip:0===A.length}),{loading:Z,inspect:ee,relatedUsers:te,totalCount:ne,refetch:ae}=(({hostName:e,indexNames:t,from:n,skip:i=!1})=>{const r=Object(F.a)("riskScoringRoutesEnabled"),{loading:o,result:s,search:l,refetch:c,inspect:u}=Object(M.a)({factoryQueryType:C.a.relatedUsers,initialResult:{totalCount:0,relatedUsers:[]},errorMessage:G,abort:i}),d=Object(a.useMemo)((()=>({inspect:u,totalCount:s.totalCount,relatedUsers:s.relatedUsers,refetch:c,loading:o})),[u,c,s.totalCount,s.relatedUsers,o]),p=Object(a.useMemo)((()=>({defaultIndex:t,factoryQueryType:C.a.relatedUsers,hostName:e,from:n,isNewRiskScoreModuleAvailable:r})),[t,n,e,r]);return Object(a.useEffect)((()=>{i||l(p)}),[p,l,i]),d})({hostName:e,indexNames:A,from:t,skip:0===A.length}),ie=Object(a.useMemo)((()=>[{field:"user",name:o.C,render:e=>i.a.createElement(r.EuiText,{grow:!1,size:"xs"},i.a.createElement(E.c,{data:{field:"user.name",value:e},mode:E.a.HOVER_RIGHT,triggerId:E.d.DEFAULT,visibleCellActions:5,sourcererScopeId:Object(d.getSourcererScopeId)(n),metadata:{scopeId:n},showActionTooltips:!0},e))},{field:"ip",name:o.B,render:e=>i.a.createElement(v.a,{rowItems:e,attrName:"host.ip",idPrefix:"",isDraggable:!1,render:e=>null!=e?i.a.createElement(b.h,{ip:e}):Object(N.d)()})},...$?[{field:"risk",name:i.a.createElement(r.EuiToolTip,{content:H.i},i.a.createElement(i.a.Fragment,null,Object(R.b)(y.w.user)," ",i.a.createElement(r.EuiIcon,{color:"subdued",type:"iInCircle",className:"eui-alignTop"}))),truncateText:!1,mobileOptions:{show:!0},sortable:!1,render:e=>null!=e?i.a.createElement(h.b,{severity:e}):Object(N.d)()}]:[]]),[$,n]),re=Object(a.useMemo)((()=>i.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiIcon,{type:"user"})),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiTitle,{size:"xxxs"},i.a.createElement(r.EuiText,null,`${o.H}: ${ne}`))))),[ne]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiTitle,{size:"xs"},i.a.createElement("h4",null,o.m)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(p.a,{header:{title:e,iconType:"storage",headerContent:re},expand:{expandable:!0,expandedOnFirstRender:!0},"data-test-subj":P.m},i.a.createElement(r.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,o.k)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(f.a,{criteriaFields:Object(w.a)(X),startDate:l,endDate:s,skip:T},(({isLoadingAnomaliesData:t,anomaliesData:n,jobNameById:a})=>i.a.createElement(W,{id:L,hostName:e,data:X,indexNames:A,jobNameById:a,anomaliesData:n,isLoadingAnomaliesData:t,isInDetailsSidePanel:!1,loading:Y,startDate:l,endDate:s,narrowDateRange:V,setQuery:I,refetch:J,inspect:K,deleteQuery:m}))),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiPanel,{hasBorder:!0},i.a.createElement(r.EuiFlexGroup,{direction:"row",gutterSize:"xs",alignItems:"center"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,o.H))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiToolTip,{content:o.I(e)},i.a.createElement(r.EuiIcon,{color:"subdued",type:"iInCircle",className:"eui-alignTop"})))),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(Q,{id:B,inspect:ee,loading:Z,setQuery:I,deleteQuery:m,refetch:ae},i.a.createElement(r.EuiInMemoryTable,{columns:ie,items:te,loading:Z,"data-test-subj":P.l,pagination:{pageSize:4,showPerPageOptions:!1},message:o.G}),i.a.createElement(g.b,{queryId:B,title:o.H,inspectIndex:0})))))};Y.displayName="HostDetails";const K="entities-details",X=()=>{const{getFieldsData:e,scopeId:t}=Object(s.b)(),n=Object(l.a)(e("host.name")),a=Object(l.a)(e("user.name")),c=Object(l.a)(e("@timestamp")),u=c&&(n||a),d=a&&c,p=n&&c;return i.a.createElement(i.a.Fragment,null,u?i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"m","data-test-subj":P.k},d&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement($,{userName:a,timestamp:c,scopeId:t})),p&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(Y,{hostName:n,timestamp:c,scopeId:t}))):i.a.createElement("div",{"data-test-subj":P.j},o.j))};X.displayName="EntitiesDetails"},function(e,t,n){"use strict";n.d(t,"b",(function(){return a.a})),n.d(t,"a",(function(){return i.a})),n.d(t,"c",(function(){return r}));var a=n(425),i=n(705);let r;!function(e){e.observedDetails="observedUserDetails",e.managedDetails="managedUserDetails",e.kpiTotalUsers="usersKpiTotalUsers",e.users="allUsers",e.authentications="authentications",e.kpiAuthentications="usersKpiAuthentications"}(r||(r={}))},function(e,t,n){"use strict";n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return x})),n.d(t,"c",(function(){return S}));var a=n(141),i=n(60),r=n(51),o=n(408);const s=Object(a.d)((e=>(({data:e,defaultIndex:t,eventFields:n,filterQuery:a,timerange:i,signal:r})=>e.search.search({defaultIndex:t,eventFields:n,factoryQueryType:o.a.eventEnrichment,filterQuery:a,timerange:i},{strategy:"securitySolutionSearchStrategy",abortSignal:r}))(e).pipe(Object(i.filter)((e=>Object(r.isErrorResponse)(e)||Object(r.isCompleteResponse)(e)))))),l=()=>Object(a.c)(s);var c=n(2),u=n(103),d=n(8),p=n(246),m=n.n(p),f=n(114),g=n(167),b=n(108),y=n(102),h=n(182);const v=n(5).i18n.translate("xpack.securitySolution.investigationEnrichment.requestError",{defaultMessage:"An error occurred while requesting threat intelligence"});var E=n(4);const x="investigation_time_enrichment",j=()=>{},O={enrichments:[]},S=e=>{const{addError:t}=Object(b.a)(),{data:n,uiSettings:a}=Object(y.j)().services,i=a.get(E.T),r=Object(u.useDispatch)(),[o,s]=Object(c.useState)({from:g.a,to:g.b}),{error:p,loading:S,result:k,start:w}=l(),I=Object(c.useCallback)((()=>{r(h.c.deleteOneQuery({inputId:f.a.global,id:x}))}),[r]);Object(c.useEffect)((()=>(!S&&k&&r(h.c.setQuery({inputId:f.a.global,id:x,inspect:{dsl:k.inspect.dsl,response:[JSON.stringify(k.rawResponse,null,2)]},loading:S,refetch:j})),I)),[I,r,S,k]),Object(c.useEffect)((()=>{p&&t(p,{title:v})}),[t,p]);const T=m()(e),C=m()(o);return Object(c.useEffect)((()=>{Object(d.isEmpty)(e)||Object(d.isEqual)(e,T)&&Object(d.isEqual)(o,C)||w({data:n,timerange:{...o,interval:""},defaultIndex:i,eventFields:e,filterQuery:""})}),[w,n,e,T,o,C,i]),{result:Object(d.isEmpty)(e)?O:k,range:o,setRange:s,loading:S}}},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.relatedHosts="relatedHosts",e.relatedUsers="relatedUsers"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(46),c=n(102),u=n(44);const d=({handleClick:e})=>i.a.createElement(s.EuiFlexGroup,{justifyContent:"flexEnd"},i.a.createElement(s.EuiFlexItem,{grow:!1},i.a.createElement(s.EuiButtonEmpty,{onClick:e,"data-test-subj":"osquery-empty-button"},i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.footer.cancel",defaultMessage:"Cancel"})))),p=i.a.memo(d);var m=n(677);const f=o.a.div.withConfig({displayName:"OsqueryActionWrapper",componentId:"sc-flf6q3-0"})(["padding:8px;"]),g=({agentId:e,defaultValues:t,onClose:n,ecsData:r})=>{const{services:{osquery:o}}=Object(c.j)(),u=Object(l.useQueryClient)(),d=Object(a.useCallback)((()=>{var e;u.invalidateQueries({queryKey:["actions",{alertId:null==t||null===(e=t.alertIds)||void 0===e?void 0:e[0]}]})}),[null==t?void 0:t.alertIds,u]);return null!=o&&o.OsqueryAction?i.a.createElement(s.EuiFlyout,{size:"m",onClose:n},i.a.createElement(s.EuiFlyoutHeader,{hasBorder:!0,"data-test-subj":"flyout-header-osquery"},i.a.createElement(s.EuiTitle,null,i.a.createElement("h2",null,m.a))),i.a.createElement(s.EuiFlyoutBody,null,i.a.createElement(f,{"data-test-subj":"flyout-body-osquery"},i.a.createElement(o.OsqueryAction,{agentId:e,formType:"steps",defaultValues:t,ecsData:r,onSuccess:d}))),i.a.createElement(s.EuiFlyoutFooter,null,i.a.createElement(p,{handleClick:n,"data-test-subj":"flyout-footer-osquery"}))):null},b=i.a.memo(g)},,function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.indexFieldsSearch.errorSearchDescription",{defaultMessage:"An error has occurred creating the ad-hoc data view"}),r=a.i18n.translate("xpack.securitySolution.dataView.fetchFields.warning",{defaultMessage:"Failed to fetch detailed fields information"})},function(e,t,n){"use strict";n.r(t),n.d(t,"registerUrlParam",(function(){return r})),n.d(t,"deregisterUrlParam",(function(){return o})),n.d(t,"updateUrlParam",(function(){return s}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/global_url_param"),r=i("REGISTER_URL_PARAM"),o=i("DEREGISTER_URL_PARAM"),s=i("UPDATE_URL_PARAM")},function(e,t,n){"use strict";n.r(t),n.d(t,"selectNotesById",(function(){return s})),n.d(t,"getNotes",(function(){return c})),n.d(t,"getNotesAsCommentsList",(function(){return u})),n.d(t,"selectNotesByIdSelector",(function(){return d})),n.d(t,"notesByIdsSelector",(function(){return p})),n.d(t,"selectNotesAsCommentsListSelector",(function(){return m})),n.d(t,"errorsSelector",(function(){return f}));var a=n(42),i=n(240),r=n.n(i),o=n(139);const s=e=>e.app.notesById,l=e=>e.app.errors,c=r()(((e,t)=>Object(a.keys)(e).reduce(((n,a)=>{if(t.includes(a)){const t=e[a];return[...n,t]}return n}),[]))),u=e=>Object(a.values)(e).map((e=>{var t;return{eventId:e.eventId,savedObjectId:e.saveObjectId,note:e.note,noteId:e.id,updated:(null!==(t=e.lastEdit)&&void 0!==t?t:e.created).getTime(),updatedBy:e.user}})),d=Object(o.createSelector)(s,(e=>e)),p=()=>Object(o.createSelector)(s,(e=>e)),m=()=>Object(o.createSelector)(s,u),f=()=>Object(o.createSelector)(l,(e=>e))},function(e,t,n){"use strict";var a=n(1155),i={"text/plain":"Text","text/html":"Url",default:"Text"};e.exports=function(e,t){var n,r,o,s,l,c,u=!1;t||(t={}),n=t.debug||!1;try{if(o=a(),s=document.createRange(),l=document.getSelection(),(c=document.createElement("span")).textContent=e,c.style.all="unset",c.style.position="fixed",c.style.top=0,c.style.clip="rect(0, 0, 0, 0)",c.style.whiteSpace="pre",c.style.webkitUserSelect="text",c.style.MozUserSelect="text",c.style.msUserSelect="text",c.style.userSelect="text",c.addEventListener("copy",(function(a){if(a.stopPropagation(),t.format)if(a.preventDefault(),void 0===a.clipboardData){n&&console.warn("unable to use e.clipboardData"),n&&console.warn("trying IE specific stuff"),window.clipboardData.clearData();var r=i[t.format]||i.default;window.clipboardData.setData(r,e)}else a.clipboardData.clearData(),a.clipboardData.setData(t.format,e);t.onCopy&&(a.preventDefault(),t.onCopy(a.clipboardData))})),document.body.appendChild(c),s.selectNodeContents(c),l.addRange(s),!document.execCommand("copy"))throw new Error("copy command was unsuccessful");u=!0}catch(a){n&&console.error("unable to copy using execCommand: ",a),n&&console.warn("trying IE specific stuff");try{window.clipboardData.setData(t.format||"text",e),t.onCopy&&t.onCopy(window.clipboardData),u=!0}catch(a){n&&console.error("unable to copy using clipboardData: ",a),n&&console.error("falling back to prompt"),r=function(e){var t=(/mac os x/i.test(navigator.userAgent)?"⌘":"Ctrl")+"+C";return e.replace(/#{\s*key\s*}/g,t)}("message"in t?t.message:"Copy to clipboard: #{key}, Enter"),window.prompt(r,e)}}finally{l&&("function"==typeof l.removeRange?l.removeRange(s):l.removeAllRanges()),c&&document.body.removeChild(c),o()}return u}},,function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r}));var a=n(119);n(4);const i=e=>({hasQuery:null!=e.kqlQuery&&null!=e.kqlQuery.filterQuery&&null!=e.kqlQuery.filterQuery.kuery&&""!==e.kqlQuery.filterQuery.kuery.expression||null!=e.dataProviders&&e.dataProviders.length>0||null!=e.filters&&e.filters.length>0,hasEql:null!=e.eqlOptions&&null!=e.eqlOptions.query&&e.eqlOptions.query.length>0}),r=[a.e.alertsOnAlertsPage,a.e.alertsOnRuleDetailsPage]},function(e,t,n){"use strict";n.d(t,"d",(function(){return l})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return u})),n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(365);const o=Object(r.c)(),s=Object(r.c)(),l=()=>{const[e]=Object(a.useState)(o);return{portalNode:e}},c=i.a.memo((()=>{const{portalNode:e}=l();return i.a.createElement(r.b,{node:e})}));c.displayName="TimelineEventsCountBadge";const u=()=>{const[e]=Object(a.useState)(s);return{portalNode:e}},d=i.a.memo((()=>{const{portalNode:e}=u();return i.a.createElement(r.b,{node:e})}));d.displayName="EqlEventsCountBadge"},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(104),i=n.n(a),r=n(41),o=n.n(r),s=n(2),l=n.n(s),c=n(40);const u=o()((({loading:e,...t})=>l.a.createElement(c.EuiPanel,i()({},t,{hasBorder:!0})))).withConfig({displayName:"Panel",componentId:"sc-h09jgf-0"})(["position:relative;",""],(({loading:e})=>e&&"\n    overflow: hidden;\n  "));u.displayName="Panel"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"c",(function(){return o}));const a="kibana.alert.rule.name",i="host.name",r=300,o=500},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"f",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"e",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.threatMatch.fieldDescription",{defaultMessage:"Field"}),r=a.i18n.translate("xpack.securitySolution.threatMatch.threatFieldDescription",{defaultMessage:"Indicator index field"}),o=a.i18n.translate("xpack.securitySolution.threatMatch.fieldPlaceholderDescription",{defaultMessage:"Search"}),s=a.i18n.translate("xpack.securitySolution.threatMatch.matchesLabel",{defaultMessage:"MATCHES"}),l=a.i18n.translate("xpack.securitySolution.threatMatch.andDescription",{defaultMessage:"AND"}),c=a.i18n.translate("xpack.securitySolution.threatMatch.orDescription",{defaultMessage:"OR"})},function(e,t,n){"use strict";n.r(t),n.d(t,"updateNetworkTable",(function(){return r})),n.d(t,"setNetworkDetailsTablesActivePageToZero",(function(){return o})),n.d(t,"setNetworkTablesActivePageToZero",(function(){return s})),n.d(t,"updateNetworkAnomaliesJobIdFilter",(function(){return l})),n.d(t,"updateNetworkAnomaliesInterval",(function(){return c}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/network"),r=i("UPDATE_NETWORK_TABLE"),o=i("SET_IP_DETAILS_TABLES_ACTIVE_PAGE_TO_ZERO"),s=i("SET_NETWORK_TABLES_ACTIVE_PAGE_TO_ZERO"),l=i("UPDATE_NETWORK_ANOMALIES_JOB_ID_FILTER"),c=i("UPDATE_NETWORK_ANOMALIES_INTERVAL")},function(e,t,n){"use strict";n.r(t),n.d(t,"setUsersTablesActivePageToZero",(function(){return r})),n.d(t,"setUsersDetailsTablesActivePageToZero",(function(){return o})),n.d(t,"updateTableLimit",(function(){return s})),n.d(t,"updateTableActivePage",(function(){return l})),n.d(t,"updateTableSorting",(function(){return c})),n.d(t,"updateUserRiskScoreSeverityFilter",(function(){return u})),n.d(t,"updateUsersAnomaliesJobIdFilter",(function(){return d})),n.d(t,"updateUsersAnomaliesInterval",(function(){return p}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/users"),r=i("SET_USERS_TABLES_ACTIVE_PAGE_TO_ZERO"),o=i("SET_USERS_DETAILS_TABLES_ACTIVE_PAGE_TO_ZERO"),s=i("UPDATE_USERS_TABLE_LIMIT"),l=i("UPDATE_USERS_ACTIVE_PAGE"),c=i("UPDATE_USERS_SORTING"),u=i("UPDATE_USERS_RISK_SEVERITY_FILTER"),d=i("UPDATE_USERS_ANOMALIES_JOB_ID_FILTER"),p=i("UPDATE_USERS_ANOMALIES_INTERVAL")},function(e,t,n){"use strict";n.r(t),n.d(t,"updateTableActivePage",(function(){return r})),n.d(t,"setHostTablesActivePageToZero",(function(){return o})),n.d(t,"setHostDetailsTablesActivePageToZero",(function(){return s})),n.d(t,"updateTableLimit",(function(){return l})),n.d(t,"updateHostsSort",(function(){return c})),n.d(t,"updateHostRiskScoreSort",(function(){return u})),n.d(t,"updateHostRiskScoreSeverityFilter",(function(){return d})),n.d(t,"updateHostsAnomaliesJobIdFilter",(function(){return p})),n.d(t,"updateHostsAnomaliesInterval",(function(){return m}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/local/hosts"),r=i("UPDATE_HOST_TABLE_ACTIVE_PAGE"),o=i("SET_HOST_TABLES_ACTIVE_PAGE_TO_ZERO"),s=i("SET_HOST_DETAILS_TABLES_ACTIVE_PAGE_TO_ZERO"),l=i("UPDATE_HOST_TABLE_LIMIT"),c=i("UPDATE_HOSTS_SORT"),u=i("UPDATE_HOST_RISK_SCORE_SORT"),d=i("UPDATE_HOST_RISK_SCORE_SEVERITY"),p=i("UPDATE_HOSTS_ANOMALIES_JOB_ID_FILTER"),m=i("UPDATE_HOSTS_ANOMALIES_INTERVAL")},,,function(e,t,n){"use strict";n.d(t,"c",(function(){return Be})),n.d(t,"a",(function(){return Ue})),n.d(t,"b",(function(){return He}));var a=n(40),i=n(2),r=n.n(i),o=n(44),s=n(52),l=n(197),c=n(124),u=n(8),d=n(839),p=n.n(d),m=n(45),f=n(41),g=n.n(f);const b=r.a.memo((({onClick:e,queriesLength:t})=>{const[n,s]=Object(i.useState)(!1),l=Object(i.useCallback)((()=>{e(),s(!0)}),[e]);return n?null:r.a.createElement(y,{color:"primary",paddingSize:"xs"},r.a.createElement(h,{direction:"row",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(a.EuiText,{size:"s"},r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActionsList.investigationGuideSuggestion",defaultMessage:"You have {queriesLength, plural, one {a query} other {queries}} in the investigation guide. Add {queriesLength, plural, one {it as a response action} other {them as response actions}}?",values:{queriesLength:t}}))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonEmpty,{size:"m",color:"primary",onClick:l,"data-test-subj":"osqueryAddInvestigationGuideQueries"},r.a.createElement(a.EuiText,{size:"s"},r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActionsList.addButton",defaultMessage:"Add"}))))))}));b.displayName="OsqueryInvestigationGuidePanel";var y=g()(a.EuiPanel).withConfig({displayName:"_StyledEuiPanel",componentId:"sc-10xybv0-0"})(["",""],{marginBottom:"16px"}),h=g()(a.EuiFlexGroup).withConfig({displayName:"_StyledEuiFlexGroup",componentId:"sc-10xybv0-1"})(["",""],{padding:"0 24px"}),v=n(600),E=n(5),x=n(938),j=n(702),O=n(126),S=n(67);const k={label:E.i18n.translate("xpack.securitySolution.responseActions.endpoint.commentLabel",{defaultMessage:"Comment (optional)"}),helpText:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.commentDescription",defaultMessage:"Leave a note that explains or describes the action. You can see your comment in the response actions history log."})},w=({basePath:e,disabled:t,readDefaultValueOnForm:n})=>r.a.createElement(s.UseField,{path:`${e}.comment`,readDefaultValueOnForm:n,config:k,isDisabled:t,component:S.TextField}),I=r.a.memo(w);var T=n(75),C=n(102);E.i18n.translate("xpack.securitySolution.endpoint.action.permissionDenied",{defaultMessage:"Permission denied"});const M=E.i18n.translate("xpack.securitySolution.endpoint.action.chooseFromTheList",{defaultMessage:"Choose action from the list"}),A=E.i18n.translate("xpack.securitySolution.responseActions.endpoint.commentLearnMore",{defaultMessage:"Learn more"}),_=({name:e,isDisabled:t})=>{const{title:n,description:i,tooltip:o}=F(e),s=r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiTitle,{size:"xs"},r.a.createElement(a.EuiText,null,n)),r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(a.EuiText,null,i));return t?r.a.createElement(a.EuiToolTip,{position:"top",content:o},s):s},F=e=>"isolate"===e?{title:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.isolate",defaultMessage:"Isolate"}),description:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.isolateDescription",defaultMessage:"Quarantine a host from the network to prevent further spread of threats and limit potential damage"}),tooltip:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.isolateTooltip",defaultMessage:"Insufficient privileges to isolate hosts. Contact your Kibana administrator if you think you should have this permission."})}:{title:"",description:"",tooltip:""},D=r.a.memo(_);var N=n(493);const P=({basePath:e,disabled:t,readDefaultValueOnForm:n})=>{const{endpointPrivileges:l}=Object(O.a)(),[c]=Object(s.useFormData)(),{docLinks:{links:{securitySolution:{responseActions:d}}}}=Object(C.j)().services,p=Object(i.useMemo)((()=>N.a.map((e=>{const t=!Object(x.b)({commandName:Object(j.d)(e),privileges:l}),n=Object(u.map)(c.responseActions,"params.command").includes(e)||t;return{value:e,inputDisplay:e,dropdownDisplay:r.a.createElement(D,{name:e,isDisabled:t}),disabled:n,"data-test-subj":`command-type-${e}`}}))),[c.responseActions,l]);return r.a.createElement(s.UseField,{path:`${e}.command`,readDefaultValueOnForm:n,config:{label:E.i18n.translate("xpack.securitySolution.responseActions.endpoint.commandLabel",{defaultMessage:"Response action"}),helpText:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.commandDescription",defaultMessage:"Select an endpoint response action. The response action only runs on hosts with Elastic Defend installed. {docs}",values:{docs:r.a.createElement(a.EuiLink,{href:d,target:"_blank"},A)}}),validations:[{validator:T.fieldValidators.emptyField(E.i18n.translate("xpack.securitySolution.responseActions.endpoint.validations.commandIsRequiredErrorMessage",{defaultMessage:"Action is a required field."}))}]},component:S.SuperSelectField,isDisabled:t,componentProps:{euiFieldProps:{options:p,placeholder:M,"data-test-subj":"commandTypeField"}}})},R=r.a.memo(P),L=({basePath:e,editDisabled:t})=>{const[n]=Object(s.useFormData)(),i=Object(u.get)(n,`${e}.command`);return t?r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"s"}),r.a.createElement(a.EuiCallOut,{color:"warning",iconType:"warning",title:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActionsList.endpoint.privileges",defaultMessage:"Insufficient privileges"})},r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActions.endpoint.isolateTooltip",defaultMessage:"Insufficient privileges to isolate hosts. Contact your Kibana administrator if you think you should have this permission."}))),r.a.createElement(a.EuiSpacer,{size:"s"})):"isolate"===i?r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"s"}),r.a.createElement(a.EuiCallOut,{color:"warning",iconType:"warning",title:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActionsList.endpoint.cautionTitle",defaultMessage:"Proceed with caution"})},r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.responseActionsList.endpoint.cautionDescription",defaultMessage:"Only select this option if you’re certain that you want to automatically block communication with other hosts on your network until you release this host."}))),r.a.createElement(a.EuiSpacer,{size:"s"})):r.a.createElement(r.a.Fragment,null)},q=r.a.memo(L),B=r.a.memo((e=>{const t=`${e.item.path}.params`;return r.a.createElement(r.a.Fragment,null,r.a.createElement(R,{basePath:t,disabled:e.editDisabled,readDefaultValueOnForm:!e.item.isNew}),r.a.createElement(q,{basePath:t,editDisabled:e.editDisabled}),r.a.createElement(I,{basePath:t,disabled:e.editDisabled,readDefaultValueOnForm:!e.item.isNew}))}));B.displayName="EndpointResponseAction";var z=n(238),$=n(141),V=n(453),U=n(36);const G=r.a.memo((({field:e})=>{const{setErrors:t,clearErrors:n,value:a,setValue:o}=e,{osquery:s}=Object(C.j)().services,l=Object(i.useMemo)((()=>null==s?void 0:s.OsqueryResponseActionTypeForm),[null==s?void 0:s.OsqueryResponseActionTypeForm]),c=Object(i.useCallback)((e=>{Object(u.isEmpty)(e)?n():t(Object(u.map)(e,(e=>({message:e.message}))))}),[t,n]);return r.a.createElement(l,{defaultValues:a,onError:c,onChange:o})}));G.displayName="ResponseActionFormField";var H=n(809),W=n(125);const Q=()=>r.a.createElement(r.a.Fragment,null),Y=r.a.memo((e=>{const{osquery:t,application:n}=Object(C.j)().services,s=Object(i.useMemo)((()=>null==t?void 0:t.OsqueryResponseActionTypeForm),[null==t?void 0:t.OsqueryResponseActionTypeForm]),l=Object($.b)(),c=Object(V.a)(U.AppFeatureKey.osqueryAutomatedResponseActions);if(t){var u,d,p,m,f,g,b,y;const{disabled:i,permissionDenied:h}=t.fetchInstallationStatus(),v=!(null!=n&&null!==(u=n.capabilities)&&void 0!==u&&null!==(d=u.osquery)&&void 0!==d&&d.writeLiveQueries||null!=n&&null!==(p=n.capabilities)&&void 0!==p&&null!==(m=p.osquery)&&void 0!==m&&m.runSavedQueries&&(null!=n&&null!==(f=n.capabilities)&&void 0!==f&&null!==(g=f.osquery)&&void 0!==g&&g.readSavedQueries||null!=n&&null!==(b=n.capabilities)&&void 0!==b&&null!==(y=b.osquery)&&void 0!==y&&y.readPacks));if(c)return r.a.createElement(c,null);if(h||v)return r.a.createElement(r.a.Fragment,null,r.a.createElement(W.e,{path:`${e.item.path}.params`,component:Q}),r.a.createElement(a.EuiEmptyPrompt,{title:r.a.createElement("h2",null,H.b),titleSize:"xs",iconType:"logoOsquery",body:r.a.createElement("p",null,r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.osquery.action.missingPrivileges",defaultMessage:"To access this page, ask your administrator for {osquery} Kibana privileges.",values:{osquery:r.a.createElement(a.EuiCode,null,"osquery")}}))}));if(i)return r.a.createElement(r.a.Fragment,null,r.a.createElement(W.e,{path:`${e.item.path}.params`,component:Q}),r.a.createElement(a.EuiEmptyPrompt,{iconType:"logoOsquery",title:r.a.createElement("h2",null,H.c),titleSize:"xs",body:r.a.createElement("p",null,H.a)}));if(l()&&s)return r.a.createElement(W.e,{path:`${e.item.path}.params`,component:G,readDefaultValueOnForm:!e.item.isNew})}return null}));Y.displayName="OsqueryResponseAction";const K=e=>{switch(e){case z.a.OSQUERY:return{logo:"logoOsquery",name:"Osquery"};case z.a.ENDPOINT:return{logo:"logoSecurity",name:"Endpoint Security"};default:return{logo:"logoOsquery",name:"Osquery"}}},X=g()(a.EuiAccordion).withConfig({displayName:"StyledEuiAccordion",componentId:"sc-16pdpi-0"})(["background:",";.euiAccordion__buttonContent{padding:",";}"],(({theme:e})=>e.eui.euiColorLightestShade),(({theme:e})=>e.eui.euiSizeM)),J=({item:e,onDeleteAction:t})=>{var n;const[o,s]=Object(i.useState)(!0),[l]=Object(W.m)(),c=Object(u.get)(l,e.path),d=null!==(n=(e=>{var t;const n=Object(O.a)().endpointPrivileges;if(".endpoint"===(null==e?void 0:e.actionTypeId)&&null!=e&&null!==(t=e.params)&&void 0!==t&&t.command)return!Object(x.b)({commandName:Object(j.d)(e.params.command),privileges:n})})(c))&&void 0!==n&&n,p=Object(i.useMemo)((()=>(null==c?void 0:c.actionTypeId)===z.a.OSQUERY?r.a.createElement(Y,{item:e}):(null==c?void 0:c.actionTypeId)===z.a.ENDPOINT?r.a.createElement(B,{item:e,editDisabled:d}):null),[null==c?void 0:c.actionTypeId,d,e]),m=Object(i.useCallback)((()=>{t(e.id)}),[e,t]),f=Object(i.useMemo)((()=>{const{logo:e,name:t}=K(null==c?void 0:c.actionTypeId);return r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiIcon,{type:e,size:"m"})),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,null,t)))}),[null==c?void 0:c.actionTypeId]),g=Object(i.useMemo)((()=>r.a.createElement(a.EuiButtonIcon,{"data-test-subj":"remove-response-action",iconType:"minusInCircle",color:"danger",className:"actAccordionActionForm__extraAction","aria-label":E.i18n.translate("xpack.securitySolution.actionTypeForm.accordion.deleteIconAriaLabel",{defaultMessage:"Delete"}),disabled:d,onClick:m})),[d,m]);return r.a.createElement(X,{initialIsOpen:!0,key:e.id,id:e.id.toString(),onToggle:s,paddingSize:"l","data-test-subj":"alertActionAccordion",buttonContent:f,extraAction:g},p)};J.displayName="ResponseActionTypeForm";const Z=r.a.memo(J);var ee=n(496),te=n.n(ee),ne=n(1370),ae=n.n(ne),ie=n(480);const re=()=>r.a.createElement(r.a.Fragment,null),oe=r.a.memo((({items:e,removeItem:t})=>{const{detailName:n}=Object(m.useParams)(),{data:o}=Object(v.f)(n),s=Object(i.useMemo)((()=>null!=o&&o.note?(e=>{const t=te()().use([[ae.a,{}],ie.a]).parse(e);return Object(u.filter)(null==t?void 0:t.children,["type","osquery"])})(o.note):[]),[null==o?void 0:o.note]),l=Object(W.l)(),[c]=Object(W.m)(),d=Object(i.useCallback)((()=>{const e=((e,t=[])=>Object(u.reduce)(e,((e,{configuration:t})=>(e.responseActions.push({actionTypeId:z.a.OSQUERY,params:{savedQueryId:void 0,packId:void 0,queries:void 0,query:t.query,ecsMapping:t.ecs_mapping}}),e)),{responseActions:t}))(s,c.responseActions);l.updateFieldValues(e)}),[l,null==c?void 0:c.responseActions,s]);return r.a.createElement("div",{"data-test-subj":"response-actions-list"},e.map(((e,n)=>r.a.createElement("div",{key:e.id,"data-test-subj":`response-actions-list-item-${n}`},r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(Z,{item:e,onDeleteAction:t}),r.a.createElement(W.e,{path:`${e.path}.actionTypeId`,component:re})))),r.a.createElement(a.EuiSpacer,{size:"m"}),s.length?r.a.createElement(b,{onClick:d,queriesLength:s.length}):null)}));oe.displayName="ResponseActionsList";var se=n(17);const le=E.i18n.translate("xpack.securitySolution.actionForm.platinumOnly",{defaultMessage:"This functionality is available only in Platinum and above."}),ce=({supportedResponseActionTypes:e,addActionType:t,updateActionTypeId:n})=>{const[s]=Object(W.m)(),[l,c]=Object(i.useState)(s.responseActions&&s.responseActions.length>0),u=Object(se.b)().isPlatinumPlus(),d=Object(i.useCallback)((e=>{c(!1),t(),n(e.id)}),[t,n]),p=Object(i.useMemo)((()=>r.a.createElement(a.EuiFlexGroup,{direction:"row"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiButton,{size:"s","data-test-subj":"addAlertActionButton",onClick:()=>c(!1)},r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.sections.actionForm.addResponseActionButtonLabel",defaultMessage:"Add response action"}))))),[]),m=Object(i.useMemo)((()=>(null==e?void 0:e.length)&&e.map((function(e,t){const n=r.a.createElement(a.EuiKeyPadMenuItem,{key:t,isDisabled:!u||e.disabled,"data-test-subj":`${e.name}-response-action-type-selection-option`,label:e.name,betaBadgeTooltipContent:"should be visible",onClick:()=>d(e)},r.a.createElement(a.EuiIcon,{size:"xl",type:e.iconClass}));return u?r.a.createElement(a.EuiFlexItem,{grow:!1,key:`keypad-${e.id}`},n):r.a.createElement(a.EuiToolTip,{position:"top",content:le},r.a.createElement(a.EuiFlexItem,{grow:!1,key:`keypad-${e.id}`},n))}))),[d,u,e]);return null!=e&&e.length?r.a.createElement(r.a.Fragment,null,l?p:r.a.createElement(a.EuiFlexGroup,{direction:"row"},m)):r.a.createElement(r.a.Fragment,null)},ue=r.a.memo((({items:e,removeItem:t,supportedResponseActionTypes:n,addItem:a})=>{const o=Object(i.useRef)(null),s=Object(i.useCallback)((e=>{o.current=e}),[]),l=Object(W.l)(),c=Object(i.useMemo)((()=>r.a.createElement(ce,{supportedResponseActionTypes:n,addActionType:a,updateActionTypeId:s})),[a,s,n]);return Object(i.useEffect)((()=>{if(o.current){const t=`responseActions[${e.length-1}].actionTypeId`;l.setFieldValue(t,o.current),o.current=null}}),[l,e.length]),r.a.createElement("div",{"data-test-subj":"response-actions-wrapper"},r.a.createElement(oe,{items:e,removeItem:t}),c)}));ue.displayName="ResponseActionsWrapper";var de=n(852);const pe=()=>r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiFlexItem,{grow:!1,"data-test-subj":"response-actions-header"},r.a.createElement(a.EuiTitle,{size:"s"},r.a.createElement("h4",null,r.a.createElement(o.FormattedMessage,{defaultMessage:"Response Actions",id:"xpack.securitySolution.actionForm.responseActionSectionsDescription"})))),r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(o.FormattedMessage,{defaultMessage:"Response actions are run on each rule execution.",id:"xpack.securitySolution.actionForm.responseActionSectionsTitle"})),r.a.createElement(a.EuiSpacer,{size:"m"})),me=[{id:z.a.OSQUERY,name:"Osquery",iconClass:"logoOsquery"},{id:z.a.ENDPOINT,name:"Endpoint Security",iconClass:"logoSecurity"}],fe=({items:e,addItem:t,removeItem:n,form:o})=>{const s=(()=>{const[e,t]=Object(i.useState)(),n=Object(c.a)("endpointResponseActionsEnabled"),{canIsolateHost:a}=Object(O.a)().endpointPrivileges,r=Object(i.useMemo)((()=>({endpoint:n})),[n]),o=Object(i.useMemo)((()=>({endpoint:a})),[a]);return Object(i.useEffect)((()=>{const e=((e,t,n)=>e.reduce(((e,a)=>{const i=a.id===z.a.ENDPOINT;return!t.endpoint&&i?e:z.c.includes(a.id)?[...e,{...a,disabled:i?!n.endpoint:void 0}]:e}),[]))(me,r,o);t(e)}),[n,r,o]),e})(),[l,d]=Object(i.useState)(null),m=o.getFields(),f=o.getErrors(),g=Object(i.useMemo)((()=>null!=s&&s.length?r.a.createElement(ue,{items:e,removeItem:n,supportedResponseActionTypes:s,addItem:t}):null),[t,e,n,s]);return Object(i.useEffect)((()=>{d((()=>{const t=Object(u.reduce)(Object(u.map)(e,"path"),((e,t)=>{var n,a;return null!==(n=m[`${t}.params`])&&void 0!==n&&null!==(a=n.errors)&&void 0!==a&&a.length?(e.push({type:Object(u.upperFirst)(m[`${t}.actionTypeId`].value.substring(1)),errors:Object(u.map)(m[`${t}.params`].errors,"message")}),e):e}),[]);return Object(u.reduce)(t,((e,t)=>(e.push(`**${t.type}:**\n`),t.errors.forEach((t=>{e.push(`- ${t}\n`)})),e)),[]).join("\n")}))}),[m,f,e]),r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"xxl","data-test-subj":"response-actions-form"}),r.a.createElement(pe,null),null!=l&&l.length?r.a.createElement(r.a.Fragment,null,r.a.createElement("p",null,r.a.createElement(a.EuiCallOut,{"data-test-subj":"response-actions-error",title:de.b,color:"danger",iconType:"warning"},r.a.createElement(p.a,null,l))),r.a.createElement(a.EuiSpacer,null)):null,g)};var ge=n(469),be=n(1105),ye=n(46),he=n(69),ve=n(108),Ee=n(143);const xe=E.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.actions.connectorsFetchError",{defaultMessage:"Failed to fetch connectors"}),je=E.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.actions.connectorTypesFetchError",{defaultMessage:"Failed to fetch connector types"}),Oe=E.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.actions.actionsFetchErrorDescription",{defaultMessage:"Viewing actions is not available"}),Se=E.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepRuleActions.noReadActionsPrivileges",{defaultMessage:'Cannot create rule actions. You do not have "Read" permissions for the "Actions" plugin.'}),ke=E.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepRuleActions.docsLinkText",{defaultMessage:"Learn more"});function we(){const{docLinks:{links:{securitySolution:{manageDetectionRules:e}}}}=Object(C.j)().services,t=`${e}#edit-rules-settings`;return r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepRuleActions.snoozeDescription",defaultMessage:"Choose when to perform actions or snooze them. Notifications are not created for snoozed actions. {docs}.",values:{docs:r.a.createElement(a.EuiLink,{href:t,target:"_blank"},ke)}})}const Ie=r.a.createElement(we,null),Te=(E.i18n.translate("xpack.securitySolution.detectionEngine.actionsSectionLabel",{defaultMessage:"Actions"}),E.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.notificationActions",{defaultMessage:"Notification actions"})),Ce=E.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.responseActions",{defaultMessage:"Response actions"}),Me=E.i18n.translate("xpack.securitySolution.detectionEngine.actionNotifyWhen.forEachOption",{defaultMessage:"For each alert. Per rule run."}),Ae=E.i18n.translate("xpack.securitySolution.detectionEngine.actionNotifyWhen.summaryOption",{defaultMessage:"Summary of alerts. Per rule run."}),_e=E.i18n.translate("xpack.securitySolution.detectionEngine.actionNotifyWhen.periodically",{defaultMessage:"Periodically"});var Fe=n(752);function De({ruleId:e}){return r.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,{size:"s"},Ie)),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(Fe.a,{ruleId:e,showTooltipInline:!0})))}var Ne=n(417);const Pe=({children:e})=>r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,{size:"xs",color:"subdued"},e)),Re=({frequency:e})=>{if(!e)return null;if(!e.summary)return r.a.createElement(Pe,null,Me);if("onActiveAlert"===e.notifyWhen)return r.a.createElement(Pe,null,Ae);if(!e.throttle)return null;const{unit:t,value:n}=Object(Ne.f)(e.throttle),a={s:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.onceInEverySecondsLabel",defaultMessage:"Once {secondsCount, plural, one {a} other {in every}} {secondsCount, plural, one {second} other {# seconds}}",values:{secondsCount:n}}),m:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.onceInEveryMinutesLabel",defaultMessage:"Once {minutesCount, plural, one {a} other {in every}} {minutesCount, plural, one {minute} other {# minutes}}",values:{minutesCount:n}}),h:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.onceInEveryHoursLabel",defaultMessage:"Once {hoursCount, plural, one {an} other {in every}} {hoursCount, plural, one {hour} other {# hours}}",values:{hoursCount:n}}),d:r.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.onceInEveryDaysLabel",defaultMessage:"Once {daysCount, plural, one {a} other {in every}} {daysCount, plural, one {day} other {# days}}",values:{daysCount:n}})};return r.a.createElement(Pe,null,a[t]||_e)};function Le({action:e,connectorTypes:t,connectors:n,actionTypeRegistry:i}){var o,s,l,c;const u=t.find((({id:t})=>t===e.actionTypeId)),d=null!==(o=null==u?void 0:u.name)&&void 0!==o?o:"",p=n.find((({id:t})=>t===e.id)),m=null!==(s=null==p?void 0:p.name)&&void 0!==s?s:"",f=null!==(l=null===(c=i.get(e.actionTypeId))||void 0===c?void 0:c.iconClass)&&void 0!==l?l:"apps";return r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",component:"span",responsive:!1},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{content:d,anchorClassName:"eui-textTruncate"},r.a.createElement(a.EuiIcon,{size:"m",type:f}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,{size:"s"},m),r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"xs",component:"span",responsive:!1},r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiIcon,{size:"s",type:"bell",color:"subdued"})),r.a.createElement(Re,{frequency:e.frequency})))))}function qe({action:e}){const{name:t,logo:n}=K(e.actionTypeId);return r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",component:"span",responsive:!1},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{content:t,anchorClassName:"eui-textTruncate"},r.a.createElement(a.EuiIcon,{size:"m",type:n}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,{size:"s"},t))))}const Be={enabled:!0,actions:[],responseActions:[],kibanaSiemAppUrl:""},ze=()=>r.a.createElement(r.a.Fragment,null),$e=()=>r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiTitle,{size:"s"},r.a.createElement("h4",null,r.a.createElement(o.FormattedMessage,{defaultMessage:"Actions",id:"xpack.securitySolution.detectionEngine.rule.editRule.actionSectionsTitle"}))),r.a.createElement(a.EuiSpacer,{size:"l"})),Ve=({ruleId:e,isUpdateView:t=!1,actionMessageParams:n,summaryActionMessageParams:o,ruleType:u,form:d})=>{const{services:{application:p}}=Object(C.j)(),m=Object(c.a)("responseActionsEnabled"),f=Object(i.useMemo)((()=>r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,null),r.a.createElement(W.e,{path:"actions",component:be.a,componentProps:{messageVariables:n,summaryMessageVariables:o}}))),[n,o]),g=Object(i.useMemo)((()=>Object(l.e)(u)?r.a.createElement(s.UseArray,{path:"responseActions",initialNumberOfItems:0},fe):null),[u]),b=Object(i.useMemo)((()=>p.capabilities.actions.show?r.a.createElement(r.a.Fragment,null,r.a.createElement($e,null),e&&r.a.createElement(De,{ruleId:e}),f,m&&g,r.a.createElement(W.e,{path:"kibanaSiemAppUrl",component:ze}),r.a.createElement(W.e,{path:"enabled",component:ze})):r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiText,null,Se))),[e,p.capabilities.actions.show,f,g,m]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(ge.a,{addPadding:!t},r.a.createElement(W.c,{form:d,"data-test-subj":"stepRuleActions"},r.a.createElement(a.EuiForm,null,b))))},Ue=Object(i.memo)(Ve),Ge=({addPadding:e,defaultValues:t})=>{const{services:{triggersActionsUi:n}}=Object(C.j)(),i=n.actionTypeRegistry,{data:o}=(()=>{const{addError:e}=Object(ve.a)();return Object(ye.useQuery)(["GET",he.BASE_ACTION_API_PATH,"connectors"],(({signal:e})=>Object(Ee.f)(e)),{onError:t=>{e(t,{title:xe,toastMessage:Oe})}})})(),{data:s}=(()=>{const{addError:e}=Object(ve.a)();return Object(ye.useQuery)(["GET",he.BASE_ACTION_API_PATH,"connector_types","siem"],(({signal:e})=>Object(Ee.e)(e)),{onError:t=>{e(t,{title:je,toastMessage:Oe})}})})(),l=t.actions,c=t.responseActions||[];if(!(l.length>0||c.length>0)||!o||!s)return null;const u=l.length>0&&c.length>0;return r.a.createElement(ge.a,{addPadding:e},l.length>0&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiText,{size:"m"},Te),r.a.createElement(a.EuiSpacer,{size:"s"})),l.map(((e,t)=>{const n=t===l.length-1;return r.a.createElement(r.a.Fragment,null,r.a.createElement(Le,{action:e,connectorTypes:s,connectors:o,actionTypeRegistry:i,key:e.id}),!n&&r.a.createElement(a.EuiSpacer,{size:"s"}))})),u&&r.a.createElement(a.EuiSpacer,{size:"l"}),c.length>0&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiText,{size:"m"},Ce),r.a.createElement(a.EuiSpacer,{size:"s"})),c.map(((e,t)=>{const n=t===c.length-1;return r.a.createElement(r.a.Fragment,null,r.a.createElement(qe,{action:e,key:`${e.actionTypeId}-${t}`}),!n&&r.a.createElement(a.EuiSpacer,{size:"s"}))})))},He=Object(i.memo)(Ge)},function(e,t,n){"use strict";n.d(t,"b",(function(){return ce})),n.d(t,"a",(function(){return de}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(70),l=n(103),c=n(12),u=n(321),d=n(287),p=n(41),m=n.n(p);const f=m.a.div.attrs((({width:e})=>{if(e)return{style:{width:`${e}px`}}})).withConfig({displayName:"Field",componentId:"sc-1xzawmf-0"})(["background-color:",";border:",";box-shadow:0 2px 2px -1px ",",0 1px 5px -2px ",";font-size:",";font-weight:",";line-height:",";padding:",";"],(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiBorderThin),(({theme:e})=>Object(d.rgba)(e.eui.euiColorMediumShade,.3)),(({theme:e})=>Object(d.rgba)(e.eui.euiColorMediumShade,.3)),(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiFontWeightSemiBold),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiSizeXS));f.displayName="Field";const g=o.a.memo((({fieldId:e,fieldWidth:t})=>o.a.createElement(f,{"data-test-subj":"field",width:t},e)));g.displayName="DraggableFieldBadge";var b=n(153),y=n(170),h=n(40),v=n(1268),E=n(109),x=n(662),j=n(176),O=n(118),S=n(113),k=n(148),w=n(42),I=n(49),T=n(105),C=n(111),M=n(459);const A=o.a.memo((({columnId:e,onColumnRemoved:t})=>{const n=Object(r.useCallback)((n=>{n.preventDefault(),n.stopPropagation(),t(e)}),[e,t]);return o.a.createElement(h.EuiButtonIcon,{"aria-label":M.f,color:"text","data-test-subj":"remove-column",iconType:"cross",onClick:n})}));A.displayName="CloseButton";const _=o.a.memo((({header:e,onColumnRemoved:t,sort:n,isLoading:a})=>o.a.createElement(o.a.Fragment,null,n.some((t=>t.columnId===e.id))&&a?o.a.createElement(y.d,{className:"siemEventsHeading__extra--loading"},o.a.createElement(y.h,{"data-test-subj":"timeline-loading-spinner"})):o.a.createElement(y.d,{className:"siemEventsHeading__extra--close"},o.a.createElement(A,{columnId:e.id,onColumnRemoved:t})))));_.displayName="Actions";const F=m()(h.EuiFieldText).withConfig({displayName:"FieldText",componentId:"sc-14rl5n4-0"})(["min-width:",";"],(e=>e.minwidth));F.displayName="FieldText";const D=o.a.memo((({columnId:e,minWidth:t,filter:n="",onFilterChange:a=w.noop,placeholder:i="Filter"})=>o.a.createElement(F,{"data-test-subj":"textFilter",minwidth:`${t}px`,placeholder:i,value:n,onChange:t=>{a({columnId:e,filter:t.target.value})}})));D.displayName="TextFilter";const N=o.a.memo((({header:e,onFilterChange:t=w.noop})=>{var n;return"text-filter"===e.columnHeaderType?o.a.createElement(D,{columnId:e.id,minWidth:null!==(n=e.initialWidth)&&void 0!==n?n:j.a,onFilterChange:t,placeholder:e.placeholder}):null}));N.displayName="Filter";const P=({header:e,sort:t})=>t.reduce(((t,n)=>e.id===n.columnId?n.sortDirection:t),"none"),R=({header:e,sort:t})=>t.findIndex((t=>t.columnId===e.id));var L=n(339),q=n(389);const B=o.a.memo((({sortNumber:e})=>e>=0?o.a.createElement(h.EuiNotificationBadge,{color:"subdued","data-test-subj":"sortNumber"},e+1):o.a.createElement(h.EuiIcon,{"data-test-subj":"sortEmptyNumber",type:"empty"})));var z;B.displayName="SortNumber",function(e){e.SORT_UP="sortUp",e.SORT_DOWN="sortDown"}(z||(z={}));const $=o.a.memo((({sortDirection:e,sortNumber:t})=>{const n=(e=>{switch(e){case S.b.asc:return z.SORT_UP;case S.b.desc:return z.SORT_DOWN;case"none":return;default:throw new Error("Unhandled sort direction")}})(e);return null!=n?o.a.createElement(h.EuiToolTip,{content:n===z.SORT_UP?q.e:q.f,"data-test-subj":"sort-indicator-tooltip"},o.a.createElement(o.a.Fragment,null,o.a.createElement(h.EuiIcon,{"data-test-subj":"sortIndicator",type:n}),o.a.createElement(B,{sortNumber:t}))):o.a.createElement(h.EuiIcon,{"data-test-subj":"sortIndicator",type:"empty"})}));$.displayName="SortIndicator";var V=n(217);const U=m()(h.EuiIcon).withConfig({displayName:"IconType",componentId:"sc-1mjgpab-0"})(["margin-right:3px;position:relative;top:-2px;"]);U.displayName="IconType";const G=m.a.span.withConfig({displayName:"P",componentId:"sc-1mjgpab-1"})(["margin-bottom:5px;"]);G.displayName="P";const H=m.a.span.withConfig({displayName:"ToolTipTableMetadata",componentId:"sc-1mjgpab-2"})(["margin-right:5px;display:block;font-weight:bold;"]);H.displayName="ToolTipTableMetadata";const W=m.a.span.withConfig({displayName:"ToolTipTableValue",componentId:"sc-1mjgpab-3"})(["word-wrap:break-word;"]);W.displayName="ToolTipTableValue";const Q=o.a.memo((({header:e})=>{var t;return o.a.createElement(o.a.Fragment,null,!Object(w.isEmpty)(e.category)&&o.a.createElement(G,null,o.a.createElement(H,{"data-test-subj":"category"},M.a,":"),o.a.createElement(W,{"data-test-subj":"category-value"},e.category)),o.a.createElement(G,null,o.a.createElement(H,{"data-test-subj":"field"},M.c,":"),o.a.createElement(W,{"data-test-subj":"field-value"},e.id)),o.a.createElement(G,null,o.a.createElement(H,{"data-test-subj":"type"},M.i,":"),o.a.createElement(W,null,o.a.createElement(U,{"data-test-subj":"type-icon",type:Object(V.d)(e.type)}),null===(t=e.esTypes)||void 0===t?void 0:t.map((e=>o.a.createElement(h.EuiBadge,{"data-test-subj":`type-value-${e}`,key:e},e))))),!Object(w.isEmpty)(e.description)&&o.a.createElement(G,null,o.a.createElement(H,{"data-test-subj":"description"},M.b,":"),o.a.createElement(W,{"data-test-subj":"description-value"},e.description)))}));Q.displayName="HeaderToolTipContent";const Y=({children:e,header:t,isLoading:n,isResizing:a,onClick:i,showSortingCapability:r,sort:s})=>{var l,c;return o.a.createElement(y.c,{"data-test-subj":`header-${t.id}`,isLoading:n},t.aggregatable&&r?o.a.createElement(y.f,{"data-test-subj":"header-sort-button",onClick:a||n?w.noop:i},o.a.createElement(L.b,{"data-test-subj":`header-text-${t.id}`},o.a.createElement(h.EuiToolTip,{"data-test-subj":"header-tooltip",content:o.a.createElement(Q,{header:t})},o.a.createElement(o.a.Fragment,null,o.a.isValidElement(t.display)?t.display:null!==(l=t.displayAsText)&&void 0!==l?l:t.id))),o.a.createElement($,{"data-test-subj":"header-sort-indicator",sortDirection:P({header:t,sort:s}),sortNumber:R({header:t,sort:s})})):o.a.createElement(y.g,null,o.a.createElement(L.b,{"data-test-subj":`header-text-${t.id}`},o.a.createElement(h.EuiToolTip,{"data-test-subj":"header-tooltip",content:o.a.createElement(Q,{header:t})},o.a.createElement(o.a.Fragment,null,o.a.isValidElement(t.display)?t.display:null!==(c=t.displayAsText)&&void 0!==c?c:t.id)))),e)},K=o.a.memo(Y);var X=n(139),J=n(376);const Z=({header:e,onFilterChange:t=w.noop,sort:n,timelineId:a})=>{const i=Object(l.useDispatch)(),s=Object(r.useMemo)((()=>Object(X.createSelector)(J.selectTimeline,(e=>(null==e?void 0:e.activeTab)===O.d.eql))),[]),c=Object(T.b)((e=>s(e,a))),u=Object(r.useCallback)((()=>{var t,r;const o=e.id,s=null!==(t=e.type)&&void 0!==t?t:"",l=null!==(r=e.esTypes)&&void 0!==r?r:[],c=(({clickedHeader:e,currentSort:t})=>t.reduce(((t,n)=>e.id===n.columnId?(e=>{switch(e.sortDirection){case S.b.desc:return S.b.asc;case S.b.asc:default:return S.b.desc}})(n):t),S.b.desc))({clickedHeader:e,currentSort:n}),u=n.findIndex((e=>e.columnId===o));let d=[];d=-1===u?[...n,{columnId:o,columnType:s,esTypes:l,sortDirection:c}]:[...n.slice(0,u),{columnId:o,columnType:s,esTypes:l,sortDirection:c},...n.slice(u+1)],i(C.a.updateSort({id:a,sort:d}))}),[i,e,n,a]),d=Object(r.useCallback)((e=>i(C.a.removeColumn({id:a,columnId:e}))),[i,a]),p=Object(r.useMemo)((()=>C.b.getTimelineByIdSelector()),[]),{isLoading:m}=Object(T.a)((e=>p(e,a)||{isLoading:!1})),f=!c&&!Object(I.isDataViewFieldSubtypeNested)(e);return o.a.createElement(o.a.Fragment,null,o.a.createElement(K,{header:e,isLoading:m,isResizing:!1,onClick:u,showSortingCapability:f,sort:n},o.a.createElement(_,{header:e,isLoading:m,onColumnRemoved:d,sort:n})),o.a.createElement(N,{header:e,onFilterChange:t}))},ee=o.a.memo(Z),te=m()(h.EuiContextMenu).withConfig({displayName:"ContextMenu",componentId:"sc-wn02ez-0"})(["width:115px;& .euiContextMenuItem{font-size:12px;padding:4px 8px;width:115px;}"]),ne=m.a.div.withConfig({displayName:"PopoverContainer",componentId:"sc-wn02ez-1"})(["& .euiPopover__anchor{padding-right:8px;width:","px;}"],(({$width:e})=>e)),ae={right:!0},ie=({draggableIndex:e,header:t,timelineId:n,isDragging:a,onFilterChange:c,sort:u,tabType:d})=>{const p=Object(r.useRef)(null),[m,f]=Object(r.useState)(!1),g=Object(r.useCallback)((()=>{var e;return null===(e=p.current)||void 0===e?void 0:e.focus()}),[]),w=Object(l.useDispatch)(),I=Object(r.useMemo)((()=>{var e;return{width:null!==(e=t.initialWidth)&&void 0!==e?e:j.a,height:"auto"}}),[t.initialWidth]),T=Object(r.useMemo)((()=>({position:a?"absolute":"relative"})),[a]),A=Object(r.useMemo)((()=>({right:o.a.createElement(y.e,null)})),[]),_=Object(r.useCallback)(((e,a,i,r)=>{w(C.a.applyDeltaToColumnWidth({columnId:t.id,delta:r.width,id:n}))}),[w,t.id,n]),F=Object(r.useMemo)((()=>Object(b.k)({contextId:`timeline-column-headers-${d}-${n}`,fieldId:t.id})),[d,n,t.id]),D=Object(r.useCallback)((e=>{var a,i;const r=t.id,o=null!==(a=t.type)&&void 0!==a?a:"",s=null!==(i=t.esTypes)&&void 0!==i?i:[],l=u.findIndex((e=>e.columnId===r)),c=-1===l?[...u,{columnId:r,columnType:o,esTypes:s,sortDirection:e}]:[...u.slice(0,l),{columnId:r,columnType:o,esTypes:s,sortDirection:e},...u.slice(l+1)];w(C.a.updateSort({id:n,sort:c}))}),[w,t,u,n]),N=Object(r.useCallback)((()=>{f(!1),g()}),[g]),P=Object(r.useMemo)((()=>[{id:0,items:[{icon:o.a.createElement(h.EuiIcon,{type:"eyeClosed",size:"s"}),name:M.e,onClick:()=>{w(C.a.removeColumn({id:n,columnId:t.id})),N()}},...d!==O.d.eql?[{disabled:!t.aggregatable,icon:o.a.createElement(h.EuiIcon,{type:"sortUp",size:"s"}),name:M.g,onClick:()=>{D(S.b.asc),N()}},{disabled:!t.aggregatable,icon:o.a.createElement(h.EuiIcon,{type:"sortDown",size:"s"}),name:M.h,onClick:()=>{D(S.b.desc),N()}}]:[]]}]),[w,N,t.aggregatable,t.id,D,d,n]),R=Object(r.useMemo)((()=>o.a.createElement(ee,{timelineId:n,header:t,onFilterChange:c,sort:u})),[t,c,u,n]),L=Object(r.useCallback)((e=>{var n;return o.a.createElement(y.o,i()({"data-test-subj":"draggable-header"},e.draggableProps,e.dragHandleProps,{ref:e.innerRef}),o.a.createElement(y.p,null,o.a.createElement(ne,{$width:null!==(n=t.initialWidth)&&void 0!==n?n:j.a},o.a.createElement(h.EuiPopover,{anchorPosition:"downLeft",button:R,closePopover:N,isOpen:m,ownFocus:!0,panelPaddingSize:"none"},o.a.createElement(te,{initialPanelId:0,panels:P})))))}),[N,R,t.initialWidth,m,P]),q=Object(r.useCallback)((()=>{var e;null===(e=p.current)||void 0===e||e.focus()}),[]),B=Object(r.useCallback)((()=>{f(!0)}),[]),{onBlur:z,onKeyDown:$}=Object(x.a)({closePopover:N,draggableId:F,fieldName:t.id,keyboardHandlerRef:p,openPopover:B}),V=Object(r.useCallback)((e=>{m||$(e)}),[m,$]);return o.a.createElement(v.Resizable,{enable:ae,size:I,style:T,handleComponent:A,onResizeStop:_},o.a.createElement("div",{"aria-colindex":null!=e?e+k.c:void 0,className:E.a,"data-test-subj":"draggableWrapperKeyboardHandler",onClick:q,onBlur:z,onKeyDown:V,ref:p,role:"columnheader",tabIndex:0},o.a.createElement(s.Draggable,{"data-test-subj":"draggable",disableInteractiveElementBlocking:!0,draggableId:F,index:e,key:t.id},L)))},re=o.a.memo(ie);var oe=n(110),se=n(1060);const le=o.a.memo((({children:e,onMount:t,onUnmount:n})=>(Object(r.useEffect)((()=>(t(),()=>n())),[t,n]),o.a.createElement(o.a.Fragment,null,e))));le.displayName="DraggableContainer";const ce=({globalFullScreen:e,isActiveTimelines:t,timelineFullScreen:n})=>t&&n||!1===t&&e,ue=({actionsColumnWidth:e,browserFields:t,columnHeaders:n,isEventViewer:a=!1,isSelectAllChecked:d,onSelectAll:p,show:m,showEventsSelect:f,showSelectAllCheckbox:h,sort:v,tabType:E,timelineId:x,leadingControlColumns:j,trailingControlColumns:O})=>{const S=Object(l.useDispatch)(),[k,w]=Object(r.useState)(null),I=Object(r.useRef)(null);Object(r.useEffect)((()=>()=>{I.current&&I.current.closeEditor()}),[]),Object(r.useEffect)((()=>{!m&&I.current&&I.current.closeEditor()}),[m]);const T=Object(r.useCallback)(((e,t,a)=>{const r=a.source.index,s=n[r];return o.a.createElement(y.o,i()({"data-test-subj":"draggable-header"},e.draggableProps,e.dragHandleProps,{ref:e.innerRef}),o.a.createElement(le,{onMount:()=>w(r),onUnmount:()=>w(null)},o.a.createElement(u.a,null,o.a.createElement(g,{fieldId:s.id,fieldWidth:s.initialWidth}))))}),[n,w]),C=Object(r.useMemo)((()=>n.map(((e,t)=>o.a.createElement(re,{key:e.id,draggableIndex:t,timelineId:x,header:e,isDragging:k===t,sort:v,tabType:E})))),[n,x,k,v,E]),M=Object(r.useCallback)(((e,t)=>o.a.createElement(o.a.Fragment,null,o.a.createElement(y.r,i()({"data-test-subj":"headers-group",ref:e.innerRef,isDragging:t.isDraggingOver},e.droppableProps),C))),[C]),A=Object(r.useMemo)((()=>j?j.map((e=>e.headerCellRender)):[]),[j]),_=Object(r.useMemo)((()=>O?O.map((e=>e.headerCellRender)):[]),[O]),F=Object(se.a)({sourcererScope:oe.SourcererScopeName.timeline,editorActionsRef:I,upsertColumn:(e,t)=>S(Object(c.upsertColumn)({column:e,id:x,index:t})),removeColumn:e=>S(Object(c.removeColumn)({columnId:e,id:x}))}),D=Object(r.useMemo)((()=>A.map(((i,r)=>{const s=j[r]&&j[r].width||e;return o.a.createElement(y.q,{actionsColumnWidth:s,"data-test-subj":"actions-container",isEventViewer:a,key:r},i&&o.a.createElement(i,{width:s,browserFields:t,columnHeaders:n,isEventViewer:a,isSelectAllChecked:d,onSelectAll:p,showEventsSelect:f,showSelectAllCheckbox:h,sort:v,tabType:E,timelineId:x,fieldBrowserOptions:F}))}))),[A,j,e,t,n,F,a,d,p,f,h,v,E,x]),N=Object(r.useMemo)((()=>_.map(((i,r)=>{const s=O[r]&&O[r].width||e;return o.a.createElement(y.q,{actionsColumnWidth:s,"data-test-subj":"actions-container",isEventViewer:a,key:r},i&&o.a.createElement(i,{width:s,browserFields:t,columnHeaders:n,isEventViewer:a,isSelectAllChecked:d,onSelectAll:p,showEventsSelect:f,showSelectAllCheckbox:h,sort:v,tabType:E,timelineId:x,fieldBrowserOptions:F}))}))),[_,O,e,t,n,F,a,d,p,f,h,v,E,x]);return o.a.createElement(y.s,{"data-test-subj":"column-headers"},o.a.createElement(y.v,null,D,o.a.createElement(s.Droppable,{direction:"horizontal",droppableId:`${b.g}-${E}.${x}`,isDropDisabled:!1,type:b.a,renderClone:T},M),N))},de=o.a.memo(ue)},function(e,t,n){"use strict";n.d(t,"b",(function(){return a.LastEventIndexKey})),n.d(t,"c",(function(){return i})),n.d(t,"a",(function(){return r}));var a=n(54);let i,r;!function(e){e.all="eventsAll",e.details="eventsDetails",e.kpi="eventsKpi",e.lastEventTime="eventsLastEventTime"}(i||(i={})),function(e){e.uniDirectional="uniDirectional",e.biDirectional="biDirectional"}(r||(r={}))},,function(e,t,n){"use strict";n.d(t,"c",(function(){return h})),n.d(t,"d",(function(){return v})),n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return x})),n.d(t,"e",(function(){return I}));var a=n(40),i=n(55),r=n.n(i),o=n(2),s=n.n(o),l=n(41),c=n.n(l);const u=c.a.span.withConfig({displayName:"ArrowBody",componentId:"sc-11kjqat-0"})(["background-color:",";height:",";width:25px;"],(e=>e.theme.eui.euiColorLightShade),(({height:e})=>`${e}px`));u.displayName="ArrowBody";const d=s.a.memo((({direction:e})=>s.a.createElement(a.EuiIcon,{color:"subdued","data-test-subj":"arrow-icon",size:"s",type:e})));d.displayName="ArrowHead";var p=n(1275);const m=Object(p.scaleLinear)().domain([0,100]).range([1,4]).clamp(!0),f=e=>Array.isArray(e)&&1===e.length;var g=n(121),b=n(727),y=n(815);const h="source.bytes",v="source.packets",E="destination.bytes",x="destination.packets",j=c.a.span.withConfig({displayName:"Percent",componentId:"sc-19xyyc3-0"})(["margin-right:5px;"]);j.displayName="Percent";const O=c()(a.EuiFlexGroup).withConfig({displayName:"SourceDestinationArrowsContainer",componentId:"sc-19xyyc3-1"})(["margin:0 2px;.euiToolTipAnchor{white-space:nowrap;}"]);O.displayName="SourceDestinationArrowsContainer";const S=c()(a.EuiText).withConfig({displayName:"Data",componentId:"sc-19xyyc3-2"})(["margin:0 5px;"]);S.displayName="Data";const k=s.a.memo((({contextId:e,eventId:t,isDraggable:n,sourceBytes:i,sourceBytesPercent:o,sourcePackets:l})=>{const c=null!=o?m(o):1;return s.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none",justifyContent:"center"},s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})),null==i||isNaN(Number(i))?null:s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(g.b,{field:h,id:`source-arrow-default-draggable-${e}-${t}-${h}-${i}`,isDraggable:n,value:i},s.a.createElement(S,{size:"xs"},null!=o?s.a.createElement(j,null,`(${r()(o).format("0.00")}%)`):null,s.a.createElement("span",null,s.a.createElement(b.a,{value:i}))))),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})),null==l||isNaN(Number(l))?null:s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(g.b,{field:v,id:`source-arrow-default-draggable-${e}-${t}-${v}-${l}`,isDraggable:n,value:l},s.a.createElement(S,{size:"xs"},s.a.createElement("span",null,`${l} ${y.a}`)))),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(d,{direction:"arrowRight"})))}));k.displayName="SourceArrow";const w=s.a.memo((({contextId:e,destinationBytes:t,destinationBytesPercent:n,destinationPackets:i,eventId:o,isDraggable:l})=>{const c=null!=n?m(n):1;return s.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none",justifyContent:"center"},s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(d,{direction:"arrowLeft"})),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})),null==t||isNaN(Number(t))?null:s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(g.b,{field:E,id:`destination-arrow-default-draggable-${e}-${o}-${E}-${t}`,isDraggable:l,value:t},s.a.createElement(S,{size:"xs"},null!=n?s.a.createElement(j,null,`(${r()(n).format("0.00")}%)`):null,s.a.createElement("span",null,s.a.createElement(b.a,{value:t}))))),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})),null==i||isNaN(Number(i))?null:s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(g.b,{field:x,id:`destination-arrow-default-draggable-${e}-${o}-${x}-${i}`,isDraggable:l,value:i},s.a.createElement(S,{size:"xs"},s.a.createElement("span",null,`${r()(i).format("0,0")} ${y.a}`)))),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(u,{height:null!=c?c:0})))}));w.displayName="DestinationArrow";const I=s.a.memo((({contextId:e,destinationBytes:t,destinationPackets:n,eventId:i,isDraggable:r,sourceBytes:o,sourcePackets:l})=>{const c=null!=o&&f(o)?o[0]:void 0,u=null!=l&&f(l)?l[0]:void 0,d=null!=t&&f(t)?t[0]:void 0,p=null!=n&&f(n)?n[0]:void 0,m=null!=c&&null!=d?(({numerator:e,denominator:t})=>{if(!(Math.abs(t)<Number.EPSILON)&&Number.isFinite(e)&&Number.isFinite(t))return e/t*100})({numerator:Number(c),denominator:Number(c)+Number(d)}):void 0,g=null!=m?100-m:void 0;return s.a.createElement(O,{alignItems:"center",justifyContent:"center",direction:"column",gutterSize:"none"},null!=c?s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(k,{contextId:e,eventId:i,isDraggable:r,sourceBytes:c,sourcePackets:u,sourceBytesPercent:m})):null,null!=d?s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(w,{contextId:e,destinationBytes:d,destinationPackets:p,destinationBytesPercent:g,eventId:i,isDraggable:r})):null)}));I.displayName="SourceDestinationArrows"},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return l}));var a=n(2),i=n(303);const r=(e,t)=>{switch(t.type){case"FETCH_INIT":return{...e,parameters:t.payload,isLoading:!0};case"FETCH_SUCCESS":return{...e,data:t.payload,isLoading:!1,error:void 0};case"FETCH_FAILURE":return{...e,error:t.payload,isLoading:!1};case"FETCH_REPEAT":return{...e,isLoading:!0};default:return e}},o=(e,t,{disabled:n=!1,initialParameters:o}={})=>{const{startTracking:s}=Object(i.a)(),[{parameters:l,data:c,isLoading:u,error:d},p]=Object(a.useReducer)(r,{data:void 0,isLoading:!n&&void 0!==o,error:void 0,parameters:o}),m=Object(a.useCallback)((e=>p({type:"FETCH_INIT",payload:e})),[]),f=Object(a.useCallback)((()=>p({type:"FETCH_REPEAT"})),[]);return Object(a.useEffect)((()=>{if(!1===u||void 0===l||n)return;let a=!1;const i=new AbortController;return(async()=>{const{endTracking:n}=s({name:e});try{const e=await t(l,i.signal);n("success"),a||p({type:"FETCH_SUCCESS",payload:e})}catch(e){n(i.signal.aborted?"aborted":"error"),a||p({type:"FETCH_FAILURE",payload:e})}})(),()=>{a=!0,i.abort()}}),[u,l,n,t,s,e]),{fetch:m,refetch:f,data:c,isLoading:u,error:d}};var s=n(4);const l={SECURITY_DASHBOARDS:`${s.l} fetch security dashboards`,SECURITY_TAGS:`${s.l} fetch security tags`,SECURITY_CREATE_TAG:`${s.l} fetch security create tag`,CTI_TAGS:`${s.l} fetch cti tags`,ANOMALIES_TABLE:`${s.l} fetch anomalies table data`,GET_RISK_SCORE_DEPRECATED:`${s.l} fetch is risk score deprecated`,ENABLE_RISK_SCORE:`${s.l} fetch enable risk score`,REFRESH_RISK_SCORE:`${s.l} fetch refresh risk score`,UPGRADE_RISK_SCORE:`${s.l} fetch upgrade risk score`}},function(e,t,n){"use strict";n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return f})),n.d(t,"c",(function(){return g}));var a=n(74),i=(n(8),n(119)),r=n(5);const o=r.i18n.translate("xpack.securitySolution.selector.groups.ruleName.label",{defaultMessage:"Rule name"}),s=r.i18n.translate("xpack.securitySolution.selector.grouping.userName.label",{defaultMessage:"User name"}),l=r.i18n.translate("xpack.securitySolution.selector.grouping.hostName.label",{defaultMessage:"Host name"}),c=r.i18n.translate("xpack.securitySolution.selector.grouping.sourceIP.label",{defaultMessage:"Source IP"}),u=r.i18n.translate("xpack.securitySolution.selector.groups.sourceAddress.label",{defaultMessage:"Source address"}),d=r.i18n.translate("xpack.securitySolution.selector.groups.destinationAddress.label",{defaultMessage:"Destination address"}),p=e=>0===e.length?{}:{query:{bool:{filter:{ids:{values:e}}}},size:1e4},m=(e,t)=>{const n=e.split(".");return 1===n.length?{[n[0]]:t}:{[n[0]]:m(n.slice(1).join("."),t)}},f=e=>{return t=e,Array.isArray(t)?t:Object.entries(t).reduce(((e,[t,n])=>Object(a.merge)(e,m(t,n))),{});var t},g=e=>e===i.e.alertsOnAlertsPage||e===i.e.alertsRiskInputs?[{label:o,key:"kibana.alert.rule.name"},{label:s,key:"user.name"},{label:l,key:"host.name"},{label:c,key:"source.ip"}]:e===i.e.alertsOnRuleDetailsPage?[{label:u,key:"source.address"},{label:s,key:"user.name"},{label:l,key:"host.name"},{label:d,key:"destination.address,"}]:[]},function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return s}));var a=n(2),i=n.n(a);const r=i.a.createContext(null),o=Object(a.memo)((({upsellingService:e,children:t})=>i.a.createElement(r.Provider,{value:e},t)));o.displayName="UpsellingProvider";const s=()=>{const e=Object(a.useContext)(r);if(!e)throw new Error("UpsellingProviderContext not found");return e}},function(e,t,n){"use strict";var a=n(54);n.d(t,"a",(function(){return a.Direction}))},function(e,t,n){"use strict";n.r(t),n.d(t,"sourcererKibanaDataViewsSelector",(function(){return i})),n.d(t,"sourcererSignalIndexNameSelector",(function(){return r})),n.d(t,"sourcererDefaultDataViewSelector",(function(){return o})),n.d(t,"dataViewSelector",(function(){return s})),n.d(t,"sourcererScopeIdSelector",(function(){return l})),n.d(t,"scopeIdSelector",(function(){return c})),n.d(t,"kibanaDataViewsSelector",(function(){return u})),n.d(t,"signalIndexNameSelector",(function(){return d})),n.d(t,"defaultDataViewSelector",(function(){return p})),n.d(t,"sourcererDataViewSelector",(function(){return m})),n.d(t,"getSourcererDataViewsSelector",(function(){return f})),n.d(t,"getSourcererScopeSelector",(function(){return g})),n.d(t,"getSelectedDataviewSelector",(function(){return b}));var a=n(139);const i=({sourcerer:e})=>e.kibanaDataViews,r=({sourcerer:e})=>e.signalIndexName,o=({sourcerer:e})=>e.defaultDataView,s=({sourcerer:e},t)=>e.kibanaDataViews.find((e=>e.id===t)),l=({sourcerer:e},t)=>e.sourcererScopes[t],c=()=>Object(a.createSelector)(l,(e=>e)),u=()=>Object(a.createSelector)(i,(e=>e)),d=()=>Object(a.createSelector)(r,(e=>e)),p=()=>Object(a.createSelector)(o,(e=>e)),m=()=>Object(a.createSelector)(s,(e=>e)),f=()=>{const e=u(),t=p(),n=d();return a=>{const i=e(a);return{defaultDataView:t(a),kibanaDataViews:i,signalIndexName:n(a)}}},g=()=>{const e=f(),t=m(),n=c();return(a,i)=>{const r=e(a),o=n(a,i);return{...r,selectedDataView:t(a,o.selectedDataViewId),sourcererScope:o}}},b=()=>{const e=m(),t=c();return(n,a)=>{const i=t(n,a),r=e(n,i.selectedDataViewId);return null==r?void 0:r.dataView}}},,function(e,t,n){"use strict";(function(t){const a=n(426),i=n(764),r=n(540),o={needsProtoHack:new Set([i.set,i.map,i.weakSet,i.weakMap])};e.exports=o.clone=function(e,n={},a=null){if("object"!=typeof e||null===e)return e;let s=o.clone,l=a;if(n.shallow){if(!0!==n.shallow)return o.cloneWithShallow(e,n);s=e=>e}else if(l){const t=l.get(e);if(t)return t}else l=new Map;const c=i.getInternalProto(e);if(c===i.buffer)return t&&t.from(e);if(c===i.date)return new Date(e.getTime());if(c===i.regex)return new RegExp(e);const u=o.base(e,c,n);if(u===e)return e;if(l&&l.set(e,u),c===i.set)for(const t of e)u.add(s(t,n,l));else if(c===i.map)for(const[t,a]of e)u.set(t,s(a,n,l));const d=r.keys(e,n);for(const t of d){if("__proto__"===t)continue;if(c===i.array&&"length"===t){u.length=e.length;continue}const a=Object.getOwnPropertyDescriptor(e,t);a?a.get||a.set?Object.defineProperty(u,t,a):a.enumerable?u[t]=s(e[t],n,l):Object.defineProperty(u,t,{enumerable:!1,writable:!0,configurable:!0,value:s(e[t],n,l)}):Object.defineProperty(u,t,{enumerable:!0,writable:!0,configurable:!0,value:s(e[t],n,l)})}return u},o.cloneWithShallow=function(e,t){const n=t.shallow;(t=Object.assign({},t)).shallow=!1;const i=new Map;for(const t of n){const n=a(e,t);"object"!=typeof n&&"function"!=typeof n||i.set(n,n)}return o.clone(e,t,i)},o.base=function(e,t,n){if(!1===n.prototype)return o.needsProtoHack.has(t)?new t.constructor:t===i.array?[]:{};const a=Object.getPrototypeOf(e);if(a&&a.isImmutable)return e;if(t===i.array){const e=[];return a!==t&&Object.setPrototypeOf(e,a),e}if(o.needsProtoHack.has(t)){const e=new a.constructor;return a!==t&&Object.setPrototypeOf(e,a),e}return Object.create(a)}}).call(this,n(300).Buffer)},function(e,t,n){"use strict";t.keys=function(e,t={}){return!1!==t.symbols?Reflect.ownKeys(e):Object.getOwnPropertyNames(e)}},function(e,t,n){"use strict";n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i}));const a=e=>"relative"===e.kind,i=e=>"absolute"===e.kind},function(e,t,n){"use strict";n.r(t),n.d(t,"inputsSelector",(function(){return c})),n.d(t,"timelineTimeRangeSelector",(function(){return u})),n.d(t,"socTrendsTimeRangeSelector",(function(){return d})),n.d(t,"globalFullScreenSelector",(function(){return p})),n.d(t,"timelineFullScreenSelector",(function(){return m})),n.d(t,"globalTimeRangeSelector",(function(){return f})),n.d(t,"globalQuery",(function(){return g})),n.d(t,"globalQueryByIdSelector",(function(){return b})),n.d(t,"timelineQueryByIdSelector",(function(){return y})),n.d(t,"globalSelector",(function(){return h})),n.d(t,"globalQuerySelector",(function(){return E})),n.d(t,"globalSavedQuerySelector",(function(){return x})),n.d(t,"globalFiltersQuerySelector",(function(){return O})),n.d(t,"getTimelineSelector",(function(){return S})),n.d(t,"getTimelinePolicySelector",(function(){return k}));var a=n(139);const i=e=>e.inputs,r=e=>e.inputs.global,o=e=>e.inputs.timeline,s=(e,t)=>e.inputs.global.queries.find((e=>e.id===t))||{id:"kql",inspect:null,isInspected:!1,loading:!1,refetch:null,selectedInspectIndex:0},l=(e,t)=>e.inputs.timeline.queries.find((e=>e.id===t))||e.inputs.global.queries.find((e=>e.id===t))||{id:"kql",inspect:null,isInspected:!1,loading:!1,refetch:null,selectedInspectIndex:0},c=()=>Object(a.createSelector)(i,(e=>e)),u=Object(a.createSelector)(o,(e=>e.timerange)),d=Object(a.createSelector)((e=>e.inputs.socTrends),(e=>null==e?void 0:e.timerange)),p=Object(a.createSelector)(r,(e=>e.fullScreen)),m=Object(a.createSelector)(o,(e=>e.fullScreen)),f=Object(a.createSelector)(r,(e=>e.timerange)),g=()=>Object(a.createSelector)(r,(e=>e.queries)),b=()=>Object(a.createSelector)(s,(e=>e)),y=()=>Object(a.createSelector)(l,(e=>e)),h=()=>Object(a.createSelector)(r,(e=>e)),v={query:"",language:"kuery"},E=()=>Object(a.createSelector)(r,(e=>e.query||v)),x=()=>Object(a.createSelector)(r,(e=>e.savedQuery||null)),j=[],O=()=>Object(a.createSelector)(r,(e=>e.filters||j)),S=()=>Object(a.createSelector)(o,(e=>e)),k=()=>Object(a.createSelector)(o,(e=>e.policy))},function(e,t,n){"use strict";n.d(t,"a",(function(){return g})),n.d(t,"b",(function(){return b}));var a=n(666),i=n(119),r=n(1402),o=n(179),s=n(227),l=n(138),c=n(158),u=n(110),d=n(477),p=n(754),m=n(770),f=n(1431);Object(r.enableMapSet)();const g=(e,{defaultDataView:t,kibanaDataViews:n,signalIndexName:a,enableExperimental:i},r,m,f)=>{const g={[u.SourcererScopeName.default]:Object(d.b)(t,u.SourcererScopeName.default,a,!0),[u.SourcererScopeName.detections]:Object(d.b)(t,u.SourcererScopeName.detections,a,!0),[u.SourcererScopeName.timeline]:Object(d.b)(t,u.SourcererScopeName.timeline,a,!0)};return{...e,app:{...o.d,enableExperimental:i},dragAndDrop:s.d,inputs:Object(l.a)(i.socTrendsEnabled),sourcerer:{...c.b.initialSourcererState,sourcererScopes:{...c.b.initialSourcererState.sourcererScopes,[u.SourcererScopeName.default]:{...c.b.initialSourcererState.sourcererScopes.default,selectedDataViewId:t.id,selectedPatterns:g[u.SourcererScopeName.default]},[u.SourcererScopeName.detections]:{...c.b.initialSourcererState.sourcererScopes.detections,selectedDataViewId:t.id,selectedPatterns:g[u.SourcererScopeName.detections]},[u.SourcererScopeName.timeline]:{...c.b.initialSourcererState.sourcererScopes.timeline,selectedDataViewId:t.id,selectedPatterns:g[u.SourcererScopeName.timeline]}},defaultDataView:t,kibanaDataViews:n.map((e=>({...u.initDataView,...e}))),signalIndexName:a},globalUrlParam:p.d,dataTable:r.dataTable,groups:m.groups,analyzer:f.analyzer}},b=e=>Object(a.combineReducers)({app:o.b,dragAndDrop:s.b,inputs:l.c,sourcerer:c.c,globalUrlParam:p.b,dataTable:i.i,groups:m.a,analyzer:f.a,...e})},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(545));t.default=function(e,t){void 0===t&&(t=[]);var n=r.default(e,t,{loading:!0}),a=n[0],o=n[1];return i.useEffect((function(){o()}),[o]),a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(267));t.default=function(e,t,n){void 0===t&&(t=[]),void 0===n&&(n={loading:!1});var o=i.useRef(0),s=r.default(),l=i.useState(n),c=l[0],u=l[1],d=i.useCallback((function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];var i=++o.current;return u((function(e){return a.__assign(a.__assign({},e),{loading:!0})})),e.apply(void 0,t).then((function(e){return s()&&i===o.current&&u({value:e,loading:!1}),e}),(function(e){return s()&&i===o.current&&u({error:e,loading:!1}),e}))}),t);return[c,d]}},function(e,t,n){"use strict";var a=n(429);n.d(t,"a",(function(){return a.b})),n.d(t,"f",(function(){return a.d})),n(352);var i=n(430);n.d(t,"b",(function(){return i.a})),n.d(t,"d",(function(){return i.b})),n(431);var r=n(262);n.d(t,"g",(function(){return r.c}));var o=n(432);n.d(t,"c",(function(){return o.a}));var s=n(351);n.d(t,"e",(function(){return s.c}))},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r}));var a=n(4);const i=`${a.Cb}/rules/_rule_management_filters`,r=`${a.Cb}/rules/_coverage_overview`},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.warn=t.deprecate=t.resetDeprecationsSeen=void 0;var a={};t.resetDeprecationsSeen=function(){a={}};var i="object"==typeof console&&"function"==typeof console.warn?function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return console.warn.apply(console,e)}:function(){};t.deprecate=function(e){a[e]||(a[e]=!0,i("redux-observable | DEPRECATION: "+e))},t.warn=function(e){i("redux-observable | WARNING: "+e)}},function(e,t,n){var a=n(973),i=n(974);e.exports=function(e,t,n){return a(i,e,t,n)}},function(e,t,n){e.exports=n(33)(3824)},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"g",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"c",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.notes.addNoteButtonLabel",{defaultMessage:"Add Note"}),r=a.i18n.translate("xpack.securitySolution.notes.noteLabel",{defaultMessage:"Note"}),o=a.i18n.translate("xpack.securitySolution.notes.notesTitle",{defaultMessage:"Notes"}),s=a.i18n.translate("xpack.securitySolution.notes.search.FilterByUserOrNotePlaceholder",{defaultMessage:"Filter by User or Note"}),l=a.i18n.translate("xpack.securitySolution.notes.cancelButtonLabel",{defaultMessage:"Cancel"}),c=a.i18n.translate("xpack.securitySolution.notes.youAreEditingANoteScreenReaderOnly",{defaultMessage:"You are editing a note. Click Add Note when finished, or press escape to cancel."}),u=e=>a.i18n.translate("xpack.securitySolution.notes.youAreViewingNotesScreenReaderOnly",{values:{row:e},defaultMessage:"You are viewing notes for the event in row {row}. Press the up arrow key when finished to return to the event."}),d=a.i18n.translate("xpack.securitySolution.notes.createdByLabel",{defaultMessage:"Created by"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(108),i=n(353),r=n(304);const o=(e,t=!0)=>{const{addError:n}=Object(a.a)();return Object(i.a)(e,t?{onError:e=>{n(e,{title:r.b})}}:void 0)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a="xs"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(46),i=n(68),r=n(69),o=n(269);const s=["elastic-assistant, load-action-types"],l=({http:e,toasts:t})=>Object(a.useQuery)(s,(async()=>(await Object(i.loadActionTypes)({http:e,featureId:r.GeneralConnectorFeatureId})).sort(((e,t)=>e.name.localeCompare(t.name)))),{retry:!1,keepPreviousData:!0,staleTime:6e4,onError:e=>{"AbortError"!==e.name&&(null==t||t.addError(e.body&&e.body.message?new Error(e.body.message):e,{title:o.m}))}})},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"d",(function(){return l}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.addSystemPromptTooltip",{defaultMessage:"Add system prompt"}),r=a.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.clearSystemPrompt",{defaultMessage:"Clear system prompt"}),o=a.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.selectASystemPromptPlaceholder",{defaultMessage:"Select a system prompt"}),s=a.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.addNewSystemPrompt",{defaultMessage:"Add new system prompt..."}),l=a.i18n.translate("xpack.elasticAssistant.assistant.firstPromptEditor.emptyPrompt",{defaultMessage:"(empty prompt)"})},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t,n){var i=a.useRef(void 0);i.current&&n(t,i.current)||(i.current=t),a.useEffect(e,i.current)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){void 0===t&&(t=0);var n=a.useRef(!1),i=a.useRef(),r=a.useRef(e),o=a.useCallback((function(){return n.current}),[]),s=a.useCallback((function(){n.current=!1,i.current&&clearTimeout(i.current),i.current=setTimeout((function(){n.current=!0,r.current()}),t)}),[t]),l=a.useCallback((function(){n.current=null,i.current&&clearTimeout(i.current)}),[]);return a.useEffect((function(){r.current=e}),[e]),a.useEffect((function(){return s(),l}),[t]),[o,l,s]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n(103),r=n(1075),o=n(115),s=n(285);const l=({alertStatus:e,closePopover:t,eventId:n,scopeId:l,refetch:c})=>{const u=Object(i.useDispatch)(),{hasIndexWrite:d}=Object(s.a)(),p=Object(a.useCallback)((()=>{t(),c&&c()}),[t,c]),m=Object(o.getScopedActions)(l),f=Object(a.useCallback)((({eventIds:e,isLoading:t})=>{m&&u(m.setEventsLoading({id:l,eventIds:e,isLoading:t}))}),[u,l,m]),g=Object(a.useCallback)((({eventIds:e,isDeleted:t})=>{m&&u(m.setEventsDeleted({id:l,eventIds:e,isDeleted:t}))}),[u,l,m]),b=Object(r.a)({eventIds:[n],currentStatus:e,setEventsLoading:f,setEventsDeleted:g,onUpdateSuccess:p,onUpdateFailure:p});return{actionItems:d?b:[]}}},function(e,t){const n=/^[0-9]+$/,a=(e,t)=>{const a=n.test(e),i=n.test(t);return a&&i&&(e=+e,t=+t),e===t?0:a&&!i?-1:i&&!a?1:e<t?-1:1};e.exports={compareIdentifiers:a,rcompareIdentifiers:(e,t)=>a(t,e)}},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"k",(function(){return l})),n.d(t,"l",(function(){return c})),n.d(t,"j",(function(){return u})),n.d(t,"g",(function(){return d})),n.d(t,"h",(function(){return p})),n.d(t,"d",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"c",(function(){return g})),n.d(t,"p",(function(){return b})),n.d(t,"o",(function(){return y})),n.d(t,"n",(function(){return h})),n.d(t,"m",(function(){return v})),n.d(t,"i",(function(){return E}));var a=n(5),i=n(106);const r=a.i18n.translate("xpack.securitySolution.timeline.callOut.unauthorized.message.description",{defaultMessage:"You can use Timeline to investigate events, but you do not have the required permissions to save timelines for future use. If you need to save timelines, contact your Kibana administrator."}),o=a.i18n.translate("xpack.securitySolution.timeline.callOut.immutable.message.description",{defaultMessage:"This prebuilt timeline template cannot be modified. To make changes, please duplicate this template and make modifications to the duplicate template."}),s=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.button",{defaultMessage:"Edit timeline name and description"}),l=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.header",{defaultMessage:"Save Timeline"}),c=a.i18n.translate("xpack.securitySolution.timeline.saveTimelineTemplate.modal.header",{defaultMessage:"Save Timeline Template"}),u=a.i18n.translate("xpack.securitySolution.timeline.nameTimeline.save.title",{defaultMessage:"Save"}),d=a.i18n.translate("xpack.securitySolution.timeline.nameTimeline.modal.header",{defaultMessage:"Name Timeline"}),p=a.i18n.translate("xpack.securitySolution.timeline.nameTimelineTemplate.modal.header",{defaultMessage:"Name Timeline Template"}),m=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.discard.title",{defaultMessage:"Discard Timeline"}),f=a.i18n.translate("xpack.securitySolution.timeline.saveTimelineTemplate.modal.discard.title",{defaultMessage:"Discard Timeline Template"}),g=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.close.title",{defaultMessage:"Close"}),b=e=>a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.warning.title",{values:{timeline:e===i.l.template?"timeline template":"timeline"},defaultMessage:"You have an unsaved {timeline}. Do you wish to save it?"}),y=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.titleTitle",{defaultMessage:"Title"}),h=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.titleAriaLabel",{defaultMessage:"Title"}),v=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.descriptionLabel",{defaultMessage:"Description"}),E=a.i18n.translate("xpack.securitySolution.timeline.saveTimeline.modal.optionalLabel",{defaultMessage:"Optional"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n(103),r=n(114),o=n(105),s=n(122),l=n(182);const c=({inputId:e=r.a.global,inspectIndex:t=0,isDisabled:n,multiple:c=!1,onClick:u,onCloseInspect:d,queryId:p})=>{const m=Object(i.useDispatch)(),f=s.d.globalQueryByIdSelector(),g=s.d.timelineQueryByIdSelector(),{loading:b,inspect:y,selectedInspectIndex:h,isInspected:v}=Object(o.a)((t=>e===r.a.global?f(t,p):g(t,p))),E=Object(a.useCallback)((()=>{u&&u(),m(l.c.setInspectionParameter({id:p,inputId:e,isInspected:!0,selectedInspectIndex:t}))}),[u,m,p,e,t]),x=Object(a.useCallback)((()=>{null!=d&&d(),m(l.c.setInspectionParameter({id:p,inputId:e,isInspected:!1,selectedInspectIndex:t}))}),[d,m,p,e,t]);let j=null,O=null;null!=y&&y.dsl.length>0&&(c?[j,...O]=y.dsl:j=y.dsl[t]);let S=null,k=null;null!=y&&y.response.length>0&&(c?[S,...k]=y.response:S=y.response[t]);const w=Object(a.useMemo)((()=>!b&&h===t&&v),[t,v,b,h]);return{additionalRequests:O,additionalResponses:k,handleClick:E,handleCloseModal:x,isButtonDisabled:Object(a.useMemo)((()=>b||n||null==j||null==S||null==p),[n,b,p,j,S]),isShowingModal:w,loading:b,request:j,response:S}}},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.flows="flows",e.dns="dns",e.anomalies="anomalies",e.tls="tls",e.http="http",e.events="events"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"h",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"f",(function(){return d}));var a=n(129);a.o,a.o,a.o;const i=`${a.o}.group.id`,r=(a.o,`${a.o}.original_time`),o=`${a.o}.threshold_result`,s=`${a.o}.new_terms`,l=`${a.G}.new_terms_fields`,c=`${a.o}.original_event`,u=(a.E,a.E,a.E,a.E,a.E,a.E,a.E,a.E,a.E,a.E,`${a.E}.timeline_id`),d=(a.E,a.E,`${a.E}.indices`)},function(e,t,n){"use strict";n.d(t,"i",(function(){return i})),n.d(t,"g",(function(){return r})),n.d(t,"h",(function(){return o})),n.d(t,"l",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"m",(function(){return c})),n.d(t,"n",(function(){return u})),n.d(t,"a",(function(){return d})),n.d(t,"d",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"k",(function(){return f})),n.d(t,"c",(function(){return g})),n.d(t,"j",(function(){return b})),n.d(t,"f",(function(){return y}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.timeline.body.openSessionViewLabel",{defaultMessage:"Open Session View"}),r=a.i18n.translate("xpack.securitySolution.timeline.body.notes.disableEventTooltip",{defaultMessage:"Notes may not be added here while editing a template timeline"}),o=a.i18n.translate("xpack.securitySolution.timeline.body.notes.addNoteTooltip",{defaultMessage:"Add note"}),s=a.i18n.translate("xpack.securitySolution.timeline.sortFieldsButton",{defaultMessage:"Sort fields"}),l=a.i18n.translate("xpack.securitySolution.timeline.fullScreenButton",{defaultMessage:"Full screen"}),c=a.i18n.translate("xpack.securitySolution.hoverActions.viewDetailsAriaLabel",{defaultMessage:"View details"}),u=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.hoverActions.viewDetailsForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"View details for the alert or event in row {ariaRowindex}, with columns {columnValues}"}),d=a.i18n.translate("xpack.securitySolution.hoverActions.investigateInResolverTooltip",{defaultMessage:"Analyze event"}),p=({ariaRowindex:e,columnValues:t,checked:n})=>a.i18n.translate("xpack.securitySolution.hoverActions.checkboxForRowAriaLabel",{values:{ariaRowindex:e,checked:n,columnValues:t},defaultMessage:"{checked, select, false {unchecked} true {checked}} checkbox for the alert or event in row {ariaRowindex}, with columns {columnValues}"}),m=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.hoverActions.investigateInResolverForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"Analyze the alert or event in row {ariaRowindex}, with columns {columnValues}"}),f=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.hoverActions.sendAlertToTimelineForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"Send the alert in row {ariaRowindex} to timeline, with columns {columnValues}"}),g=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.hoverActions.addNotesForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"Add notes for the event in row {ariaRowindex} to timeline, with columns {columnValues}"}),b=({ariaRowindex:e,columnValues:t,isEventPinned:n})=>a.i18n.translate("xpack.securitySolution.hoverActions.pinEventForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t,isEventPinned:n},defaultMessage:"{isEventPinned, select, false {Pin} true {Unpin}} the event in row {ariaRowindex} to timeline, with columns {columnValues}"}),y=({ariaRowindex:e,columnValues:t})=>a.i18n.translate("xpack.securitySolution.hoverActions.moreActionsForRowAriaLabel",{values:{ariaRowindex:e,columnValues:t},defaultMessage:"Select more actions for the alert or event in row {ariaRowindex}, with columns {columnValues}"})},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"f",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"d",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.viewListDetailActionLabel",{defaultMessage:"View list detail"}),r=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.viewRuleDetailActionLabel",{defaultMessage:"View rule detail"}),o=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToRulesTableSelection.link_column",{defaultMessage:"Link"}),s=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToRulesTableSelection.name_column",{defaultMessage:"Name"}),l=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToRulesTableSelection.action_column",{defaultMessage:"Action"}),c=a.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToRulesTableSelection.tags_column",{defaultMessage:"Tags"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(141),i=n(4);const r=Object(a.d)((async({name:e,description:t,http:n,signal:a})=>await n.post(i.uc,{body:JSON.stringify({name:e,description:t}),headers:{"Content-Type":"application/json"},method:"POST",signal:a}))),o=()=>Object(a.a)(r)},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"e",(function(){return l}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.exceptions.list.exception.item.card.edit.label",{defaultMessage:"Edit rule exception"}),r=a.i18n.translate("xpack.securitySolution.exceptions.list.exception.endpoint.item.card.edit.label",{defaultMessage:"Edit endpoint exception"}),o=a.i18n.translate("xpack.securitySolution.exceptions.list.exception.item.card.delete.label",{defaultMessage:"Delete rule exception"}),s=a.i18n.translate("xpack.securitySolution.exceptions.list.exception.endpoint.item.card.delete.label",{defaultMessage:"Delete endpoint exception"}),l=a.i18n.translate("xpack.securitySolution.exceptions.list.utility.title",{defaultMessage:"rule exceptions"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"a",(function(){return S}));var a=n(220),i=n(42),r=n(40),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(309),d=n(124),p=n(169),m=n(123),f=n(596),g=n(821),b=n(155),y=n(132),h=n(4),v=n(952);const E=c()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-4qbs0b-0"})(["flex:0 1 auto;",""],(({theme:e})=>`margin-top: ${e.eui.euiSizeS};`)),x=c()(r.EuiFlexGroup).withConfig({displayName:"StyledFlexGroup",componentId:"sc-4qbs0b-1"})(["height:100%;"]),j=c()(r.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-4qbs0b-2"})(["&.euiFlexItem{flex:1 0 0;overflow:hidden;}"]),O=s.a.memo((({eventId:e,eventIndex:t,isAlert:n,loading:o,handleOnEventClosed:l,promptContextId:c,ruleName:f,timestamp:x})=>{const{hasAssistantPrivilege:j}=Object(u.a)(),O=Object(d.a)("alertDetailsPageEnabled"),{onClick:S}=Object(m.o)()({deepLinkId:h.wc.alerts,path:e&&n?Object(p.a)(e):""}),k=Object(v.a)({_id:e,_index:t,timestamp:x});return s.a.createElement(E,{gutterSize:"none",justifyContent:"spaceBetween",wrap:!0},s.a.createElement(r.EuiFlexItem,{grow:!1},!o&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiTitle,{size:"s"},s.a.createElement("h4",null,n&&!Object(i.isEmpty)(f)?f:g.c)),x&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"s"}),s.a.createElement(y.c,{value:new Date(x)})),n&&e&&O&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"l"}),s.a.createElement(m.k,{"data-test-subj":"open-alert-details-page",deepLinkId:h.wc.alerts,onClick:S},g.e),s.a.createElement(r.EuiSpacer,{size:"m"})))),s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiFlexGroup,{direction:"column",alignItems:"flexEnd"},l&&s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiButtonIcon,{iconType:"cross","aria-label":g.b,onClick:l})),s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiFlexGroup,{alignItems:"center",direction:"row",gutterSize:"none"},j&&null!=c&&s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(a.g,{conversationId:n?b.e:b.i,promptContextId:c})),n&&k&&s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiCopy,{textToCopy:k},(e=>s.a.createElement(r.EuiButtonEmpty,{onClick:e,iconType:"share","data-test-subj":"copy-alert-flyout-link"},g.f)))))))))}));O.displayName="ExpandableEventTitle";const S=s.a.memo((({browserFields:e,event:t,scopeId:n,timelineTabType:a,isAlert:i,isDraggable:o,loading:l,detailsData:c,detailsEcsData:u,rawEventData:d,handleOnEventClosed:p,isReadOnly:m})=>t.eventId?l?s.a.createElement(r.EuiSkeletonText,{lines:10}):s.a.createElement(x,{direction:"column",gutterSize:"none"},s.a.createElement(j,{grow:!0},s.a.createElement(f.a,{browserFields:e,data:null!=c?c:[],detailsEcsData:u,id:t.eventId,isAlert:i,isDraggable:o,rawEventData:d,scopeId:n,timelineTabType:a,handleOnEventClosed:p,isReadOnly:m}))):s.a.createElement(r.EuiTextColor,{color:"subdued"},g.d)));S.displayName="ExpandableEvent"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a="_id"},function(e,t,n){"use strict";n.d(t,"h",(function(){return d})),n.d(t,"j",(function(){return p})),n.d(t,"i",(function(){return m})),n.d(t,"k",(function(){return f})),n.d(t,"g",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"d",(function(){return y})),n.d(t,"c",(function(){return h})),n.d(t,"e",(function(){return v})),n.d(t,"a",(function(){return E})),n.d(t,"f",(function(){return S}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(121),u=n(1044);const d="source.geo.continent_name",p="source.geo.country_name",m="source.geo.country_iso_code",f="source.geo.region_name",g="source.geo.city_name",b="destination.geo.continent_name",y="destination.geo.country_name",h="destination.geo.country_iso_code",v="destination.geo.region_name",E="destination.geo.city_name",x=[{prop:"GeoContinentName",fieldName:"geo.continent_name"},{prop:"GeoCountryName",fieldName:"geo.country_name"},{prop:"GeoCountryIsoCode",fieldName:"geo.country_iso_code"},{prop:"GeoRegionName",fieldName:"geo.region_name"},{prop:"GeoCityName",fieldName:"geo.city_name"}],j=l()(a.EuiFlexItem).withConfig({displayName:"GeoFlexItem",componentId:"sc-19jrcd0-0"})(["margin-right:5px;"]);j.displayName="GeoFlexItem";const O=o.a.memo((({contextId:e,eventId:t,fieldName:n,isDraggable:r,values:s})=>null!=s?o.a.createElement(o.a.Fragment,null,Object(i.uniq)(s).map((i=>o.a.createElement(j,{grow:!1,key:`${e}-${t}-${n}-${i}`},o.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},n===m||n===h?o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(u.a,{countryCode:i})):null,o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(c.b,{"data-test-subj":n,field:n,id:`geo-field-values-default-draggable-${e}-${t}-${n}-${i}`,isDraggable:r,tooltipContent:n,value:i}))))))):null));O.displayName="GeoFieldValues";const S=o.a.memo((e=>{const{contextId:t,eventId:n,isDraggable:r,type:s}=e,l=(e=>x.map((({prop:t,fieldName:n})=>({prop:`${e}${t}`,fieldName:`${e}.${n}`}))))(s);return o.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},Object(i.uniq)(l).map((a=>o.a.createElement(O,{contextId:t,eventId:n,fieldName:a.fieldName,isDraggable:r,key:a.fieldName,values:Object(i.get)(a.prop,e)}))))}));S.displayName="GeoFields"},function(e,t,n){"use strict";n.d(t,"c",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"a",(function(){return b}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(121),u=n(485),d=n(132),p=n(1435);const m="event.start",f="event.end",g=l()(a.EuiIcon).withConfig({displayName:"TimeIcon",componentId:"sc-181wv62-0"})(["margin-right:3px;position:relative;top:-1px;"]);g.displayName="TimeIcon";const b=o.a.memo((({contextId:e,eventDuration:t,eventId:n,eventEnd:r,eventStart:s,isDraggable:l})=>o.a.createElement(a.EuiFlexGroup,{alignItems:"flexStart","data-test-subj":"duration-and-start-group",direction:"column",justifyContent:"center",gutterSize:"none"},null!=t?Object(i.uniq)(t).map((t=>o.a.createElement(a.EuiFlexItem,{grow:!1,key:t},o.a.createElement(c.b,{field:u.b,id:`duration-event-start-end-default-draggable-${e}-${n}-${u.b}-${t}`,isDraggable:l,name:name,tooltipContent:null,value:t},o.a.createElement(a.EuiText,{size:"xs"},o.a.createElement(g,{size:"m",type:"clock"}),o.a.createElement(p.a,{maybeDurationNanoseconds:t,tooltipTitle:u.b})))))):null,null!=s?Object(i.uniq)(s).map((t=>o.a.createElement(a.EuiFlexItem,{grow:!1,key:t},o.a.createElement(c.b,{field:m,id:`duration-event-start-end-default-draggable-${e}-${n}-${m}-${t}`,isDraggable:l,tooltipContent:null,value:t},o.a.createElement(a.EuiText,{size:"xs"},o.a.createElement(g,{size:"m",type:"clock"}),o.a.createElement(d.a,{fieldName:m,value:t})))))):null,null!=r?Object(i.uniq)(r).map((t=>o.a.createElement(a.EuiFlexItem,{grow:!1,key:t},o.a.createElement(c.b,{field:f,id:`duration-event-start-end-default-draggable-${e}-${n}-${f}-${t}`,isDraggable:l,tooltipContent:null,value:t},o.a.createElement(a.EuiText,{size:"xs"},o.a.createElement(g,{size:"m",type:"clock"}),o.a.createElement(d.a,{fieldName:f,value:t})))))):null)));b.displayName="DurationEventStartEnd"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(121),o=n(127);const s=({args:e,contextId:t,eventId:n,processTitle:a,isDraggable:s})=>Object(o.e)(e)&&Object(o.e)(a)?null:i.a.createElement(i.a.Fragment,null,null!=e&&e.map(((e,a)=>i.a.createElement(o.c,{key:`${t}-args-${a}-${e}`,grow:!1,component:"span"},i.a.createElement(r.c,{contextId:`${t}-args-${a}-${e}`,eventId:n,field:"process.args",isDraggable:s,value:e,fieldType:"keyword",isAggregatable:!0})))),!Object(o.e)(a)&&i.a.createElement(o.c,{grow:!1,component:"span"},i.a.createElement(r.c,{contextId:t,eventId:n,field:"process.title",isDraggable:s,value:a,fieldType:"keyword",isAggregatable:!0})));s.displayName="ArgsComponent";const l=i.a.memo(s);l.displayName="Args"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(1095);const r={isolateAction:"isolateHost",isHostIsolationPanelOpen:!1,isIsolateActionSuccessBannerVisible:!1};function o(e,t){switch(t.type){case"setIsolateAction":return{...e,isolateAction:t.isolateAction};case"setIsHostIsolationPanel":return{...e,isHostIsolationPanelOpen:t.isHostIsolationPanelOpen};case"setIsIsolateActionSuccessBannerVisible":return{...e,isIsolateActionSuccessBannerVisible:t.isIsolateActionSuccessBannerVisible};default:throw new Error}}const s=()=>{const[{isolateAction:e,isHostIsolationPanelOpen:t,isIsolateActionSuccessBannerVisible:n},s]=Object(a.useReducer)(o,r),l=Object(a.useCallback)((()=>{s({type:"setIsHostIsolationPanel",isHostIsolationPanelOpen:!1}),s({type:"setIsIsolateActionSuccessBannerVisible",isIsolateActionSuccessBannerVisible:!1})}),[]),c=Object(a.useCallback)((e=>{"isolateHost"!==e&&"unisolateHost"!==e||(s({type:"setIsHostIsolationPanel",isHostIsolationPanelOpen:!0}),s({type:"setIsolateAction",isolateAction:e}))}),[]),u=Object(i.b)(),d=Object(a.useCallback)((()=>{s({type:"setIsIsolateActionSuccessBannerVisible",isIsolateActionSuccessBannerVisible:!0}),u&&u.refreshCase()}),[u]);return Object(a.useMemo)((()=>({isolateAction:e,isHostIsolationPanelOpen:t,isIsolateActionSuccessBannerVisible:n,handleIsolationActionSuccess:d,showAlertDetails:l,showHostIsolationPanel:c})),[t,n,e,d,l,c])}},,,function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(278),i=n(279);const r=window.localStorage,o={groupById:a.b},s=(e,t)=>{let n={};r&&(n=Object(i.c)(r));const o=((e,t,n)=>{switch(t.type){case a.a.updateActiveGroups:{const{id:i,activeGroups:r}=t.payload;return{...e,groupById:{...n,[i]:{...a.c,...n[i],activeGroups:r}}}}case a.a.updateGroupOptions:{const{id:i,newOptionList:r}=t.payload;return{...e,groupById:{...n,[i]:{...a.c,...n[i],options:r}}}}}throw Error("Unknown grouping action")})(e,t,{...e.groupById,...n});if(r){const e=t.payload.id;Object(i.b)(r,e,o.groupById[e])}return o}},function(e,t,n){const a=n(157);e.exports=(e,t,n)=>{const i=new a(e,n),r=new a(t,n);return i.compare(r)||i.compareBuild(r)}},function(e,t,n){const a=n(192);e.exports=(e,t,n)=>a(e,t,n)<0},function(e,t,n){const a=n(157),i=n(463),{ANY:r}=i,o=n(205),s=n(464),l=n(462),c=n(578),u=n(396),d=n(489);e.exports=(e,t,n,p)=>{let m,f,g,b,y;switch(e=new a(e,p),t=new o(t,p),n){case">":m=l,f=u,g=c,b=">",y=">=";break;case"<":m=c,f=d,g=l,b="<",y="<=";break;default:throw new TypeError('Must provide a hilo val of "<" or ">"')}if(s(e,t,p))return!1;for(let n=0;n<t.set.length;++n){const a=t.set[n];let o=null,s=null;if(a.forEach((e=>{e.semver===r&&(e=new i(">=0.0.0")),o=o||e,s=s||e,m(e.semver,o.semver,p)?o=e:g(e.semver,s.semver,p)&&(s=e)})),o.operator===b||o.operator===y)return!1;if((!s.operator||s.operator===b)&&f(e,s.semver))return!1;if(s.operator===y&&g(e,s.semver))return!1}return!0}},function(e,t,n){"use strict";e.exports=function(e){return e.replace(/[\t\n\r ]+/g," ").replace(/^ | $/g,"").toLowerCase().toUpperCase()}},function(e,t,n){"use strict";e.exports=function(e){return null==e?[]:"length"in e?e:[e]}},function(e,t,n){"use strict";var a=n(251);e.exports=function(e,t){return e.length?(a(e,e.length,0,t),e):t}},function(e,t,n){"use strict";e.exports=function(e,t,n){for(var a,i=[],r=-1;++r<e.length;)(a=e[r].resolveAll)&&i.indexOf(a)<0&&(t=a(t,n),i.push(a));return t}},function(e,t,n){"use strict";var a=n(253)(/[A-Za-z]/);e.exports=a},function(e,t,n){"use strict";var a=n(252),i=n(582),r=n(251),o=n(580),s=n(583),l=n(315),c=n(847),u=n(848),d=n(850),p=n(849),m={name:"labelEnd",tokenize:function(e,t,n){for(var a,i,r=this,s=r.events.length;s--;)if(("labelImage"===r.events[s][1].type||"labelLink"===r.events[s][1].type)&&!r.events[s][1]._balanced){a=r.events[s][1];break}return function(t){return a?a._inactive?c(t):(i=r.parser.defined.indexOf(o(r.sliceSerialize({start:a.end,end:r.now()})))>-1,e.enter("labelEnd"),e.enter("labelMarker"),e.consume(t),e.exit("labelMarker"),e.exit("labelEnd"),l):n(t)};function l(n){return 40===n?e.attempt(f,t,i?t:c)(n):91===n?e.attempt(g,t,i?e.attempt(b,t,c):c)(n):i?t(n):c(n)}function c(e){return a._balanced=!0,n(e)}},resolveTo:function(e,t){for(var n,a,o,c,u,d,p,m=e.length,f=0;m--;)if(c=e[m][1],u){if("link"===c.type||"labelLink"===c.type&&c._inactive)break;"enter"===e[m][0]&&"labelLink"===c.type&&(c._inactive=!0)}else if(d){if("enter"===e[m][0]&&("labelImage"===c.type||"labelLink"===c.type)&&!c._balanced&&(u=m,"labelLink"!==c.type)){f=2;break}}else"labelEnd"===c.type&&(d=m);return n={type:"labelLink"===e[u][1].type?"link":"image",start:l(e[u][1].start),end:l(e[e.length-1][1].end)},a={type:"label",start:l(e[u][1].start),end:l(e[d][1].end)},o={type:"labelText",start:l(e[u+f+2][1].end),end:l(e[d-2][1].start)},p=i(p=[["enter",n,t],["enter",a,t]],e.slice(u+1,u+f+3)),p=i(p,[["enter",o,t]]),p=i(p,s(t.parser.constructs.insideSpan.null,e.slice(u+f+4,d-3),t)),p=i(p,[["exit",o,t],e[d-2],e[d-1],["exit",a,t]]),p=i(p,e.slice(d+1)),p=i(p,[["exit",n,t]]),r(e,u,e.length,p),e},resolveAll:function(e){for(var t,n=-1;++n<e.length;)(t=e[n][1])._used||"labelImage"!==t.type&&"labelLink"!==t.type&&"labelEnd"!==t.type||(e.splice(n+1,"labelImage"===t.type?4:2),t.type="data",n++);return e}},f={tokenize:function(e,t,n){return function(t){return e.enter("resource"),e.enter("resourceMarker"),e.consume(t),e.exit("resourceMarker"),p(e,i)};function i(t){return 41===t?s(t):c(e,r,n,"resourceDestination","resourceDestinationLiteral","resourceDestinationLiteralMarker","resourceDestinationRaw","resourceDestinationString",3)(t)}function r(t){return a(t)?p(e,o)(t):s(t)}function o(t){return 34===t||39===t||40===t?d(e,p(e,s),n,"resourceTitle","resourceTitleMarker","resourceTitleString")(t):s(t)}function s(a){return 41===a?(e.enter("resourceMarker"),e.consume(a),e.exit("resourceMarker"),e.exit("resource"),t):n(a)}}},g={tokenize:function(e,t,n){var a=this;return function(t){return u.call(a,e,i,n,"reference","referenceMarker","referenceString")(t)};function i(e){return a.parser.defined.indexOf(o(a.sliceSerialize(a.events[a.events.length-1][1]).slice(1,-1)))<0?n(e):t(e)}}},b={tokenize:function(e,t,n){return function(t){return e.enter("reference"),e.enter("referenceMarker"),e.consume(t),e.exit("referenceMarker"),a};function a(a){return 93===a?(e.enter("referenceMarker"),e.consume(a),e.exit("referenceMarker"),e.exit("reference"),t):n(a)}}};e.exports=m},function(e,t,n){"use strict";n.d(t,"k",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"j",(function(){return s})),n.d(t,"h",(function(){return l})),n.d(t,"i",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"c",(function(){return p})),n.d(t,"m",(function(){return m})),n.d(t,"l",(function(){return f})),n.d(t,"d",(function(){return g})),n.d(t,"e",(function(){return b}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.detectionsPageTitle",{defaultMessage:"Alerts"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.alertTitle",{defaultMessage:"Alerts"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.buttonManageRules",{defaultMessage:"Manage rules"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.noIndexTitle",{defaultMessage:"Let’s set up your detection engine"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.needsSignalsAndListsIndexesMessage",{defaultMessage:"You need permissions for the signals and lists indices."}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.needsSignalsIndexMessage",{defaultMessage:"You need permissions for the signals index."}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.needsListsIndexesMessage",{defaultMessage:"You need permissions for the lists indices."}),d=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.needsIndexPermissionsMessage",{values:{additionalContext:e},defaultMessage:"To use the detection engine, a user with the required cluster and index privileges must first access this page. {additionalContext} For more help, contact your Elastic Stack administrator."}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.goToDocumentationButton",{defaultMessage:"View documentation"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.userUnauthenticatedTitle",{defaultMessage:"Detection engine permissions required"}),f=a.i18n.translate("xpack.securitySolution.detectionEngine.userUnauthenticatedMsgBody",{defaultMessage:"You do not have the required permissions for viewing the detection engine. For more help, contact your administrator."}),g=a.i18n.translate("xpack.securitySolution.detectionEngine.mlRulesDisabledMessageTitle",{defaultMessage:"ML rules require Platinum License and ML Admin Permissions"}),b=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.mlUnavailableTitle",{values:{totalRules:e},defaultMessage:"{totalRules} {totalRules, plural, =1 {rule requires} other {rules require}} Machine Learning to enable."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(0),i=n.n(a);class InvariantError extends Error{constructor(...e){super(...e),i()(this,"name","InvariantError")}}function r(e,t){if(!e)throw new InvariantError(t)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o}));var a=n(4);const i=20,r=[5,10,20,50,a.nc],o="securitySolution.rulesTable"},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"i",(function(){return c})),n.d(t,"j",(function(){return u})),n.d(t,"h",(function(){return d})),n.d(t,"f",(function(){return p})),n.d(t,"k",(function(){return m})),n.d(t,"c",(function(){return f}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.advancedSettingsButton",{defaultMessage:"Advanced settings"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.addReferenceDescription",{defaultMessage:"Add reference URL"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.addFalsePositiveDescription",{defaultMessage:"Add false positive example"}),s=(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.addCustomHighlightedFieldDescription",{defaultMessage:"Add a custom highlighted field"}),a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.endpointExceptionListLabel",{defaultMessage:"Elastic Endpoint exceptions"})),l=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.buildingBlockLabel",{defaultMessage:"Building block"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.severityOptionLowDescription",{defaultMessage:"Low"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.severityOptionMediumDescription",{defaultMessage:"Medium"}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.severityOptionHighDescription",{defaultMessage:"High"}),p=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRuleForm.severityOptionCriticalDescription",{defaultMessage:"Critical"}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.referencesUrlInvalidError",{defaultMessage:"URL is invalid format"}),f=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutrule.noteHelpText",{defaultMessage:"Add rule investigation guide..."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(8),i=n(5),r=n(40),o=n(2),s=n.n(o),l=n(49),c=n(370),u=n(197),d=n(4),p=n(204),m=n(125),f=n(213),g=n(750),b=n(471);const y={index:{defaultValue:[],fieldsToValidateOnChange:["index","queryBar"],type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fiedIndexPatternsLabel",{defaultMessage:"Index patterns"}),helpText:s.a.createElement(r.EuiText,{size:"xs"},b.i),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(!Object(p.d)(t.ruleType)&&t.dataSourceType===f.a.IndexPatterns)return m.h.emptyField(i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.outputIndiceNameFieldRequiredError",{defaultMessage:"A minimum of one index pattern is required."}))(...e)}}]},dataViewId:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.dataViewSelector",{defaultMessage:"Data view"}),fieldsToValidateOnChange:["dataViewId"],validations:[{validator:(...e)=>{const[{path:t,formData:n}]=e,a=null!=n.dataViewId&&""!==n.dataViewId;if(!Object(p.d)(n.ruleType)&&!a&&n.dataSourceType===f.a.DataView)return{path:t,message:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.dataViewSelectorFieldRequired",{defaultMessage:"Please select an available Data View or Index Pattern."})}}}]},dataViewTitle:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.dataViewTitleSelector",{defaultMessage:"Data view index pattern"}),validations:[]},eqlOptions:{},queryBar:{validations:[{validator:(...e)=>{const[{value:t,path:n,formData:i}]=e,{query:r,filters:o,saved_id:s}=t;if(!Object(p.d)(i.ruleType)&&Object(a.isEmpty)(r.query)&&Object(a.isEmpty)(o)&&!s)return{code:"ERR_FIELD_MISSING",path:n,message:Object(u.b)(i.ruleType)?b.f:b.d}}},{validator:(...e)=>{const[{value:t,path:n,formData:i}]=e,{query:r}=t;if(!Object(p.d)(i.ruleType)&&!Object(a.isEmpty)(r.query)&&"kuery"===r.language)try{Object(l.fromKueryExpression)(r.query)}catch(e){return{code:"ERR_FIELD_FORMAT",path:n,message:b.j}}}},{validator:Object(g.a)(g.b,300)}]},ruleType:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldRuleTypeLabel",{defaultMessage:"Rule type"}),validations:[]},anomalyThreshold:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldAnomalyThresholdLabel",{defaultMessage:"Anomaly score threshold"}),validations:[]},machineLearningJobId:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldMachineLearningJobIdLabel",{defaultMessage:"Machine Learning job"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(p.d)(t.ruleType))return m.h.emptyField(i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.machineLearningJobIdRequired",{defaultMessage:"A Machine Learning job is required."}))(...e)}}]},relatedIntegrations:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRelatedIntegrationsLabel",{defaultMessage:"Related integrations"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRelatedIntegrationsHelpText",{defaultMessage:"Integration related to this Rule."})},requiredFields:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRequiredFieldsLabel",{defaultMessage:"Required fields"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRequiredFieldsHelpText",{defaultMessage:"Fields required for this Rule to function."})},timeline:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTimelineTemplateLabel",{defaultMessage:"Timeline template"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTimelineTemplateHelpText",{defaultMessage:"Select which timeline to use when investigating generated alerts."})},threshold:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThresholdLabel",{defaultMessage:"Threshold"}),field:{type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThresholdFieldLabel",{defaultMessage:"Group by"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThresholdFieldHelpText",{defaultMessage:"Select fields to group by. Fields are joined together with 'AND'"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.g)(t.ruleType))return m.h.maxLengthField({length:3,message:i.i18n.translate("xpack.securitySolution.detectionEngine.validations.thresholdFieldFieldData.arrayLengthGreaterThanMaxErrorMessage",{defaultMessage:"Number of fields must be 3 or less."})})(...e)}}]},value:{type:m.a.NUMBER,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThresholdValueLabel",{defaultMessage:"Threshold"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.g)(t.ruleType))return m.h.numberGreaterThanField({than:1,message:i.i18n.translate("xpack.securitySolution.detectionEngine.validations.thresholdValueFieldData.numberGreaterThanOrEqualOneErrorMessage",{defaultMessage:"Value must be greater than or equal to one."}),allowEquality:!0})(...e)}}]},cardinality:{field:{defaultValue:[],fieldsToValidateOnChange:["threshold.cardinality.field","threshold.cardinality.value"],type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThresholdCardinalityFieldLabel",{defaultMessage:"Count"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.g)(t.ruleType))return Object(a.isEmpty)(t["threshold.cardinality.field"])&&!Object(a.isEmpty)(t["threshold.cardinality.value"])?m.h.emptyField(i.i18n.translate("xpack.securitySolution.detectionEngine.validations.thresholdCardinalityFieldFieldData.thresholdCardinalityFieldNotSuppliedMessage",{defaultMessage:"A Cardinality Field is required."}))(...e):void 0}}],helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThresholdFieldCardinalityFieldHelpText",{defaultMessage:"Select a field to check cardinality"})},value:{fieldsToValidateOnChange:["threshold.cardinality.field","threshold.cardinality.value"],type:m.a.NUMBER,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThresholdCardinalityValueFieldLabel",{defaultMessage:"Unique values"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.g)(t.ruleType))return Object(a.isEmpty)(t["threshold.cardinality.field"])?void 0:m.h.numberGreaterThanField({than:1,message:i.i18n.translate("xpack.securitySolution.detectionEngine.validations.thresholdCardinalityValueFieldData.numberGreaterThanOrEqualOneErrorMessage",{defaultMessage:"Value must be greater than or equal to one."}),allowEquality:!0})(...e)}}]}}},threatIndex:{type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThreatIndexPatternsLabel",{defaultMessage:"Indicator index patterns"}),helpText:s.a.createElement(r.EuiText,{size:"xs"},b.q),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.f)(t.ruleType))return m.h.emptyField(i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.threatMatchoutputIndiceNameFieldRequiredError",{defaultMessage:"A minimum of one index pattern is required."}))(...e)}},{validator:(...e)=>{const[{formData:t,value:n}]=e;if(Object(u.f)(t.ruleType))return c.b.forbiddenField(n,"*")}}]},threatMapping:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThreatMappingLabel",{defaultMessage:"Indicator mapping"}),validations:[{validator:(...e)=>{const[{path:t,formData:n}]=e;if(Object(u.f)(n.ruleType))return Object(c.j)(n.threatMapping)?{code:"ERR_FIELD_MISSING",path:t,message:b.r}:Object(c.a)(n.threatMapping)?{code:"ERR_FIELD_MISSING",path:t,message:b.p}:void 0}}]},threatQueryBar:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldThreatQueryBarLabel",{defaultMessage:"Indicator index query"}),validations:[{validator:(...e)=>{const[{value:t,path:n,formData:i}]=e;if(!Object(u.f)(i.ruleType))return;const{query:r,filters:o}=t;return Object(a.isEmpty)(r.query)&&Object(a.isEmpty)(o)?{code:"ERR_FIELD_MISSING",path:n,message:b.d}:void 0}},{validator:(...e)=>{const[{value:t,path:n,formData:i}]=e;if(!Object(u.f)(i.ruleType))return;const{query:r}=t;if(!Object(a.isEmpty)(r.query)&&"kuery"===r.language)try{Object(l.fromKueryExpression)(r.query)}catch(e){return{code:"ERR_FIELD_FORMAT",path:n,message:b.j}}}}]},groupByFields:{type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.groupByFieldsLabel",{defaultMessage:"Suppress alerts by"}),labelAppend:s.a.createElement(r.EuiText,{color:"subdued",size:"xs"},i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.groupByFieldsLabelAppend",{defaultMessage:"Optional (Technical Preview)"})),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldGroupByFieldHelpText",{defaultMessage:"Select field(s) to use for suppressing extra alerts"}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.e)(t.ruleType))return m.h.maxLengthField({length:3,message:i.i18n.translate("xpack.securitySolution.detectionEngine.validations.stepDefineRule.groupByFieldsMax",{defaultMessage:"Number of grouping fields must be at most 3"})})(...e)}}]},groupByRadioSelection:{},groupByDuration:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.groupByDurationValueLabel",{defaultMessage:"Suppress alerts for"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.fieldGroupByDurationValueHelpText",{defaultMessage:"Suppress alerts for"}),value:{},unit:{}},suppressionMissingFields:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.suppressionMissingFieldsLabel",{defaultMessage:"If a suppression field is missing"})},newTermsFields:{type:m.a.COMBO_BOX,label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.newTermsFieldsLabel",{defaultMessage:"Fields"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldNewTermsFieldHelpText",{defaultMessage:"Select a field to check for new terms."}),validations:[{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.d)(t.ruleType))return m.h.emptyField(i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.newTermsFieldsMin",{defaultMessage:"A minimum of one field is required."}))(...e)}},{validator:(...e)=>{const[{formData:t}]=e;if(Object(u.d)(t.ruleType))return m.h.maxLengthField({length:d.Kb,message:i.i18n.translate("xpack.securitySolution.detectionEngine.validations.stepDefineRule.newTermsFieldsMax",{defaultMessage:"Number of fields must be 3 or less."})})(...e)}}]},historyWindowSize:{label:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.historyWindowSizeLabel",{defaultMessage:"History Window Size"}),helpText:i.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRule.historyWindowSizeHelpText",{defaultMessage:"New terms rules only alert if terms don't appear in historical data."})},shouldLoadQueryDynamically:{type:m.a.CHECKBOX,defaultValue:!1}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(108),r=n(858);function o(){const e=Object(i.a)();return Object(a.useCallback)((({actionType:t,error:n})=>{e.addError(function(e){return e.stack=JSON.stringify(e.body,null,2),e}(n),{title:Object(r.d)(t),toastMessage:Object(r.b)(t,n)})}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n(120),r=n(244),o=n(40),s=n(123),l=n(4),c=n(593),u=n(198),d=n(900),p=n(743);const m=({exceptionsList:e,handleExport:t,handleDelete:n,handleDuplicate:m,handleManageRules:f})=>{const[g,b]=Object(a.useState)(r.i.LOADING),[y,h]=Object(a.useState)(),[v,E]=Object(a.useState)(!1),[x,j]=Object(a.useState)(!1),[O,S]=Object(a.useState)(null),{name:k,list_id:w,rules:I,type:T,created_by:C,created_at:M,description:A}=e,_=Object(a.useCallback)((()=>{b("")}),[b]),F=e=>{h(e),j(!0)},{lastUpdated:D,exceptionViewerStatus:N,exceptions:P,pagination:R,ruleReferences:L,fetchItems:q,onDeleteException:B,onPaginationChange:z}=Object(c.a)({list:e,deleteToastTitle:u.u,deleteToastBody:e=>u.t(e),errorToastBody:u.p,errorToastTitle:u.q,onEditListExceptionItem:F,onFinishFetchingExceptions:_});Object(a.useEffect)((()=>{q(null,r.i.LOADING)}),[q]);const[$,V]=Object(a.useState)(!1),U=Object(o.useGeneratedHtmlId)({prefix:"openAccordion"}),G=Object(d.a)(e),H=Object(a.useMemo)((()=>g===r.i.EMPTY?u.B:""),[g]),W=Object(a.useMemo)((()=>g===r.i.EMPTY?u.y(e.name):""),[e.name,g]),Q=Object(a.useMemo)((()=>e.type===i.b.ENDPOINT?u.A:u.z),[e.type]),Y=Object(a.useMemo)((()=>[{key:"Export",icon:"exportAction",label:u.O,onClick:n=>{T===i.b.ENDPOINT?t({id:e.id,listId:e.list_id,name:e.name,namespaceType:e.namespace_type,includeExpiredExceptions:!0})():S(p.a.EXPORT)}},{key:"Duplicate",icon:"copy",label:u.k,disabled:G,onClick:e=>{S(p.a.DUPLICATE)}},{key:"Delete",icon:"trash",disabled:G,label:u.j,onClick:t=>{n({id:e.id,listId:e.list_id,namespaceType:e.namespace_type})()}},{key:"LinkRules",icon:"gear",disabled:G,label:u.W,onClick:e=>{f()}}]),[G,T,t,e.id,e.list_id,e.name,e.namespace_type,n,f]),K=Object(a.useCallback)((()=>{E(!0)}),[E]),X=Object(a.useCallback)((e=>{E(!1),j(!1),e&&q()}),[q,E,j]),J=Object(a.useCallback)((()=>{S(p.a.EXPORT)}),[S]),Z=Object(a.useCallback)((n=>{O===p.a.EXPORT&&t({id:e.id,listId:e.list_id,name:e.name,namespaceType:e.namespace_type,includeExpiredExceptions:n})(),O===p.a.DUPLICATE&&m({listId:e.list_id,name:e.name,namespaceType:e.namespace_type,includeExpiredExceptions:n})()}),[O,t,e.id,e.list_id,e.name,e.namespace_type,m]),{onClick:ee}=Object(s.o)()({deepLinkId:l.wc.exceptions,path:`/details/${e.list_id}`});return{listId:w,listName:k,listDescription:A,createdAt:new Date(M).toDateString(),createdBy:C,listRulesCount:I.length.toString(),exceptionItemsCount:R.totalItemCount.toString(),listType:T,menuActionItems:Y,showAddExceptionFlyout:v,toggleAccordion:$,openAccordionId:U,viewerStatus:g,exceptionToEdit:y,showEditExceptionFlyout:x,lastUpdated:D,exceptions:P,ruleReferences:L,pagination:R,exceptionViewerStatus:N,onEditExceptionItem:F,onDeleteException:B,onPaginationChange:z,setToggleAccordion:V,onAddExceptionClick:K,handleConfirmExceptionFlyout:X,handleCancelExceptionItemFlyout:()=>{E(!1),j(!1)},goToExceptionDetail:ee,emptyViewerTitle:H,emptyViewerBody:W,emptyViewerButtonText:Q,showIncludeExpiredExceptionsModal:O,onExportListClick:J,handleCancelExpiredExceptionsModal:()=>{S(null)},handleConfirmExpiredExceptionsModal:Z}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(244),r=n(102),o=n(605);const s=({list:e,deleteToastTitle:t,deleteToastBody:n,errorToastTitle:s,errorToastBody:l,onEditListExceptionItem:c,onFinishFetchingExceptions:u})=>{const{services:d}=Object(r.j)(),{http:p}=d,m=Object(r.n)(),[f,g]=Object(a.useState)([]),[b,y]=Object(a.useState)({}),[h,v]=Object(a.useState)({pageIndex:0,pageSize:0,totalItemCount:0}),[E,x]=Object(a.useState)(null),[j,O]=Object(a.useState)(""),S=Object(a.useCallback)(((e,t,n)=>{null==m||m.addError(e,{title:t||s,toastMessage:n||l}),O(i.i.ERROR)}),[l,s,m]),k=Object(a.useCallback)((async()=>{try{const t=await Object(o.c)([e]);y(t)}catch(e){S(e)}}),[S,e,y]),w=Object(a.useCallback)(((e,t,n)=>{v(e),x(Date.now()),setTimeout((()=>{if(n===i.i.EMPTY_SEARCH)return O(t?"":n);O(t?"":i.i.EMPTY)}),200)}),[]),I=Object(a.useCallback)((async(t,n)=>{try{O(i.i.LOADING);const{data:a,pagination:r}=await Object(o.b)({http:p,...Object(o.g)(null,e,t)});g(a),k(),w(r,a.length,n),"function"==typeof u&&u()}catch(e){S(e)}}),[p,e,k,w,u,S]),T=Object(a.useCallback)((async({id:e,name:a,namespaceType:r})=>{try{O(i.i.LOADING),await Object(o.a)({id:e,http:p,namespaceType:r}),null==m||m.addSuccess({title:t,text:"function"==typeof n?n(a):""}),I()}catch(e){S(e)}}),[p,m,t,n,I,S]),C=Object(a.useCallback)((async e=>{I(e)}),[I]);return{exceptions:f,lastUpdated:E,pagination:h,exceptionViewerStatus:j,ruleReferences:b,fetchItems:I,onDeleteException:T,onEditExceptionItem:e=>{"function"==typeof c&&c(e)},onPaginationChange:C}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(163),i=n(141);const r=Object(i.d)((async({file:e,http:t,signal:n,overwrite:i,overwriteExceptions:r,asNewList:o})=>{const s=new FormData;return s.append("file",e),await t.post(`${a.t}/_import`,{body:s,query:{overwrite:i,overwrite_exceptions:r,as_new_list:o},headers:{"Content-Type":void 0},method:"POST",signal:n})})),o=()=>Object(i.a)(r)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n(120),r=n(244),o=n(198),s=n(757);const l=(e,t)=>{const[n,l]=Object(a.useState)(!1),[c,u]=Object(a.useState)(!1),[d,p]=Object(a.useState)(),[m,f]=Object(a.useState)(r.i.LOADING),g=Object(a.useCallback)((()=>{f("")}),[f]),b=e=>{p(e),u(!0)},{exceptionViewerStatus:y,exceptions:h,lastUpdated:v,pagination:E,ruleReferences:x,fetchItems:j,onDeleteException:O,onPaginationChange:S}=Object(s.b)({list:e,deleteToastTitle:o.u,deleteToastBody:e=>o.t(e),errorToastBody:o.p,errorToastTitle:o.q,onEditListExceptionItem:b,onFinishFetchingExceptions:g});Object(a.useEffect)((()=>{j(null,r.i.LOADING)}),[j,t]);const k=Object(a.useMemo)((()=>m===r.i.EMPTY?o.B:""),[m]),w=Object(a.useMemo)((()=>m===r.i.EMPTY?o.y(e.name):""),[e.name,m]),I=Object(a.useMemo)((()=>e.type===i.b.ENDPOINT?o.A:o.z),[e.type]),T=Object(a.useCallback)((async e=>{f(r.i.SEARCHING),j(e,r.i.EMPTY_SEARCH)}),[j,f]),C=Object(a.useCallback)((()=>{l(!0),j()}),[j,l]),M=Object(a.useCallback)((e=>{l(!1),u(!1),e&&j()}),[j,l,u]);return{exceptionViewerStatus:y,listName:e.name,exceptions:h,listType:e.type,lastUpdated:v,pagination:E,viewerStatus:m,emptyViewerTitle:k,emptyViewerBody:w,emptyViewerButtonText:I,ruleReferences:x,showAddExceptionFlyout:n,showEditExceptionFlyout:c,exceptionToEdit:d,onSearch:T,onAddExceptionClick:C,onDeleteException:O,onEditExceptionItem:b,onPaginationChange:S,handleCancelExceptionItemFlyout:()=>{l(!1),u(!1)},handleConfirmExceptionFlyout:M}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return ht})),n.d(t,"a",(function(){return kt}));var a=n(104),i=n.n(a),r=n(40),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(8),d=n(186),p=n(282),m=n(944),f=n(124),g=n(929),b=n(291),y=n(272),h=n(199),v=n(948),E=n(930),x=n(236),j=n(44),O=n(212),S=n(113),k=n(117),w=n(813),I=n(492);const T=({risk:e,riskEntity:t,originalRisk:n})=>{var a,i,o,l,c,u,d,p;const m=t===S.w.host?null==e||null===(a=e.result)||void 0===a||null===(i=a[0])||void 0===i||null===(o=i.host)||void 0===o||null===(l=o.risk)||void 0===l?void 0:l.calculated_level:null==e||null===(c=e.result)||void 0===c||null===(u=c[0])||void 0===u||null===(d=u.user)||void 0===d||null===(p=d.risk)||void 0===p?void 0:p.calculated_level;return s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiPanel,{hasBorder:!0,paddingSize:"s",grow:!1},s.a.createElement(W,{title:s.a.createElement(I.a,{title:x.o(t),riskScoreEntity:t}),toolTipTitle:s.a.createElement(I.a,{title:x.o(t),riskScoreEntity:t,showTechnicalPreviewBadge:!0}),toolTipContent:s.a.createElement(j.FormattedMessage,{id:"xpack.securitySolution.alertDetails.overview.riskDataTooltipContent",defaultMessage:"Risk classification is displayed only when available for a {riskEntity}. Ensure {riskScoreDocumentationLink} is enabled within your environment.",values:{riskEntity:t,riskScoreDocumentationLink:s.a.createElement(w.a,{riskScoreEntity:t,title:x.p(t)})}})}),e.loading&&s.a.createElement(r.EuiLoadingSpinner,{"data-test-subj":"loading"}),!e.loading&&s.a.createElement(s.a.Fragment,null,s.a.createElement(H,{field:x.a(t),value:m?s.a.createElement(O.b,{severity:m,hideBackgroundColor:!0}):Object(k.e)()}),n&&m!==n&&s.a.createElement(s.a.Fragment,null,s.a.createElement(H,{field:x.m(t),value:s.a.createElement(O.b,{severity:n,hideBackgroundColor:!0})})))))},C=s.a.memo(T);var M=n(42),A=n(165),_=n(336),F=n(337),D=n(115);const N=c.a.span.withConfig({displayName:"EnrichmentFieldFeedName",componentId:"sc-1cy82j8-0"})(["white-space:nowrap;font-style:italic;"]),P=c()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-1cy82j8-1"})([".inlineActions{opacity:0;}.inlineActions-popoverOpen{opacity:1;}&:hover{.inlineActions{opacity:1;}}"]),R=({browserField:e,data:t,eventId:n,index:a,feedName:i,scopeId:l,value:c,isDraggable:u,isReadOnly:d})=>{const p=Object(o.useMemo)((()=>({scopeId:l})),[l]);if(!t||!c)return null;const m=`alert-details-value-formatted-field-value-${l}-${n}-${t.field}-${c}-${a}-${i}`;return s.a.createElement(P,{key:m,direction:"row",gutterSize:"xs",alignItems:"center"},s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement("div",null,s.a.createElement(F.a,{contextId:l,eventId:m,fieldFormat:t.format,fieldName:t.field,fieldType:t.type,isDraggable:u,isObjectArray:t.isObjectArray,value:c,truncate:!1}),i&&s.a.createElement(N,null," ",x.e," ",i))),s.a.createElement(r.EuiFlexItem,null,c&&!d&&s.a.createElement(A.c,{data:{field:t.field,value:c},triggerId:A.d.DETAILS_FLYOUT,mode:A.a.INLINE,sourcererScopeId:Object(D.getSourcererScopeId)(l),metadata:p,visibleCellActions:3})))},L=({browserFields:e,data:t,enrichments:n,scopeId:a,eventId:i,isDraggable:o,isReadOnly:l})=>{const c=n.map(((n,a)=>{var i,r,o,s;const{field:l,type:c,feedName:u,value:d}=Object(_.c)(n),p=t.find((e=>e.field===l)),m=null!==(i=null==p?void 0:p.category)&&void 0!==i?i:"",f=Object(M.get)([m,"fields",null!=l?l:""],e);return{fieldsData:{field:null!=l?l:"",format:null!==(r=null==f?void 0:f.format)&&void 0!==r?r:"",type:null!==(o=null==f?void 0:f.type)&&void 0!==o?o:"",isObjectArray:null!==(s=null==p?void 0:p.isObjectArray)&&void 0!==s&&s},type:c,feedName:u,index:a,field:l,browserField:f,value:d}})),[d,p]=Object(u.partition)(c,(({type:e})=>Object(_.e)(e)));return s.a.createElement(s.a.Fragment,null,p.length>0&&s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiPanel,{hasBorder:!0,paddingSize:"s",grow:!1},s.a.createElement(W,{title:x.f,toolTipContent:x.g}),p.map((({fieldsData:e,index:t,field:n,feedName:r,browserField:c,value:u})=>s.a.createElement(H,{key:n,field:n,value:s.a.createElement(R,{eventId:i,index:t,feedName:r,scopeId:a,value:u,data:e,browserField:c,isDraggable:o,isReadOnly:l})}))))),d.length>0&&s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiPanel,{hasBorder:!0,paddingSize:"s",grow:!1},s.a.createElement(W,{title:x.i,toolTipContent:x.k}),d.map((({fieldsData:e,index:t,field:n,feedName:r,browserField:c,value:u})=>s.a.createElement(H,{key:n,field:n,value:s.a.createElement(R,{eventId:i,index:t,feedName:r,scopeId:a,value:u,data:e,browserField:c,isDraggable:o,isReadOnly:l})}))))))},q=s.a.memo(L);var B=n(414);const z=c()(r.EuiTitle).withConfig({displayName:"UppercaseEuiTitle",componentId:"sc-1az7ye2-0"})(["text-transform:uppercase;"]),$=({children:e})=>s.a.createElement(z,{size:"xxxs"},s.a.createElement("h5",null,e)),V=c()(r.EuiTitle).withConfig({displayName:"StyledEnrichmentFieldTitle",componentId:"sc-1az7ye2-1"})(["width:220px;"]),U=({title:e})=>s.a.createElement(V,{size:"xxxs"},s.a.createElement("h6",null,e)),G=c()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-1az7ye2-2"})(["font-size:",";margin-top:",";"],(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiSizeS)),H=({field:e,value:t})=>s.a.createElement(G,{direction:"row",gutterSize:"none",responsive:!0,alignItems:"center","data-test-subj":"EnrichedDataRow"},s.a.createElement(r.EuiFlexItem,{style:{flexShrink:0},grow:!1},s.a.createElement(U,{title:e})),s.a.createElement(r.EuiFlexItem,{className:"eui-textBreakWord"},t)),W=({title:e,toolTipContent:t,toolTipTitle:n})=>{const[a,i]=Object(o.useState)(!1),l=Object(o.useCallback)((()=>{i(!a)}),[a,i]),c=Object(o.useCallback)((()=>{i(!1)}),[i]);return s.a.createElement(r.EuiFlexGroup,{direction:"row",gutterSize:"none",alignItems:"center"},s.a.createElement(r.EuiFlexItem,null,s.a.createElement($,null,e)),s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiPopover,{isOpen:a,closePopover:c,anchorPosition:"leftCenter",button:s.a.createElement(r.EuiButtonIcon,{color:"text",size:"xs",iconSize:"m",iconType:"iInCircle","aria-label":x.h,onClick:l})},s.a.createElement(r.EuiPopoverTitle,null,null!=n?n:e),s.a.createElement(r.EuiText,{size:"s",style:{width:"270px"}},t))))},Q=({browserFields:e,data:t,enrichments:n,eventId:a,scopeId:i,hostRisk:o,userRisk:l,isDraggable:c,isReadOnly:u})=>{var d,p,m,f;const g=null==t||null===(d=t.find((e=>"host.risk.calculated_level"===(null==e?void 0:e.field))))||void 0===d||null===(p=d.values)||void 0===p?void 0:p[0],b=null==t||null===(m=t.find((e=>"user.risk.calculated_level"===(null==e?void 0:e.field))))||void 0===m||null===(f=m.values)||void 0===f?void 0:f[0],y=Object(B.a)("entity-analytics");return y||0!==n.length?s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiHorizontalRule,null),s.a.createElement(r.EuiTitle,{size:"xxxs"},s.a.createElement("h5",null,x.b)),s.a.createElement(r.EuiSpacer,{size:"m"}),s.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"m",style:{flexGrow:0}},y&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(C,{riskEntity:S.w.host,risk:o,originalRisk:g})),s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(C,{riskEntity:S.w.user,risk:l,originalRisk:b}))),s.a.createElement(q,{browserFields:e,data:t,enrichments:n,scopeId:i,eventId:a,isDraggable:c,isReadOnly:u}))):null},Y=s.a.memo(Q);var K=n(943),X=n(155),J=n(655);const Z=c()(r.EuiInMemoryTable).withConfig({displayName:"SummaryTable",componentId:"sc-12oammb-0"})([".inlineActions{opacity:0;}.flyoutTableHoverActions{.inlineActions-popoverOpen{opacity:1;}&:hover{.inlineActions{opacity:1;}}}"]);var ee=n(812),te=n(217),ne=n(142);const ae={flexGrow:0},ie=({data:e,eventId:t,fieldFromBrowserField:n,isDraggable:a,linkValue:i,scopeId:r,values:o,isReadOnly:l})=>{const c=Object(te.e)(e.field);return s.a.createElement(s.a.Fragment,null,s.a.createElement(ee.a,{contextId:r,data:e,eventId:t,fieldFromBrowserField:n,linkValue:i,isDraggable:a,style:ae,values:o}),r!==ne.f.active&&!l&&c&&s.a.createElement(A.c,{data:{field:e.field,value:o},triggerId:A.d.DETAILS_FLYOUT,mode:A.a.INLINE,visibleCellActions:3,sourcererScopeId:Object(D.getSourcererScopeId)(r),metadata:{scopeId:r}}))};ie.displayName="SummaryValueCell";var re=n(271),oe=n(320),se=n(394);const le=({data:e,eventId:t,fieldFromBrowserField:n,linkValue:a,scopeId:i,values:o})=>{const{loading:l,count:c}=Object(se.a)({field:e.field,isActiveTimelines:i===ne.f.active,value:o,signalIndexName:null}),u=Object(oe.c)({contextId:i,eventId:t,field:e.field,fieldFormat:e.format,fieldFromBrowserField:n,fieldType:e.type,isObjectArray:e.isObjectArray,linkValue:a,values:o});return l?s.a.createElement(r.EuiLoadingSpinner,null):"number"==typeof c&&null!=u&&u.dataProviders&&null!=u&&u.dataProviders.length?s.a.createElement(re.a,{asEmptyButton:!0,dataProviders:u.dataProviders,filters:u.filters},s.a.createElement("span",{"data-test-subj":"alert-prevalence"},c)):Object(k.d)()};le.displayName="PrevalenceCell";const ce=[{field:"title",truncateText:!1,name:X.o,textOnly:!0},{field:"description",truncateText:!1,render:ie,name:X.p}],ue=[...ce,{field:"description",truncateText:!0,render:e=>s.a.createElement(le,e),name:s.a.createElement(s.a.Fragment,null,X.m," ",s.a.createElement(r.EuiIconTip,{type:"iInCircle",color:"subdued",title:X.m,content:s.a.createElement("span",null,X.n)})),align:"right",width:"130px"}],de={className:"flyoutTableHoverActions"},pe=({goToTable:e,rows:t,title:n,isReadOnly:a})=>{const i=a?ce:ue;return s.a.createElement("div",null,s.a.createElement(r.EuiFlexGroup,null,s.a.createElement(r.EuiFlexItem,null,s.a.createElement(r.EuiTitle,{size:"xxxs"},s.a.createElement("h5",null,n))),s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(r.EuiLink,{onClick:e,"data-test-subj":"summary-view-go-to-table-link"},s.a.createElement(r.EuiText,{size:"xs"},X.F)))),s.a.createElement(r.EuiSpacer,{size:"s"}),s.a.createElement(Z,{"data-test-subj":"summary-view",items:t,columns:i,rowProps:de,compressed:!0}))},me=s.a.memo(pe),fe=({browserFields:e,data:t,eventId:n,isDraggable:a,scopeId:i,title:r,goToTable:l,isReadOnly:c,investigationFields:u})=>{const d=Object(o.useMemo)((()=>Object(J.c)({browserFields:e,data:t,eventId:n,isDraggable:a,scopeId:i,isReadOnly:c,investigationFields:u})),[e,t,n,a,i,c,u]);return s.a.createElement(me,{goToTable:l,isReadOnly:c,rows:d,title:r})},ge=s.a.memo(fe);var be=n(509),ye=n(927),he=n(402),ve=n(61),Ee=n(135),xe=n(188);const je=ve.euiStyled.div`
  margin-left: ${({theme:e})=>e.eui.euiSizeS};
`,Oe=Object(ve.euiStyled)(r.EuiPanel)`
  &&& {
    background-color: ${({theme:e})=>e.eui.euiColorLightestShade};
    padding: ${({theme:e})=>e.eui.euiSizeS};
    height: 78px;
  }

  &:hover {
    .inlineActions {
      opacity: 1;
      width: auto;
      transform: translate(0);
    }
  }

  .inlineActions {
    opacity: 0;
    width: 0;
    transform: translate(6px);
    transition: transform 50ms ease-in-out;

    &.inlineActions-popoverOpen {
      opacity: 1;
      width: auto;
      transform: translate(0);
    }
   }
`,Se=({title:e,children:t})=>s.a.createElement(Oe,{borderRadius:"none",hasShadow:!1,hasBorder:!1,paddingSize:"s"},s.a.createElement(r.EuiText,{size:"s"},e),s.a.createElement(r.EuiSpacer,{size:"s"}),t);Se.displayName="OverviewCard";const ke=ve.euiStyled.div`
  /* Clamp text content to 2 lines */
  display: -webkit-box;
  -webkit-line-clamp: 2;
  -webkit-box-orient: vertical;
  overflow: hidden;
`;ke.displayName="ClampedContent";const we=({title:e,children:t,contextId:n,dataTestSubj:a,enrichedFieldInfo:i})=>s.a.createElement(Se,{title:e},s.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},s.a.createElement(ke,{"data-test-subj":a},t),s.a.createElement(je,null,s.a.createElement(A.c,{data:{field:i.data.field,value:null==i?void 0:i.values},triggerId:A.d.DETAILS_FLYOUT,mode:A.a.INLINE,sourcererScopeId:Object(D.getSourcererScopeId)(n),metadata:{scopeId:n},visibleCellActions:3}))));we.displayName="OverviewCardWithActions";var Ie=n(906),Te=n(329),Ce=n(293),Me=n(711);const Ae=Object(ve.euiStyled)(r.EuiFlexGroup)`
  flex-grow: 0;
`,_e=s.a.memo((({browserFields:e,contextId:t,data:n,eventId:a,handleOnEventClosed:i,scopeId:l,isReadOnly:c})=>{const u=Object(o.useMemo)((()=>{const i=Object(M.find)({field:xe.o,category:"kibana"},n);return i&&Object(te.b)({eventId:a,contextId:t,scopeId:l,browserFields:e,item:i})}),[e,t,n,a,l]),d=Object(o.useMemo)((()=>{const i=Object(M.find)({field:"kibana.alert.severity",category:"kibana"},n);return i&&Object(te.b)({eventId:a,contextId:t,scopeId:l,browserFields:e,item:i})}),[e,t,n,a,l]),p=Object(o.useMemo)((()=>{const i=Object(M.find)({field:"kibana.alert.risk_score",category:"kibana"},n);return i&&Object(te.b)({eventId:a,contextId:t,scopeId:l,browserFields:e,item:i})}),[e,t,n,a,l]),m=Object(o.useMemo)((()=>{const i=Object(M.find)({field:xe.n,category:"kibana"},n),r=Object(M.find)({field:"kibana.alert.rule.uuid",category:"kibana"},n);return i&&Object(te.b)({eventId:a,contextId:t,scopeId:l,browserFields:e,item:i,linkValueField:r})}),[e,t,n,a,l]),f=Fe(u)&&!c?s.a.createElement(r.EuiFlexItem,{key:"status"},s.a.createElement(we,{title:Ee.J,enrichedFieldInfo:u,contextId:t},s.a.createElement(Ie.a,{eventId:a,contextId:t,enrichedFieldInfo:u,scopeId:l,handleOnEventClosed:i}))):null,g=Fe(d)?s.a.createElement(r.EuiFlexItem,{key:"severity"},c?s.a.createElement(Se,{title:Ee.s},s.a.createElement(Te.a,{value:d.values[0]})):s.a.createElement(we,{title:Ee.s,enrichedFieldInfo:d,contextId:t},s.a.createElement(Te.a,{value:d.values[0]}))):null,b=Fe(p)?s.a.createElement(r.EuiFlexItem,{key:"riskScore"},c?s.a.createElement(Se,{title:Ee.o},p.values[0]):s.a.createElement(we,{title:Ee.o,enrichedFieldInfo:p,contextId:t,dataTestSubj:"riskScore"},p.values[0])):null,y=Fe(m)&&!c?s.a.createElement(r.EuiFlexItem,{key:"ruleName"},s.a.createElement(we,{title:Ee.p,enrichedFieldInfo:m,contextId:t},s.a.createElement(F.a,{contextId:t,eventId:a,value:m.values[0],fieldName:m.data.field,linkValue:m.linkValue,fieldType:m.data.type,fieldFormat:m.data.format,isDraggable:!1,truncate:!1}))):null,{width:h,ref:v}=Object(Ce.b)(),E=0===h||h&&h>=675,x=[f,g,b,y].filter(Me.h),j=E?s.a.createElement(Ae,{gutterSize:"s"},x):s.a.createElement(s.a.Fragment,null,Object(M.chunk)(2,x).map(((e,t,{length:n})=>{const a=t<n-1;return s.a.createElement(o.Fragment,{key:t},s.a.createElement(Ae,{gutterSize:"s"},e),a&&s.a.createElement(r.EuiSpacer,{size:"s"}))})));return s.a.createElement("div",{ref:v},j)}));function Fe(e){return!!e&&Array.isArray(e.values)}_e.displayName="Overview";var De=n(129),Ne=n(243);function Pe(e){return Boolean(e&&e.values&&e.values.length)}var Re=n(102),Le=n(17),qe=n(684);const Be=Object(ve.euiStyled)(r.EuiAccordion)`
  border: 1px solid ${({theme:e})=>e.eui.euiColorLightShade};
  padding: 10px 8px;
  border-radius: 6px;
`,ze=s.a.memo((({prefix:e,state:t,text:n,renderContent:a,onToggle:i=M.noop,extraAction:o,forceState:l})=>{const c=Object(r.useGeneratedHtmlId)({prefix:e});switch(t){case"loading":return s.a.createElement(Be,{id:c,buttonContent:n,onToggle:i,isLoading:!0});case"error":return s.a.createElement(Be,{id:c,buttonContent:s.a.createElement("span",null,s.a.createElement(r.EuiIcon,{type:"warning",color:"danger",style:{marginRight:"6px"}}),n),onToggle:i,extraAction:o});case"success":return s.a.createElement(Be,{"tour-step":`${e}-accordion`,"data-test-subj":`${e}-accordion`,id:c,buttonContent:n,onToggle:i,paddingSize:"l",extraAction:o,forceState:l},a());default:return null}}));ze.displayName="InsightAccordion";var $e=n(132),Ve=n(233),Ue=n(232);const Ge=(e,t)=>({fields:t,_source:!1,query:{ids:{values:e}}}),He=["@timestamp","kibana.alert.rule.name","kibana.alert.severity"],We=[{field:"kibana.alert.rule.name",name:"Rule"},{field:"@timestamp",name:"@timestamp",render:e=>s.a.createElement($e.c,{value:new Date(e)})},{field:"kibana.alert.severity",name:"Severity",render:e=>s.a.createElement(Te.a,{value:e})}],Qe=s.a.memo((({alertIds:e})=>{const t=Object(o.useMemo)((()=>e.slice(0,10)),[e]),{loading:n,error:a,data:i}=(({alertIds:e,fields:t=["*"]})=>{const[n]=Object(o.useState)((()=>Ge(e,t))),{loading:a,data:i,setQuery:r}=Object(Ve.a)({query:n,queryName:Ue.a.BY_ID});return Object(o.useEffect)((()=>{r(Ge(e,t))}),[r,e,t]),{loading:a,error:!a&&void 0===i,data:null==i?void 0:i.hits.hits}})({alertIds:t,fields:He}),l=Object(o.useMemo)((()=>{if(i)return i.map((e=>e.fields))}),[i]);if(n)return s.a.createElement(r.EuiSkeletonText,{lines:2});if(a)return s.a.createElement(s.a.Fragment,null,Ne.p);if(l){const t=e.length>10;return s.a.createElement(s.a.Fragment,null,t&&s.a.createElement("div",null,s.a.createElement("em",null,Ne.q),s.a.createElement(r.EuiSpacer,null)),s.a.createElement(r.EuiBasicTable,{compressed:!0,items:l,columns:We}))}return null}));Qe.displayName="SimpleAlertTable";const Ye=s.a.memo((({originalDocumentId:e,index:t,eventId:n,scopeId:a})=>{const[i,r]=Object(o.useState)(!1),[l,c]=Object(o.useState)({}),u=Object(o.useCallback)((e=>r(e)),[]),d=Object(o.useCallback)((()=>i?l.alertIds?s.a.createElement(Xe,{eventId:n,scopeId:a,alertIds:l.alertIds}):s.a.createElement(Ke,{index:t,originalDocumentId:e,eventId:n,isActiveTimelines:Object(D.isActiveTimeline)(null!=a?a:""),onCacheLoad:c}):null),[i,l.alertIds,t,e,n,a]);return s.a.createElement(ze,{prefix:"RelatedAlertsByProcessAncestry",state:"success",text:l.alertIds?Object(Ne.h)(l.alertIds.length):Ne.g,renderContent:d,onToggle:u})}));Ye.displayName="RelatedAlertsByProcessAncestry";const Ke=({originalDocumentId:e,index:t,isActiveTimelines:n,onCacheLoad:a,eventId:i})=>{const{values:l}=t,{values:c}=e,u=Array.isArray(c)?c[0]:"",{loading:d,error:p,alertIds:m}=Object(qe.a)({isActiveTimeline:n,documentId:u,indices:null!=l?l:[]});return Object(o.useEffect)((()=>{m&&0!==m.length&&a({alertIds:m})}),[m,a]),d?s.a.createElement(r.EuiLoadingSpinner,null):p?s.a.createElement(s.a.Fragment,null,Ne.j):m&&0!==m.length?null:s.a.createElement(s.a.Fragment,null,Ne.i)};Ke.displayName="FetchAndNotifyCachedAlertsByProcessAncestry";const Xe=({alertIds:e,eventId:t,scopeId:n})=>{const a=e&&e.length&&e.length>=5,i=Object(o.useMemo)((()=>e&&e.length?a?null:e.reduce(((e,a,i)=>{const r=`${n}-${t}-event.id-${i}-${a}`;return e.push(Object(oe.a)("_id",r,a)),e}),[]):null),[e,a,n,t]),l=Object(o.useMemo)((()=>a?[{meta:{alias:Ne.k,type:"phrases",key:"_id",params:[...e],negate:!1,disabled:!1,value:e.join()},query:{bool:{should:e.map((e=>({match_phrase:{_id:e}}))),minimum_should_match:1}}}]:null),[e,a]);return i||l?s.a.createElement(s.a.Fragment,null,s.a.createElement(Qe,{alertIds:e}),s.a.createElement(r.EuiSpacer,null),s.a.createElement(re.a,{asEmptyButton:!1,dataProviders:i,filters:l,"data-test-subj":"investigate-ancestry-in-timeline"},Ee.h)):null};Xe.displayName="ActualRelatedAlertsByProcessAncestry";var Je=n(363),Ze=n(123),et=n(4);const tt=s.a.memo((({eventId:e})=>{const{services:{cases:t}}=Object(Re.j)(),n=Object(Re.n)(),[a,i]=Object(o.useState)(void 0),[r,l]=Object(o.useState)(!1),{activeStep:c,isTourShown:u}=Object(Je.b)(),d=Object(o.useMemo)((()=>c===h.a.viewCase&&u(h.b.alertsCases)),[c,u]),p=Object(o.useCallback)((()=>function(e=[]){const t=e.length;return s.a.createElement("span",null,s.a.createElement(j.FormattedMessage,{defaultMessage:"This alert was found in {caseCount}",id:"xpack.securitySolution.alertDetails.overview.insights_related_cases_found_content",values:{caseCount:s.a.createElement("strong",null,s.a.createElement(j.FormattedMessage,{id:"xpack.securitySolution.alertDetails.overview.insights_related_cases_found_content_count",defaultMessage:"{caseCount} {caseCount, plural, =0 {cases.} =1 {case:} other {cases:}}",values:{caseCount:t}}))}}),e.map((({id:t,title:n},a)=>t&&n?s.a.createElement("span",{key:t}," ",s.a.createElement(Ze.a,{detailName:t,title:n,index:a},n),e[a+1]?",":""):s.a.createElement(s.a.Fragment,null))))}(a)),[a]),[m,f]=Object(o.useState)(!1);Object(o.useEffect)((()=>{if(!m)return;let a=!1;return(async()=>{let r=[];try{var o;e&&(r=null!==(o=await t.api.getRelatedCases(e,{owner:et.i}))&&void 0!==o?o:[])}catch(e){a||l(!0),n.addWarning(Object(Ne.c)(e))}a||(i(r),f(!1))})(),()=>{a=!0}}),[t.api,e,m,n]),Object(o.useEffect)((()=>{f(!0)}),[e]);let g="loading";return r?g="error":a&&(g="success"),s.a.createElement(ze,{prefix:"RelatedCases",state:g,text:nt(g,null==a?void 0:a.length),renderContent:p,forceState:d?"open":void 0})}));function nt(e,t=0){switch(e){case"loading":return Ne.d;case"error":return Ne.b;case"success":return Object(Ne.a)(t);default:return""}}tt.displayName="RelatedCases";const at=s.a.memo((({browserFields:e,data:t,eventId:n,scopeId:a})=>{const{field:i,values:l}=t,{error:c,count:u,alertIds:d}=Object(se.a)({field:i,value:l,isActiveTimelines:Object(D.isActiveTimeline)(a),signalIndexName:null,includeAlertIds:!0}),{fieldFromBrowserField:p}=Object(te.b)({browserFields:e,contextId:a,eventId:n,field:{id:t.field},scopeId:a,item:t}),m=Object(oe.c)({field:i,values:l,contextId:a,eventId:n,fieldFromBrowserField:p,fieldFormat:null==p?void 0:p.format,fieldType:null==p?void 0:p.type}),f=0===u;let g="loading";c?g="error":d&&(g="success");const b=Object(o.useCallback)((()=>d&&null!=m&&m.dataProviders?f&&"loading"!==g?Ne.s:s.a.createElement(s.a.Fragment,null,s.a.createElement(Qe,{alertIds:d}),s.a.createElement(r.EuiSpacer,null),s.a.createElement(re.a,{asEmptyButton:!1,dataProviders:null==m?void 0:m.dataProviders},Ee.h)):null),[d,null==m?void 0:m.dataProviders,f,g]);return s.a.createElement(ze,{prefix:"RelatedAlertsBySourceEvent",state:g,text:it(g,u),renderContent:b})}));function it(e,t){switch(e){case"loading":return Ne.u;case"error":return Ne.t;case"success":return Object(Ne.r)(t);default:return""}}at.displayName="RelatedAlertsBySourceEvent";const rt=s.a.memo((({browserFields:e,data:t,eventId:n,scopeId:a})=>{const{field:i,values:l}=t,{error:c,count:u,alertIds:d}=Object(se.a)({field:i,value:l,isActiveTimelines:Object(D.isActiveTimeline)(a),signalIndexName:null,includeAlertIds:!0,ignoreTimerange:!0}),{fieldFromBrowserField:p}=Object(te.b)({browserFields:e,contextId:a,eventId:n,field:{id:t.field},scopeId:a,item:t}),m=Object(oe.c)({field:i,values:l,contextId:a,eventId:n,fieldFromBrowserField:p,fieldFormat:null==p?void 0:p.format,fieldType:null==p?void 0:p.type}),f=0===u;let g="loading";c?g="error":(d||f)&&(g="success");const b=Object(o.useCallback)((()=>d&&null!=m&&m.dataProviders?f&&"loading"!==g?Ne.m:s.a.createElement(s.a.Fragment,null,s.a.createElement(Qe,{alertIds:d}),s.a.createElement(r.EuiSpacer,null),s.a.createElement(re.a,{asEmptyButton:!1,dataProviders:null==m?void 0:m.dataProviders},Ee.h)):null),[d,null==m?void 0:m.dataProviders,f,g]);return s.a.createElement(ze,{prefix:"RelatedAlertsBySession",state:g,text:ot(g,u),renderContent:b})}));function ot(e,t){switch(e){case"loading":return Ne.o;case"error":return Ne.n;case"success":return Object(Ne.l)(t);default:return""}}rt.displayName="RelatedAlertsBySession";const st=ve.euiStyled.div`
  border: 1px solid ${({theme:e})=>e.eui.euiColorLightShade};
  padding: 12px;
  border-radius: 6px;
`,lt=Object(ve.euiStyled)(r.EuiIcon)`
  margin-right: 10px;
`,ct=s.a.memo((()=>{const{getAppUrl:e,navigateTo:t}=Object(Re.l)(),n=e({appId:"management",path:"stack/license_management"}),a=Object(o.useCallback)((()=>{t({url:n})}),[t,n]);return s.a.createElement(st,null,s.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},s.a.createElement(r.EuiFlexItem,{grow:!1},s.a.createElement(lt,{size:"m",type:"lock"})),s.a.createElement(r.EuiFlexItem,null,s.a.createElement(r.EuiText,{size:"s"},s.a.createElement(r.EuiLink,{color:"subdued",onClick:a,target:"_blank"},Ne.f)))))}));ct.displayName="RelatedAlertsUpsell";const ut=Object(ve.euiStyled)(r.EuiFlexItem)`
  border: 1px solid ${({theme:e})=>e.eui.euiColorLightShade};
  padding: 10px 8px;
  border-radius: 6px;
  display: inline-flex;
`,dt=s.a.memo((({browserFields:e,eventId:t,data:n,isReadOnly:a,scopeId:i})=>{const o=Object(f.a)("insightsRelatedAlertsByProcessAncestry"),l=Object(Le.b)().isPlatinumPlus(),c=Object(M.find)({category:"kibana",field:"kibana.alert.ancestors.id"},n),u=Object(M.find)({category:"kibana",field:"kibana.alert.rule.parameters.index"},n),d=Object(M.find)({category:"agent",field:"agent.type"},n),p=Object(M.find)({category:"event",field:"event.module"},n),m=Pe(Object(M.find)({category:"process",field:"process.entity_id"},n))&&function(e,t){return Pe(e)&&("endpoint"===e.values[0]||"winlogbeat"===e.values[0]&&Pe(t)&&"sysmon"===t.values[0])}(d,p),g=Object(M.find)({category:"process",field:"process.entry_leader.entity_id"},n),b=o&&Pe(g),y=Object(M.find)({category:"kibana",field:"kibana.alert.original_event.id"},n),h=Pe(y),v=Object(M.find)({category:"kibana",field:De.Y},n),E=Pe(v),x=Object(Re.h)().read,j=o&&m&&c&&u;return a||!(x||m||h||b)?null:s.a.createElement("div",null,s.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"m"},s.a.createElement(r.EuiFlexItem,null,s.a.createElement(r.EuiTitle,{size:"xxxs"},s.a.createElement("h5",null,Ne.e))),E&&s.a.createElement(ut,null,s.a.createElement("div",null,s.a.createElement(r.EuiIcon,{type:"layers",style:{marginLeft:"4px",marginRight:"8px"}}),Ne.v(parseInt(v.values[0],10)),s.a.createElement(r.EuiBetaBadge,{label:Ne.w,style:{verticalAlign:"middle",marginLeft:"8px"},size:"s"}))),x&&s.a.createElement(r.EuiFlexItem,null,s.a.createElement(tt,{eventId:t})),y&&y.values&&s.a.createElement(r.EuiFlexItem,null,s.a.createElement(at,{browserFields:e,data:y,eventId:t,scopeId:i})),g&&g.values&&s.a.createElement(r.EuiFlexItem,{"data-test-subj":"related-alerts-by-session"},s.a.createElement(rt,{browserFields:e,data:g,eventId:t,scopeId:i})),j&&(l?s.a.createElement(r.EuiFlexItem,{"data-test-subj":"related-alerts-by-ancestry"},s.a.createElement(Ye,{originalDocumentId:c,index:u,eventId:t,scopeId:i})):s.a.createElement(r.EuiFlexItem,null,s.a.createElement(ct,null)))))}));dt.displayName="Insights";var pt=n(284);const mt={cursorStart:0,querySize:1};var ft=n(420),gt=n(127),bt=n(382),yt=n(931);let ht;!function(e){e.tableView="table-view",e.jsonView="json-view",e.summaryView="summary-view",e.threatIntelView="threat-intel-view",e.osqueryView="osquery-results-view",e.responseActionsView="response-actions-results-view"}(ht||(ht={}));const vt=c()(r.EuiTabbedContent).withConfig({displayName:"StyledEuiTabbedContent",componentId:"sc-xa1bmm-0"})(["display:flex;flex:1;flex-direction:column;overflow:hidden;> [role='tabpanel']{display:flex;flex:1;flex-direction:column;overflow:hidden;overflow-y:auto;::-webkit-scrollbar{-webkit-appearance:none;width:7px;}::-webkit-scrollbar-thumb{border-radius:4px;background-color:rgba(0,0,0,0.5);-webkit-box-shadow:0 0 1px rgba(255,255,255,0.5);}}"]),Et=c.a.div.withConfig({displayName:"TabContentWrapper",componentId:"sc-xa1bmm-1"})(["height:100%;position:relative;"]),xt=c.a.div.withConfig({displayName:"RendererContainer",componentId:"sc-xa1bmm-2"})(["overflow-x:auto;padding-right:",";& ."," .euiFlexGroup{justify-content:flex-start;}"],(e=>e.theme.eui.euiSizeXS),gt.a),jt=c()(r.EuiFlexGroup).withConfig({displayName:"ThreatTacticContainer",componentId:"sc-xa1bmm-3"})(["flex-grow:0;flex-wrap:nowrap;& .euiFlexGroup{flex-wrap:nowrap;}"]),Ot=c.a.div.withConfig({displayName:"ThreatTacticDescription",componentId:"sc-xa1bmm-4"})(["padding-left:",";"],(e=>e.theme.eui.euiSizeL)),St=({browserFields:e,data:t,detailsEcsData:n,id:a,isAlert:l,isDraggable:c,rawEventData:x,scopeId:j,timelineTabType:O,handleOnEventClosed:k,isReadOnly:w})=>{const[I,T]=Object(o.useState)(ht.summaryView),C=Object(o.useCallback)((e=>T(e.id)),[]),M=Object(o.useCallback)((()=>T(ht.tableView)),[]),A=Object(o.useMemo)((()=>Object(_.b)(t)),[t]),F=Object(d.b)(t),{rule:D}=Object(p.a)(F.ruleId),N=Object(o.useMemo)((()=>l?Object(_.f)(t).map((e=>Object(_.g)(e))):[]),[t,l]),{result:P,loading:R,setRange:L,range:q}=Object(be.c)(A),B=Object(o.useMemo)((()=>Object(g.a)(x)),[x]),z=Object(o.useMemo)((()=>R||null==P||!P.enrichments?N:Object(_.a)([...N,...P.enrichments])),[R,P,N]),$=z.length,{hostRisk:V,userRisk:U,isAuthorized:G}=(e=>{const{hostName:t,userName:n}=Object(d.b)(e),a=Object(o.useMemo)((()=>t?Object(S.D)([t]):void 0),[t]),{data:i,loading:r,isAuthorized:s,isModuleEnabled:l}=Object(pt.c)({filterQuery:a,pagination:mt,riskEntity:S.w.host,skip:!a}),c=Object(o.useMemo)((()=>({loading:r,isModuleEnabled:l,result:i})),[i,r,l]),u=Object(o.useMemo)((()=>n?Object(S.E)([n]):void 0),[n]),{data:p,loading:m,isAuthorized:f,isModuleEnabled:g}=Object(pt.c)({filterQuery:u,pagination:mt,riskEntity:S.w.user,skip:!u});return{userRisk:Object(o.useMemo)((()=>({loading:m,isModuleEnabled:g,result:p})),[m,g,p]),hostRisk:c,isAuthorized:s&&f}})(t),H=Object(o.useMemo)((()=>null!=n?Object(ft.a)({data:n,rowRenderers:bt.b}):null),[n]),W=Object(o.useMemo)((()=>Object(y.c)(j)),[j]),Q=Object(o.useMemo)((()=>$>0||G&&(V||U)),[$,V,G,U]),J=Object(f.a)("endpointResponseActionsEnabled"),Z=Object(o.useMemo)((()=>{var i;return l?{id:ht.summaryView,name:X.v,"data-test-subj":"overviewTab",content:s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"m"}),s.a.createElement(_e,{browserFields:e,contextId:j,data:t,eventId:a,scopeId:j,handleOnEventClosed:k,isReadOnly:w}),s.a.createElement(r.EuiSpacer,{size:"l"}),B&&B[0]&&s.a.createElement(jt,{alignItems:"flexStart",direction:"column",wrap:!1,gutterSize:"none"},s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiTitle,{size:"xxs"},s.a.createElement("h5",null,B[0].title)),s.a.createElement(Ot,null,B[0].description))),s.a.createElement(r.EuiSpacer,{size:"l"}),null!=H&&null!=n&&s.a.createElement("div",null,s.a.createElement(r.EuiTitle,{size:"xs"},s.a.createElement("h5",null,X.c)),s.a.createElement(r.EuiSpacer,{size:"s"}),s.a.createElement(xt,{"data-test-subj":"renderer"},H.renderRow({contextId:"event-details",data:n,isDraggable:null!=c&&c,scopeId:j}))),s.a.createElement(r.EuiHorizontalRule,null),s.a.createElement(ge,{data:t,eventId:a,browserFields:e,isDraggable:c,scopeId:j,title:X.l,isReadOnly:w,goToTable:M,investigationFields:null!==(i=null==D?void 0:D.investigation_fields)&&void 0!==i?i:[]}),s.a.createElement(r.EuiSpacer,{size:"xl"}),s.a.createElement(dt,{browserFields:e,eventId:a,data:t,scopeId:j,isReadOnly:w}),Q&&s.a.createElement(Y,{isDraggable:c,hostRisk:V,userRisk:U,browserFields:e,data:t,eventId:a,scopeId:j,enrichments:z,isReadOnly:w}),R&&s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSkeletonText,{lines:2})),F.ruleId&&(null==D?void 0:D.note)&&s.a.createElement(he.b,{basicData:F,ruleNote:D.note}))}:void 0}),[l,e,j,t,a,k,w,B,H,n,c,M,null==D?void 0:D.investigation_fields,null==D?void 0:D.note,Q,V,U,z,R,F]),ee=Object(o.useMemo)((()=>l&&!w?{id:ht.threatIntelView,"data-test-subj":"threatIntelTab",name:X.C,append:s.a.createElement(s.a.Fragment,null,R?s.a.createElement(r.EuiLoadingSpinner,null):s.a.createElement(r.EuiNotificationBadge,{"data-test-subj":"enrichment-count-notification"},$)),content:s.a.createElement(K.a,{before:s.a.createElement(r.EuiSpacer,{size:"m"}),loading:R,enrichments:z,showInvestigationTimeEnrichments:!Object(u.isEmpty)(A)},s.a.createElement(s.a.Fragment,null,s.a.createElement(ye.a,{setRange:L,loading:R,range:q}),s.a.createElement(r.EuiSpacer,{size:"m"})))}:void 0),[z,L,q,$,l,A,R,w]),te=Object(o.useMemo)((()=>({id:ht.tableView,"data-test-subj":"tableTab",name:X.B,content:s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"l"}),s.a.createElement(v.a,{browserFields:e,data:t,eventId:a,isDraggable:c,scopeId:j,timelineTabType:O,isReadOnly:w}))})),[e,t,a,c,j,O,w]),ne=Object(o.useMemo)((()=>({id:ht.jsonView,"data-test-subj":"jsonViewTab",name:X.r,content:s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"m"}),s.a.createElement(Et,{"data-test-subj":"jsonViewWrapper"},s.a.createElement(E.a,{rawEventData:x})))})),[x]),ae=Object(m.a)({rawEventData:x,...null!==n?{ecsData:n}:{}}),ie=Object(yt.a)({rawEventData:x,...null!==n?{ecsData:n}:{}}),re=Object(o.useMemo)((()=>J?[ae]:[ie]),[J,ie,ae]),oe=Object(o.useMemo)((()=>[Z,ee,te,ne,...re].filter((e=>!!e))),[Z,ee,te,ne,re]),se=Object(o.useMemo)((()=>{var e;return null!==(e=oe.find((e=>e.id===I)))&&void 0!==e?e:oe[0]}),[oe,I]),le=Object(o.useMemo)((()=>W?{"tour-step":Object(h.c)(3,h.b.alertsCases)}:{}),[W]);return s.a.createElement(b.a,{isTourAnchor:W,step:h.a.reviewAlertDetailsFlyout,tourId:h.b.alertsCases},s.a.createElement(s.a.Fragment,null,s.a.createElement(r.EuiSpacer,{size:"s"}),s.a.createElement(vt,i()({},le,{"data-test-subj":"eventDetails",tabs:oe,selectedTab:se,onTabClick:C,key:"event-summary-tabs"}))))};St.displayName="EventDetailsComponent";const kt=s.a.memo(St)},function(e,t,n){"use strict";n.d(t,"a",(function(){return ue}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(180),u=n(49),d=n(13),p=n(1061),m=n(268),f=n(102),g=n(896),b=n(415),y=n(162),h=n(648),v=n(231),E=n(474),x=n(957),j=n(1415),O=n(5);const S=O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlRunJobLabel",{defaultMessage:"Run job"}),k=O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlStopJobLabel",{defaultMessage:"Stop job"}),w=(O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlJobStoppedDescription",{defaultMessage:"Stopped"}),O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlAdminPermissionsRequiredDescription",{defaultMessage:"ML Admin Permissions required to perform this action"}));var I,T=n(204),C=n(1104);!function(e){e.info="info",e.warning="warning",e.error="error"}(I||(I={}));const M=({message:e})=>{if(!e)return null;let t="primary",n="warning";return e.level===I.info?n="iInCircle":e.level===I.warning?t="warning":e.level===I.error&&(t="danger"),o.a.createElement(a.EuiToolTip,{content:e.text},o.a.createElement(a.EuiIcon,{"data-test-subj":"mlJobAuditIcon",type:n,color:t}))},A=Object(r.memo)(M),_=O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlJobStartedDescription",{defaultMessage:"Started"}),F=O.i18n.translate("xpack.securitySolution.detectionEngine.ruleDescription.mlJobStoppedDescription",{defaultMessage:"Stopped"}),D=({job:e})=>{const t=Object(T.c)(e.jobState,e.datafeedState),n=t?"success":"danger",i=t?_:F;return o.a.createElement(a.EuiBadge,{"data-test-subj":"machineLearningJobStatus",color:n},i)},N=Object(r.memo)(D),P=l.a.div.withConfig({displayName:"Wrapper",componentId:"sc-ilmnak-0"})(["overflow:hidden;"]),R=({job:e,switchComponent:t,...n})=>{var i;const r=Object(T.c)(e.jobState,e.datafeedState);return o.a.createElement(P,n,o.a.createElement("div",null,o.a.createElement(C.a,{jobId:e.id,jobName:null===(i=e.customSettings)||void 0===i?void 0:i.security_app_display_name}),o.a.createElement(A,{message:e.auditMessage})),o.a.createElement(a.EuiFlexGroup,{justifyContent:"flexStart"},o.a.createElement(a.EuiFlexItem,{grow:!1,style:{marginRight:"0"}},o.a.createElement(N,{job:e})),o.a.createElement(a.EuiFlexItem,{grow:!1},t),o.a.createElement(a.EuiFlexItem,{grow:!1,style:{marginLeft:"0"},"data-test-subj":"mlJobActionLabel"},r?k:S)))},L=Object(r.memo)(R),q=({job:e,loading:t,refreshJob:n})=>{const{enableDatafeed:a,disableDatafeed:i,isLoading:s}=Object(x.a)(),l=Object(r.useCallback)((async(t,r,o)=>{o?await a(e,r):await i(e),n(e)}),[a,i,e,n]),c=Object(r.useMemo)((()=>o.a.createElement(j.a,{job:e,isSecurityJobsLoading:t||s,onJobStateChange:l})),[l,s,e,t]);return o.a.createElement(L,{job:e,switchComponent:c})},B=Object(r.memo)(q),z=({jobIds:e})=>{const{loading:t,jobs:n,refetch:a,isMlAdmin:i}=Object(E.a)();if(!i)return null;const r=n.filter((t=>e.includes(t.id)));return o.a.createElement(o.a.Fragment,null,r.map((e=>o.a.createElement(B,{key:e.id,job:e,loading:t,refreshJob:a}))))},$=Object(r.memo)(z);var V=n(385),U=n(667),G=n.n(U);const H=({job:e})=>{const t=Object(r.useMemo)((()=>o.a.createElement(a.EuiToolTip,{content:w},o.a.createElement(a.EuiSwitch,{disabled:!0,"data-test-subj":"mlUserJobSwitch",showLabel:!1,label:"",checked:Object(T.c)(e.jobState,e.datafeedState),onChange:G.a}))),[e]);return o.a.createElement(L,{job:e,switchComponent:t})},W=Object(r.memo)(H),Q=({jobIds:e})=>{const{isMlUser:t,jobs:n}=Object(V.b)();if(!t)return null;const a=n.filter((t=>e.includes(t.id)));return o.a.createElement(o.a.Fragment,null,a.map((e=>o.a.createElement(W,{key:e.id,job:e}))))},Y=Object(r.memo)(Q),K=({jobIds:e})=>{const t=Object(y.a)(),n=Object(v.a)(t);return Object(h.a)(t)?o.a.createElement($,{jobIds:e}):n?o.a.createElement(Y,{jobIds:e}):null},X=Object(r.memo)(K),J=({actions:e})=>e.length?o.a.createElement("ul",null,e.map(((e,t)=>o.a.createElement("li",{key:t},Z(e.actionTypeId))))):null,Z=e=>{if(!e)return"";const t=e.split(".")[1];return t?Object(i.startCase)(t):""};n(104);var ee=n(4);n(125);const te=[{value:ee.Rb,text:"On each rule execution"},{value:"1h",text:"Hourly"},{value:"1d",text:"Daily"},{value:"7d",text:"Weekly"}],ne=[{value:ee.Qb,text:"Perform no actions"},...te],ae=ne[0],ie=(e=ae.value,t)=>{const n=Object(i.find)(["value",e],ne);return{title:t,description:n?n.text:e}};var re=n(417),oe=n(17);const se=l()(a.EuiDescriptionList).withConfig({displayName:"DescriptionListContainer",componentId:"sc-157un4q-0"})(["max-width:600px;&.euiDescriptionList--column .euiDescriptionList__title{width:30%;}&.euiDescriptionList--column .euiDescriptionList__description{width:70%;overflow-wrap:anywhere;}"]),le=c.css`
  dt {
    font-size: 90% !important;
  }
  text-overflow: ellipsis;
`,ce=({data:e,columns:t="multi",indexPatterns:n,schema:s,isInPanelView:l})=>{const c=Object(f.j)(),u=Object(oe.b)(),[p]=Object(r.useState)(new d.FilterManager(c.services.uiSettings)),m=Object.keys(s).reduce(((t,a)=>{return"machineLearningJobId"===a?[...t,(r=Object(i.get)(a,e),l=Object(i.get)(a,s).label,{title:l,description:o.a.createElement(X,{jobIds:r})})]:"throttle"===a?[...t,ie(Object(i.get)(a,e),Object(i.get)([a,"label"],s))]:"actions"===a?[...t,(c=Object(i.get)(a,e),d=Object(i.get)([a,"label"],s),{title:c.length?d:"",description:o.a.createElement(J,{actions:c})})]:[...t,...de(e,Object(i.pick)(a,s),p,u,n)];var r,l,c,d}),[]);return"multi"===t?o.a.createElement(a.EuiFlexGroup,null,Object(i.chunk)(Math.ceil(m.length/2),m).map(((e,t)=>o.a.createElement(a.EuiFlexItem,{"data-test-subj":"listItemColumnStepRuleDescription",key:`description-step-rule-${t}`},o.a.createElement(a.EuiDescriptionList,{listItems:e}))))):l?o.a.createElement(a.EuiFlexGroup,null,o.a.createElement(a.EuiFlexItem,{"data-test-subj":"listItemColumnStepRuleDescriptionPanel"},o.a.createElement(a.EuiDescriptionList,{listItems:m,className:le}))):o.a.createElement(a.EuiFlexGroup,null,o.a.createElement(a.EuiFlexItem,{"data-test-subj":"listItemColumnStepRuleDescription"},"single"===t?o.a.createElement(a.EuiDescriptionList,{listItems:m}):o.a.createElement(se,{"data-test-subj":"singleSplitStepRuleDescriptionList",type:"column",listItems:m})))},ue=Object(r.memo)(ce),de=(e,t,n,a,r)=>Object.keys(t).reduce(((o,s)=>[...o,...me(s,Object(i.get)([s,"label"],t),e,n,a,r)]),[]),pe=e=>e.map((e=>null==e.$state?{$state:{store:u.FilterStateStore.APP_STATE},...e}:e)),me=(e,t,n,a,r,o)=>{if("queryBar"===e){var s;const t=pe(null!==(s=Object(i.get)("queryBar.filters",n))&&void 0!==s?s:[]),r=Object(i.get)("queryBar.query.query",n),l=Object(i.get)("queryBar.saved_id",n),c=Object(i.get)("queryBar.title",n);return Object(g.g)({field:e,filters:t,filterManager:a,query:r,savedId:l,savedQueryName:c,indexPatterns:o})}if("responseActions"===e)return[];if("groupByFields"===e){const a=Object(i.get)(e,n);return Object(g.a)(t,a,r)}if("groupByRadioSelection"===e)return[];if("groupByDuration"===e){if(Object(i.get)("groupByFields",n).length>0){const a=Object(i.get)(e,n);return Object(g.c)(t,a,r,Object(i.get)("groupByRadioSelection",n))}return[]}if("suppressionMissingFields"===e){if(Object(i.get)("groupByFields",n).length>0){const a=Object(i.get)(e,n);return Object(g.b)(t,a,r)}return[]}if("eqlOptions"===e){const t=Object(i.get)(e,n);return Object(g.d)(t)}if("threat"===e){const a=Object(i.get)(e,n);return Object(g.m)({label:t,threat:Object(re.a)(a)})}if("threshold"===e){const a=Object(i.get)(e,n);return Object(g.o)(t,a)}if("references"===e){const a=Object(i.get)(e,n);return Object(g.q)(t,a)}if("falsePositives"===e){const a=Object(i.get)(e,n);return Object(g.p)(t,e,a)}if("investigationFields"===e){const a=Object(i.get)(e,n);return Object(g.e)(t,a)}if("riskScore"===e){const t=Object(i.get)(e,n);return Object(g.i)(t)}if("severity"===e){const t=Object(i.get)(e,n);return Object(g.k)(t)}if("requiredFields"===e){const a=Object(i.get)(e,n);return Object(g.h)(t,a)}if("relatedIntegrations"===e){const a=Object(i.get)(e,n);return Object(p.c)(t,a)}var l;if("timeline"===e)return[{title:t,description:null!==(l=Object(i.get)(e,n).title)&&void 0!==l?l:m.b}];if("note"===e){const a=Object(i.get)(e,n);return Object(g.f)(t,a)}if("ruleType"===e){const a=Object(i.get)(e,n);return Object(g.j)(t,a)}if("kibanaSiemAppUrl"===e)return[];if("threatQueryBar"===e){var c;const t=pe(null!==(c=Object(i.get)("threatQueryBar.filters",n))&&void 0!==c?c:[]),r=Object(i.get)("threatQueryBar.query.query",n),s=Object(i.get)("threatQueryBar.saved_id",n);return Object(g.g)({field:e,filters:t,filterManager:a,query:r,savedId:s,indexPatterns:o,queryLabel:b.u})}if("threatMapping"===e){const a=Object(i.get)(e,n);return Object(g.n)(t,a)}if(Array.isArray(Object(i.get)(e,n))&&"threatMapping"!==e){const a=Object(i.get)(e,n);return Object(g.l)(t,e,a)}if("index"===e){if(Object(i.get)("dataViewId",n))return[]}else if("isBuildingBlock"===e)return Object(i.get)("isBuildingBlock",n)?[{title:b.g,description:b.f}]:[];const u=Object(i.get)(e,n);return Object(i.isNumber)(u)||!Object(i.isEmpty)(u)?[{title:t,description:u}]:[]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return U}));var a=n(42),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(40),c=n(120),u=n(50),d=n.n(u),p=n(197),m=n(890),f=n(5);const g=f.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.linkedToListSection.title",{defaultMessage:"Linked to shared list"}),b=f.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.linkedToListSection.error",{defaultMessage:"Unable to fetch exception list."});var y=n(313);const h=s()(l.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-1rq9jba-0"})(["",""],(()=>Object(o.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),v=({isLoadingReferences:e,errorFetchingReferences:t,listAndReferences:n})=>{const[a,o]=Object(i.useState)(r.a.createElement(l.EuiSkeletonText,{lines:4,"data-test-subj":"exceptionItemListsTableLoading"})),[s,c]=Object(i.useState)(void 0);return Object(i.useEffect)((()=>{t?c(b):e||o(void 0)}),[t,e]),r.a.createElement(l.EuiPanel,{paddingSize:"none",hasShadow:!1,"data-test-subj":"exceptionItemLinkedToListSection"},r.a.createElement(h,{size:"xs"},r.a.createElement("h3",null,g)),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(l.EuiInMemoryTable,{tableCaption:"Table of exception lists",itemId:"id",message:a,loading:e,items:n,error:s,columns:Object(y.d)(),isSelectable:!1,sorting:!0,"data-test-subj":"exceptionItemSharedList"}))},E=r.a.memo(v);E.displayName="ExceptionsLinkedToLists";const x=f.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.linkedToRule.title",{defaultMessage:"Linked to rule"}),j=s()(l.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-6bqv6k-0"})(["",""],(()=>Object(o.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),O=({rule:e})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(j,{size:"xs","data-test-subj":"exceptionItemLinkedToRuleSection"},r.a.createElement("h3",null,x)),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(l.EuiInMemoryTable,{tableCaption:"Rules table",itemId:"id",items:[e],columns:Object(y.c)(),sorting:!0,"data-test-subj":"addExceptionToRulesTable"})),S=r.a.memo(O);S.displayName="ExceptionsLinkedToRule";var k=n(882),w=n(891),I=n(806),T=n(883),C=n(807),M=n(611);const A=f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.cancel",{defaultMessage:"Cancel"}),_=f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.editExceptionTitle",{defaultMessage:"Edit rule exception"}),F=f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.editEndpointExceptionTitle",{defaultMessage:"Edit endpoint exception"}),D=f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.editRuleExceptionToastSuccessTitle",{defaultMessage:"Rule exception updated"}),N=f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.editRuleExceptionToastErrorTitle",{defaultMessage:"Error updating exception"});var P=n(108),R=n(808),L=n(892);const q=s()(l.EuiFlyoutHeader).withConfig({displayName:"FlyoutHeader",componentId:"sc-1j5dcqi-0"})(["",""],(({theme:e})=>Object(o.css)(["border-bottom:1px solid ",";"],e.eui.euiColorLightShade))),B=s()(l.EuiFlyoutBody).withConfig({displayName:"FlyoutBodySection",componentId:"sc-1j5dcqi-1"})(["",""],(()=>Object(o.css)(["&.builder-section{overflow-y:scroll;}"]))),z=s()(l.EuiFlexGroup).withConfig({displayName:"FlyoutFooterGroup",componentId:"sc-1j5dcqi-2"})(["",""],(({theme:e})=>Object(o.css)(["padding:",";"],e.eui.euiSizeS))),$=s()(l.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-1j5dcqi-3"})(["",""],(()=>Object(o.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),V=({list:e,itemToEdit:t,rule:n,showAlertCloseOptions:o,openedFromListDetailPage:s,onCancel:u,onConfirm:g})=>{var b;const h=Object(i.useMemo)((()=>t.os_types),[t]),v=Object(i.useMemo)((()=>null!=n?[n]:null),[n]),x=Object(i.useMemo)((()=>e.type),[e]),{isLoading:j,indexPatterns:O,getExtendedFields:V}=Object(I.a)(v),[U,G]=(()=>{const{addSuccess:e,addError:t,addWarning:n}=Object(P.a)(),[a,r]=Object(R.a)(),[o,s]=Object(i.useState)(!1),l=Object(i.useRef)(null);return Object(i.useEffect)((()=>{let n=!0;const a=new AbortController;return l.current=async({itemsToUpdate:a})=>{var i,o;if(null!=r)try{s(!0),await r(a),e({title:D,text:(i=a.map((({name:e})=>e)).join(", "),o=a.length,f.i18n.translate("xpack.securitySolution.ruleExceptions.editException.editRuleExceptionToastSuccessText",{values:{exceptionItemName:i,numItems:o},defaultMessage:"{numItems, plural, =1 {Exception} other {Exceptions}} - {exceptionItemName} - {numItems, plural, =1 {has} other {have}} been updated."}))}),n&&s(!1)}catch(e){if(n)throw s(!1),t(e,{title:N}),new Error(e)}},()=>{n=!1,a.abort()}}),[e,t,n,r]),[o||a,l.current]})(),[H,W]=Object(T.a)(),[{exceptionItems:Q,exceptionItemMeta:{name:Y},newComment:K,bulkCloseAlerts:X,disableBulkClose:J,bulkCloseIndex:Z,entryErrorExists:ee,expireTime:te,expireErrorExists:ne},ae]=Object(i.useReducer)(((e,t)=>{switch(t.type){case"setExceptionItemMeta":{const{value:n}=t;return{...e,exceptionItemMeta:{...e.exceptionItemMeta,[n[0]]:n[1]}}}case"setComment":{const{comment:n}=t;return{...e,newComment:n}}case"setBulkCloseAlerts":{const{bulkClose:n}=t;return{...e,bulkCloseAlerts:n}}case"setDisableBulkCloseAlerts":{const{disableBulkCloseAlerts:n}=t;return{...e,disableBulkClose:n}}case"setBulkCloseIndex":{const{bulkCloseIndex:n}=t;return{...e,bulkCloseIndex:n}}case"setExceptionItems":{const{items:n}=t;return{...e,exceptionItems:n}}case"setConditionValidationErrorExists":{const{errorExists:n}=t;return{...e,entryErrorExists:n}}case"setExpireTime":{const{expireTime:n}=t;return{...e,expireTime:n}}case"setExpireError":{const{errorExists:n}=t;return{...e,expireErrorExists:n}}default:return e}}),{exceptionItems:[t],exceptionItemMeta:{name:t.name},newComment:"",bulkCloseAlerts:!1,disableBulkClose:!0,bulkCloseIndex:void 0,entryErrorExists:!1,expireTime:void 0!==t.expire_time?d()(t.expire_time):void 0,expireErrorExists:!1}),ie=Object(i.useMemo)((()=>null==n||!Object(p.b)(n.type)&&!Object(p.g)(n.type)&&!Object(p.d)(n.type)),[n]),[re,oe,se,le]=Object(C.a)();Object(i.useEffect)((()=>{null!=le&&le([{id:e.id,listId:e.list_id,namespaceType:e.namespace_type}])}),[e,le]);const ce=Object(i.useCallback)((e=>{ae({type:"setExceptionItems",items:e})}),[ae]),ue=Object(i.useCallback)((e=>{ae({type:"setExceptionItemMeta",value:e})}),[ae]),de=Object(i.useCallback)((e=>{ae({type:"setComment",comment:e})}),[ae]),pe=Object(i.useCallback)((e=>{ae({type:"setBulkCloseAlerts",bulkClose:e})}),[ae]),me=Object(i.useCallback)((e=>{ae({type:"setDisableBulkCloseAlerts",disableBulkCloseAlerts:e})}),[ae]),fe=Object(i.useCallback)((e=>{ae({type:"setBulkCloseIndex",bulkCloseIndex:e})}),[ae]),ge=Object(i.useCallback)((e=>{ae({type:"setConditionValidationErrorExists",errorExists:e})}),[ae]),be=Object(i.useCallback)((e=>{ae({type:"setExpireTime",expireTime:e})}),[ae]),ye=Object(i.useCallback)((e=>{ae({type:"setExpireError",errorExists:e})}),[ae]),he=Object(i.useCallback)((()=>{u(!1)}),[u]),ve=Object(i.useCallback)((e=>e.every((e=>c.E.is(e)))),[]),Ee=Object(i.useCallback)((async()=>{if(null!=G)try{const i=Object(y.a)({itemName:Y,commentToAdd:K,listType:x,selectedOs:t.os_types,expireTime:te,items:Q});if(ve(i)){await G({itemsToUpdate:i});const t=null!=n?[n.rule_id]:[],r=null!=se?se[e.list_id].referenced_rules.map((({rule_id:e})=>e)):[],o=x===c.b.RULE_DEFAULT?t:r;null!=W&&!Object(a.isEmpty)(o)&&X&&await W(o,i,void 0,Z),g(!0)}}catch(e){u(!1)}}),[G,Y,K,x,t.os_types,Q,ve,n,se,e.list_id,W,X,g,Z,u,te]),xe=Object(i.useMemo)((()=>x===c.b.ENDPOINT?F:_),[x]),je=Object(i.useMemo)((()=>U||H||Q.every((e=>0===e.entries.length))||j||ee||ne),[j,ee,Q,U,H,ne]);return r.a.createElement(l.EuiFlyout,{size:"l",onClose:he,"data-test-subj":"editExceptionFlyout"},r.a.createElement(q,null,r.a.createElement(l.EuiTitle,null,r.a.createElement("h2",{"data-test-subj":"exceptionFlyoutTitle"},xe)),r.a.createElement(l.EuiSpacer,{size:"m"})),j&&r.a.createElement(l.EuiSkeletonText,{"data-test-subj":"loadingEditExceptionFlyout",lines:4}),r.a.createElement(B,{className:"builder-section"},r.a.createElement(m.a,{exceptionItemName:Y,onChange:ue}),r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(w.a,{exceptionItemName:Y,allowLargeValueLists:ie,exceptionListItems:[t],exceptionListType:x,indexPatterns:O,rules:v,selectedOs:h,showOsTypeOptions:x===c.b.ENDPOINT,isEdit:!0,onExceptionItemAdd:ce,onSetErrorExists:ge,getExtendedFields:V}),!s&&x===c.b.DETECTION&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(E,{isLoadingReferences:re,errorFetchingReferences:oe,listAndReferences:null!=se?[se[e.list_id]]:[]})),!s&&x===c.b.RULE_DEFAULT&&null!=n&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(S,{rule:n})),r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(M.a,{accordionTitle:r.a.createElement($,{size:"xs"},r.a.createElement("h3",null,(Oe=null!==(b=t.comments.length)&&void 0!==b?b:0,f.i18n.translate("xpack.securitySolution.ruleExceptions.editExceptionFlyout.commentsTitle",{values:{comments:Oe},defaultMessage:"Add comments ({comments})"})))),exceptionItemComments:t.comments,newCommentValue:K,newCommentOnChange:de}),x!==c.b.ENDPOINT&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(L.a,{expireTime:te,setExpireTime:be,setExpireError:ye})),o&&r.a.createElement(r.a.Fragment,null,r.a.createElement(l.EuiHorizontalRule,null),r.a.createElement(k.a,{exceptionListType:x,shouldBulkCloseAlert:X,disableBulkClose:J,exceptionListItems:Q,onDisableBulkClose:me,onUpdateBulkCloseIndex:fe,onBulkCloseCheckboxChange:pe}))),r.a.createElement(l.EuiFlyoutFooter,null,r.a.createElement(z,{justifyContent:"spaceBetween"},r.a.createElement(l.EuiButtonEmpty,{"data-test-subj":"cancelExceptionEditButton",onClick:he},A),r.a.createElement(l.EuiButton,{"data-test-subj":"editExceptionConfirmButton",onClick:Ee,isDisabled:je,fill:!0},xe))));var Oe},U=r.a.memo(V);U.displayName="EditExceptionFlyout"},function(e,t,n){"use strict";n.d(t,"c",(function(){return s.b})),n.d(t,"b",(function(){return s.a})),n.d(t,"d",(function(){return l})),n.d(t,"a",(function(){return c}));var a=n(43);const i=a.record(a.string,a.string);let r,o;a.exact(a.partial({host:i,user:i})),function(e){e.global="global_identifier",e.riskCategory="risk_category"}(r||(r={})),function(e){e.category_1="category_1"}(o||(o={})),a.keyof({user:null,host:null});var s=n(704);const l=(e="default")=>`risk-score.risk-score-latest-${e}`,c=2},function(e,t,n){"use strict";n.d(t,"d",(function(){return a.q})),n.d(t,"c",(function(){return a.n})),n.d(t,"g",(function(){return f})),n.d(t,"e",(function(){return b})),n.d(t,"a",(function(){return w})),n.d(t,"b",(function(){return I})),n.d(t,"f",(function(){return T.a}));var a=n(143),i=n(108),r=n(46),o=n(409),s=n(4),l=n(332),c=n(353),u=n(397),d=n(401);const p=["PUT",s.gb];var m=n(304);const f=()=>{const{addError:e}=Object(i.a)();return(e=>{const t=Object(l.b)(),n=Object(u.b)(),i=Object(d.b)(),s=Object(c.c)();return Object(r.useMutation)((e=>Object(a.y)({rule:Object(o.b)(e)})),{...e,mutationKey:p,onSettled:(...a)=>{var r;t(),n(),i();const[o]=a;o&&s(o),null==e||null===(r=e.onSettled)||void 0===r||r.call(e,...a)}})})({onError:t=>{e(t,{title:m.a})}})},g=["POST",s.gb],b=()=>{const{addError:e}=Object(i.a)();return(e=>{const t=Object(l.b)(),n=Object(u.b)(),i=Object(d.b)();return Object(r.useMutation)((e=>Object(a.d)({rule:Object(o.b)(e)})),{...e,mutationKey:g,onSettled:(...a)=>{t(),n(),i(),null!=e&&e.onSettled&&e.onSettled(...a)}})})({onError:t=>{e(t,{title:m.a})}})};var y=n(43),h=n(193),v=n(112),E=n(283),x=n(207),j=n(506),O=n(373);y.exact(y.type({group:y.string,id:y.string,action_type_id:y.string,params:y.record(y.string,y.any)}));const S=y.intersection([y.type({from:y.string}),y.partial({throttle:y.string,kibana_siem_app_url:y.string})]),k=y.intersection([y.type({author:x.t,created_at:y.string,created_by:y.string,description:x.w,enabled:x.m,false_positives:x.x,from:h.n,id:x.D,interval:h.m,immutable:x.n,name:x.B,max_signals:x.p,references:x.G,related_integrations:x.r,required_fields:x.s,risk_score:h.d,risk_score_mapping:h.e,rule_id:x.I,severity:h.p,severity_mapping:h.q,setup:x.P,tags:x.J,type:h.D,to:h.o,threat:x.R,updated_at:y.string,updated_by:y.string,actions:h.g,throttle:y.union([h.l,y.null])}),y.partial({outcome:x.O,alias_target_id:x.N,alias_purpose:x.M,building_block_type:x.e,anomaly_threshold:y.number,filters:x.y,index:x.k,data_view_id:x.g,language:y.string,license:x.z,meta:S,machine_learning_job_id:y.array(y.string),new_terms_fields:y.array(y.string),history_window_start:y.string,output_index:x.c,query:x.F,rule_name_override:x.C,saved_id:y.string,threshold:x.S,threat_query:h.C,threat_filters:h.x,threat_index:h.y,threat_indicator_path:h.z,threat_mapping:h.B,threat_language:h.A,timeline_id:x.U,timeline_title:x.V,timestamp_override:x.X,timestamp_override_fallback_disabled:x.Y,event_category_override:x.h,timestamp_field:x.W,tiebreaker_field:x.T,note:x.l,exceptions_list:x.i,uuid:y.string,version:x.L,execution_summary:E.g,alert_suppression:x.a,investigation_fields:x.v})]),w=(y.array(k),y.type({page:v.n,perPage:v.n,total:v.n})),I=y.type({field:j.e,order:O.f});var T=n(552)},function(e,t,n){"use strict";n.d(t,"b",(function(){return S})),n.d(t,"c",(function(){return k})),n.d(t,"a",(function(){return Ae}));var a=n(42),i=n(2),r=n.n(i),o=n(106),s=n(275),l=n(40),c=n(121),u=n(276),d=n(250),p=n(127),m=n(277),f=n(572),g=n(819);const b=e=>null==e||"unset"===e.toLowerCase(),y=r.a.memo((({contextId:e,eventId:t,primary:n,secondary:a,isDraggable:i})=>b(n)&&b(a)?null:!b(n)&&b(a)?r.a.createElement(c.c,{contextId:e,eventId:t,field:"auditd.summary.actor.primary",isDraggable:i,value:n,iconType:"user",isAggregatable:!0,fieldType:"keyword"}):b(n)&&!b(a)||n===a?r.a.createElement(c.c,{contextId:e,eventId:t,field:"auditd.summary.actor.secondary",isDraggable:i,value:a,iconType:"user",isAggregatable:!0,fieldType:"keyword"}):r.a.createElement(l.EuiFlexGroup,{gutterSize:"none"},r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:e,eventId:t,field:"auditd.summary.actor.primary",isDraggable:i,value:n,iconType:"user",isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(p.c,{grow:!1,component:"span"},u.i),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:e,eventId:t,field:"auditd.summary.actor.secondary",isDraggable:i,value:a,iconType:"user",isAggregatable:!0,fieldType:"keyword"})))));y.displayName="PrimarySecondary";const h=r.a.memo((({contextId:e,eventId:t,userName:n,primary:a,secondary:i,isDraggable:o})=>b(n)&&b(a)&&b(i)?null:b(n)||b(a)||b(i)||n!==a||n!==i?!b(n)&&b(a)&&b(i)?r.a.createElement(c.c,{contextId:e,eventId:t,field:"user.name",isDraggable:o,value:n,iconType:"user",isAggregatable:!0,fieldType:"keyword"}):r.a.createElement(y,{contextId:e,eventId:t,isDraggable:o,primary:a,secondary:i}):r.a.createElement(c.c,{contextId:e,eventId:t,field:"user.name",isDraggable:o,value:n,iconType:"user",isAggregatable:!0,fieldType:"keyword"})));h.displayName="PrimarySecondaryUserInfo";const v=r.a.memo((({eventId:e,contextId:t,hostName:n,userName:a,primary:i,secondary:o,workingDirectory:s,session:l,isDraggable:d})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(p.c,{grow:!1,component:"span"},u.Vb),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:t,eventId:e,field:"auditd.session",value:l,iconType:"number",isDraggable:d,isAggregatable:!0,fieldType:"keyword"})),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(h,{contextId:t,eventId:e,userName:a,primary:i,secondary:o,isDraggable:d})),null!=n&&r.a.createElement(p.c,{grow:!1,component:"span"},"@"),r.a.createElement(g.a,{contextId:t,eventId:e,workingDirectory:s,hostName:n,isDraggable:d}))));v.displayName="SessionUserHostWorkingDir";const E=r.a.memo((({id:e,contextId:t,hostName:n,userName:a,primary:i,processName:o,processPid:s,processExecutable:d,processTitle:g,secondary:b,workingDirectory:y,args:h,result:E,session:x,text:j,isDraggable:O})=>r.a.createElement(l.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(v,{eventId:e,contextId:t,hostName:n,userName:a,primary:i,secondary:b,workingDirectory:y,session:x,isDraggable:O}),null!=d&&r.a.createElement(p.c,{grow:!1,component:"span"},j),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(m.a,{contextId:t,endgamePid:void 0,endgameProcessName:void 0,eventId:e,processPid:s,processName:o,processExecutable:d,isDraggable:O})),r.a.createElement(f.a,{eventId:e,args:h,contextId:t,isDraggable:O,processTitle:g}),null!=E&&r.a.createElement(p.c,{grow:!1,component:"span"},u.pc),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:t,eventId:e,field:"auditd.result",isDraggable:O,queryValue:E,value:E,isAggregatable:!0,fieldType:"keyword"})))));E.displayName="AuditdGenericLine";const x=r.a.memo((({data:e,contextId:t,isDraggable:n,text:i,timelineId:o})=>{const s=e._id,c=Object(a.get)("auditd.session[0]",e),u=Object(a.get)("host.name[0]",e),m=Object(a.get)("user.name[0]",e),f=Object(a.get)("auditd.result[0]",e),g=Object(a.get)("process.pid[0]",e),b=Object(a.get)("process.name[0]",e),y=Object(a.get)("process.executable[0]",e),h=Object(a.get)("process.title[0]",e),v=Object(a.get)("process.working_directory[0]",e),x=Object(a.get)("auditd.summary.actor.primary[0]",e),j=Object(a.get)("auditd.summary.actor.secondary[0]",e),O=Object(a.get)("process.args",e);return null!=e.process?r.a.createElement(p.b,null,r.a.createElement(E,{id:s,contextId:t,text:i,hostName:u,userName:m,processName:b,processPid:g,processExecutable:y,processTitle:h,workingDirectory:v,args:O,session:c,primary:x,result:f,secondary:j,isDraggable:n}),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(d.a,{data:e,isDraggable:n,timelineId:o})):null}));x.displayName="AuditdGenericDetails";const j=r.a.memo((({id:e,contextId:t,hostName:n,userName:a,result:i,primary:o,secondary:s,filePath:d,processName:g,processPid:b,processExecutable:y,processTitle:h,workingDirectory:E,args:x,session:j,text:O,fileIcon:S,isDraggable:k})=>r.a.createElement(l.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(v,{eventId:e,contextId:t,hostName:n,userName:a,primary:o,secondary:s,workingDirectory:E,session:j,isDraggable:k}),(null!=d||null!=y)&&r.a.createElement(p.c,{grow:!1,component:"span"},O),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:t,eventId:e,field:"file.path",isDraggable:k,value:d,iconType:S})),null!=y&&r.a.createElement(p.c,{grow:!1,component:"span"},u.kc),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(m.a,{contextId:t,endgamePid:void 0,endgameProcessName:void 0,eventId:e,isDraggable:k,processPid:b,processName:g,processExecutable:y})),r.a.createElement(f.a,{eventId:e,args:x,contextId:t,isDraggable:k,processTitle:h}),null!=i&&r.a.createElement(p.c,{grow:!1,component:"span"},u.pc),r.a.createElement(p.c,{grow:!1,component:"span"},r.a.createElement(c.c,{contextId:t,eventId:e,field:"auditd.result",isDraggable:k,queryValue:i,value:i})))));j.displayName="AuditdGenericFileLine";const O=r.a.memo((({data:e,contextId:t,text:n,fileIcon:i="document",timelineId:o,isDraggable:s})=>{const c=e._id,u=Object(a.get)("auditd.session[0]",e),m=Object(a.get)("host.name[0]",e),f=Object(a.get)("user.name[0]",e),g=Object(a.get)("auditd.result[0]",e),b=Object(a.get)("process.pid[0]",e),y=Object(a.get)("process.name[0]",e),h=Object(a.get)("process.executable[0]",e),v=Object(a.get)("process.title[0]",e),E=Object(a.get)("process.working_directory[0]",e),x=Object(a.get)("file.path[0]",e),O=Object(a.get)("auditd.summary.actor.primary[0]",e),S=Object(a.get)("auditd.summary.actor.secondary[0]",e),k=Object(a.get)("process.args",e);return null!=e.process?r.a.createElement(p.b,null,r.a.createElement(j,{id:c,contextId:t,text:n,hostName:m,userName:f,filePath:x,processName:y,processPid:b,processExecutable:h,processTitle:v,workingDirectory:E,args:k,session:u,primary:O,secondary:S,fileIcon:i,result:g,isDraggable:s}),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(d.a,{data:e,isDraggable:s,timelineId:o})):null}));O.displayName="AuditdGenericFileDetails";const S=({actionName:e,text:t})=>({id:o.d.auditd,isInstance:t=>{const n=Object(a.get)("event.module[0]",t),i=Object(a.get)("event.action[0]",t);return null!=n&&"auditd"===n.toLowerCase()&&null!=i&&i.toLowerCase()===e},renderRow:({data:n,isDraggable:a,scopeId:i})=>r.a.createElement(s.a,null,r.a.createElement(x,{data:n,isDraggable:a,contextId:`${e}-${i}`,text:t,timelineId:i}))}),k=({actionName:e,text:t,fileIcon:n="document"})=>({id:o.d.auditd_file,isInstance:t=>{const n=Object(a.get)("event.module[0]",t),i=Object(a.get)("event.action[0]",t);return null!=n&&"auditd"===n.toLowerCase()&&null!=i&&i.toLowerCase()===e},renderRow:({data:a,isDraggable:i,scopeId:o})=>r.a.createElement(s.a,null,r.a.createElement(O,{contextId:`${e}-${o}`,data:a,fileIcon:n,isDraggable:i,text:t,timelineId:o}))}),w=S({actionName:"was-authorized",text:u.oc}),I=S({actionName:"started-session",text:u.Yb}),T=S({actionName:"logged-in",text:u.m}),C=S({actionName:"login",text:u.m}),M=S({actionName:"executed",text:u.gb}),A=S({actionName:"ended-session",text:u.eb}),_=S({actionName:"acquired-credentials",text:u.e}),F=S({actionName:"disposed-credentials",text:u.db}),D=S({actionName:"connected-to",text:u.T}),N=k({actionName:"opened-file",text:u.Db}),P=S({actionName:"changed-file-attributes-of",text:u.y}),R=k({actionName:"changed-file-permissions-of",text:u.A}),L=k({actionName:"changed-file-ownership-of",text:u.z}),q=S({actionName:"loaded-kernel-module",text:u.ob}),B=S({actionName:"unloaded-kernel-module",text:u.gc}),z=k({actionName:"created-directory",text:u.V,fileIcon:"folderOpen"}),$=k({actionName:"mounted",text:u.Bb}),V=k({actionName:"renamed",text:u.Ob}),U=k({actionName:"checked-metadata-of",text:u.S}),G=k({actionName:"checked-filesystem-metadata-of",text:u.Q}),H=k({actionName:"symlinked",text:u.dc}),W=k({actionName:"unmounted",text:u.ic}),Q=k({actionName:"deleted",text:u.Z}),Y=k({actionName:"changed-timestamp-of",text:u.N}),K=S({actionName:"listen-for-connections",text:u.mb}),X=S({actionName:"bound-socket",text:u.t}),J=S({actionName:"received-from",text:u.Hb}),Z=S({actionName:"sent-to",text:u.Ub}),ee=S({actionName:"killed-pid",text:u.lb}),te=S({actionName:"changed-identity-of",text:u.D}),ne=S({actionName:"changed-system-time",text:u.M}),ae=S({actionName:"make-device",text:u.ub}),ie=S({actionName:"changed-system-name",text:u.L}),re=S({actionName:"allocated-memory",text:u.h}),oe=S({actionName:"adjusted-scheduling-policy-of",text:u.Rb}),se=S({actionName:"added-user-account",text:u.g}),le=S({actionName:"caused-mac-policy-error",text:u.u}),ce=S({actionName:"loaded-firewall-rule-to",text:u.nb}),ue=S({actionName:"changed-promiscuous-mode-on-device",text:u.H}),de=S({actionName:"locked-account",text:u.rb}),pe=S({actionName:"unlocked-account",text:u.hc}),me=S({actionName:"added-group-account-to",text:u.f}),fe=S({actionName:"crashed-program",text:u.U}),ge=S({actionName:"attempted-execution-of-forbidden-program",text:u.hb}),be=S({actionName:"used-suspcious-link",text:u.jc}),ye=S({actionName:"used-suspicious-link",text:u.jc}),he=S({actionName:"failed-log-in-too-many-times-to",text:u.ib}),ve=S({actionName:"failed-login-too-many-times-to",text:u.ib}),Ee=S({actionName:"attempted-log-in-from-unusual-place-to",text:u.o}),xe=S({actionName:"attempted-login-from-unusual-place-to",text:u.o}),je=S({actionName:"opened-too-many-sessions-to",text:u.Eb}),Oe=S({actionName:"attempted-log-in-during-unusual-hour-to",text:u.n}),Se=S({actionName:"attempted-login-during-unusual-hour-to",text:u.n}),ke=S({actionName:"tested-file-system-integrity-of",text:u.ec}),we=S({actionName:"violated-selinux-policy",text:u.nc}),Ie=S({actionName:"violated-apparmor-policy",text:u.lc}),Te=S({actionName:"changed-group",text:u.B}),Ce=S({actionName:"changed-user-id",text:u.P}),Me=S({actionName:"changed-auditd-configuration",text:u.v}),Ae=[M,T,C,w,_,A,F,I,D,N,P,R,L,q,B,z,$,V,U,G,H,W,Q,Y,K,X,J,Z,ee,te,ne,ae,ie,re,oe,se,me,ge,le,ue,fe,ce,de,be,ye,pe,he,ve,xe,je,Ee,Oe,Se,ke,we,Ie,Te,Ce,S({actionName:"changed-audit-configuration",text:u.v}),S({actionName:"refreshed-credentials",text:u.Jb}),S({actionName:"negotiated-crypto-key",text:u.Cb}),S({actionName:"crypto-officer-logged-in",text:u.X}),S({actionName:"crypto-officer-login",text:u.X}),S({actionName:"crypto-officer-logged-out",text:u.Y}),S({actionName:"crypto-officer-logout",text:u.Y}),S({actionName:"started-crypto-session",text:u.ac}),S({actionName:"access-result",text:u.d}),S({actionName:"aborted-auditd-startup",text:u.a}),S({actionName:"aborted-audit-startup",text:u.a}),S({actionName:"remote-audit-connected",text:u.Lb}),S({actionName:"remote-audit-disconnected",text:u.Mb}),S({actionName:"shutdown-audit",text:u.Wb}),S({actionName:"audit-error",text:u.p}),S({actionName:"reconfigured-auditd",text:u.Ib}),S({actionName:"reconfigured-audit",text:u.Ib}),S({actionName:"resumed-audit-logging",text:u.Pb}),S({actionName:"rotated-audit-logs",text:u.Qb}),S({actionName:"started-audit",text:u.Zb}),S({actionName:"deleted-group-account-from",text:u.ab}),S({actionName:"deleted-user-account",text:u.bb}),S({actionName:"changed-audit-feature",text:u.w}),S({actionName:"relabeled-filesystem",text:u.Kb}),S({actionName:"authenticated-to-group",text:u.q}),S({actionName:"changed-group-password",text:u.C}),S({actionName:"modified-group-account",text:u.xb}),S({actionName:"initialized-audit-subsystem",text:u.jb}),S({actionName:"modified-level-of",text:u.yb}),S({actionName:"overrode-label-of",text:u.Fb}),S({actionName:"changed-login-id-to",text:u.E}),S({actionName:"mac-permission",text:u.tb}),S({actionName:"changed-selinux-boolean",text:u.J}),S({actionName:"loaded-selinux-policy",text:u.qb}),S({actionName:"changed-selinux-enforcement",text:u.K}),S({actionName:"assigned-user-role-to",text:u.j}),S({actionName:"modified-role",text:u.zb}),S({actionName:"removed-use-role-from",text:u.Nb}),S({actionName:"removed-user-role-from",text:u.Nb}),Me,S({actionName:"violated-seccomp-policy",text:u.mc}),S({actionName:"started-service",text:u.bc}),S({actionName:"stopped-service",text:u.cc}),S({actionName:"booted-system",text:u.s}),S({actionName:"changed-to-runlevel",text:u.O}),S({actionName:"shutdown-system",text:u.Xb}),S({actionName:"sent-test",text:u.Tb}),S({actionName:"unknown",text:u.fc}),S({actionName:"sent-message",text:u.Sb}),S({actionName:"access-permission",text:u.c}),S({actionName:"authenticated",text:u.r}),S({actionName:"changed-password",text:u.G}),S({actionName:"ran-command",text:u.Gb}),S({actionName:"error",text:u.fb}),S({actionName:"logged-out",text:u.sb}),S({actionName:"logout",text:u.sb}),S({actionName:"changed-mac-configuration",text:u.F}),S({actionName:"loaded-mac-policy",text:u.pb}),S({actionName:"modified-user-account",text:u.Ab}),S({actionName:"changed-role-to",text:u.I}),S({actionName:"access-error",text:u.b}),S({actionName:"changed-configuration",text:u.x}),S({actionName:"issued-vm-control",text:u.kb}),S({actionName:"created-vm-image",text:u.W}),S({actionName:"deleted-vm-image",text:u.cb}),S({actionName:"checked-integrity-of",text:u.R}),S({actionName:"assigned-vm-id",text:u.k}),S({actionName:"migrated-vm-from",text:u.vb}),S({actionName:"migrated-vm-to",text:u.wb}),S({actionName:"assigned-vm-resource",text:u.l})]},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=`${n(4).Cb}/fleet/integrations/installed`},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(5);const c=l.i18n.translate("xpack.securitySolution.andOrBadge.and",{defaultMessage:"AND"}),u=l.i18n.translate("xpack.securitySolution.andOrBadge.or",{defaultMessage:"OR"}),d=s()(r.EuiBadge).withConfig({displayName:"RoundBadge",componentId:"sc-15mz0pi-0"})(["align-items:center;border-radius:100%;display:inline-flex;font-size:9px;height:34px;justify-content:center;margin:0 5px 0 5px;padding:7px 6px 4px 6px;user-select:none;width:34px;.euiBadge__content{position:relative;top:-1px;}.euiBadge__text{text-overflow:clip;}"]);d.displayName="RoundBadge";const p=({type:e})=>i.a.createElement(d,{"data-test-subj":"and-or-badge",color:"hollow"},"and"===e?c:u);p.displayName="RoundedBadge";const m=Object(o.css)(["background:",";position:relative;width:2px;&:after{background:",";content:'';height:8px;right:-4px;position:absolute;width:10px;clip-path:circle();}"],(({theme:e})=>e.eui.euiColorLightShade),(({theme:e})=>e.eui.euiColorLightShade)),f=s()(r.EuiFlexItem).withConfig({displayName:"TopAntenna",componentId:"sc-1s6c9rb-0"})([""," &:after{top:0;}"],m),g=s()(r.EuiFlexItem).withConfig({displayName:"BottomAntenna",componentId:"sc-1s6c9rb-1"})([""," &:after{bottom:0;}"],m),b=({type:e})=>i.a.createElement(r.EuiFlexGroup,{className:"andBadgeContainer",gutterSize:"none",direction:"column",alignItems:"center"},i.a.createElement(f,{"data-test-subj":"andOrBadgeBarTop",grow:1}),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(p,{type:e})),i.a.createElement(g,{"data-test-subj":"andOrBadgeBarBottom",grow:1}));b.displayName="RoundedBadgeAntenna";const y=i.a.memo((({type:e,includeAntennas:t=!1})=>t?i.a.createElement(b,{type:e}):i.a.createElement(p,{type:e})));y.displayName="AndOrBadge"},function(e,t,n){"use strict";n.d(t,"d",(function(){return p})),n.d(t,"c",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"a",(function(){return b}));var a=n(55),i=n.n(a),r=n(338),o=n(230),s=n(47);const l=Object(s.v4)();var c,u,d=n(918);const p=(e,t)=>n=>`${d.g}: ${i()(n).format(e)} ${t?d.f(n):d.e(n)}`,m=[{text:"event.action",value:"event.action"},{text:"event.dataset",value:"event.dataset"},{text:"event.module",value:"event.module"}],f={defaultStackByOption:null!==(c=m.find((e=>"event.action"===e.text)))&&void 0!==c?c:m[0],errorMessage:d.c,histogramType:r.j.events,stackByOptions:m,subtitle:void 0,title:d.d,getLensAttributes:(e="event.action",t={})=>{var n;return{title:"Events",description:"",visualizationType:"lnsXY",state:{visualization:{title:"Empty XY chart",legend:{isVisible:!0,position:"right",legendSize:"xlarge"},valueLabels:"hide",preferredSeriesType:"bar_stacked",layers:[{layerId:l,accessors:["e09e0380-0740-4105-becc-0a4ca12e3944"],position:"top",seriesType:"bar_stacked",showGridlines:!1,layerType:"data",xAccessor:"aac9d7d0-13a3-480a-892b-08207a787926",splitAccessor:"34919782-4546-43a5-b668-06ac934d3acd"}],yRightExtent:{mode:"full"},yLeftExtent:{mode:"full"},axisTitlesVisibilitySettings:{x:!1,yLeft:!1,yRight:!0},valuesInLegend:!0},query:{query:"",language:"kuery"},filters:null!==(n=t.filters)&&void 0!==n?n:[],datasourceStates:{formBased:{layers:{[l]:{columns:{"aac9d7d0-13a3-480a-892b-08207a787926":{label:"@timestamp",dataType:"date",operationType:"date_histogram",sourceField:"@timestamp",isBucketed:!0,scale:"interval",params:{interval:"auto"}},"e09e0380-0740-4105-becc-0a4ca12e3944":{label:"Count of records",dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___"},"34919782-4546-43a5-b668-06ac934d3acd":{label:`Top values of ${e}`,dataType:"string",operationType:"terms",scale:"ordinal",sourceField:`${e}`,isBucketed:!0,params:{size:10,orderBy:{type:"column",columnId:"e09e0380-0740-4105-becc-0a4ca12e3944"},orderDirection:"desc",otherBucket:!0,missingBucket:!1,parentFormat:{id:"terms"}}}},columnOrder:["34919782-4546-43a5-b668-06ac934d3acd","aac9d7d0-13a3-480a-892b-08207a787926","e09e0380-0740-4105-becc-0a4ca12e3944"],incompleteColumns:{}}}}}},references:[{type:"index-pattern",id:"{dataViewId}",name:`indexpattern-datasource-layer-${l}`}]}}},g=[{text:"event.category",value:"event.category"},{text:"event.module",value:"event.module"}],b={defaultStackByOption:null!==(u=g.find((e=>"event.module"===e.text)))&&void 0!==u?u:g[0],errorMessage:d.b,histogramType:r.j.alerts,stackByOptions:g,subtitle:void 0,title:d.a,getLensAttributes:(e="event.module")=>({title:"External alerts",description:"",visualizationType:"lnsXY",state:{visualization:{title:"Empty XY chart",legend:{isVisible:!0,position:"right",legendSize:"xlarge"},valueLabels:"hide",preferredSeriesType:"bar_stacked",layers:[{layerId:"a3c54471-615f-4ff9-9fda-69b5b2ea3eef",accessors:["0a923af2-c880-4aa3-aa93-a0b9c2801f6d"],position:"top",seriesType:"bar_stacked",showGridlines:!1,layerType:"data",xAccessor:"37bdf546-3c11-4b08-8c5d-e37debc44f1d",splitAccessor:"42334c6e-98d9-47a2-b4cb-a445abb44c93"}],yRightExtent:{mode:"full"},yLeftExtent:{mode:"full"},axisTitlesVisibilitySettings:{x:!1,yLeft:!1,yRight:!0},valuesInLegend:!0},query:{query:"",language:"kuery"},filters:[{meta:{index:"a04472fc-94a3-4b8d-ae05-9d30ea8fbd6a",alias:null,negate:!1,disabled:!1,type:"phrase",key:"event.kind",params:{query:"alert"}},query:{match_phrase:{"event.kind":"alert"}},$state:{store:"appState"}}],datasourceStates:{formBased:{layers:{"a3c54471-615f-4ff9-9fda-69b5b2ea3eef":{columns:{"37bdf546-3c11-4b08-8c5d-e37debc44f1d":{label:"@timestamp",dataType:"date",operationType:"date_histogram",sourceField:"@timestamp",isBucketed:!0,scale:"interval",params:{interval:"auto"}},"0a923af2-c880-4aa3-aa93-a0b9c2801f6d":{label:o.f,dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___"},"42334c6e-98d9-47a2-b4cb-a445abb44c93":{label:Object(o.o)(`${e}`),dataType:"string",operationType:"terms",scale:"ordinal",sourceField:`${e}`,isBucketed:!0,params:{size:10,orderBy:{type:"column",columnId:"0a923af2-c880-4aa3-aa93-a0b9c2801f6d"},orderDirection:"desc",otherBucket:!0,missingBucket:!1,parentFormat:{id:"terms"}}}},columnOrder:["42334c6e-98d9-47a2-b4cb-a445abb44c93","37bdf546-3c11-4b08-8c5d-e37debc44f1d","0a923af2-c880-4aa3-aa93-a0b9c2801f6d"],incompleteColumns:{}}}}}},references:[{type:"index-pattern",id:"{dataViewId}",name:"indexpattern-datasource-current-indexpattern"},{type:"index-pattern",id:"{dataViewId}",name:"indexpattern-datasource-layer-a3c54471-615f-4ff9-9fda-69b5b2ea3eef"},{type:"index-pattern",name:"723c4653-681b-4105-956e-abef287bf025",id:"{dataViewId}"},{type:"index-pattern",name:"a04472fc-94a3-4b8d-ae05-9d30ea8fbd6a",id:"{dataViewId}"}]})}},function(e,t,n){"use strict";n.d(t,"g",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"d",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"i",(function(){return g})),n.d(t,"h",(function(){return b})),n.d(t,"f",(function(){return y}));var a=n(156),i=n(214),r=n(143);const o=(e,t,n)=>{const{pagination:a,search:i,filters:r}=n||{};let o=[],s=[];return Array.isArray(e)&&e.length?(o=e.map((e=>e.list_id)),s=e.map((e=>e.namespace_type))):t&&(o=[t.list_id],s=[t.namespace_type]),{listIds:o,namespaceTypes:s,pagination:a,search:i,filters:r}},s=async({namespaceTypes:e,listIds:t,http:n,pagination:r,search:o})=>{try{const s=new AbortController,{pageIndex:l,pageSize:c,totalItemCount:u}=r||{},{page:d,per_page:p,total:m,data:f}=await Object(a.m)({filter:void 0,http:n,listIds:null!=t?t:[],namespaceTypes:null!=e?e:[],search:o,pagination:{perPage:c,page:(l||0)+1,total:u},signal:s.signal});return{data:f.map((e=>Object(i.b)(e))),pagination:{pageIndex:d-1,pageSize:p,totalItemCount:m}}}catch(e){throw new Error(e)}},l=async e=>{try{const t=new AbortController,{references:n}=await Object(r.l)({lists:e.map((e=>({id:e.id,listId:e.list_id,namespaceType:e.namespace_type}))),signal:t.signal});return n.reduce(((e,t)=>({...e,...t})),{})}catch(e){throw new Error(e)}},c=async({id:e,namespaceType:t,http:n})=>{try{const i=new AbortController;await Object(a.e)({http:n,id:e,namespaceType:t,signal:i.signal})}catch(e){throw new Error(e)}};var u=n(210),d=n(74),p=n(226);const m=async({id:e,http:t})=>{try{const n=new AbortController,i=Object(u.h)({filters:{list_id:e},namespaceTypes:["single","agnostic"],hideLists:p.a}),r=["single","agnostic"].join(),{data:o}=await Object(a.l)({filters:i,http:t,signal:n.signal,namespaceTypes:r,pagination:{}});return n.abort(),o&&o.length?o[0]:null}catch(e){throw new Error(e)}},f=async e=>{try{const t=new AbortController,{data:n}=await Object(r.j)({signal:t.signal,pagination:{page:1,perPage:1e4}});return t.abort(),n.reduce(((t,n,a)=>{var i;return(null===(i=n.exceptions_list)||void 0===i?void 0:i.find((t=>t.list_id===e)))&&t.push(n),t}),[])}catch(e){throw new Error(e)}},g=async({list:e,http:t})=>{try{const n=new AbortController;await Object(a.u)({http:t,list:e,signal:n.signal}),n.abort()}catch(e){throw new Error(e)}},b=async({rules:e,listId:t})=>{try{if(!e.length)return;const n=new AbortController;await Object(d.asyncForEach)(e,(async e=>{var a;const i=(null!==(a=e.exceptions_list)&&void 0!==a?a:[]).filter((({list_id:e})=>e!==t));await Object(r.p)({ruleProperties:{rule_id:e.rule_id,exceptions_list:i},signal:n.signal})}))}catch(e){throw new Error(e)}},y=async({rules:e,listId:t,id:n,listType:a,listNamespaceType:i})=>{try{if(!e.length)return;const o=new AbortController;await Object(d.asyncForEach)(e,(async e=>{var s;const l={list_id:t,id:n,type:a,namespace_type:i},c=[...null!==(s=e.exceptions_list)&&void 0!==s?s:[],l];await Object(r.p)({ruleProperties:{rule_id:e.rule_id,exceptions_list:c},signal:o.signal})}))}catch(e){throw new Error(e)}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return p}));var a=n(680),i=n(476),r=n(220),o=n(795),s=n(137),l=n(155),c=n(914),u=n(640);const d={[l.e]:{id:l.e,isDefault:!0,messages:[],apiConfig:{}},[o.a]:{id:o.a,isDefault:!0,messages:[],apiConfig:{}},[s.yb]:{id:s.yb,isDefault:!0,messages:[],apiConfig:{}},[l.i]:{id:l.i,isDefault:!0,messages:[],apiConfig:{}},[u.a]:{excludeFromLastConversationStorage:!0,id:u.a,isDefault:!0,messages:[],apiConfig:{}},[r.h]:{id:r.h,isDefault:!0,theme:{title:r.e,titleIcon:"logoSecurity",assistant:{name:c.f,icon:"logoSecurity"},system:{icon:"logoElastic"},user:{}},messages:[],apiConfig:{}}},p=()=>{const[e,t]=Object(a.a)({defaultValue:d,key:i.a,isInvalidDefault:e=>!e});return{conversations:e,setConversations:t}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"a",(function(){return b}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(121),c=n(123),u=n(5);const d=u.i18n.translate("xpack.securitySolution.certificate.fingerprint.clientCertLabel",{defaultMessage:"client cert"}),p=u.i18n.translate("xpack.securitySolution.certificate.fingerprint.serverCertLabel",{defaultMessage:"server cert"}),m="tls.client_certificate.fingerprint.sha1",f="tls.server_certificate.fingerprint.sha1",g=s.a.span.withConfig({displayName:"FingerprintLabel",componentId:"sc-1isap0l-0"})(["margin-right:5px;"]);g.displayName="FingerprintLabel";const b=r.a.memo((({eventId:e,certificateType:t,contextId:n,fieldName:i,isDraggable:o,value:s})=>r.a.createElement(l.c,{contextId:n,"data-test-subj":`${t}-certificate-fingerprint`,eventId:e,field:i,iconType:"snowflake",isDraggable:o,tooltipContent:r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement("span",null,i)),value:s,isAggregatable:!0,fieldType:"keyword"},r.a.createElement(g,null,"client"===t?d:p),r.a.createElement(c.b,{certificateFingerprint:s||""}))));b.displayName="CertificateFingerprint"},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"b",(function(){return p}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(121),l=n(123);const c=n(5).i18n.translate("xpack.securitySolution.ja3.fingerprint.ja3.fingerprintLabel",{defaultMessage:"ja3"}),u="tls.fingerprints.ja3.hash",d=o.a.span.withConfig({displayName:"Ja3FingerprintLabel",componentId:"sc-94sjip-0"})(["margin-right:5px;"]);d.displayName="Ja3FingerprintLabel";const p=i.a.memo((({contextId:e,eventId:t,fieldName:n,isDraggable:a,value:r})=>i.a.createElement(s.c,{contextId:e,"data-test-subj":"ja3-hash",eventId:t,field:n,iconType:"snowflake",isDraggable:a,value:r,isAggregatable:!0,fieldType:"keyword"},i.a.createElement(d,null,c),i.a.createElement(l.e,{"data-test-subj":"ja3-hash-link",ja3Fingerprint:r||""}))));p.displayName="Ja3Fingerprint"},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(2),i=n(160),r=n(20);const o=e=>{const t=s();return Object(a.useMemo)((()=>t(e)),[t,e])},s=()=>{const e=Object(i.a)();return Object(a.useCallback)((t=>((e,t)=>Object(r.d)(e)&&t.length>0?`?${t}`:"")(t,e)),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(2),i=n(4),r=n(102);const o=async(e,t)=>r.b.get().http.fetch("/internal/ml/results/anomalies_table_data",{method:"POST",version:"1",body:JSON.stringify(e),asSystemRequest:!0,signal:t});var s=n(1080),l=n(108),c=n(533),u=n(162),d=n(231);const p=e=>null==e?"":e.reduce(((e,t)=>`${e}${t.fieldName}:${t.fieldValue}`),""),m=(e,t)=>-1!==t?t:null==e?50:e<0?0:e>100?100:Math.floor(e),f=({criteriaFields:e=[],influencers:t=[],startDate:n,endDate:f,threshold:g=-1,skip:b=!1,filterQuery:y,jobIds:h,aggregationInterval:v})=>{const E=Object(u.a)(),x=Object(d.a)(E),{addError:j}=Object(l.a)(),O=Object(r.m)(),[S]=Object(r.p)(i.x),k=Object(a.useMemo)((()=>new Date(n).getTime()),[n]),w=Object(a.useMemo)((()=>new Date(f).getTime()),[f]),{fetch:I,data:T=null,isLoading:C,error:M}=Object(c.b)(c.a.ANOMALIES_TABLE,o,{disabled:b});return Object(a.useEffect)((()=>{M&&j(M,{title:s.a})}),[M,j]),Object(a.useEffect)((()=>{x&&h.length>0&&I({jobIds:h,criteriaFields:e,influencersFilterQuery:y,aggregationInterval:v,threshold:m(S,g),earliestMs:k,latestMs:w,influencers:t,dateFormatTz:O,maxRecords:500,maxExamples:10})}),[p(t),p(e),k,w,x,v,h.sort().join()]),[C,T]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(5);const c=l.i18n.translate("xpack.securitySolution.rule_exceptions.itemComments.unknownAvatarName",{defaultMessage:"Uknown"}),u=l.i18n.translate("xpack.securitySolution.rule_exceptions.itemComments.addCommentPlaceholder",{defaultMessage:"Add a new comment..."});var d=n(102),p=n(281);const m="exceptionCommentAccordionButton",f=o()(s.EuiAvatar).withConfig({displayName:"MyAvatar",componentId:"sc-ggp4j5-0"})(["",""],(({theme:e})=>Object(r.css)(["margin-right:",";"],e.eui.euiSizeS))),g=o()(s.EuiAccordion).withConfig({displayName:"CommentAccordion",componentId:"sc-ggp4j5-1"})(["",""],(({theme:e})=>Object(r.css)([".","{color:",";padding:"," 0;}"],m,e.eui.euiColorPrimary,e.eui.euiSizeM))),b=Object(a.memo)((function({exceptionItemComments:e,newCommentValue:t,accordionTitle:n,initialIsOpen:r=!1,newCommentOnChange:o}){const[b,y]=Object(a.useState)(!1),h=Object(d.f)(),v=null==h?void 0:h.fullName,E=null==h?void 0:h.username,x=null==h?void 0:h.email,j=Object(a.useMemo)((()=>v&&v.length>0?v:x&&x.length>0?x:E&&E.length>0?E:c),[v,x,E]),O=Object(a.useCallback)((e=>{o(e.target.value)}),[o]),S=Object(a.useCallback)((e=>{y(e)}),[]),k=Object(a.useMemo)((()=>{return e&&e.length>0?i.a.createElement(s.EuiText,{size:"s","data-test-subj":"ExceptionItemCommentsAccordionButton"},b?(e=>l.i18n.translate("xpack.securitySolution.rule_exceptions.itemComments.hideCommentsLabel",{values:{comments:e},defaultMessage:"Hide ({comments}) {comments, plural, =1 {Comment} other {Comments}}"}))(e.length):(t=e.length,l.i18n.translate("xpack.securitySolution.rule_exceptions.itemComments.showCommentsLabel",{values:{comments:t},defaultMessage:"Show ({comments}) {comments, plural, =1 {Comment} other {Comments}}"}))):null;var t}),[e,b]),w=Object(a.useMemo)((()=>e&&e.length>0?Object(p.j)(e):[]),[e]);return i.a.createElement("div",null,i.a.createElement(g,{initialIsOpen:r&&!!t,id:"add-exception-comments-accordion",buttonClassName:m,buttonContent:null!=n?n:k,"data-test-subj":"exceptionItemCommentsAccordion",onToggle:e=>S(e)},i.a.createElement(s.EuiCommentList,{comments:w}),i.a.createElement(s.EuiFlexGroup,{gutterSize:"none"},i.a.createElement(s.EuiFlexItem,{grow:!1},i.a.createElement(f,{name:j,size:"l","data-test-subj":"exceptionItemCommentAvatar"})),i.a.createElement(s.EuiFlexItem,{grow:1},i.a.createElement(s.EuiTextArea,{placeholder:u,"aria-label":"Comment Input",value:t,onChange:O,fullWidth:!0,"data-test-subj":"newExceptionItemCommentTextArea"})))))}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return O})),n.d(t,"b",(function(){return S}));var a=n(2),i=n(4),r=n(172),o=n(131),s=n(201),l=n(18),c=n(265),u=n(46),d=n(143),p=n(332),m=n(353),f=n(397),g=n(650),b=n(856),y=n(857),h=n(401);const v=["POST",i.eb];var E=n(591),x=n(859),j=n(860);const O=(e,t)=>{t(i.l,{deepLinkId:o.a.rules,path:Object(s.b)(null!=e?e:"")})},S=e=>{const{mutateAsync:t}=(e=>{const t=Object(p.b)(),n=Object(m.b)(),a=Object(f.b)(),i=Object(g.b)(),o=Object(y.b)(),s=Object(b.b)(),l=Object(h.b)(),c=Object(p.c)();return Object(u.useMutation)((e=>Object(d.q)(e)),{...e,mutationKey:v,onSettled:(...e)=>{var u,d,p,m,f,g;const[b,y,{bulkAction:{type:h}}]=e,v=null!==(u=null==b||null===(d=b.attributes)||void 0===d||null===(p=d.results)||void 0===p?void 0:p.updated)&&void 0!==u?u:null==y||null===(m=y.body)||void 0===m||null===(f=m.attributes)||void 0===f||null===(g=f.results)||void 0===g?void 0:g.updated;switch(h){case r.b.enable:case r.b.disable:n(),l(),v?c(v):t();break;case r.b.delete:t(),n(),a(),i(),o(),s(),l();break;case r.b.duplicate:t(),a(),l();break;case r.b.edit:v?c(v):t(),n(),a(),l()}}})})(),n=Object(x.a)(),i=Object(E.a)(),o=Object(j.a)(),s=Object(c.c)(),O=null==s?void 0:s.actions.setLoadingRules;return{executeBulkAction:Object(a.useCallback)((async a=>{try{var s;null==O||O({ids:null!==(s=a.ids)&&void 0!==s?s:o(a.type),action:a.type});const i=await t({bulkAction:a});return function(e,t){e!==r.b.disable&&e!==r.b.enable||(t.attributes.results.updated.some((e=>e.immutable))&&Object(l.h)(l.a.COUNT,e===r.b.enable?l.c.SIEM_RULE_ENABLED:l.c.SIEM_RULE_DISABLED),t.attributes.results.updated.some((e=>!e.immutable))&&Object(l.h)(l.a.COUNT,e===r.b.disable?l.c.CUSTOM_RULE_DISABLED:l.c.CUSTOM_RULE_ENABLED))}(a.type,i),null!=e&&e.suppressSuccessToast||n({actionType:a.type,summary:i.attributes.summary,editPayload:a.type===r.b.edit?a.editPayload:void 0}),i}catch(e){i({actionType:a.type,error:e})}finally{null==O||O({ids:[],action:null})}}),[null==e?void 0:e.suppressSuccessToast,o,O,t,n,i])}}},function(e,t,n){var a=n(614),i=n(615),r=i?function(e,t){return i.set(e,t),e}:a;e.exports=r},function(e,t,n){e.exports=n(33)(1650)},function(e,t,n){var a=n(976),i=a&&new a;e.exports=i},function(e,t,n){e.exports=n(33)(3673)},function(e,t,n){var a=n(618),i=n(619),r=n(979),o=n(341),s=n(620),l=n(626),c=n(995),u=n(443),d=n(342);e.exports=function e(t,n,p,m,f,g,b,y,h,v){var E=128&n,x=1&n,j=2&n,O=24&n,S=512&n,k=j?void 0:o(t);return function w(){for(var I=arguments.length,T=Array(I),C=I;C--;)T[C]=arguments[C];if(O)var M=l(w),A=r(T,M);if(m&&(T=a(T,m,f,O)),g&&(T=i(T,g,b,O)),I-=A,O&&I<v){var _=u(T,M);return s(t,n,e,w.placeholder,p,T,_,y,h,v-I)}var F=x?p:this,D=j?F[t]:t;return I=T.length,y?T=c(T,y):S&&I>1&&T.reverse(),E&&h<I&&(T.length=h),this&&this!==d&&this instanceof w&&(D=k||o(D)),D.apply(F,T)}}},function(e,t){var n=Math.max;e.exports=function(e,t,a,i){for(var r=-1,o=e.length,s=a.length,l=-1,c=t.length,u=n(o-s,0),d=Array(c+u),p=!i;++l<c;)d[l]=t[l];for(;++r<s;)(p||r<o)&&(d[a[r]]=e[r]);for(;u--;)d[l++]=e[r++];return d}},function(e,t){var n=Math.max;e.exports=function(e,t,a,i){for(var r=-1,o=e.length,s=-1,l=a.length,c=-1,u=t.length,d=n(o-l,0),p=Array(d+u),m=!i;++r<d;)p[r]=e[r];for(var f=r;++c<u;)p[f+c]=t[c];for(;++s<l;)(m||r<o)&&(p[f+a[s]]=e[r++]);return p}},function(e,t,n){var a=n(980),i=n(623),r=n(624);e.exports=function(e,t,n,o,s,l,c,u,d,p){var m=8&t;t|=m?32:64,4&(t&=~(m?64:32))||(t&=-4);var f=[e,t,s,m?l:void 0,m?c:void 0,m?void 0:l,m?void 0:c,u,d,p],g=n.apply(void 0,f);return a(e)&&i(g,f),g.placeholder=o,r(g,e,t)}},function(e,t,n){var a=n(615),i=n(667),r=a?function(e){return a.get(e)}:i;e.exports=r},function(e,t,n){var a=n(436),i=n(439);function r(e,t){this.__wrapped__=e,this.__actions__=[],this.__chain__=!!t,this.__index__=0,this.__values__=void 0}r.prototype=a(i.prototype),r.prototype.constructor=r,e.exports=r},function(e,t,n){var a=n(613),i=n(985)(a);e.exports=i},function(e,t,n){var a=n(986),i=n(987),r=n(988),o=n(989);e.exports=function(e,t,n){var s=t+"";return r(e,i(s,o(a(s),n)))}},function(e,t,n){e.exports=n(33)(3641)},function(e,t){e.exports=function(e){return e.placeholder}},function(e,t,n){e.exports=n(33)(3629)},function(e,t,n){e.exports=n(33)(3640)},function(e,t,n){e.exports=n(33)(938)},function(e,t,n){e.exports=n(33)(3303)},function(e,t,n){var a=n(437);e.exports=function(e){return e==e&&!a(e)}},function(e,t){e.exports=function(e,t){return function(n){return null!=n&&n[e]===t&&(void 0!==t||e in Object(n))}}},function(e,t,n){e.exports=n(33)(1234)},function(e,t,n){e.exports=n(33)(3635)},function(e,t,n){var a=n(1029),i=n(633),r=n(629),o=n(442),s=n(437),l=n(288);e.exports=function(e,t,n,c){if(!s(e))return e;for(var u=-1,d=(t=i(t,e)).length,p=d-1,m=e;null!=m&&++u<d;){var f=l(t[u]),g=n;if("prototype"==f&&r(m))throw new Error("Illegal access of function prototype");if(u!=p){var b=hasOwnProperty.call(m,f)?m[f]:void 0;void 0===(g=c?c(b,f,m):void 0)&&(g=s(b)?b:o(t[u+1])?[]:{})}a(m,f,g),m=m[f]}return e}},function(e,t,n){"use strict";var a=n(189);n.d(t,"b",(function(){return a.d})),n.d(t,"a",(function(){return a.c})),n.d(t,"c",(function(){return a.e}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(40),i=n(109),r=n(2),o=n.n(r),s=n(41);const l=n.n(s)()(a.EuiPopover).withConfig({displayName:"WithHoverActionsPopover",componentId:"sc-1w6un7x-0"})([".euiPopover__anchor{width:100%;}"]),c=o.a.memo((({alwaysShow:e=!1,closePopOverTrigger:t,hoverContent:n,onCloseRequested:a,render:s})=>{const[c,u]=Object(r.useState)(null!=n&&e),[d,p]=Object(r.useState)(!1),[,m]=Object(r.useState)(void 0),f=Object(r.useRef)(null),g=Object(r.useCallback)((()=>{m((e=>{clearTimeout(e)})),p(!1),null!=a&&setTimeout((()=>{a()}))}),[a]),b=Object(r.useCallback)((()=>{m(Number(setTimeout((()=>{document.body.classList.contains(i.d)||p(!0)}),100)))}),[m,p]),y=Object(r.useCallback)((()=>{e||g()}),[e,g]),h=Object(r.useCallback)((e=>{c&&"Escape"===e.key&&y()}),[c,y]),v=Object(r.useMemo)((()=>o.a.createElement("div",{"data-test-subj":"withHoverActionsButton",onMouseEnter:b},s(d))),[b,s,d]);return Object(r.useEffect)((()=>{u(null!=n&&(d||e))}),[n,d,e]),Object(r.useEffect)((()=>{p(!1)}),[t]),Object(r.useEffect)((()=>{var e;c&&(null==f||null===(e=f.current)||void 0===e||e.positionPopoverFluid())}),[n,c]),o.a.createElement("div",{className:e?i.c:"",onMouseLeave:y},o.a.createElement(l,{ref:f,anchorPosition:"downCenter",button:v,closePopover:g,hasArrow:!1,isOpen:c,ownFocus:!1,panelPaddingSize:"none",panelClassName:"withHoverActions__popover",repositionOnScroll:!0},c?o.a.createElement("div",{onKeyDown:h},n):null))}));c.displayName="WithHoverActions"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(148);const l=o.a.div.withConfig({displayName:"ProviderContainerComponent",componentId:"sc-11ewwh0-0"})([""," ",""],(({isDragging:e})=>!e&&Object(r.css)(["&{border-radius:2px;padding:0 4px 0 8px;position:relative;z-index:"," !important;&::before{background-image:linear-gradient( 135deg,"," 25%,transparent 25% ),linear-gradient( -135deg,"," 25%,transparent 25% ),linear-gradient( 135deg,transparent 75%,"," 75% ),linear-gradient( -135deg,transparent 75%,"," 75% );background-position:0 0,1px 0,1px -1px,0px 1px;background-size:2px 2px;bottom:2px;content:'';display:block;left:2px;position:absolute;top:2px;width:4px;}}&:hover{&,& .euiBadge,& .euiBadge__text{cursor:move;cursor:grab;}}.",":hover &,tr:hover &{&::before{background-image:linear-gradient( 135deg,"," 25%,transparent 25% ),linear-gradient( -135deg,"," 25%,transparent 25% ),linear-gradient( 135deg,transparent 75%,"," 75% ),linear-gradient( -135deg,transparent 75%,"," 75% );}}&:hover,&:focus,.",":hover &:hover,.",":focus &:focus,tr:hover &:hover,tr:hover &:focus{background-color:",";&,& a,& a:hover{color:",";}&::before{background-image:linear-gradient( 135deg,"," 25%,transparent 25% ),linear-gradient( -135deg,"," 25%,transparent 25% ),linear-gradient( 135deg,transparent 75%,"," 75% ),linear-gradient( -135deg,transparent 75%,"," 75% );}}"],(({theme:e})=>e.eui.euiZLevel0),(({theme:e})=>e.eui.euiColorMediumShade),(({theme:e})=>e.eui.euiColorMediumShade),(({theme:e})=>e.eui.euiColorMediumShade),(({theme:e})=>e.eui.euiColorMediumShade),s.f,(({theme:e})=>e.eui.euiColorDarkShade),(({theme:e})=>e.eui.euiColorDarkShade),(({theme:e})=>e.eui.euiColorDarkShade),(({theme:e})=>e.eui.euiColorDarkShade),s.f,s.f,(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiColorEmptyShade),(({theme:e})=>e.eui.euiColorEmptyShade))),(({isDragging:e})=>e&&Object(r.css)(["&{z-index:9999 !important;}"])));l.displayName="ProviderContainerComponent";const c=i.a.memo(l);c.displayName="ProviderContainer"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(2);const i=e=>{const[t,n]=Object(a.useState)(null),i=Object(a.useRef)(null);return Object(a.useEffect)((()=>{var e,t,a,r,o,s,l,c,u;null!=(null===(e=i.current)||void 0===e?void 0:e.clientHeight)&&((null!==(t=null==i||null===(a=i.current)||void 0===a?void 0:a.scrollHeight)&&void 0!==t?t:0)>(null!==(r=null==i||null===(o=i.current)||void 0===o?void 0:o.clientHeight)&&void 0!==r?r:0)&&n(!0),(null!==(s=null===(l=i.current)||void 0===l?void 0:l.scrollHeight)&&void 0!==s?s:0)<=(null!==(c=null==i||null===(u=i.current)||void 0===u?void 0:u.clientHeight)&&void 0!==c?c:0)&&n(!1))}),[i,e]),[t,i]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("xpack.securitySolution.assistant.conversations.timelineConversationTitle",{defaultMessage:"Timeline"})},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.topN.closeButtonLabel",{defaultMessage:"Close"}),r=a.i18n.translate("xpack.securitySolution.topN.allEventsSelectLabel",{defaultMessage:"Alerts and events"}),o=a.i18n.translate("xpack.securitySolution.topN.rawEventsSelectLabel",{defaultMessage:"Raw events"}),s=a.i18n.translate("xpack.securitySolution.topN.alertEventsSelectLabel",{defaultMessage:"Detection alerts"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return p}));var a=n(2),i=n(4),r=n(562),o=n(116),s=n(105),l=n(122),c=n(110),u=n(175),d=n(211);const p=({applyGlobalQueriesAndFilters:e=!0,extraOptions:t,getLensAttributes:n,lensAttributes:p,scopeId:m=c.SourcererScopeName.default,stackByField:f,title:g})=>{var b,y;const{selectedPatterns:h,dataViewId:v,indicesExist:E}=Object(o.d)(m),x=Object(a.useMemo)((()=>l.d.globalQuerySelector()),[]),j=Object(a.useMemo)((()=>l.d.globalFiltersQuerySelector()),[]),O=Object(s.a)(x),S=Object(s.a)(j),[{detailName:k,pageName:w,tabName:I}]=Object(u.a)(),T=Object(a.useMemo)((()=>I===r.a.events?w===i.wc.network?d.h:Object(d.b)(w):[]),[w,I]),C=Object(a.useMemo)((()=>[i.wc.hosts,i.wc.users].indexOf(w)>=0&&null!=k?Object(d.c)(w,k):i.wc.network===w?Object(d.e)(k):[]),[k,w]),M=Object(a.useMemo)((()=>null!=p?p:n&&f&&n(f,t)),[t,n,p,f]),A=Object.values(null!==(b=null==M||null===(y=M.state)||void 0===y?void 0:y.adHocDataViews)&&void 0!==b?b:{}).length>0,_=Object(a.useMemo)((()=>{var t;if(null==p&&(null==n||null==f||0===(null==f?void 0:f.length)))return null;const a=A?[]:Object(d.d)(h);return{...M,...null!=g?{title:g}:{},state:{...M.state,...e?{query:O}:{},filters:[...M.state.filters,...C,...T,...a,...e?S:[]]},references:null==M||null===(t=M.references)||void 0===t?void 0:t.map((e=>({...e,id:v})))}}),[e,M,v,S,n,A,p,C,O,h,f,T,g]);return A||!A&&E?_:null}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(63),r=n(102),o=n(230);const s=({onAddToCaseClicked:e,lensAttributes:t,timeRange:n})=>{const s=Object(r.h)(),{cases:l}=Object(r.j)().services,c=Object(a.useMemo)((()=>[{persistableStateAttachmentState:{attributes:t,timeRange:n},persistableStateAttachmentTypeId:i.LENS_ATTACHMENT_TYPE,type:i.AttachmentType.persistableState}]),[t,n]),u=l.hooks.useCasesAddToExistingCaseModal({onClose:e,successToaster:{title:o.a}});return{onAddToExistingCaseClicked:Object(a.useCallback)((()=>{e&&e(),u.open({getAttachments:()=>c})}),[c,e,u]),disabled:null==t||null==n||!s.create||!s.read}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(63),r=n(102),o=n(230);const s=({onClick:e,timeRange:t,lensAttributes:n})=>{const s=Object(r.h)(),{cases:l}=Object(r.j)().services,c=Object(a.useMemo)((()=>[{persistableStateAttachmentState:{attributes:n,timeRange:t},persistableStateAttachmentTypeId:i.LENS_ATTACHMENT_TYPE,type:i.AttachmentType.persistableState}]),[n,t]),u=l.hooks.useCasesAddToNewCaseFlyout({toastContent:o.a});return{onAddToNewCaseClicked:Object(a.useCallback)((()=>{e&&e(),u.open({attachments:c})}),[c,u,e]),disabled:null==n||null==t||!s.create||!s.read}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(41);const s=n.n(o)()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-1tb0fg5-0"})(["flex:1;"]),l=()=>i.a.createElement(s,{alignItems:"center",justifyContent:"center",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiLoadingSpinner,{size:"xl"}))),c=i.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return m}));var a=n(40),i=n(41),r=n.n(i),o=n(2),s=n.n(o),l=n(521),c=n(391),u=n(483);const d=r()(a.EuiPanel).withConfig({displayName:"KpiPanel",componentId:"sc-12zc7xr-0"})(["display:flex;flex-direction:column;position:relative;overflow-x:hidden;overflow-y:",";@media only screen and (min-width:","){","}",""],(({$overflowY:e})=>null!=e?e:"hidden"),(e=>e.theme.eui.euiBreakpoints.m),(({height:e,$toggleStatus:t})=>t&&`\n      height: ${null!=e?e:l.d}px;\n  `),(({$toggleStatus:e})=>e&&`\n    height: ${l.c}px;\n  `)),p=r.a.div.withConfig({displayName:"StackByComboBoxWrapper",componentId:"sc-12zc7xr-1"})(["max-width:400px;width:","px;"],(({width:e})=>e)),m=s.a.forwardRef((({"aria-label":e=u.c,"data-test-subj":t,isDisabled:n=!1,onSelect:i,prepend:r=u.d,selected:l,inputRef:d,width:m=400,dropDownoptions:f,useLensCompatibleFields:g},b)=>{const y=Object(o.useCallback)((e=>{e&&e.length>0?i(e[0].value):i("")}),[i]),h=Object(o.useMemo)((()=>[{label:l,value:l}]),[l]),v=Object(c.b)(g),E=Object(o.useMemo)((()=>({asPlainText:!0})),[]);return s.a.createElement(p,{width:m},s.a.createElement(a.EuiComboBox,{"data-test-subj":t,"aria-label":e,inputRef:d,isDisabled:n,placeholder:u.e,prepend:r,ref:b,singleSelection:E,isClearable:!1,sortMatchesBy:"startsWith",options:null!=f?f:v,selectedOptions:h,compressed:!0,onChange:y}))}));m.displayName="StackByComboBox"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>null==e?[]:null!=e.host&&null!=e.host.name?[{fieldName:"host.name",fieldValue:e.host.name[0]}]:[]},,function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(41),i=n.n(a),r=n(40);const o=i()(r.EuiInMemoryTable).withConfig({displayName:"BasicTable",componentId:"sc-1ir53m2-0"})(["tbody{th,td{vertical-align:top;}.euiTableCellContent{display:block;}}"]);o.displayName="BasicTable"},,,function(e,t,n){"use strict";n.d(t,"a",(function(){return Zt}));var a=n(2),i=n.n(a),r=n(40),o=n(103),s=n(41),l=n.n(s),c=n(142),u=n(529),d=n(115),p=n(730),m=n(111),f=n(105),g=n(178),b=n(102),y=n(422),h=n(170),v=n(106),E=n(12),x=n(133),j=n(42);const O={process:{hash:{md5:["177afc1eb0be88eb9983fb74111260c4"],sha256:["3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb"],sha1:["f573b85e9beb32121f1949217947b2adc6749e3d"]},entity_id:["MWQxNWNmOWUtM2RjNy01Yjk3LWY1ODYtNzQzZjdjMjUxOGIyLTY5MjAtMTMyNDg5OTk2OTAuNDgzMzA3NzAw"],executable:["C:\\Users\\sean\\Downloads\\3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb.exe"],name:["C:\\Users\\sean\\Downloads\\3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb.exe"],pid:[6920],args:["C:\\Users\\sean\\Downloads\\3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb.exe"]},host:{os:{full:["Windows Server 2019 Datacenter 1809 (10.0.17763.1518)"],name:["Windows"],version:["1809 (10.0.17763.1518)"],platform:["windows"],family:["windows"],kernel:["1809 (10.0.17763.1518)"]},mac:["aa:bb:cc:dd:ee:ff"],architecture:["x86_64"],ip:["10.1.2.3"],id:["d8ad572e-d224-4044-a57d-f5a84c0dfe5d"],name:["win2019-endpoint-1"]},file:{mtime:["2020-11-04T21:40:51.494Z"],path:["C:\\Users\\sean\\Downloads\\3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb.exe"],owner:["sean"],hash:{md5:["177afc1eb0be88eb9983fb74111260c4"],sha256:["3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb"],sha1:["f573b85e9beb32121f1949217947b2adc6749e3d"]},name:["3be13acde2f4dcded4fd8d518a513bfc9882407a6e384ffb17d12710db7d76fb.exe"],extension:["exe"],size:[1604112]},event:{category:["malware","intrusion_detection","process"],outcome:["success"],severity:[73],code:["malicious_file"],action:["execution"],id:["LsuMZVr+sdhvehVM++++Gp2Y"],kind:["alert"],created:["2020-11-04T21:41:30.533Z"],module:["endpoint"],type:["info","start","denied"],dataset:["endpoint.alerts"]},agent:{type:["endpoint"]},timestamp:"2020-11-04T21:41:30.533Z",message:["Malware Prevention Alert"],_id:"0dA2lXUBn9bLIbfPkY7d"};var S=n(206),k=n(203),w=n(152);const I=()=>{const e=Object(S.c)({eventAction:"execution",eventCategory:"process",eventType:"denied",skipRedundantFileDetails:!0,text:k.S});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:O,isDraggable:!1,scopeId:w.a}))},T=i.a.memo(I),C=[{_id:"1",data:[{field:"@timestamp",value:["2018-11-05T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"event.action",value:["Action"]},{field:"host.name",value:["apache"]},{field:"source.ip",value:["192.168.0.1"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["john.dee"]}],ecs:{_id:"1",timestamp:"2018-11-05T19:03:25.937Z",host:{name:["apache"],ip:["192.168.0.1"]},event:{id:["1"],action:["Action"],category:["Access"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.1"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["1"],name:["john.dee"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"3",data:[{field:"@timestamp",value:["2018-11-07T19:03:25.937Z"]},{field:"event.severity",value:["1"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["nginx"]},{field:"source.ip",value:["192.168.0.3"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["evan.davis"]}],ecs:{_id:"3",timestamp:"2018-11-07T19:03:25.937Z",host:{name:["nginx"],ip:["192.168.0.1"]},event:{id:["3"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[1]},source:{ip:["192.168.0.3"],port:[443]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["3"],name:["evan.davis"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"4",data:[{field:"@timestamp",value:["2018-11-08T19:03:25.937Z"]},{field:"event.severity",value:["1"]},{field:"event.category",value:["Attempted Administrator Privilege Gain"]},{field:"host.name",value:["suricata"]},{field:"source.ip",value:["192.168.0.3"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jenny.jones"]}],ecs:{_id:"4",timestamp:"2018-11-08T19:03:25.937Z",host:{name:["suricata"],ip:["192.168.0.1"]},event:{id:["4"],category:["Attempted Administrator Privilege Gain"],type:["Alert"],module:["suricata"],severity:[1]},source:{ip:["192.168.0.3"],port:[53]},destination:{ip:["192.168.0.3"],port:[6343]},suricata:{eve:{flow_id:[4],proto:[""],alert:{signature:["ET EXPLOIT NETGEAR WNR2000v5 hidden_lang_avi Stack Overflow (CVE-2016-10174)"],signature_id:[4]}}},user:{id:["4"],name:["jenny.jones"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"5",data:[{field:"@timestamp",value:["2018-11-09T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.3"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["becky.davis"]}],ecs:{_id:"5",timestamp:"2018-11-09T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["5"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.3"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["5"],name:["becky.davis"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"6",data:[{field:"@timestamp",value:["2018-11-10T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["braden.davis"]},{field:"source.ip",value:["192.168.0.6"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]}],ecs:{_id:"6",timestamp:"2018-11-10T19:03:25.937Z",host:{name:["braden.davis"],ip:["192.168.0.1"]},event:{id:["6"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.6"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"8",data:[{field:"@timestamp",value:["2018-11-12T19:03:25.937Z"]},{field:"event.severity",value:["2"]},{field:"event.category",value:["Web Application Attack"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.8"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"8",timestamp:"2018-11-12T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["8"],category:["Web Application Attack"],type:["Alert"],module:["suricata"],severity:[2]},suricata:{eve:{flow_id:[8],proto:[""],alert:{signature:["ET WEB_SERVER Possible CVE-2014-6271 Attempt in HTTP Cookie"],signature_id:[8]}}},source:{ip:["192.168.0.8"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["8"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"7",data:[{field:"@timestamp",value:["2018-11-11T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.7"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"7",timestamp:"2018-11-11T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["7"],category:["Access"],type:["HTTP Request"],module:["apache"],severity:[3]},source:{ip:["192.168.0.7"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["7"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"9",data:[{field:"@timestamp",value:["2018-11-13T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.9"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"9",timestamp:"2018-11-13T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["9"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.9"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["9"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"10",data:[{field:"@timestamp",value:["2018-11-14T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.10"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"10",timestamp:"2018-11-14T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["10"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.10"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["10"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"11",data:[{field:"@timestamp",value:["2018-11-15T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.11"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"11",timestamp:"2018-11-15T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["11"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.11"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["11"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"12",data:[{field:"@timestamp",value:["2018-11-16T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.12"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["jone.doe"]}],ecs:{_id:"12",timestamp:"2018-11-16T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["12"],category:["Access"],type:["HTTP Request"],module:["nginx"],severity:[3]},source:{ip:["192.168.0.12"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["12"],name:["jone.doe"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"2",data:[{field:"@timestamp",value:["2018-11-06T19:03:25.937Z"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Authentication"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.2"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["joe.bob"]}],ecs:{_id:"2",timestamp:"2018-11-06T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["2"],category:["Authentication"],type:["Authentication Success"],module:["authlog"],severity:[3]},source:{ip:["192.168.0.2"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["1"],name:["joe.bob"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"13",data:[{field:"@timestamp",value:["2018-13-12T19:03:25.937Z"]},{field:"event.severity",value:["1"]},{field:"event.category",value:["Web Application Attack"]},{field:"host.name",value:["joe.computer"]},{field:"source.ip",value:["192.168.0.8"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]}],ecs:{_id:"13",timestamp:"2018-12-12T19:03:25.937Z",host:{name:["joe.computer"],ip:["192.168.0.1"]},event:{id:["13"],category:["Web Application Attack"],type:["Alert"],module:["suricata"],severity:[1]},suricata:{eve:{flow_id:[13],proto:[""],alert:{signature:["ET WEB_SERVER Possible Attempt in HTTP Cookie"],signature_id:[13]}}},source:{ip:["192.168.0.8"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"14",data:[{field:"@timestamp",value:["2019-03-07T05:06:51.000Z"]},{field:"host.name",value:["zeek-franfurt"]},{field:"source.ip",value:["192.168.26.101"]},{field:"destination.ip",value:["192.168.238.205"]}],ecs:{_id:"14",timestamp:"2019-03-07T05:06:51.000Z",event:{module:["zeek"],dataset:["zeek.connection"]},host:{id:["37c81253e0fc4c46839c19b981be5177"],name:["zeek-franfurt"],ip:["207.154.238.205","10.19.0.5","fe80::d82b:9aff:fe0d:1e12"]},source:{ip:["185.176.26.101"],port:[44059]},destination:{ip:["207.154.238.205"],port:[11568]},geo:{region_name:["New York"],country_iso_code:["US"]},network:{transport:["tcp"]},zeek:{session_id:["C8DRTq362Fios6hw16"],connection:{local_resp:[!1],local_orig:[!1],missed_bytes:[0],state:["REJ"],history:["Sr"]}}}},{_id:"15",data:[{field:"@timestamp",value:["2019-03-07T00:51:28.000Z"]},{field:"host.name",value:["suricata-zeek-singapore"]},{field:"source.ip",value:["192.168.35.240"]},{field:"destination.ip",value:["192.168.67.3"]}],ecs:{_id:"15",timestamp:"2019-03-07T00:51:28.000Z",event:{module:["zeek"],dataset:["zeek.dns"]},host:{id:["af3fddf15f1d47979ce817ba0df10c6e"],name:["suricata-zeek-singapore"],ip:["206.189.35.240","10.15.0.5","fe80::98c7:eff:fe29:4455"]},source:{ip:["206.189.35.240"],port:[57475]},destination:{ip:["67.207.67.3"],port:[53]},geo:{region_name:["New York"],country_iso_code:["US"]},network:{transport:["udp"]},zeek:{session_id:["CyIrMA1L1JtLqdIuol"],dns:{AA:[!1],RD:[!1],trans_id:[65252],RA:[!1],TC:[!1]}}}},{_id:"16",data:[{field:"@timestamp",value:["2019-03-05T07:00:20.000Z"]},{field:"host.name",value:["suricata-zeek-singapore"]},{field:"source.ip",value:["192.168.35.240"]},{field:"destination.ip",value:["192.168.164.26"]}],ecs:{_id:"16",timestamp:"2019-03-05T07:00:20.000Z",event:{module:["zeek"],dataset:["zeek.http"]},host:{id:["af3fddf15f1d47979ce817ba0df10c6e"],name:["suricata-zeek-singapore"],ip:["206.189.35.240","10.15.0.5","fe80::98c7:eff:fe29:4455"]},source:{ip:["206.189.35.240"],port:[36220]},destination:{ip:["192.241.164.26"],port:[80]},geo:{region_name:["New York"],country_iso_code:["US"]},http:{version:["1.1"],request:{body:{bytes:[0]}},response:{status_code:[302],body:{bytes:[154]}}},zeek:{session_id:["CZLkpC22NquQJOpkwe"],http:{resp_mime_types:["text/html"],trans_depth:["3"],status_msg:["Moved Temporarily"],resp_fuids:["FzeujEPP7GTHmYPsc"],tags:[]}}}},{_id:"17",data:[{field:"@timestamp",value:["2019-02-28T22:36:28.000Z"]},{field:"host.name",value:["zeek-franfurt"]},{field:"source.ip",value:["192.168.77.171"]}],ecs:{_id:"17",timestamp:"2019-02-28T22:36:28.000Z",event:{module:["zeek"],dataset:["zeek.notice"]},host:{id:["37c81253e0fc4c46839c19b981be5177"],name:["zeek-franfurt"],ip:["207.154.238.205","10.19.0.5","fe80::d82b:9aff:fe0d:1e12"]},source:{ip:["8.42.77.171"]},zeek:{notice:{suppress_for:[3600],msg:["8.42.77.171 scanned at least 15 unique ports of host 207.154.238.205 in 0m0s"],note:["Scan::Port_Scan"],sub:["remote"],dst:["207.154.238.205"],dropped:[!1],peer_descr:["bro"]}}}},{_id:"18",data:[{field:"@timestamp",value:["2019-02-22T21:12:13.000Z"]},{field:"host.name",value:["zeek-sensor-amsterdam"]},{field:"source.ip",value:["192.168.66.184"]},{field:"destination.ip",value:["192.168.95.15"]}],ecs:{_id:"18",timestamp:"2019-02-22T21:12:13.000Z",event:{module:["zeek"],dataset:["zeek.ssl"]},host:{id:["2ce8b1e7d69e4a1d9c6bcddc473da9d9"],name:["zeek-sensor-amsterdam"]},source:{ip:["188.166.66.184"],port:[34514]},destination:{ip:["91.189.95.15"],port:[443]},geo:{region_name:["England"],country_iso_code:["GB"]},zeek:{session_id:["CmTxzt2OVXZLkGDaRe"],ssl:{cipher:["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"],established:[!1],resumed:[!1],version:["TLSv12"]}}}},{_id:"19",data:[{field:"@timestamp",value:["2019-03-03T04:26:38.000Z"]},{field:"host.name",value:["suricata-zeek-singapore"]}],ecs:{_id:"19",timestamp:"2019-03-03T04:26:38.000Z",event:{module:["zeek"],dataset:["zeek.files"]},host:{id:["af3fddf15f1d47979ce817ba0df10c6e"],name:["suricata-zeek-singapore"],ip:["206.189.35.240","10.15.0.5","fe80::98c7:eff:fe29:4455"]},zeek:{session_id:["Cu0n232QMyvNtzb75j"],files:{session_ids:["Cu0n232QMyvNtzb75j"],timedout:[!1],local_orig:[!1],tx_host:["5.101.111.50"],source:["HTTP"],is_orig:[!1],overflow_bytes:[0],sha1:["fa5195a5dfacc9d1c68d43600f0e0262cad14dde"],duration:[0],depth:[0],analyzers:["MD5","SHA1"],mime_type:["text/plain"],rx_host:["206.189.35.240"],total_bytes:[88722],fuid:["FePz1uVEVCZ3I0FQi"],seen_bytes:[1198],missing_bytes:[0],md5:["f7653f1951693021daa9e6be61226e32"]}}}},{_id:"20",data:[{field:"@timestamp",value:["2019-03-13T05:42:11.815Z"]},{field:"event.category",value:["audit-rule"]},{field:"host.name",value:["zeek-sanfran"]},{field:"process.args",value:["gpgconf","--list-dirs","agent-socket"]}],ecs:{_id:"20",timestamp:"2019-03-13T05:42:11.815Z",event:{action:["executed"],module:["auditd"],category:["audit-rule"]},host:{id:["f896741c3b3b44bdb8e351a4ab6d2d7c"],name:["zeek-sanfran"],ip:["134.209.63.134","10.46.0.5","fe80::a0d9:16ff:fecf:e70b"]},user:{name:["alice"]},process:{pid:[5402],name:["gpgconf"],ppid:[5401],args:["gpgconf","--list-dirs","agent-socket"],executable:["/usr/bin/gpgconf"],title:["gpgconf --list-dirs agent-socket"],working_directory:["/"]}}},{_id:"21",data:[{field:"@timestamp",value:["2019-03-14T22:30:25.527Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["zeek-london"]},{field:"source.ip",value:["192.168.77.171"]},{field:"user.name",value:["root"]}],ecs:{_id:"21",timestamp:"2019-03-14T22:30:25.527Z",event:{action:["logged-in"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["14"],data:{terminal:["/dev/pts/0"],op:["login"]},summary:{actor:{primary:["alice"],secondary:["alice"]},object:{primary:["/dev/pts/0"],secondary:["8.42.77.171"],type:["user-session"]},how:["/usr/sbin/sshd"]}},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},source:{ip:["8.42.77.171"]},user:{name:["root"]},process:{pid:[17471],executable:["/usr/sbin/sshd"]}}},{_id:"22",data:[{field:"@timestamp",value:["2019-03-13T03:35:21.614Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["suricata-bangalore"]},{field:"user.name",value:["root"]}],ecs:{_id:"22",timestamp:"2019-03-13T03:35:21.614Z",event:{action:["disposed-credentials"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["340"],data:{acct:["alice"],terminal:["ssh"],op:["PAM:setcred"]},summary:{actor:{primary:["alice"],secondary:["alice"]},object:{primary:["ssh"],secondary:["8.42.77.171"],type:["user-session"]},how:["/usr/sbin/sshd"]}},host:{id:["0a63559c1acf4c419d979c4b4d8b83ff"],name:["suricata-bangalore"],ip:["139.59.11.147","10.47.0.5","fe80::ec0b:1bff:fe29:80bd"]},user:{name:["root"]},process:{pid:[21202],executable:["/usr/sbin/sshd"]}}},{_id:"23",data:[{field:"@timestamp",value:["2019-03-13T03:35:21.614Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["suricata-bangalore"]},{field:"user.name",value:["root"]}],ecs:{_id:"23",timestamp:"2019-03-13T03:35:21.614Z",event:{action:["ended-session"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["340"],data:{acct:["alice"],terminal:["ssh"],op:["PAM:session_close"]},summary:{actor:{primary:["alice"],secondary:["alice"]},object:{primary:["ssh"],secondary:["8.42.77.171"],type:["user-session"]},how:["/usr/sbin/sshd"]}},host:{id:["0a63559c1acf4c419d979c4b4d8b83ff"],name:["suricata-bangalore"],ip:["139.59.11.147","10.47.0.5","fe80::ec0b:1bff:fe29:80bd"]},user:{name:["root"]},process:{pid:[21202],executable:["/usr/sbin/sshd"]}}},{_id:"24",data:[{field:"@timestamp",value:["2019-03-18T23:17:01.645Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["zeek-london"]},{field:"user.name",value:["root"]}],ecs:{_id:"24",timestamp:"2019-03-18T23:17:01.645Z",event:{action:["acquired-credentials"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["unset"],data:{acct:["root"],terminal:["cron"],op:["PAM:setcred"]},summary:{actor:{primary:["unset"],secondary:["root"]},object:{primary:["cron"],type:["user-session"]},how:["/usr/sbin/cron"]}},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},user:{name:["root"]},process:{pid:[9592],executable:["/usr/sbin/cron"]}}},{_id:"25",data:[{field:"@timestamp",value:["2019-03-19T01:17:01.336Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["siem-kibana"]},{field:"user.name",value:["root"]}],ecs:{_id:"25",timestamp:"2019-03-19T01:17:01.336Z",event:{action:["started-session"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["2908"],data:{acct:["root"],terminal:["cron"],op:["PAM:session_open"]},summary:{actor:{primary:["root"],secondary:["root"]},object:{primary:["cron"],type:["user-session"]},how:["/usr/sbin/cron"]}},host:{id:["aa7ca589f1b8220002f2fc61c64cfbf1"],name:["siem-kibana"]},user:{name:["root"]},process:{pid:[725],executable:["/usr/sbin/cron"]}}},{_id:"26",data:[{field:"@timestamp",value:["2019-03-13T03:34:08.890Z"]},{field:"event.category",value:["user-login"]},{field:"host.name",value:["suricata-bangalore"]},{field:"user.name",value:["alice"]}],ecs:{_id:"26",timestamp:"2019-03-13T03:34:08.890Z",event:{action:["was-authorized"],module:["auditd"],category:["user-login"]},auditd:{result:["success"],session:["338"],data:{terminal:["/dev/pts/0"]},summary:{actor:{primary:["root"],secondary:["alice"]},object:{primary:["/dev/pts/0"],type:["user-session"]},how:["/sbin/pam_tally2"]}},host:{id:["0a63559c1acf4c419d979c4b4d8b83ff"],name:["suricata-bangalore"],ip:["139.59.11.147","10.47.0.5","fe80::ec0b:1bff:fe29:80bd"]},user:{name:["alice"]},process:{pid:[21170],executable:["/sbin/pam_tally2"]}}},{_id:"27",data:[{field:"@timestamp",value:["2019-03-22T19:13:11.026Z"]},{field:"event.action",value:["connected-to"]},{field:"event.category",value:["audit-rule"]},{field:"host.name",value:["zeek-london"]},{field:"destination.ip",value:["192.168.216.34"]},{field:"user.name",value:["alice"]}],ecs:{_id:"27",timestamp:"2019-03-22T19:13:11.026Z",event:{action:["connected-to"],module:["auditd"],category:["audit-rule"]},auditd:{result:["success"],session:["246"],summary:{actor:{primary:["alice"],secondary:["alice"]},object:{primary:["192.168.216.34"],secondary:["80"],type:["socket"]},how:["/usr/bin/wget"]}},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},destination:{ip:["192.168.216.34"],port:[80]},user:{name:["alice"]},process:{pid:[1490],name:["wget"],ppid:[1476],executable:["/usr/bin/wget"],title:["wget www.example.com"]}}},{_id:"28",data:[{field:"@timestamp",value:["2019-03-26T22:12:18.609Z"]},{field:"event.action",value:["opened-file"]},{field:"event.category",value:["audit-rule"]},{field:"host.name",value:["zeek-london"]},{field:"user.name",value:["root"]}],ecs:{_id:"28",timestamp:"2019-03-26T22:12:18.609Z",event:{action:["opened-file"],module:["auditd"],category:["audit-rule"]},auditd:{result:["success"],session:["242"],summary:{actor:{primary:["unset"],secondary:["root"]},object:{primary:["/proc/15990/attr/current"],type:["file"]},how:["/lib/systemd/systemd-journald"]}},file:{path:["/proc/15990/attr/current"],device:["00:00"],inode:["27672309"],uid:["0"],owner:["root"],gid:["0"],group:["root"],mode:["0666"]},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},user:{name:["root"]},process:{pid:[27244],name:["systemd-journal"],ppid:[1],executable:["/lib/systemd/systemd-journald"],title:["/lib/systemd/systemd-journald"],working_directory:["/"]}}},{_id:"29",data:[{field:"@timestamp",value:["2019-04-08T21:18:57.000Z"]},{field:"event.action",value:["user_login"]},{field:"event.category",value:null},{field:"host.name",value:["zeek-london"]},{field:"user.name",value:["Braden"]}],ecs:{_id:"29",event:{action:["user_login"],dataset:["login"],kind:["event"],module:["system"],outcome:["failure"]},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},source:{ip:["128.199.212.120"]},user:{name:["Braden"]},process:{pid:[6278]}}},{_id:"30",data:[{field:"@timestamp",value:["2019-04-08T22:27:14.814Z"]},{field:"event.action",value:["process_started"]},{field:"event.category",value:null},{field:"host.name",value:["zeek-london"]},{field:"user.name",value:["Evan"]}],ecs:{_id:"30",event:{action:["process_started"],dataset:["login"],kind:["event"],module:["system"],outcome:["failure"]},host:{id:["7c21f5ed03b04d0299569d221fe18bbc"],name:["zeek-london"],ip:["46.101.3.136","10.16.0.5","fe80::4066:42ff:fe19:b3b9"]},source:{ip:["128.199.212.120"]},user:{name:["Evan"]},process:{pid:[6278]}}},{_id:"31",data:[{field:"@timestamp",value:["2018-11-05T19:03:25.937Z"]},{field:"message",value:["I am a log file message"]},{field:"event.severity",value:["3"]},{field:"event.category",value:["Access"]},{field:"event.action",value:["Action"]},{field:"host.name",value:["apache"]},{field:"source.ip",value:["192.168.0.1"]},{field:"destination.ip",value:["192.168.0.3"]},{field:"destination.bytes",value:["123456"]},{field:"user.name",value:["john.dee"]}],ecs:{_id:"1",timestamp:"2018-11-05T19:03:25.937Z",host:{name:["apache"],ip:["192.168.0.1"]},event:{id:["1"],action:["Action"],category:["Access"],module:["nginx"],severity:[3]},message:["I am a log file message"],source:{ip:["192.168.0.1"],port:[80]},destination:{ip:["192.168.0.3"],port:[6343]},user:{id:["1"],name:["john.dee"]},geo:{region_name:["xx"],country_iso_code:["xx"]}}},{_id:"32",data:[],ecs:{_id:"BuBP4W0BOpWiDweSoYSg",timestamp:"2019-10-18T23:59:15.091Z",threat:{enrichments:[{indicator:{provider:["indicator_provider"],reference:["https://example.com"]},matched:{atomic:["192.168.1.1"],field:["source.ip"],type:["ip"]},feed:{name:["feed_name"]}}]}}}];var M=n(601),A=n(276);const _=()=>{const e=Object(M.b)({actionName:"connected-to",text:A.T});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:C[26].ecs,isDraggable:!1,scopeId:w.a}))},F=i.a.memo(_),D=()=>{const e=Object(M.c)({actionName:"opened-file",text:`${A.Db} ${A.kc}`});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:C[27].ecs,isDraggable:!1,scopeId:w.a}))},N=i.a.memo(D),P={file:{path:["C:\\Windows\\System32\\bcrypt.dll"],hash:{md5:["00439016776de367bad087d739a03797"],sha1:["2c4ba5c1482987d50a182bad915f52cd6611ee63"],sha256:["e70f5d8f87aab14e3160227d38387889befbe37fa4f8f5adc59eff52804b35fd"]},name:["bcrypt.dll"]},host:{os:{full:["Windows Server 2019 Datacenter 1809 (10.0.17763.1697)"],name:["Windows"],version:["1809 (10.0.17763.1697)"],family:["windows"],kernel:["1809 (10.0.17763.1697)"],platform:["windows"]},mac:["aa:bb:cc:dd:ee:ff"],name:["win2019-endpoint-1"],architecture:["x86_64"],ip:["10.1.2.3"],id:["d8ad572e-d224-4044-a57d-f5a84c0dfe5d"]},event:{category:["library"],kind:["event"],created:["2021-02-05T21:27:23.921Z"],module:["endpoint"],action:["load"],type:["start"],id:["LzzWB9jjGmCwGMvk++++Da5H"],dataset:["endpoint.events.library"]},process:{name:["sshd.exe"],pid:[9644],entity_id:["MWQxNWNmOWUtM2RjNy01Yjk3LWY1ODYtNzQzZjdjMjUxOGIyLTk2NDQtMTMyNTcwMzQwNDEuNzgyMTczODAw"],executable:["C:\\Program Files\\OpenSSH-Win64\\sshd.exe"]},agent:{type:["endpoint"]},user:{name:["SYSTEM"],domain:["NT AUTHORITY"]},message:["Endpoint DLL load event"],timestamp:"2021-02-05T21:27:23.921Z",_id:"IAUYdHcBGrBB52F2zo8Q"},R=()=>{const e=Object(S.d)({actionName:"load",text:k.q});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:P,isDraggable:!1,scopeId:w.a}))},L=i.a.memo(R);var q=n(1394),B=n(820);const z=()=>i.a.createElement(i.a.Fragment,null,B.a.renderRow({data:{destination:{bytes:[40],geo:{city_name:["New York"],continent_name:["North America"],country_iso_code:["US"],country_name:["United States"],region_name:["New York"]},ip:["10.1.2.3"],packets:[1],port:[80]},event:{action:["network_flow"],category:["network_traffic"],duration:[q.a],end:["2018-11-12T19:03:25.936Z"],start:["2018-11-12T19:03:25.836Z"]},_id:"abcd",network:{bytes:[100],community_id:["we.live.in.a"],direction:["outgoing"],packets:[3],protocol:["http"],transport:["tcp"]},process:{name:["rat"]},source:{bytes:[60],geo:{city_name:["Atlanta"],continent_name:["North America"],country_iso_code:["US"],country_name:["United States"],region_name:["Georgia"]},ip:["192.168.1.2"],packets:[2],port:[9987]},timestamp:"2018-11-12T19:03:25.936Z",tls:{client_certificate:{fingerprint:{sha1:["tls.client_certificate.fingerprint.sha1-value"]}},fingerprints:{ja3:{hash:["tls.fingerprints.ja3.hash-value"]}},server_certificate:{fingerprint:{sha1:["tls.server_certificate.fingerprint.sha1-value"]}}},user:{name:["first.last"]}},isDraggable:!1,scopeId:w.a})),$=i.a.memo(z),V={host:{os:{full:["Windows Server 2019 Datacenter 1809 (10.0.17763.1697)"],name:["Windows"],version:["1809 (10.0.17763.1697)"],family:["windows"],kernel:["1809 (10.0.17763.1697)"],platform:["windows"]},mac:["aa:bb:cc:dd:ee:ff"],name:["win2019-endpoint-1"],architecture:["x86_64"],ip:["10.1.2.3"],id:["d8ad572e-d224-4044-a57d-f5a84c0dfe5d"]},event:{category:["registry"],kind:["event"],created:["2021-02-04T13:44:31.559Z"],module:["endpoint"],action:["modification"],type:["change"],id:["LzzWB9jjGmCwGMvk++++CbOn"],dataset:["endpoint.events.registry"]},process:{name:["GoogleUpdate.exe"],pid:[7408],entity_id:["MWQxNWNmOWUtM2RjNy01Yjk3LWY1ODYtNzQzZjdjMjUxOGIyLTc0MDgtMTMyNTY5MTk4NDguODY4NTI0ODAw"],executable:["C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe"]},registry:{hive:["HKLM"],key:["SOFTWARE\\WOW6432Node\\Google\\Update\\ClientState\\{430FD4D0-B729-4F61-AA34-91526481799D}\\CurrentState"],path:["HKLM\\SOFTWARE\\WOW6432Node\\Google\\Update\\ClientState\\{430FD4D0-B729-4F61-AA34-91526481799D}\\CurrentState\\StateValue"],value:["StateValue"]},agent:{type:["endpoint"]},user:{name:["SYSTEM"],domain:["NT AUTHORITY"]},message:["Endpoint registry event"],timestamp:"2021-02-04T13:44:31.559Z",_id:"4cxLbXcBGrBB52F2uOfF"},U=()=>{const e=Object(S.e)({actionName:"modification",text:k.u});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:V,isDraggable:!1,scopeId:w.a}))},G=i.a.memo(U);var H=n(871);const W=()=>i.a.createElement(i.a.Fragment,null,H.a.renderRow({data:C[2].ecs,isDraggable:!1,scopeId:w.a})),Q=i.a.memo(W),Y={_id:"2MjPcG0BOpWiDweSoutC",user:{id:["S-1-5-21-3573271228-3407584681-1597858646-1002"],domain:["Anvi-Acer"],name:["Arun"]},host:{os:{platform:["windows"],name:["Windows"],version:["6.1"]},ip:["10.178.85.222"],name:["HD-obe-8bf77f54"]},event:{module:["endgame"],dataset:["esensor"],action:["termination_event"],category:["process"],kind:["event"]},timestamp:"1569555712000",process:{hash:{md5:["bd4401441a21bf1abce6404f4231db4d"],sha1:["797255e72d5ed5c058d4785950eba7abaa057653"],sha256:["87976f3430cc99bc939e0694247c0759961a49832b87218f4313d6fc0bc3a776"]},pid:[442384],ppid:[8],name:["RuntimeBroker.exe"],executable:["C:\\Windows\\System32\\RuntimeBroker.exe"]},endgame:{pid:[442384],process_name:["RuntimeBroker.exe"],exit_code:[0]}},K=()=>{const e=Object(S.h)({actionName:"termination_event",text:k.H});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:Y,isDraggable:!1,scopeId:w.a}))},X=i.a.memo(K),J={_id:"S8jPcG0BOpWiDweSou3g",user:{id:["S-1-5-18"],domain:["NT AUTHORITY"],name:["SYSTEM"]},host:{os:{platform:["windows"],name:["Windows"],version:["6.1"]},ip:["10.178.85.222"],name:["HD-obe-8bf77f54"]},event:{module:["endgame"],dataset:["esensor"],action:["request_event"],category:["network"],kind:["event"]},message:["DNS query is completed for the name %1, type %2, query options %3 with status %4 Results %5 "],timestamp:"1569555712000",dns:{question:{name:["update.googleapis.com"],type:["A"]},resolved_ip:["10.100.197.67"]},network:{protocol:["dns"]},process:{pid:[443192],name:["GoogleUpdate.exe"],executable:["C:\\Program Files (x86)\\Google\\Update\\GoogleUpdate.exe"]},winlog:{event_id:[3008]},endgame:{process_name:["GoogleUpdate.exe"],pid:[443192]}},Z=()=>{const e=Object(S.a)();return i.a.createElement(i.a.Fragment,null,e.renderRow({data:J,isDraggable:!1,scopeId:w.a}))},ee=i.a.memo(Z),te={_id:"BcjPcG0BOpWiDweSou3g",user:{id:["S-1-5-21-3573271228-3407584681-1597858646-1002"],domain:["Anvi-Acer"],name:["Arun"]},host:{os:{platform:["windows"],name:["Windows"],version:["6.1"]},ip:["10.178.85.222"],name:["HD-obe-8bf77f54"]},event:{module:["endgame"],dataset:["esensor"],action:["creation_event"],category:["process"],type:["process_start"],kind:["event"]},timestamp:"1569555712000",process:{hash:{md5:["62d06d7235b37895b68de56687895743"],sha1:["12563599116157778a22600d2a163d8112aed845"],sha256:["d4c97ed46046893141652e2ec0056a698f6445109949d7fcabbce331146889ee"]},pid:[441684],ppid:[8],name:["Microsoft.Photos.exe"],executable:["C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\\Microsoft.Photos.exe"],args:["C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\\Microsoft.Photos.exe","-ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca"]},endgame:{process_name:["Microsoft.Photos.exe"],pid:[441684],parent_process_name:["svchost.exe"]}},ne=()=>{const e=Object(S.b)({actionName:"creation_event",text:k.A});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:te,isDraggable:!1,scopeId:w.a}))},ae=i.a.memo(ne),ie={_id:"98jPcG0BOpWiDweSouzg",user:{id:["S-1-5-21-3573271228-3407584681-1597858646-1002"],domain:["Anvi-Acer"],name:["Arun"]},host:{os:{platform:["windows"],name:["Windows"],version:["6.1"]},ip:["10.178.85.222"],name:["HD-obe-8bf77f54"]},event:{module:["endgame"],dataset:["esensor"],action:["file_create_event"],category:["file"],kind:["event"]},timestamp:"1569555712000",endgame:{process_name:["chrome.exe"],pid:[11620],file_path:["C:\\Users\\Arun\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\63d78c21-e593-4484-b7a9-db33cd522ddc.tmp"]}},re={_id:"OMjPcG0BOpWiDweSeuW9",user:{id:["S-1-5-18"],domain:["NT AUTHORITY"],name:["SYSTEM"]},host:{os:{platform:["windows"],name:["Windows"],version:["10.0"]},ip:["10.134.159.150"],name:["HD-v1s-d2118419"]},event:{module:["endgame"],dataset:["esensor"],action:["file_delete_event"],category:["file"],kind:["event"]},timestamp:"1569555704000",endgame:{pid:[1084],file_name:["tmp000002f6"],file_path:["C:\\Windows\\TEMP\\tmp00000404\\tmp000002f6"],process_name:["AmSvc.exe"]}},oe=()=>{const e=Object(S.g)({actionName:"file_delete_event",text:k.f});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:re,isDraggable:!1,scopeId:w.a}))},se=i.a.memo(oe),le=()=>{const e=Object(S.f)({actionName:"file_create_event",text:k.e});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:ie,isDraggable:!1,scopeId:w.a}))},ce=i.a.memo(le),ue={_id:"QsjPcG0BOpWiDweSeuRE",user:{id:["S-1-5-18"],domain:["NT AUTHORITY"],name:["SYSTEM"]},host:{os:{platform:["windows"],name:["Windows"],version:["10.0"]},ip:["10.134.159.150"],name:["HD-v1s-d2118419"]},event:{module:["endgame"],dataset:["esensor"],action:["user_logon"],category:["authentication"],type:["authentication_success"],kind:["event"]},message:["An account was successfully logged on.\r\n\r\nSubject:\r\n\tSecurity ID:\t\tS-1-5-18\r\n\tAccount Name:\t\tWIN-Q3DOP1UKA81$\r\n\tAccount Domain:\t\tWORKGROUP\r\n\tLogon ID:\t\t0x3e7\r\n\r\nLogon Type:\t\t\t5\r\n\r\nNew Logon:\r\n\tSecurity ID:\t\tS-1-5-18\r\n\tAccount Name:\t\tSYSTEM\r\n\tAccount Domain:\t\tNT AUTHORITY\r\n\tLogon ID:\t\t0x3e7\r\n\tLogon GUID:\t\t{00000000-0000-0000-0000-000000000000}\r\n\r\nProcess Information:\r\n\tProcess ID:\t\t0x1b0\r\n\tProcess Name:\t\tC:\\Windows\\System32\\services.exe\r\n\r\nNetwork Information:\r\n\tWorkstation Name:\t\r\n\tSource Network Address:\t-\r\n\tSource Port:\t\t-\r\n\r\nDetailed Authentication Information:\r\n\tLogon Process:\t\tAdvapi  \r\n\tAuthentication Package:\tNegotiate\r\n\tTransited Services:\t-\r\n\tPackage Name (NTLM only):\t-\r\n\tKey Length:\t\t0\r\n\r\nThis event is generated when a logon session is created. It is generated on the computer that was accessed.\r\n\r\nThe subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.\r\n\r\nThe logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).\r\n\r\nThe New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.\r\n\r\nThe network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.\r\n\r\nThe authentication information fields provide detailed information about this specific logon request.\r\n\t- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.\r\n\t- Transited services indicate which intermediate services have participated in this logon request.\r\n\t- Package name indicates which sub-protocol was used among the NTLM protocols.\r\n\t- Key length indicates the length of the generated session key. This will be 0 if no session key was requested."],timestamp:"1569555704000",process:{pid:[432],name:["C:\\Windows\\System32\\services.exe"],executable:["C:\\Windows\\System32\\services.exe"]},winlog:{event_id:[4624]},endgame:{target_logon_id:["0x3e7"],pid:[432],process_name:["C:\\Windows\\System32\\services.exe"],logon_type:[5],subject_user_name:["WIN-Q3DOP1UKA81$"],subject_logon_id:["0x3e7"],target_user_name:["SYSTEM"],target_domain_name:["NT AUTHORITY"]}},de=()=>{const e=Object(S.i)({actionName:"user_logon"});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:ue,isDraggable:!1,scopeId:w.a}))},pe=i.a.memo(de),me={_id:"LsjPcG0BOpWiDweSCNfu",user:{id:["S-1-5-18"],domain:["NT AUTHORITY"],name:["SYSTEM"]},host:{os:{platform:["windows"],name:["Windows"],version:["10.0"]},ip:["10.43.255.177"],name:["HD-gqf-0af7b4fe"]},event:{module:["endgame"],dataset:["esensor"],action:["ipv4_connection_accept_event"],category:["network"],kind:["event"]},timestamp:"1569555676000",network:{community_id:["1:network-community_id"],transport:["tcp"]},process:{pid:[1084],name:["AmSvc.exe"],executable:["C:\\Program Files\\Cybereason ActiveProbe\\AmSvc.exe"]},source:{ip:["127.0.0.1"],port:[49306]},destination:{port:[49305],ip:["127.0.0.1"]},endgame:{pid:[1084]}},fe=()=>{const e=Object(S.j)({actionName:"ipv4_connection_accept_event",text:k.b});return i.a.createElement(i.a.Fragment,null,e.renderRow({data:me,isDraggable:!1,scopeId:w.a}))},ge=i.a.memo(fe);var be=n(870);const ye=()=>i.a.createElement(i.a.Fragment,null,be.a.renderRow({data:C[31].ecs,isDraggable:!1,scopeId:w.a})),he=i.a.memo(ye);var ve=n(873);const Ee=()=>i.a.createElement(i.a.Fragment,null,ve.a.renderRow({data:C[13].ecs,isDraggable:!1,scopeId:w.a})),xe=i.a.memo(Ee);var je=n(5);const Oe=je.i18n.translate("xpack.securitySolution.eventRenderers.alertName",{defaultMessage:"Alert"}),Se=je.i18n.translate("xpack.securitySolution.eventRenderers.alertsName",{defaultMessage:"Alerts"}),ke=je.i18n.translate("xpack.securitySolution.eventRenderers.alertsDescription",{defaultMessage:"Alerts are displayed when malware or ransomware is prevented and detected"}),we=je.i18n.translate("xpack.securitySolution.eventRenderers.auditdName",{defaultMessage:"Auditd"}),Ie=je.i18n.translate("xpack.securitySolution.eventRenderers.auditdDescriptionPart1",{defaultMessage:"audit events convey security-relevant logs from the Linux Audit Framework."}),Te=je.i18n.translate("xpack.securitySolution.eventRenderers.auditdFileName",{defaultMessage:"Auditd File"}),Ce=je.i18n.translate("xpack.securitySolution.eventRenderers.auditdFileDescriptionPart1",{defaultMessage:"File events show users (and system accounts) performing CRUD operations on files via specific processes."}),Me=je.i18n.translate("xpack.securitySolution.eventRenderers.authenticationName",{defaultMessage:"Authentication"}),Ae=je.i18n.translate("xpack.securitySolution.eventRenderers.authenticationDescriptionPart1",{defaultMessage:"Authentication events show users (and system accounts) successfully or unsuccessfully logging into hosts."}),_e=je.i18n.translate("xpack.securitySolution.eventRenderers.authenticationDescriptionPart2",{defaultMessage:"Some authentication events may include additional details when users authenticate on behalf of other users."}),Fe=je.i18n.translate("xpack.securitySolution.eventRenderers.dnsName",{defaultMessage:"Domain Name System (DNS)"}),De=je.i18n.translate("xpack.securitySolution.eventRenderers.dnsDescriptionPart1",{defaultMessage:"Domain Name System (DNS) events show users (and system accounts) making requests via specific processes to translate from host names to IP addresses."}),Ne=je.i18n.translate("xpack.securitySolution.eventRenderers.fileName",{defaultMessage:"File"}),Pe=je.i18n.translate("xpack.securitySolution.eventRenderers.fileDescriptionPart1",{defaultMessage:"File events show users (and system accounts) performing CRUD operations on files via specific processes."}),Re=je.i18n.translate("xpack.securitySolution.eventRenderers.fimName",{defaultMessage:"File Integrity Module (FIM)"}),Le=je.i18n.translate("xpack.securitySolution.eventRenderers.fimDescriptionPart1",{defaultMessage:"File Integrity Module (FIM) events show users (and system accounts) performing CRUD operations on files via specific processes."}),qe=je.i18n.translate("xpack.securitySolution.eventRenderers.flowName",{defaultMessage:"Flow"}),Be=je.i18n.translate("xpack.securitySolution.eventRenderers.flowDescriptionPart1",{defaultMessage:"The Flow renderer visualizes the flow of data between a source and destination. It's applicable to many types of events."}),ze=je.i18n.translate("xpack.securitySolution.eventRenderers.flowDescriptionPart2",{defaultMessage:"The hosts, ports, protocol, direction, duration, amount transferred, process, geographic location, and other details are visualized when available."}),$e=je.i18n.translate("xpack.securitySolution.eventRenderers.libraryName",{defaultMessage:"Library"}),Ve=je.i18n.translate("xpack.securitySolution.eventRenderers.libraryDescription",{defaultMessage:"Library events display a Dynamically Linked Library (DLL) being loaded by a process"}),Ue=je.i18n.translate("xpack.securitySolution.eventRenderers.processName",{defaultMessage:"Process"}),Ge=je.i18n.translate("xpack.securitySolution.eventRenderers.processDescriptionPart1",{defaultMessage:"Process events show users (and system accounts) starting and stopping processes."}),He=je.i18n.translate("xpack.securitySolution.eventRenderers.processDescriptionPart2",{defaultMessage:"Details including the command line arguments, parent process, and if applicable, file hashes are displayed when available."}),We=je.i18n.translate("xpack.securitySolution.eventRenderers.registryName",{defaultMessage:"Registry"}),Qe=je.i18n.translate("xpack.securitySolution.eventRenderers.registryDescription",{defaultMessage:"Registry events show updates to the Windows Registry"}),Ye=je.i18n.translate("xpack.securitySolution.eventRenderers.socketName",{defaultMessage:"Socket (Network)"}),Ke=je.i18n.translate("xpack.securitySolution.eventRenderers.socketDescriptionPart1",{defaultMessage:"Socket (Network) events show processes listening, accepting, and closing connections."}),Xe=je.i18n.translate("xpack.securitySolution.eventRenderers.socketDescriptionPart2",{defaultMessage:"Details including the protocol, ports, and a community ID for correlating all network events related to a single flow are displayed when available."}),Je=je.i18n.translate("xpack.securitySolution.eventRenderers.suricataName",{defaultMessage:"Suricata"}),Ze=je.i18n.translate("xpack.securitySolution.eventRenderers.suricataDescriptionPart1",{defaultMessage:"Summarizes"}),et=je.i18n.translate("xpack.securitySolution.eventRenderers.suricataDescriptionPart2",{defaultMessage:"intrusion detection (IDS), inline intrusion prevention (IPS), and network security monitoring (NSM) events"}),tt=je.i18n.translate("xpack.securitySolution.eventRenderers.systemName",{defaultMessage:"System"}),nt=je.i18n.translate("xpack.securitySolution.eventRenderers.systemDescriptionPart1",{defaultMessage:"The Auditbeat"}),at=je.i18n.translate("xpack.securitySolution.eventRenderers.systemDescriptionPart2",{defaultMessage:"module collects various security related information about a system."}),it=je.i18n.translate("xpack.securitySolution.eventRenderers.systemDescriptionPart3",{defaultMessage:"All datasets send both periodic state information (e.g. all currently running processes) and real-time changes (e.g. when a new process starts or stops)."}),rt=je.i18n.translate("xpack.securitySolution.eventRenderers.threatMatchName",{defaultMessage:"Threat Indicator Match"}),ot=je.i18n.translate("xpack.securitySolution.eventRenderers.threatMatchDescription",{defaultMessage:"Summarizes events that matched threat indicators"}),st=je.i18n.translate("xpack.securitySolution.eventRenderers.zeekName",{defaultMessage:"Zeek (formerly Bro)"}),lt=je.i18n.translate("xpack.securitySolution.eventRenderers.zeekDescriptionPart1",{defaultMessage:"Summarizes events from the"}),ct=je.i18n.translate("xpack.securitySolution.eventRenderers.zeekDescriptionPart2",{defaultMessage:"Network Security Monitoring (NSM) tool"}),ut={[v.d.alert]:Oe,[v.d.alerts]:Se,[v.d.auditd]:we,[v.d.auditd_file]:Te,[v.d.library]:$e,[v.d.system_security_event]:Me,[v.d.system_dns]:Fe,[v.d.netflow]:qe,[v.d.system]:tt,[v.d.system_endgame_process]:Ue,[v.d.registry]:We,[v.d.system_fim]:Re,[v.d.system_file]:Ne,[v.d.system_socket]:Ye,[v.d.suricata]:"Suricata",[v.d.threat_match]:rt,[v.d.zeek]:st,[v.d.plain]:""},dt=({children:e,url:t})=>i.a.createElement(r.EuiLink,{href:t,target:"_blank",rel:"noopener nofollow noreferrer","data-test-subj":"externalLink"},e),pt=[{id:v.d.alerts,name:ut[v.d.alerts],description:ke,example:T,searchableDescription:ke},{id:v.d.auditd,name:ut[v.d.auditd],description:i.a.createElement("span",null,i.a.createElement(dt,{url:"https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-auditd.html"},we)," ",Ie),example:F,searchableDescription:`${we} ${Ie}`},{id:v.d.auditd_file,name:ut[v.d.auditd_file],description:i.a.createElement("span",null,i.a.createElement(dt,{url:"https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-auditd.html"},we)," ",Ce),example:N,searchableDescription:`${Te} ${Ce}`},{id:v.d.library,name:ut[v.d.library],description:Ve,example:L,searchableDescription:Ve},{id:v.d.system_security_event,name:ut[v.d.system_security_event],description:i.a.createElement("div",null,i.a.createElement("p",null,Ae),i.a.createElement("br",null),i.a.createElement("p",null,_e)),example:pe,searchableDescription:`${Ae} ${_e}`},{id:v.d.system_dns,name:ut[v.d.system_dns],description:De,example:ee,searchableDescription:De},{id:v.d.netflow,name:ut[v.d.netflow],description:i.a.createElement("div",null,i.a.createElement("p",null,Be),i.a.createElement("br",null),i.a.createElement("p",null,ze)),example:$,searchableDescription:`${Be} ${ze}`},{id:v.d.system,name:ut[v.d.system],description:i.a.createElement("div",null,i.a.createElement("p",null,nt," ",i.a.createElement(dt,{url:"https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-system.html"},tt)," ",at),i.a.createElement("br",null),i.a.createElement("p",null,it)),example:X,searchableDescription:`${nt} ${tt} ${at} ${it}`},{id:v.d.system_endgame_process,name:ut[v.d.system_endgame_process],description:i.a.createElement("div",null,i.a.createElement("p",null,Ge),i.a.createElement("br",null),i.a.createElement("p",null,He)),example:ae,searchableDescription:`${Ge} ${He}`},{id:v.d.registry,name:ut[v.d.registry],description:Qe,example:G,searchableDescription:Qe},{id:v.d.system_fim,name:ut[v.d.system_fim],description:Le,example:ce,searchableDescription:Le},{id:v.d.system_file,name:ut[v.d.system_file],description:Pe,example:se,searchableDescription:Pe},{id:v.d.system_socket,name:ut[v.d.system_socket],description:i.a.createElement("div",null,i.a.createElement("p",null,Ke),i.a.createElement("br",null),i.a.createElement("p",null,Xe)),example:ge,searchableDescription:`${Ke} ${Xe}`},{id:v.d.suricata,name:ut[v.d.suricata],description:i.a.createElement("p",null,Ze," ",i.a.createElement(dt,{url:"https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-suricata.html"},Je)," ",et),example:Q,searchableDescription:`${Ze} ${Je} ${et}`},{id:v.d.threat_match,name:ut[v.d.threat_match],description:ot,example:he,searchableDescription:`${rt} ${ot}`},{id:v.d.zeek,name:ut[v.d.zeek],description:i.a.createElement("p",null,lt," ",i.a.createElement(dt,{url:"https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-zeek.html"},st)," ",ct),example:xe,searchableDescription:`${lt} ${st} ${ct}`}],mt=l()(r.EuiInMemoryTable).withConfig({displayName:"StyledEuiInMemoryTable",componentId:"sc-ietqpj-0"})([".euiTable{tr > *:last-child{display:none;}.euiTableHeaderCellCheckbox > .euiTableCellContent{display:none;}}"]),ft=l()(r.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-ietqpj-1"})(["overflow:auto;> div{padding:0;> div{margin:0;}}"]),gt=e=>{if(e)return i.a.createElement(ft,{grow:1},i.a.createElement(e,null))},bt={box:{incremental:!0,schema:!0}},yt=()=>i.a.createElement(i.a.Fragment,null),ht={sort:{field:"name",direction:"asc"}},vt=l.a.button.withConfig({displayName:"StyledNameButton",componentId:"sc-ietqpj-2"})(["text-align:left;"]),Et=({excludedRowRendererIds:e=[],setExcludedRowRendererIds:t})=>{const n=Object(a.useCallback)((n=>()=>{const a=Object(j.xor)([n.id],e);t(a)}),[e,t]),o=Object(a.useCallback)(((e,t)=>i.a.createElement(vt,{className:"kbn-resetFocusState",onClick:n(t)},e)),[n]),s=Object(a.useCallback)(((t,a)=>i.a.createElement(r.EuiCheckbox,{id:a.id,onChange:n(a),checked:!e.includes(a.id)})),[e,n]),l=Object(a.useMemo)((()=>[{field:"id",name:"",sortable:!1,width:"32px",render:s},{field:"name",name:"Name",sortable:!0,width:"10%",render:o},{field:"description",name:"Description",width:"25%",render:e=>e},{field:"example",name:"Example",width:"65%",render:gt},{field:"searchableDescription",name:"Searchable Description",sortable:!1,width:"0px",render:yt}]),[s,o]);return i.a.createElement(mt,{items:pt,itemId:"id",columns:l,search:bt,sorting:ht,isSelectable:!0})};Et.displayName="RowRenderersBrowserComponent";const xt=i.a.memo(Et);xt.displayName="RowRenderersBrowser";const jt=je.i18n.translate("xpack.securitySolution.customizeEventRenderers.eventRenderersTitle",{defaultMessage:"Event Renderers"}),Ot=je.i18n.translate("xpack.securitySolution.customizeEventRenderers.customizeEventRenderersTitle",{defaultMessage:"Customize Event Renderers"}),St=je.i18n.translate("xpack.securitySolution.customizeEventRenderers.customizeEventRenderersDescription",{defaultMessage:"Event Renderers automatically convey the most relevant details in an event to reveal its story"}),kt=je.i18n.translate("xpack.securitySolution.customizeEventRenderers.enableAllRenderersButtonLabel",{defaultMessage:"Enable all"}),wt=je.i18n.translate("xpack.securitySolution.customizeEventRenderers.disableAllRenderersButtonLabel",{defaultMessage:"Disable all"}),It=l()(r.EuiModal).withConfig({displayName:"StyledEuiModal",componentId:"sc-m3n5c2-0"})([""," max-width:95vw;min-height:90vh;> .euiModal__flex{max-height:90vh;}"],(({theme:e})=>`margin-top: ${e.eui.euiSizeXXL};`)),Tt=l()(r.EuiModalBody).withConfig({displayName:"StyledEuiModalBody",componentId:"sc-m3n5c2-1"})([".euiModalBody__overflow{display:flex;align-items:stretch;overflow:hidden;> div{display:flex;flex-direction:column;flex:1;> div:first-child{flex:0;}.euiBasicTable{flex:1;overflow:auto;}}}"]),Ct=({timelineId:e})=>{const t=Object(o.useDispatch)(),n=Object(a.useMemo)((()=>m.b.getTimelineByIdSelector()),[]),s=Object(f.a)((t=>{var a;return(null!==(a=n(t,e))&&void 0!==a?a:x.b).excludedRowRendererIds})),[l,c]=Object(a.useState)(!1),u=Object(a.useCallback)((n=>t(Object(E.setExcludedRowRendererIds)({id:e,excludedRowRendererIds:n}))),[t,e]),d=Object(a.useCallback)((()=>c(!l)),[l]),p=Object(a.useCallback)((()=>c(!1)),[]),g=Object(a.useCallback)((()=>{u(Object.values(v.d))}),[u]),b=Object(a.useCallback)((()=>{u([])}),[u]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiToolTip,{content:Ot},i.a.createElement(r.EuiButtonIcon,{"aria-label":Ot,"data-test-subj":"show-row-renderers-gear",iconType:"gear",onClick:d},jt)),l&&i.a.createElement(It,{onClose:p,"data-test-subj":"row-renderers-modal"},i.a.createElement(r.EuiModalHeader,null,i.a.createElement(r.EuiFlexGroup,{alignItems:"center",justifyContent:"spaceBetween",direction:"row",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiModalHeaderTitle,null,Ot),i.a.createElement(r.EuiText,{size:"s"},St)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiFlexGroup,null,i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{size:"s","data-test-subj":"disable-all",onClick:g},wt)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{fill:!0,size:"s","data-test-subj":"enable-all",onClick:b},kt)))))),i.a.createElement(Tt,null,i.a.createElement(xt,{excludedRowRendererIds:s,setExcludedRowRendererIds:u}))))},Mt=i.a.memo(Ct);var At=n(497),_t=n(4),Ft=n(804);const Dt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.pinSelected",{defaultMessage:"Pin selected"}),Nt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.selectAll",{defaultMessage:"All"}),Pt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.selectNone",{defaultMessage:"None"}),Rt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.selectPinned",{defaultMessage:"Pinned"}),Lt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.selectUnpinned",{defaultMessage:"Unpinned"}),qt=je.i18n.translate("xpack.securitySolution.timeline.eventsSelect.actions.unpinSelected",{defaultMessage:"Unpin selected"}),Bt=l.a.div.withConfig({displayName:"InputDisplay",componentId:"sc-oi2e53-0"})(["width:5px;"]);Bt.displayName="InputDisplay";const zt=l.a.div.withConfig({displayName:"PinIconContainer",componentId:"sc-oi2e53-1"})(["margin-right:5px;"]);zt.displayName="PinIconContainer";const $t=l.a.div.withConfig({displayName:"PinActionItem",componentId:"sc-oi2e53-2"})(["display:flex;flex-direction:row;"]);$t.displayName="PinActionItem";const Vt=i.a.memo((({text:e})=>i.a.createElement(r.EuiText,{size:"s",color:"subdued"},e)));Vt.displayName="DropdownDisplay";const Ut=Object(s.createGlobalStyle)([".eventsSelectItem{width:100% !important;.euiContextMenu__icon{display:none !important;}}.eventsSelectDropdown{width:","px;}"],60),Gt=l.a.div.withConfig({displayName:"CheckboxContainer",componentId:"sc-1giocnz-0"})(["position:relative;"]);Gt.displayName="CheckboxContainer";const Ht=l.a.div.withConfig({displayName:"PositionedCheckbox",componentId:"sc-1giocnz-1"})(["left:7px;position:absolute;top:-28px;"]);Ht.displayName="PositionedCheckbox";const Wt=i.a.memo((({checkState:e,timelineId:t})=>i.a.createElement("div",{"data-test-subj":"events-select"},i.a.createElement(r.EuiSuperSelect,{className:"eventsSelectDropdown","data-test-subj":"events-select-dropdown",itemClassName:"eventsSelectItem",onChange:j.noop,options:[{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement(Vt,{text:Nt}),value:"select-all"},{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement(Vt,{text:Pt}),value:"select-none"},{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement(Vt,{text:Rt}),value:"select-pinned"},{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement(Vt,{text:Lt}),value:"select-unpinned"},{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement($t,null,i.a.createElement(zt,null,i.a.createElement(Ft.a,{allowUnpinning:!0,isAlert:!1,pinned:!0})),i.a.createElement(Vt,{text:Dt})),value:"pin-selected"},{inputDisplay:i.a.createElement(Bt,null),disabled:!0,dropdownDisplay:i.a.createElement($t,null,i.a.createElement(zt,null,i.a.createElement(Ft.a,{allowUnpinning:!0,isAlert:!1,pinned:!1})),i.a.createElement(Vt,{text:qt})),value:"unpin-selected"}]}),i.a.createElement(Gt,{"data-test-subj":"timeline-events-select-checkbox-container"},i.a.createElement(Ht,{"data-test-subj":"timeline-events-select-positioned-checkbox"},i.a.createElement(r.EuiCheckbox,{checked:"checked"===e,"data-test-subj":"events-select-checkbox",disabled:!0,id:`timeline-${t}-events-select`,indeterminate:"indeterminate"===e,onChange:j.noop}))),i.a.createElement(Ut,null))));Wt.displayName="EventsSelect";var Qt=n(564);const Yt=l.a.div.withConfig({displayName:"SortingColumnsContainer",componentId:"sc-1ls1217-0"})(["button{color:",";}.euiPopover .euiButtonEmpty{padding:0;.euiButtonEmpty__text{display:none;}}"],(({theme:e})=>e.eui.euiColorPrimary)),Kt=l.a.div.withConfig({displayName:"FieldBrowserContainer",componentId:"sc-1ls1217-1"})([".euiToolTipAnchor{.euiButtonContent{padding:",";}button{color:",";}.euiButtonContent__icon{width:16px;height:16px;}.euiButtonEmpty__text{display:none;}}"],(({theme:e})=>`0 ${e.eui.euiSizeXS}`),(({theme:e})=>e.eui.euiColorPrimary)),Xt=l.a.div.withConfig({displayName:"ActionsContainer",componentId:"sc-1ls1217-2"})(["align-items:center;display:flex;"]),Jt=({width:e,browserFields:t,columnHeaders:n,isEventViewer:s=!1,isSelectAllChecked:l,onSelectAll:v,showEventsSelect:E,showSelectAllCheckbox:x,sort:j,tabType:O,timelineId:S,fieldBrowserOptions:k})=>{const{triggersActionsUi:w}=Object(b.j)().services,{globalFullScreen:I,setGlobalFullScreen:T}=Object(g.a)(),{timelineFullScreen:C,setTimelineFullScreen:M}=Object(g.c)(),A=Object(o.useDispatch)(),_=Object(a.useMemo)((()=>m.b.getTimelineByIdSelector()),[]),{defaultColumns:F}=Object(f.a)((e=>_(e,S))),D=Object(a.useCallback)((()=>{S===c.f.active?M(!C):T(!I)}),[S,M,C,T,I]),N=Object(a.useMemo)((()=>Object(u.b)({globalFullScreen:I,isActiveTimelines:Object(d.isActiveTimeline)(S),timelineFullScreen:C})),[I,C,S]),P=Object(a.useCallback)((e=>{v({isSelected:e.currentTarget.checked})}),[v]),R=Object(a.useCallback)((e=>A(m.a.updateSort({id:S,sort:e.map((({id:e,direction:t})=>{var a,i;const r=n.find((t=>t.id===e)),o=null!==(a=null==r?void 0:r.type)&&void 0!==a?a:"",s=null!==(i=null==r?void 0:r.esTypes)&&void 0!==i?i:[];return{columnId:e,columnType:o,esTypes:s,sortDirection:t}}))}))),[n,A,S]),L=Object(a.useMemo)((()=>{var e;return{onSort:R,columns:null!==(e=null==j?void 0:j.map((({columnId:e,sortDirection:t})=>({id:e,direction:t}))))&&void 0!==e?e:[]}}),[R,j]),q=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.reduce(((e,t)=>{var n;return{...e,[t.id]:null!==(n=t.displayAsText)&&void 0!==n?n:t.id}}),{}))&&void 0!==e?e:{}}),[n]),B=Object(a.useMemo)((()=>{var e;return null!==(e=null==n?void 0:n.map((({aggregatable:e,displayAsText:t,id:n,type:a})=>({id:n,isSortable:e,displayAsText:t,schema:a}))))&&void 0!==e?e:[]}),[n]),z=Object(a.useCallback)((()=>{A(m.a.updateColumns({id:S,columns:F}))}),[F,A,S]),$=Object(a.useCallback)((e=>{n.some((({id:t})=>t===e))?A(m.a.removeColumn({columnId:e,id:S})):A(m.a.upsertColumn({column:Object(p.a)(e,F),id:S,index:1}))}),[n,A,S,F]),V=Object(r.useDataGridColumnSorting)(B,L,{},[],q);return i.a.createElement(Xt,null,x&&i.a.createElement(h.o,{role:"checkbox"},i.a.createElement(h.p,{textAlign:"center",width:y.b},i.a.createElement(r.EuiCheckbox,{"data-test-subj":"select-all-events",id:"select-all-events",checked:l,onChange:P}))),i.a.createElement(h.o,{role:"button"},i.a.createElement(Kt,null,w.getFieldBrowser({browserFields:t,columnIds:n.map((({id:e})=>e)),onResetColumns:z,onToggleColumn:$,options:k}))),i.a.createElement(h.o,{role:"button"},i.a.createElement(Mt,{"data-test-subj":"row-renderers-browser",timelineId:S})),i.a.createElement(h.o,{role:"button"},i.a.createElement(h.p,{textAlign:"center",width:y.b},i.a.createElement(r.EuiToolTip,{content:N?At.a:Qt.e},i.a.createElement(r.EuiButtonIcon,{"aria-label":Object(u.b)({globalFullScreen:I,isActiveTimelines:Object(d.isActiveTimeline)(S),timelineFullScreen:C})?At.a:Qt.e,className:N?_t.yb:"",color:N?"ghost":"primary","data-test-subj":Object(d.isActiveTimeline)(S)?"full-screen-active":"full-screen",iconType:"fullScreen",onClick:D})))),O!==c.g.eql&&i.a.createElement(h.o,{role:"button","data-test-subj":"timeline-sorting-fields"},i.a.createElement(h.p,{textAlign:"center",width:y.b},i.a.createElement(r.EuiToolTip,{content:Qt.l},i.a.createElement(Yt,null,V)))),E&&i.a.createElement(h.o,{role:"button"},i.a.createElement(h.p,{textAlign:"center",width:y.b},i.a.createElement(Wt,{checkState:"unchecked",timelineId:S}))))};Jt.displayName="HeaderActionsComponent";const Zt=i.a.memo(Jt)},function(e,t,n){"use strict";n.d(t,"a",(function(){return Ie})),n.d(t,"b",(function(){return Me})),n.d(t,"c",(function(){return Pe})),n.d(t,"e",(function(){return Ee})),n.d(t,"d",(function(){return Ne})),n.d(t,"f",(function(){return Re.a}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(41),c=n.n(l),u=n(5);const d=u.i18n.translate("xpack.securitySolution.artifactCard.lastUpdated",{defaultMessage:"Last updated"}),p=u.i18n.translate("xpack.securitySolution.artifactCard.created",{defaultMessage:"Created"}),m=u.i18n.translate("xpack.securitySolution.artifactCard.lastUpdatedBy",{defaultMessage:"Updated by"}),f=u.i18n.translate("xpack.securitySolution.artifactCard.createdBy",{defaultMessage:"Created by"}),g=u.i18n.translate("xpack.securitySolution.artifactCard.globalEffectScope",{defaultMessage:"Applied globally"}),b=(e=0)=>u.i18n.translate("xpack.securitySolution.artifactCard.policyEffectScope",{defaultMessage:"Applied to {count} {count, plural, one {policy} other {policies}}",values:{count:e}}),y=(e=0)=>u.i18n.translate("xpack.securitySolution.artifactCard.policyEffectScope.title",{defaultMessage:"Applied to the following {count, plural, one {policy} other {policies}}",values:{count:e}}),h=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.matchOperator",{defaultMessage:"IS"}),v=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.matchOperator.not",{defaultMessage:"IS NOT"}),E=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.wildcardMatchesOperator",{defaultMessage:"MATCHES"}),x=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.nestedOperator",{defaultMessage:"has"}),j=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.matchAnyOperator",{defaultMessage:"is one of"}),O=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.matchAnyOperator.not",{defaultMessage:"is not one of"}),S=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.existsOperator",{defaultMessage:"exists"}),k=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.listOperator",{defaultMessage:"included in"}),w=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.os",{defaultMessage:"OS"}),I=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.and",{defaultMessage:"AND"}),T=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.windows",{defaultMessage:"Windows"}),C=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.linux",{defaultMessage:"Linux"}),M=u.i18n.translate("xpack.securitySolution.artifactCard.conditions.macos",{defaultMessage:"Mac"}),A=u.i18n.translate("xpack.securitySolution.artifactExpandableCard.expand",{defaultMessage:"Expand"}),_=u.i18n.translate("xpack.securitySolution.artifactExpandableCard.collpase",{defaultMessage:"Collapse"}),F=u.i18n.translate("xpack.securitySolution.artifactMinifiedCard.descriptionLabel",{defaultMessage:"Description"});var D=n(132),N=n(53),P=n.n(N),R=n(117);const L=Object(r.memo)((({bold:e,truncate:t,size:n="s",withTooltip:a=!1,"data-test-subj":i,children:l})=>{const c=Object(r.useMemo)((()=>P()({"eui-textTruncate":t,"eui-textBreakWord":!0})),[t]),u=Object(r.useMemo)((()=>e?o.a.createElement("strong",null,l):l),[e,l]);return o.a.createElement(s.EuiText,{className:c,size:n,"data-test-subj":i},a&&"string"==typeof l&&l.length>0&&l!==Object(R.e)()?o.a.createElement(s.EuiToolTip,{anchorClassName:c,content:l,position:"top"},o.a.createElement(o.a.Fragment,null,u)):u)}));L.displayName="TextValueDisplay";var q=n(107);const B=c()(s.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-1dvdnzg-0"})(["padding-top:2px;"]),z=Object(r.memo)((({date:e,type:t,"data-test-subj":n})=>{const a=Object(q.a)(n);return o.a.createElement(s.EuiFlexGroup,{responsive:!1,alignItems:"flexStart",gutterSize:"m","data-test-subj":n},o.a.createElement(B,{grow:!1},o.a.createElement(s.EuiIcon,{type:"calendar"})),o.a.createElement(s.EuiFlexItem,{grow:!0},o.a.createElement(s.EuiFlexGroup,{responsive:!1,direction:"column",alignItems:"flexStart",gutterSize:"xs"},o.a.createElement(s.EuiFlexItem,{className:"eui-textTruncate","data-test-subj":a("label")},o.a.createElement(L,null,"update"===t?d:p)),o.a.createElement(s.EuiFlexItem,{className:"eui-textTruncate","data-test-subj":a("value")},o.a.createElement(L,{bold:!0},o.a.createElement(D.b,{value:e,dateFormat:"M/D/YYYY"}))))))}));z.displayName="DateField";var $=n(47),V=n(502);const U=Object(r.memo)((({items:e,button:t,panelPaddingSize:n,anchorPosition:a,maxWidth:l="32ch",maxHeight:c="255px",fixedWidth:u=!1,title:d,loading:p=!1,hoverInfo:m,isNavigationDisabled:f=!1,...g})=>{const b=Object(q.a)(g["data-test-subj"]),[y,h]=Object(r.useState)(!1),v=Object(r.useCallback)((()=>h(!1)),[h]),E=Object(r.useCallback)((()=>h(!y)),[y]),x=Object(r.useMemo)((()=>({"data-test-subj":b("popoverPanel")})),[b]),j=Object(r.useMemo)((()=>e.map(((e,t)=>{var n,a;return p?o.a.createElement(s.EuiSkeletonText,{lines:1,key:Object($.v4)(),"data-test-subj":null!==(a=e["data-test-subj"])&&void 0!==a?a:b(`item-loading-${t}`)}):o.a.createElement(V.a,i()({},e,{isNavigationDisabled:f,key:Object($.v4)(),"data-test-subj":null!==(n=e["data-test-subj"])&&void 0!==n?n:b(`item-${t}`),textTruncate:Boolean(l)||e.textTruncate,hoverInfo:m,onClick:t=>{if(v(),e.onClick)return e.onClick(t)}}))}))),[e,p,f,b,l,m,v]),O=Object(r.useMemo)((()=>{const e={className:"eui-yScroll",style:{}};return l&&!u&&(e.style.maxWidth=l),c&&(e.style.maxHeight=c),u&&(e.style.width=null!=l?l:"32ch"),e}),[l,u,c]);return o.a.createElement(s.EuiPopover,i()({},g,{anchorPosition:a,panelPaddingSize:n,panelProps:x,button:o.a.createElement("div",{className:"eui-displayInlineBlock","data-test-subj":b("triggerButtonWrapper"),onClick:E},t),isOpen:y,closePopover:v}),d?o.a.createElement(s.EuiPopoverTitle,{paddingSize:"m"},d):null,o.a.createElement(s.EuiContextMenuPanel,i()({},O,{items:j})))}));U.displayName="ContextMenuWithRouterSupport";const G=Object(r.memo)((({items:e,"data-test-subj":t,icon:n="boxesHorizontal"})=>{const a=Object(q.a)(t),[l,c]=Object(r.useState)(!1),d=Object(r.useCallback)((()=>c(!1)),[c]),p=Object(r.useCallback)((()=>c(!l)),[l]),m=Object(r.useMemo)((()=>({"data-test-subj":a("popoverPanel")})),[a]),f=Object(r.useMemo)((()=>e.map((e=>o.a.createElement(V.a,i()({},e,{key:Object($.v4)(),onClick:t=>{if(d(),e.onClick)return e.onClick(t)}}))))),[d,e]);return o.a.createElement(s.EuiPopover,{anchorPosition:"downRight",panelPaddingSize:"none",panelProps:m,"data-test-subj":t,button:o.a.createElement(s.EuiButtonIcon,{"data-test-subj":a("button"),iconType:n,onClick:p,"aria-label":u.i18n.translate("xpack.securitySolution.actionsContextMenu.label",{defaultMessage:"Open"})}),isOpen:l,closePopover:d},o.a.createElement(s.EuiContextMenuPanel,{items:f,"data-test-subj":a("contextMenuPanel")}))}));G.displayName="ActionsContextMenu";const H=Object(r.memo)((({actions:e,"data-test-subj":t})=>e&&e.length>0?o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(G,{items:e,icon:"boxesHorizontal","data-test-subj":t})):null));H.displayName="CardActionsFlexItem";const W=c()(s.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItemSmallBottomMargin",componentId:"sc-1orjmip-0"})(["margin-bottom:4px !important;"]),Q=Object(r.memo)((({name:e,createdDate:t,updatedDate:n,actions:a,"data-test-subj":i})=>{const r=Object(q.a)(i);return o.a.createElement(s.EuiFlexGroup,{responsive:!1,alignItems:"flexStart","data-test-subj":i},o.a.createElement(W,{grow:!0},o.a.createElement(s.EuiFlexGroup,{alignItems:"flexStart"},o.a.createElement(s.EuiFlexItem,{grow:!0},o.a.createElement(s.EuiTitle,{size:"s"},o.a.createElement("h3",{"data-test-subj":r("title")},e))),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiFlexGroup,{responsive:!1,gutterSize:"xl"},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(z,{date:n,type:"update","data-test-subj":r("updated")})),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(z,{date:t,type:"create","data-test-subj":r("created")})))))),o.a.createElement(H,{actions:a,"data-test-subj":r("actions")}))}));Q.displayName="CardHeader";const Y=c()(s.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-1oz5dfu-0"})(["margin:6px;"]),K=Object(r.memo)((({createdBy:e,updatedBy:t,"data-test-subj":n})=>{const a=Object(q.a)(n);return o.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"l",responsive:!1,"data-test-subj":n},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(X,{label:f,value:e,"data-test-subj":a("createdBy")})),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(X,{label:m,value:t,"data-test-subj":a("updatedBy")})))}));K.displayName="TouchedByUsers";const X=Object(r.memo)((({label:e,value:t,"data-test-subj":n})=>{const a=Object(q.a)(n);return o.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"m",wrap:!1,responsive:!1,"data-test-subj":n},o.a.createElement(Y,{grow:!1},o.a.createElement(s.EuiBadge,{"data-test-subj":a("label")},e)),o.a.createElement(Y,{grow:!1},o.a.createElement(s.EuiFlexGroup,{responsive:!1,gutterSize:"s",alignItems:"center",wrap:!1},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiAvatar,{name:t,size:"s","data-test-subj":a("avatar")})),o.a.createElement(s.EuiFlexItem,{grow:!1,className:"eui-textTruncate","data-test-subj":a("value")},o.a.createElement(L,null,t)))))}));X.displayName="UserName";var J=n(44),Z=n(126);const ee=c()("div").withConfig({displayName:"StyledWithContextMenuShiftedWrapper",componentId:"sc-d4sgp-0"})(["margin-left:-10px;"]),te=c()(s.EuiButtonEmpty).withConfig({displayName:"StyledEuiButtonEmpty",componentId:"sc-d4sgp-1"})(["height:10px !important;"]),ne=Object(r.memo)((({policies:e,loadingPoliciesList:t=!1,"data-test-subj":n})=>{const a=Object(q.a)(n),{canReadPolicyManagement:i}=Object(Z.a)().endpointPrivileges,[l,c]=Object(r.useMemo)((()=>e?["partial",b(e.length)]:["globe",g]),[e]),u=o.a.createElement(s.EuiFlexGroup,{responsive:!1,wrap:!1,alignItems:"center",gutterSize:"s","data-test-subj":n},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiIcon,{type:l,size:"s"})),o.a.createElement(s.EuiFlexItem,{grow:!1,"data-test-subj":a("value")},o.a.createElement(L,{size:"xs"},c)));return e&&e.length?o.a.createElement(ee,null,o.a.createElement(ae,{policies:e,loadingPoliciesList:t,canReadPolicies:i,"data-test-subj":a("popupMenu")},u)):u}));ne.displayName="EffectScope";const ae=Object(r.memo)((({policies:e,loadingPoliciesList:t=!1,canReadPolicies:n,children:a,"data-test-subj":i})=>{const l=Object(q.a)(i),c=Object(r.useMemo)((()=>n?o.a.createElement(te,{flush:"right",size:"s",iconSide:"right",iconType:"popout"},o.a.createElement(J.FormattedMessage,{id:"xpack.securitySolution.contextMenuItemByRouter.viewDetails",defaultMessage:"View details"})):void 0),[n]);return o.a.createElement(U,{maxHeight:"235px",fixedWidth:!0,panelPaddingSize:"none",items:e,anchorPosition:e.length>1?"rightCenter":"rightUp","data-test-subj":i,loading:t,hoverInfo:c,button:o.a.createElement(s.EuiButtonEmpty,{size:"xs","data-test-subj":l("button")},a),title:y(e.length),isNavigationDisabled:!n})}));ae.displayName="WithContextMenu";const ie=Object(r.memo)((({createdBy:e,updatedBy:t,policies:n,loadingPoliciesList:a=!1,"data-test-subj":i})=>{const r=Object(q.a)(i);return o.a.createElement(s.EuiFlexGroup,{alignItems:"center",responsive:!0,"data-test-subj":i},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(K,{createdBy:e,updatedBy:t,"data-test-subj":r("touchedBy")})),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(ne,{policies:n,loadingPoliciesList:a,"data-test-subj":r("effectScope")})))}));ie.displayName="CardSubHeader";var re=n(120);const oe=Object.freeze({linux:C,mac:M,macos:M,windows:T}),se=Object.freeze({[re.d.NESTED]:x,[re.d.MATCH_ANY]:j,[re.d.MATCH]:h,[re.d.WILDCARD]:E,[re.d.EXISTS]:S,[re.d.LIST]:k}),le=Object.freeze({[re.d.MATCH_ANY]:O,[re.d.MATCH]:v}),ce=c()(s.EuiFlexGroup).withConfig({displayName:"EuiFlexGroupNested",componentId:"sc-1oxtqy5-0"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeXL)),ue=c()(s.EuiFlexItem).withConfig({displayName:"EuiFlexItemNested",componentId:"sc-1oxtqy5-1"})(["margin-bottom:6px !important;margin-top:6px !important;"]),de=c()("span").withConfig({displayName:"StyledCondition",componentId:"sc-1oxtqy5-2"})(["margin-right:6px;"]),pe=Object(r.memo)((({os:e,entries:t,"data-test-subj":n})=>{const a=Object(q.a)(n),i=Object(r.useMemo)((()=>e.map((e=>{var t;return null!==(t=oe[e])&&void 0!==t?t:e})).join(", ")),[e]),l=(e,t)=>"match_any"===e&&Array.isArray(t)?t.map((e=>o.a.createElement(s.EuiBadge,{color:"hollow"},e))):t,c=(e,t)=>{var n,a;return"nested"===e?"":"included"===t?null!==(n=se[e])&&void 0!==n?n:e:null!==(a=le[e])&&void 0!==a?a:e},u=Object(r.useCallback)(((e,t)=>{if("nested"===e&&t.length)return t.map((({field:e,type:t,value:n,operator:i})=>o.a.createElement(ce,{"data-test-subj":a("nestedCondition"),key:e+t+n,direction:"row",alignItems:"center",gutterSize:"m",responsive:!1},o.a.createElement(ue,{grow:!1},o.a.createElement(s.EuiToken,{iconType:"tokenNested",size:"s"})),o.a.createElement(ue,{grow:!1},o.a.createElement(s.EuiExpression,{description:"",value:e,color:"subdued"})),o.a.createElement(ue,{grow:!1},o.a.createElement(s.EuiExpression,{description:c(t,i),value:l(t,n)})))))}),[a]);return o.a.createElement("div",{"data-test-subj":n},o.a.createElement("div",{"data-test-subj":a("os")},o.a.createElement("strong",null,o.a.createElement(s.EuiExpression,{description:"",value:w}),o.a.createElement(s.EuiExpression,{description:h,value:i}))),t.map((({field:e,type:t,value:n,operator:i,entries:r=[]})=>o.a.createElement("div",{"data-test-subj":a("condition"),key:e+t+n},o.a.createElement("div",{className:"eui-xScroll"},o.a.createElement(s.EuiExpression,{description:o.a.createElement(de,null,I),value:e,color:"subdued"}),o.a.createElement(s.EuiExpression,{description:c(t,i),value:l(t,n)})),u(t,r)))))}));pe.displayName="CriteriaConditions";const me=e=>"effectScope"in e;var fe=n(226);const ge=e=>(e=>{const t=e.filter((e=>e.startsWith(fe.b)));return t.some((e=>e===`${fe.b}all`))?{type:"global"}:{type:"policy",policies:t.map((e=>e.substr(fe.b.length)))}})(e.tags),be=e=>Object(r.useMemo)((()=>(e=>{var t;const n=e,{name:a,created_by:i,created_at:r,updated_at:o,updated_by:s,description:l="",entries:c}=n;return{name:a,created_by:i,created_at:r,updated_at:o,updated_by:s,description:l,comments:me(n)?[]:n.comments,entries:c,os:me(n)?[n.os]:null!==(t=n.os_types)&&void 0!==t?t:[],effectScope:me(n)?n.effectScope:ge(n)}})(e)),[e]),ye=c()(s.EuiPanel).withConfig({displayName:"EuiPanelStyled",componentId:"sc-1qnczpg-0"})(["&.artifactEntryCard + &.artifactEntryCard{margin-top:",";}"],(({theme:e})=>e.eui.euiSizeL)),he=Object(r.memo)((({className:e,...t})=>o.a.createElement(ye,i()({},t,{hasBorder:!0,paddingSize:"none",className:`artifactEntryCard ${null!=e?e:""}`}))));he.displayName="CardContainerPanel";const ve=c()(s.EuiPanel).withConfig({displayName:"StyledEuiPanel",componentId:"sc-1aw8s5s-0"})(["padding:32px;&.top-section{padding-bottom:24px;}&.bottom-section{padding-top:24px;}&.artifact-entry-collapsible-card{padding:24px !important;}"]),Ee=Object(r.memo)((e=>o.a.createElement(ve,i()({},e,{hasBorder:!1,hasShadow:!1,paddingSize:"l"}))));Ee.displayName="CardSectionPanel";var xe=n(42),je=n(458);const Oe=c()(s.EuiAvatar).withConfig({displayName:"CustomEuiAvatar",componentId:"sc-3lb0zi-0"})(["background-color:"," !important;"],(({theme:e})=>e.eui.euiColorLightShade)),Se=Object(r.memo)((({comments:e,"data-test-subj":t})=>{const n=Object(q.a)(t),[a,i]=Object(r.useState)(!1),l=Object(r.useCallback)((()=>{i(!a)}),[i,a]),c=Object(r.useMemo)((()=>(e=>e.map((e=>({username:e.created_by,timestamp:o.a.createElement(D.b,{value:e.created_at,dateFormat:"MMM D, YYYY"}),event:je.b,timelineAvatar:o.a.createElement(Oe,{size:"s",name:e.created_by}),children:o.a.createElement(s.EuiText,{size:"s"},e.comment)}))))(e)),[e]),d=Object(r.useMemo)((()=>a?((e=0)=>u.i18n.translate("xpack.securitySolution.artifactCard.comments.label.hide",{defaultMessage:"Hide comments ({count})",values:{count:e}}))(e.length):((e=0)=>u.i18n.translate("xpack.securitySolution.artifactCard.comments.label.show",{defaultMessage:"Show comments ({count})",values:{count:e}}))(e.length)),[e.length,a]);return Object(xe.isEmpty)(e)?null:o.a.createElement("div",{"data-test-subj":t},o.a.createElement(s.EuiSpacer,{size:"s"}),o.a.createElement(s.EuiButtonEmpty,{onClick:l,flush:"left",size:"xs","data-test-subj":n("label")},d),o.a.createElement(s.EuiAccordion,{id:"1",arrowDisplay:"none",forceState:a?"open":"closed"},o.a.createElement(s.EuiSpacer,{size:"m"}),o.a.createElement(s.EuiCommentList,{comments:c,"data-test-subj":n("list")})))}));Se.displayName="CardComments";const ke=(e,t)=>Object(r.useMemo)((()=>"policy"===e.effectScope.type?null==e?void 0:e.effectScope.policies.map((e=>t&&t[e]?t[e]:{children:e})):void 0),[e.effectScope,t]),we=Object(r.memo)((({truncate:e,children:t,"data-test-subj":n,withTooltip:a})=>o.a.createElement(L,{size:"m",truncate:e,"data-test-subj":n,withTooltip:a},t||Object(R.e)())));we.displayName="ArtifactDescription";const Ie=Object(r.memo)((({item:e,policies:t,loadingPoliciesList:n=!1,actions:a,hideDescription:r=!1,hideComments:l=!1,"data-test-subj":c,...u})=>{const d=be(e),p=Object(q.a)(c),m=ke(d,t);return o.a.createElement(he,i()({},u,{"data-test-subj":c}),o.a.createElement(Ee,{className:"top-section"},o.a.createElement(Q,{name:d.name,createdDate:d.created_at,updatedDate:d.updated_at,actions:a,"data-test-subj":p("header")}),o.a.createElement(ie,{createdBy:d.created_by,updatedBy:d.updated_by,policies:m,loadingPoliciesList:n,"data-test-subj":p("subHeader")}),!r&&o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiSpacer,{size:"l"}),o.a.createElement(we,{"data-test-subj":p("description")},d.description)),l?null:o.a.createElement(o.a.Fragment,null,r&&o.a.createElement(s.EuiSpacer,{size:"l"}),o.a.createElement(Se,{comments:d.comments,"data-test-subj":p("comments")}))),o.a.createElement(s.EuiHorizontalRule,{margin:"none"}),o.a.createElement(Ee,{className:"bottom-section"},o.a.createElement(pe,{os:d.os,entries:d.entries,"data-test-subj":p("criteriaConditions")})))}));Ie.displayName="ArtifactEntryCard";const Te=c()(s.EuiSplitPanel.Outer).withConfig({displayName:"CardContainerPanel",componentId:"sc-lh5b0s-0"})(["&.artifactEntryCardMinified + &.artifactEntryCardMinified{margin-top:",";}"],(({theme:e})=>e.eui.euiSizeL)),Ce=c()(s.EuiSplitPanel.Inner).withConfig({displayName:"CustomSplitInnerPanel",componentId:"sc-lh5b0s-1"})(["background-color:"," !important;"],(({theme:e})=>e.eui.euiColorLightestShade)),Me=Object(r.memo)((({item:e,isSelected:t=!1,onToggleSelectedArtifact:n,"data-test-subj":a,...l})=>{var c;const u=be(e),d=Object(q.a)(a),[p,m]=Object(r.useState)("closed"),f=Object(r.useCallback)((()=>{m((e=>"closed"===e?"open":"closed"))}),[]),g=Object(r.useCallback)((()=>"open"===p?"Hide details":"Show details"),[p]),b=Object(r.useMemo)((()=>o.a.createElement(Ce,null,o.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiCheckbox,{id:u.name,"data-test-subj":`${u.name}_checkbox`,checked:t,onChange:()=>n(!t)})),o.a.createElement(s.EuiFlexItem,null,o.a.createElement(s.EuiTitle,{size:"xxs"},o.a.createElement("h5",{"data-test-subj":d("title")},u.name)))))),[u.name,d,t,n]);return o.a.createElement(Te,i()({},l,{"data-test-subj":a,className:`${null!==(c=l.className)&&void 0!==c?c:""}  artifactEntryCardMinified`,id:u.name,hasShadow:!1,hasBorder:!0}),b,o.a.createElement(s.EuiSplitPanel.Inner,{paddingSize:"s"},o.a.createElement(s.EuiPanel,{hasBorder:!1,hasShadow:!1,paddingSize:"s"},o.a.createElement(s.EuiTitle,{size:"xxs"},o.a.createElement("h5",{"data-test-subj":d("descriptionTitle")},F)),o.a.createElement(we,{"data-test-subj":d("description")},u.description)),o.a.createElement(s.EuiPanel,{hasBorder:!1,hasShadow:!1,paddingSize:"s"},o.a.createElement(s.EuiButtonEmpty,{"data-test-subj":d("collapse"),color:"primary",size:"s",flush:"left",iconType:"open"===p?"arrowUp":"arrowDown",iconSide:"right",iconSize:"m",onClick:f,style:{fontWeight:400}},g()),o.a.createElement(s.EuiAccordion,{id:"showDetails",arrowDisplay:"none",forceState:p},o.a.createElement(pe,{os:u.os,entries:u.entries,"data-test-subj":d("criteriaConditions")})))))}));Me.displayName="ArtifactEntryCardMinified";const Ae=Object(r.memo)((({expanded:e,onClick:t,"data-test-subj":n})=>o.a.createElement(s.EuiButtonIcon,{iconType:e?"arrowUp":"arrowDown",onClick:t,"data-test-subj":n,"aria-label":e?_:A})));Ae.displayName="CardExpandButton";const _e=Object(r.memo)((({artifact:e,onExpandCollapse:t,policies:n,actions:a,expanded:i=!1,"data-test-subj":s})=>{const l=Object(q.a)(s),c=ke(e,n),u=Object(r.useCallback)((()=>{t()}),[t]);return o.a.createElement(Ne,{"data-test-subj":s,expanded:i,expandToggle:o.a.createElement(Ae,{expanded:i,onClick:u,"data-test-subj":l("expandCollapse")}),name:o.a.createElement(L,{bold:!0,truncate:!i,withTooltip:!i},e.name),description:o.a.createElement(we,{truncate:!i,withTooltip:!i},e.description),effectScope:o.a.createElement(ne,{policies:c,"data-test-subj":l("effectScope")}),actionMenu:o.a.createElement(H,{actions:a,"data-test-subj":l("actions")})})}));_e.displayName="CardCompressedHeader";const Fe=c.a.div.withConfig({displayName:"ButtonIconPlaceHolder",componentId:"sc-j6qhqr-0"})(["display:inline-block;width:",";height:",";"],(({theme:e})=>e.eui.euiSizeL),(({theme:e})=>e.eui.euiSizeL)),De=c()(s.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-j6qhqr-1"})(["&.flushTop,.flushTop{padding-top:0;margin-top:0;}"]),Ne=Object(r.memo)((({expanded:e,name:t,expandToggle:n,effectScope:a,actionMenu:i,description:l,"data-test-subj":c,flushTop:u})=>{const d=Object(q.a)(c),p=(e=>Object(r.useMemo)((()=>P()({"eui-textTruncate":!e})),[e]))(e),m=u?" flushTop":"";return o.a.createElement(De,{responsive:!1,alignItems:"center","data-test-subj":c,className:m},o.a.createElement(s.EuiFlexItem,{grow:!1,className:m,"data-test-subj":d("expandCollapseHolder")},n),o.a.createElement(s.EuiFlexItem,{className:p+m},o.a.createElement(s.EuiFlexGroup,{alignItems:"center",className:m},o.a.createElement(s.EuiFlexItem,{grow:2,className:p+m,"data-test-subj":d("titleHolder")},t),o.a.createElement(s.EuiFlexItem,{grow:3,className:p+m,"data-test-subj":d("descriptionHolder")},l),o.a.createElement(s.EuiFlexItem,{grow:1,"data-test-subj":d("effectScopeHolder"),className:m},a))),!0===i?o.a.createElement(s.EuiFlexItem,{grow:!1,"data-test-subj":d("cardActionsPlaceholder"),className:m},o.a.createElement(Fe,null)):i)}));Ne.displayName="CardCompressedHeaderLayout";const Pe=Object(r.memo)((({item:e,onExpandCollapse:t,policies:n,actions:a,expanded:r=!1,"data-test-subj":l,...c})=>{const u=be(e),d=Object(q.a)(l);return o.a.createElement(he,i()({},c,{"data-test-subj":l}),o.a.createElement(Ee,{className:"artifact-entry-collapsible-card"},o.a.createElement(_e,{artifact:u,actions:a,policies:n,expanded:r,onExpandCollapse:t,"data-test-subj":d("header")})),r&&o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiHorizontalRule,{margin:"xs"}),o.a.createElement(Ee,null,o.a.createElement(pe,{os:u.os,entries:u.entries,"data-test-subj":d("criteriaConditions")}))))}));Pe.displayName="ArtifactEntryCollapsibleCard";var Re=n(731)},function(e,t,n){"use strict";n.d(t,"a",(function(){return Te})),n.d(t,"c",(function(){return Ce})),n.d(t,"b",(function(){return Me})),n.d(t,"d",(function(){return Ae}));var a=n(40),i=n(942),r=n(450),o=n(2),s=n.n(o),l=n(8),c=n(44),u=n(5),d=n(104),p=n.n(d);const m=({euiFieldProps:e})=>{const{field:{onChange:t,value:n,name:i},fieldState:{error:l}}=Object(r.useController)({name:"label",defaultValue:""}),c=Object(o.useMemo)((()=>!(null==l||!l.message)),[null==l?void 0:l.message]);return s.a.createElement(a.EuiFormRow,{label:u.i18n.translate("xpack.securitySolution.markdown.osquery.labelFieldText",{defaultMessage:"Label"}),error:null==l?void 0:l.message,isInvalid:c,fullWidth:!0},s.a.createElement(a.EuiFieldText,p()({isInvalid:c,onChange:t,value:n,name:i,fullWidth:!0,"data-test-subj":"input"},e)))},f=s.a.memo(m),g=u.i18n.translate("xpack.securitySolution.markdown.osquery.permissionDenied",{defaultMessage:"Permission denied"}),b=()=>s.a.createElement(a.EuiEmptyPrompt,{iconType:"logoOsquery",title:s.a.createElement("h2",null,g),titleSize:"xs",body:s.a.createElement("p",null,s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.osquery.missingPrivileges",defaultMessage:"To access this page, ask your administrator for {osquery} Kibana privileges.",values:{osquery:s.a.createElement(a.EuiCode,null,"osquery")}}))});var y=n(102);const h=({node:e,onSave:t,onCancel:n})=>{var i,d,p;const m=null!=e,{osquery:g,application:{capabilities:{osquery:h}}}=Object(y.j)().services,v=Object(r.useForm)({defaultValues:{label:null==e||null===(i=e.configuration)||void 0===i?void 0:i.label,query:null==e||null===(d=e.configuration)||void 0===d?void 0:d.query,ecs_mapping:null==e||null===(p=e.configuration)||void 0===p?void 0:p.ecs_mapping}}),E=Object(o.useCallback)((e=>{t(`!{osquery${JSON.stringify(Object(l.pickBy)({query:e.query,label:e.label,ecs_mapping:e.ecs_mapping},(e=>!Object(l.isEmpty)(e))))}}`,{block:!0})}),[t]),x=Object(o.useMemo)((()=>!(h.runSavedQueries&&h.readSavedQueries||h.writeLiveQueries)),[h.readSavedQueries,h.runSavedQueries,h.writeLiveQueries]),j=Object(o.useMemo)((()=>{if(null!=g&&g.LiveQueryField){const{LiveQueryField:e}=g;return s.a.createElement(r.FormProvider,v,s.a.createElement(f,null),s.a.createElement(a.EuiSpacer,{size:"m"}),s.a.createElement(e,{formMethods:v}))}return null}),[v,g]);return x?s.a.createElement(b,null):s.a.createElement(s.a.Fragment,null,s.a.createElement(a.EuiModalHeader,null,s.a.createElement(a.EuiModalHeaderTitle,null,s.a.createElement("h1",null,m?s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.osquery.editModalTitle",defaultMessage:"Edit query"}):s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.osquery.addModalTitle",defaultMessage:"Add query"})))),s.a.createElement(a.EuiModalBody,null,s.a.createElement(s.a.Fragment,null,j)),s.a.createElement(a.EuiModalFooter,null,s.a.createElement(a.EuiButtonEmpty,{onClick:n},u.i18n.translate("xpack.securitySolution.markdown.osquery.modalCancelButtonLabel",{defaultMessage:"Cancel"})),s.a.createElement(a.EuiButton,{onClick:v.handleSubmit(E),fill:!0},m?s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.osquery.addModalConfirmButtonLabel",defaultMessage:"Add query"}):s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.osquery.editModalConfirmButtonLabel",defaultMessage:"Save changes"}))))},v=s.a.memo(h),E={name:"osquery",button:{label:"Osquery",iconType:"logoOsquery"},helpText:s.a.createElement("div",null,s.a.createElement(a.EuiCodeBlock,{language:"md",fontSize:"l",paddingSize:"s",isCopyable:!0},"!{osquery{options}}"),s.a.createElement(a.EuiSpacer,{size:"s"})),editor:v};var x=n(480),j=n(41),O=n.n(j),S=n(402),k=n(255),w=n(1037),I=n.n(w),T=n(511);const C=O()(a.EuiButton).withConfig({displayName:"StyledEuiButton",componentId:"sc-14wavsd-0"})(["> span > img{margin-block-end:0;}"]);var M=n(50),A=n.n(M),_=n(55),F=n.n(_),D=(n(21),n(83)),N=n(49),P=n(108),R=n(51),L=n(118),q=n(161),B=n(660),z=n(116),$=n(110),V=n(106),U=n(150);const G=e=>e===N.FILTERS.EXISTS?U.b:e===N.FILTERS.PHRASES?U.c:U.d,H={$state:{store:N.FilterStateStore.APP_STATE},meta:{disabled:!1,negate:!1,alias:null,index:void 0}},W={and:[],enabled:!0,id:"",name:"",excluded:!1,kqlQuery:"",type:V.a.default,queryMatch:{field:"",value:"",operator:U.b}},Q=e=>{const t={...H,meta:{...H.meta,negate:e.excluded,type:e.queryType}};if(e.queryType===N.FILTERS.EXISTS)return{...t,meta:{...t.meta,params:void 0,value:"exists"},query:{exists:{field:e.field}}};if(e.queryType===N.FILTERS.PHRASES){var n;let a=JSON.parse(String(e.value));return"number"===e.valueType?a=a.map(Number):"boolean"===e.valueType&&(a=a.map(Boolean)),{...t,meta:{...t.meta},query:{bool:{minimum_should_match:1,should:null===(n=a)||void 0===n?void 0:n.map((t=>({match_phrase:{[e.field]:t}})))}}}}var a;if(e.queryType===N.FILTERS.PHRASE)return{...t,meta:{...t.meta,params:{query:e.value},value:void 0},query:{match_phrase:{[e.field]:null!==(a=e.value)&&void 0!==a?a:""}}};if(e.queryType===N.FILTERS.RANGE){let n,a;try{const t=JSON.parse(String(e.value));n=t.gte,a=t.lt}catch{n="",a=""}const i={gte:n,lt:a};return{...t,meta:{...t.meta,params:i},query:{range:{[e.field]:i}}}}return t},Y=({providers:e,alertData:t})=>{const n=Object(o.useMemo)((()=>e.some((e=>e.some((e=>"range"===e.queryType))))),[e]);return{dataProviders:Object(o.useMemo)((()=>n?[]:((e,t)=>e.map((e=>e.reduce(((e,n,a)=>{const{field:i,value:r,excluded:o,queryType:s}=n,{result:c,matchedBrackets:u}=((e,t)=>{if("number"==typeof e||"boolean"==typeof e)return{result:e,skipped:!0,matchedBrackets:null};const n=/\{{([^}]+)\}}/g,a=e.match(new RegExp(n));let i=e;a&&t&&Object(l.each)(a,(e=>{const n=e.replace(/{{|}}/g,"").trim();if(i.includes(e)){const a=t.find((({field:e})=>e===n));if(a&&a.values){const{values:[t]}=a;i=i.replace(e,t)}}}));const r=new RegExp(n).test(i);return{result:i,skipped:r,matchedBrackets:a}})(r,t),d=!t&&u;if(0===a)return{and:[],enabled:!0,id:JSON.stringify(i+r),name:i,excluded:o,kqlQuery:"",type:d?V.a.template:V.a.default,queryMatch:{field:i,value:c,operator:G(s)}};{const t={enabled:!0,id:JSON.stringify(i+r),name:i,excluded:o,kqlQuery:"",type:d?V.a.template:V.a.default,queryMatch:{field:i,value:c,operator:G(s)}};e.and.push(t)}return e}),W))))(e,t)),[t,e,n]),filters:Object(o.useMemo)((()=>n?((e,t)=>{const n=[];for(let t=0;t<e.length;t++){const a=e[t];if(a.length>1){const e=a.map((e=>Q(e))),t={$state:{store:N.FilterStateStore.APP_STATE},meta:{type:N.FILTERS.COMBINED,relation:N.BooleanRelation.AND,params:e,index:void 0,disabled:!1,negate:!1}};n.push(t)}else{const e=a[0],t=Q(e);n.push(t)}}return n})(e):[]),[n,e,t])}};var K=n(271),X=n(286),J=n(4);const Z=e=>{var t,n,a,i,r,o;const s=null!==(t=null===(n=e.meta)||void 0===n?void 0:n.key)&&void 0!==t?t:"",l={field:s,excluded:null!==(a=null===(i=e.meta)||void 0===i?void 0:i.negate)&&void 0!==a&&a,queryType:null!==(r=null===(o=e.meta)||void 0===o?void 0:o.type)&&void 0!==r?r:N.FILTERS.PHRASE};if(Object(N.isRangeFilter)(e)){var c;const{gte:t,lt:n}=e.query.range[s],a=JSON.stringify({gte:t,lt:n});return{...l,value:a,queryType:null!==(c=e.meta.type)&&void 0!==c?c:N.FILTERS.RANGE}}if(Object(N.isPhrasesFilter)(e)){var u,d,p,m;const t=typeof(null===(u=e.meta)||void 0===u?void 0:u.params[0]);return{...l,value:JSON.stringify(null!==(d=null===(p=e.meta)||void 0===p?void 0:p.params)&&void 0!==d?d:[]),valueType:t,queryType:null!==(m=e.meta.type)&&void 0!==m?m:N.FILTERS.PHRASES}}var f;if(Object(N.isExistsFilter)(e))return{...l,value:"",queryType:null!==(f=e.meta.type)&&void 0!==f?f:N.FILTERS.EXISTS};if(Object(N.isPhraseFilter)(e)){var g,b,y,h,v,E;const t=typeof(null===(g=e.meta)||void 0===g||null===(b=g.params)||void 0===b?void 0:b.query);return{...l,value:null!==(y=null===(h=e.meta)||void 0===h||null===(v=h.params)||void 0===v?void 0:v.query)&&void 0!==y?y:"",valueType:t,queryType:null!==(E=e.meta.type)&&void 0!==E?E:N.FILTERS.PHRASE}}return{...l,value:"",queryType:N.FILTERS.PHRASE}},ee=e=>e.map((e=>Z(e))),te=e=>!1===e.some(N.isCombinedFilter)?[ee(e)]:e.reduce(((e,t)=>{if(Object(N.isCombinedFilter)(t)){const n=t.meta.params;if(t.meta.relation===N.BooleanRelation.OR){const t=n.map((e=>{const t=te([e]);return Object(l.flatten)(t)}));return[...e,...t]}{const t=te(n);return[...e,...t]}}return[...e,[Z(t)]]}),[]);var ne=n(17),ae=n(62),ie=n.n(ae),re=n(678),oe=n.n(re),se=n(374);function le(e,t,n){var a;if(void 0===t||"undefined"===n)return!1;switch(e.type){case"date":const n="string"==typeof t?ie.a.parse(t):null;return Boolean("string"==typeof t&&n&&n.isValid());case"ip":if("string"==typeof t||"number"==typeof t)try{return Boolean(new R.IpAddress(t))}catch(e){return!1}return!1;case"string":return"string"==typeof t&&null!==(a=e.esTypes)&&void 0!==a&&a.includes(se.a.VERSION)?Boolean(oe()(t)):"string"==typeof t&&t.trim().length>0;case"boolean":return"boolean"==typeof t;case"number":return"number"==typeof t||"string"==typeof t&&!isNaN(parseFloat(t));default:return!0}}const ce=u.i18n.translate("xpack.securitySolution.markdown.insight.label",{defaultMessage:"Label"}),ue=u.i18n.translate("xpack.securitySolution.markdown.insight.title",{defaultMessage:"Investigate"}),de=u.i18n.translate("xpack.securitySolution.markdown.insight.labelText",{defaultMessage:"Label on the query button."}),pe=u.i18n.translate("xpack.securitySolution.markdown.insight.description",{defaultMessage:"Description"}),me=u.i18n.translate("xpack.securitySolution.markdown.insight.descriptionText",{defaultMessage:"Additional description of the query."}),fe=u.i18n.translate("xpack.securitySolution.markdown.insight.formDescription",{defaultMessage:"Create a query to investigate an alert in Timeline, using a clickable query button in the investigation guide. The button also displays a count of matching documents."}),ge=u.i18n.translate("xpack.securitySolution.markdown.insight.filterBuilder",{defaultMessage:"Filters"}),be=u.i18n.translate("xpack.securitySolution.markdown.insight.filterBuilderText",{defaultMessage:"Create filters to populate the Timeline query builder. To use a value from the alert document, enter the field name in double braces {example} as a custom option in the value field.",values:{example:"{{kibana.alert.example}}"}}),ye=u.i18n.translate("xpack.securitySolution.markdown.insight.relativeTimerange",{defaultMessage:"Relative time range"}),he=u.i18n.translate("xpack.securitySolution.markdown.insight.relativeTimerangeText",{defaultMessage:"Select a time range to limit the query, relative to the alert's creation time (optional)."}),ve=u.i18n.translate("xpack.securitySolution.markdown.insight.modalCancelButtonLabel",{defaultMessage:"Cancel"}),Ee=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.insightProviderError",{defaultMessage:"Unable to parse insight provider configuration"}),xe="!{investigate",je=({label:e,description:t,providers:n,relativeFrom:i,relativeTo:r})=>{const{addError:l}=Object(P.a)();let c=[];try{void 0!==n&&(c=JSON.parse(n))}catch(e){l(e,{title:Ee})}const{data:u,timestamp:d}=Object(o.useContext)(S.a),{dataProviders:p,filters:m}=Y({providers:c,alertData:u}),f=Object(o.useMemo)((()=>{if(i&&r){const e=d?A()(d):A()();return{kind:"absolute",from:Object(X.e)(i,X.a,!1,A.a,e.toDate()).toISOString(),to:Object(X.e)(r,X.b,!0,A.a,e.toDate()).toISOString()}}return null}),[i,r,d]),{totalCount:g,isQueryLoading:b,oldestTimestamp:h,hasError:v}=(({dataProviders:e,filters:t,relativeTimerange:n})=>{const{uiSettings:a}=Object(y.j)().services,i=Object(o.useMemo)((()=>Object(R.getEsQueryConfig)(a)),[a]),{browserFields:r,selectedPatterns:s,indexPattern:l,dataViewId:c}=Object(z.d)($.SourcererScopeName.timeline),[u,d]=Object(o.useState)(!1),p=Object(o.useMemo)((()=>{try{if(!1===u)return Object(q.d)({config:i,dataProviders:e,indexPattern:l,browserFields:r,filters:t,kqlQuery:{query:"",language:"kuery"},kqlMode:"filter"})}catch(e){return d(!0),null}}),[r,e,i,u,l,t]),[m,{events:f,totalCount:g}]=Object(B.a)({dataViewId:c,fields:["*"],filterQuery:null==p?void 0:p.filterQuery,id:L.c.active,indexNames:s,language:"kuery",limit:1,runtimeMappings:{},...n?{startDate:null==n?void 0:n.from,endDate:null==n?void 0:n.to}:{}}),[b]=f,h=b&&b.data&&b.data.find((e=>"@timestamp"===e.field));return{isQueryLoading:m,totalCount:g,oldestTimestamp:h&&h.value&&h.value[0],hasError:u}})({dataProviders:p,filters:m,relativeTimerange:f}),E=Object(o.useMemo)((()=>{if(f)return f;if(null!=h)return{kind:"absolute",from:h,to:(new Date).toISOString()};{const{to:e,from:t,fromStr:n,toStr:a}=Object(X.d)();return{kind:"relative",to:e,from:t,fromStr:n,toStr:a}}}),[h,f]);return b?s.a.createElement(a.EuiLoadingSpinner,null):s.a.createElement(s.a.Fragment,null,s.a.createElement(K.a,{asEmptyButton:!1,isDisabled:v,dataProviders:p,filters:m,timeRange:E,keepDataView:!0,"data-test-subj":"insight-investigate-in-timeline-button"},s.a.createElement(a.EuiIcon,{type:"timeline"}),` ${e} (${F()(g).format("0,0.[000]a")})`),s.a.createElement("div",null,t))},Oe=({node:e,onSave:t,onCancel:n})=>{const i=null!=e,{sourcererDataView:u,indexPattern:d}=Object(z.d)($.SourcererScopeName.default),{unifiedSearch:{ui:{FiltersBuilderLazy:m}},uiSettings:f,fieldFormats:g}=Object(y.j)().services,b=Object(o.useMemo)((()=>null!=u?new D.DataView({spec:u,fieldFormats:g}):null),[u,g]),[h,v]=Object(o.useState)([[]]),E=Object(o.useMemo)((()=>[{value:"0",text:""},...f.get(J.V).map((({display:e},t)=>({value:String(t),text:e})))]),[f]),x=Object(r.useForm)({defaultValues:{label:null==e?void 0:e.label,description:null==e?void 0:e.description,relativeTimerange:(null==e?void 0:e.relativeTimerange)||"0"},shouldUnregister:!0}),j=Object(r.useController)({name:"label",control:x.control}),O=Object(r.useController)({name:"description",control:x.control}),S=Object(r.useController)({name:"relativeTimerange",control:x.control}),k=Object(o.useCallback)((e=>{const t=E.find((t=>t.value===e));if(t&&"0"!==t.value){const e=Number(t.value),n=f.get(J.V);return{relativeFrom:n[e].from,relativeTo:n[e].to}}return{}}),[E,f]),w=Object(o.useCallback)((()=>{t(`${xe}${JSON.stringify(Object(l.pickBy)({label:j.field.value,description:O.field.value,providers:h,...k(S.field.value)},(e=>!Object(l.isEmpty)(e))))}}`,{block:!0})}),[t,h,j.field.value,O.field.value,S.field.value,k]),I=Object(o.useCallback)((e=>{v(te(e))}),[]),T=Object(o.useCallback)((e=>{S.field.onChange(e.target.value)}),[S.field]),C=Object(o.useMemo)((()=>{var e;const t=null!==(e=j.field.value)&&void 0!==e?e:"",n=h.flat();return""===t.trim()||0===n.length||n.some((e=>!function(e,t){if(!t||!e.field)return!1;switch(e.queryType){case"phrase":return le(t,e.value,e.valueType);case"phrases":const n="string"==typeof e.value?JSON.parse(`${e.value}`):null;return!(!Array.isArray(n)||!n.length)&&n.every((n=>le(t,n,e.valueType)));case"range":const a=JSON.parse("string"==typeof e.value?e.value:"");return"object"==typeof a&&(!a.gte||le(t,a.gte,e.valueType))&&(!a.lt||le(t,a.lt,e.valueType));case"exists":return!0;default:throw new Error(`Unknown operator type: ${e.queryType}`)}}(e,null==b?void 0:b.getFieldByName(e.field))))}),[j.field.value,h,b]),M=Object(o.useMemo)((()=>{const e=d&&d.getName?d.getName():"*";return[{$state:{store:N.FilterStateStore.APP_STATE},meta:{disabled:!1,negate:!1,alias:null,index:e}}]}),[d]),A=Object(ne.b)().isAtLeast("platinum");return s.a.createElement(s.a.Fragment,null,s.a.createElement(we,null,s.a.createElement(a.EuiModalHeaderTitle,null,s.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},s.a.createElement(a.EuiFlexItem,null,i?s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.insight.editModalTitle",defaultMessage:"Edit investigation query"}):s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.insight.addModalTitle",defaultMessage:"Add investigation query"}))))),!1===A&&s.a.createElement(a.EuiCallOut,{title:"To add suggested queries to an investigation guide, please upgrade to platinum",iconType:"timeline"}),s.a.createElement(a.EuiModalBody,null,s.a.createElement(r.FormProvider,x,s.a.createElement(a.EuiForm,{fullWidth:!0},s.a.createElement(a.EuiFormRow,{label:fe,fullWidth:!0},s.a.createElement(s.a.Fragment,null)),s.a.createElement(a.EuiFormRow,{label:ce,helpText:de,isInvalid:void 0!==j.field.value&&0===j.field.value.trim().length,fullWidth:!0},s.a.createElement(a.EuiFieldText,p()({},x.register("label"),{ref:null,name:"label",onChange:j.field.onChange}))),s.a.createElement(a.EuiFormRow,{label:pe,helpText:me,fullWidth:!0},s.a.createElement(a.EuiFieldText,p()({},x.register("description"),{ref:null,name:"description",onChange:O.field.onChange}))),s.a.createElement(a.EuiFormRow,{label:ge,helpText:be,fullWidth:!0},b?s.a.createElement(m,{filters:M,onChange:I,dataView:b,maxDepth:1}):s.a.createElement(s.a.Fragment,null)),s.a.createElement(a.EuiFormRow,{label:ye,helpText:he,fullWidth:!0},s.a.createElement(a.EuiSelect,p()({},x.register("relativeTimerange"),{ref:null,onChange:T,options:E})))))),s.a.createElement(a.EuiModalFooter,null,s.a.createElement(a.EuiButtonEmpty,{onClick:n},ve),s.a.createElement(a.EuiButton,{onClick:x.handleSubmit(w),fill:!0,disabled:C},i?s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.insight.addModalConfirmButtonLabel",defaultMessage:"Add query"}):s.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.markdown.insight.editModalConfirmButtonLabel",defaultMessage:"Save changes"}))))},Se=s.a.memo(Oe),ke=`${xe}{\n  "label": "Test action",\n  "description": "Click to investigate",\n  "providers": [\n    [\n      {"field": "event.id", "value": "{{kibana.alert.original_event.id}}", "queryType": "phrase", "excluded": "false"}\n    ],\n    [\n      {"field": "event.action", "value": "", "queryType": "exists", "excluded": "false"},\n      {"field": "process.pid", "value": "{{process.pid}}", "queryType": "phrase", "excluded":"false"}\n    ]\n  ]\n}}`;var we=O()(a.EuiModalHeader).withConfig({displayName:"_StyledEuiModalHeader",componentId:"sc-1kbgjgu-0"})(["min-width:700px;"]);const{uiPlugins:Ie,parsingPlugins:Te,processingPlugins:Ce}={uiPlugins:Object(a.getDefaultEuiMarkdownUiPlugins)(),parsingPlugins:Object(a.getDefaultEuiMarkdownParsingPlugins)(),processingPlugins:Object(a.getDefaultEuiMarkdownProcessingPlugins)()},Me=[xe],Ae=({insightsUpsellingMessage:e})=>{const t=Ie.map((e=>e.name)),n=(({insightsUpsellingMessage:e})=>({name:"insights",button:{label:null!=e?e:ue,iconType:"timelineWithArrow",isDisabled:!!e},helpText:s.a.createElement("div",null,s.a.createElement(a.EuiCodeBlock,{language:"md",fontSize:"l",paddingSize:"s",isCopyable:!0},ke),s.a.createElement(a.EuiSpacer,{size:"s"})),editor:Se}))({insightsUpsellingMessage:e});if(!1===t.includes(n.name))Ie.push(i.b),Ie.push(E),Ie.push(n);else{const e=Ie.findIndex((e=>e.name===n.name));Ie[e]=n}return Ie};Te.push((function(){const e=this.Parser,t=e.prototype.inlineTokenizers,n=e.prototype.inlineMethods,a=function(e,t,n){if(!1===t.startsWith(xe))return!1;const a=t[xe.length];if("{"!==a&&"}"!==a)return!1;if(n)return!0;let i={};if("{"===a){let n="",a=0;for(let e=xe.length;e<t.length;e++){const i=t[e];if("{"===i)a++,n+=i;else if("}"===i){if(a--,-1===a)break;n+=i}else n+=i}try{return i=JSON.parse(n),e(t)({type:"insight",...i,providers:JSON.stringify(i.providers)})}catch(t){const n=e.now();this.file.fail((e=>u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.insightConfigError",{values:{err:e},defaultMessage:"Unable to parse insight JSON configuration: {err}"}))(t),{line:n.line,column:n.column+xe.length})}}return!1};a.locator=(e,t)=>e.indexOf(xe,t),t.insight=a,n.splice(n.indexOf("text"),0,"insight")})),Te.push(i.a),Te.push(x.a),Ce[1][1].components.insight=({label:e,description:t,providers:n,relativeFrom:i,relativeTo:r})=>!1===Object(ne.b)().isPlatinumPlus()?s.a.createElement(s.a.Fragment,null,s.a.createElement(a.EuiButton,{isDisabled:!0,iconSide:"left",iconType:"timeline","data-test-subj":"insight-investigate-in-timeline-button"},`${e}`),s.a.createElement("div",null,t)):s.a.createElement(je,{label:e,description:t,providers:n,relativeFrom:i,relativeTo:r}),Ce[1][1].components.timeline=i.c,Ce[1][1].components.osquery=({configuration:e})=>{var t;const[n,a]=Object(o.useState)(!1),{agentId:i,alertId:r,data:c}=Object(o.useContext)(S.a),d=Object(o.useCallback)((()=>a(!0)),[a]),p=Object(o.useCallback)((()=>a(!1)),[a]),m=Object(o.useMemo)((()=>{const e=Object(l.reduce)(c,((e,t)=>{var n;return{...e,[t.field]:null==t||null===(n=t.values)||void 0===n?void 0:n[0]}}),{});return Object(k.a)(e)}),[c]);return s.a.createElement(s.a.Fragment,null,s.a.createElement(C,{iconType:I.a,onClick:d},null!==(t=e.label)&&void 0!==t?t:u.i18n.translate("xpack.securitySolution.markdown.osquery.runOsqueryButtonLabel",{defaultMessage:"Run Osquery"})),n&&s.a.createElement(T.a,{defaultValues:{...r?{alertIds:[r]}:{},query:e.query,ecs_mapping:e.ecs_mapping,queryField:!1},agentId:i,onClose:p,ecsData:m}))}},function(e,t,n){"use strict";n.d(t,"b",(function(){return S})),n.d(t,"a",(function(){return k})),n.d(t,"c",(function(){return w}));var a=n(42),i=n(129);let r,o;var s,l;!function(e){e.MALICIOUS_FILE="malicious_file",e.RANSOMWARE="ransomware",e.MEMORY_SIGNATURE="memory_signature",e.SHELLCODE_THREAD="shellcode_thread",e.BEHAVIOR="behavior"}(r||(r={})),function(e){e.PROCESS="process",e.FILE="file",e.NETWORK="network",e.REGISTRY="registry",e.MALWARE="malware"}(o||(o={})),s="host",l={"os.platform":"os.platform","os.name":"os.name","os.full":"os.full","os.family":"os.family","os.version":"os.version","os.kernel":"os.kernel"},Object.entries(l).reduce(((e,[t,n])=>(e[`${s}.${t}`]=`${s}.${n}`,e)),{});var c=n(155),u=n(135),d=n(563),p=n(188),m=n(217),f=n(319);const g=`${d.h}.terms.field`,b=`${d.h}.terms.value`,y=`${d.h}.cardinality.field`,h=`${d.h}.cardinality.value`,v=`${d.h}.count`,E=[{id:"host.name"},{id:"agent.id",overrideField:p.a,label:c.b},{id:"user.name"},{id:"rule.name"},{id:"cloud.provider"},{id:"cloud.region"},{id:"cloud.provider"},{id:"cloud.region"},{id:"orchestrator.cluster.id"},{id:"orchestrator.cluster.name"},{id:"container.image.name"},{id:"container.image.tag"},{id:"orchestrator.namespace"},{id:"orchestrator.resource.parent.type"},{id:"orchestrator.resource.type"},{id:"process.executable"},{id:"file.path"},{id:i.O,label:c.z}];function x({primaryEventCategory:e,allEventCategories:t}){switch(e){case o.PROCESS:return[{id:"process.name"},{id:"process.parent.name"},{id:"process.args"}];case o.FILE:return[{id:"file.name"},{id:"file.hash.sha256"},{id:"file.directory"},{id:"process.name"}];case o.NETWORK:return[{id:"destination.address"},{id:"destination.port"},{id:"source.address"},{id:"source.port"},{id:"dns.question.name"},{id:"process.name"}];case o.REGISTRY:return[{id:"registry.key"},{id:"registry.value"},{id:"process.name"}];case o.MALWARE:return x({primaryEventCategory:o.FILE,allEventCategories:t});default:let e=[];return null!=t&&t.includes(o.FILE)&&(e=e.concat(x({primaryEventCategory:o.FILE}))),null!=t&&t.includes(o.PROCESS)&&(e=e.concat(x({primaryEventCategory:o.PROCESS}))),e}}function j(e,t){switch(e){case r.BEHAVIOR:return[{id:"rule.description",label:u.q},...x({...t,primaryEventCategory:void 0})];case r.SHELLCODE_THREAD:return[{id:"Target.process.executable"},{id:"Memory_protection.unique_key_v1"}];case r.RANSOMWARE:return[{id:"Ransomware.feature"},{id:"process.hash.sha256"},...x({...t,primaryEventCategory:void 0})];case r.MEMORY_SIGNATURE:return x({...t,primaryEventCategory:void 0});case r.MALICIOUS_FILE:return[{id:"file.Ext.quarantine_path",overrideField:p.j,label:c.x}];default:return[]}}function O(e){switch(e){case"threshold":return[{id:v,label:u.u},{id:g,overrideField:b,label:u.v},{id:y,label:u.t}];case"machine_learning":return[{id:`${i.G}.machine_learning_job_id`,legacyId:"signal.rule.machine_learning_job_id"},{id:`${i.G}.anomaly_threshold`,legacyId:"signal.rule.anomaly_threshold"}];case"threat_match":return[{id:`${i.G}.threat_index`,legacyId:"signal.rule.threat_index"},{id:`${i.G}.threat_query`,legacyId:"signal.rule.threat_query"}];case"new_terms":return[{id:d.c,label:u.m},{id:d.b,label:u.l}];default:return[]}}function S({eventCategories:e,eventCode:t,eventRuleType:n,highlightedFieldsOverride:i}){const r=[...(o=i,o.map((e=>({id:e})))),...E,...x(e),...j(t,e),...O(n)];var o;return Object(a.uniqBy)("id",r)}function k(e){const t=Object(a.find)({category:"event",field:"event.category"},e);let n,i;return Array.isArray(null==t?void 0:t.originalValue)?(n=null==t?void 0:t.originalValue[0],i=null==t?void 0:t.originalValue):(n=null==t?void 0:t.originalValue,n&&(i=[n])),{primaryEventCategory:n,allEventCategories:i}}const w=({data:e,browserFields:t,scopeId:n,eventId:r,isDraggable:o=!1,isReadOnly:s=!1,investigationFields:l})=>{var c,d;const p=k(e),v=Object(a.find)({category:"event",field:"event.code"},e),x=Array.isArray(null==v?void 0:v.originalValue)?null==v||null===(c=v.originalValue)||void 0===c?void 0:c[0]:null==v?void 0:v.originalValue,j=Object(a.find)({category:"kibana",field:i.O},e),O=S({eventCategories:p,eventCode:x,eventRuleType:Array.isArray(null==j?void 0:j.originalValue)?null==j||null===(d=j.originalValue)||void 0===d?void 0:d[0]:null==j?void 0:j.originalValue,highlightedFieldsOverride:null!=l?l:[]});return null!=e?O.reduce(((i,l)=>{var c;const d=e.find((e=>e.field===l.id||l.legacyId&&e.field===l.legacyId));if(!d||Object(a.isEmpty)(d.values))return i;d.field===l.legacyId&&(l.id=l.legacyId);const p=null!=l.linkField&&e.find((e=>e.field===l.linkField)),v={...Object(m.b)({item:d,linkValueField:p||void 0,contextId:n,scopeId:n,browserFields:t,eventId:r,field:l}),isDraggable:o,isReadOnly:s};if("agent.id"===l.id&&!Object(f.b)({data:e}))return i;if(l.id===g){const t=function({values:e},t,n){const a=t.find((e=>e.field===b)),i=a&&a.values;if(Array.isArray(e)&&e.length>0&&Array.isArray(i)&&e.length===i.length)return e.map(((e,t)=>({title:e,description:{...n,values:[i[t]]}}))).filter((e=>!E.map((e=>e.id)).includes(e.title)))}(d,e,v);return t?[...i,...t]:i}if(l.id===y){const t=function({values:e},t,n){const a=t.find((e=>e.field===h)),i=a&&a.values;if(Array.isArray(e)&&1===e.length&&Array.isArray(i)&&e.length===i.length)return{title:u.t,description:{...n,values:[`count(${e[0]}) >= ${i[0]}`]}}}(d,e,v);return t?[...i,t]:i}return[...i,{title:null!==(c=l.label)&&void 0!==c?c:l.id,description:v}]}),[]):[]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return ne}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(42),c=n(47),u=n(49),d=n(51),p=n(134),m=n(4),f=n(153),g=n(166),b=n(233),y=n(232),h=n(169),v=n(456),E=n(149),x=n(645),j=n(102),O=n(919),S=n(57),k=n(297),w=n(293),I=n(228),T=n(424),C=n(327);const M=r.a.memo((({chartHeight:e=174,data:t,from:n,legendItems:o,legendPosition:s=S.Position.Right,legendMinWidth:l,loading:c,showLegend:u,to:d,updateDateRange:p})=>{const{baseTheme:m,theme:f}=Object(k.i)(),g=Object(i.useMemo)((()=>["100%",e]),[e]),b=Object(i.useMemo)((()=>["y"]),[]),y=Object(i.useMemo)((()=>[e=>Object(I.a)(e.g)?e.g:C.c]),[]),h=Object(i.useMemo)((()=>Object(w.a)([n,d])),[n,d]);return r.a.createElement(r.a.Fragment,null,c&&r.a.createElement(a.EuiProgress,{"data-test-subj":"loadingPanelAlertsHistogram",size:"xs",position:"absolute",color:"accent"}),r.a.createElement(a.EuiFlexGroup,{gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(S.Chart,{size:g},r.a.createElement(S.Settings,{legendPosition:s,onBrushEnd:p,showLegend:u&&0===o.length,showLegendExtra:u,theme:f,baseTheme:m}),r.a.createElement(S.Axis,{id:"alertsHistogramAxisX",position:S.Position.Bottom,tickFormat:h}),r.a.createElement(S.Axis,{id:"alertsHistogramAxisY",position:S.Position.Left}),r.a.createElement(S.HistogramBarSeries,{id:"alertsHistogram",xScaleType:S.ScaleType.Time,yScaleType:S.ScaleType.Linear,xAccessor:"x",yAccessors:b,splitSeriesAccessors:y,data:t}))),r.a.createElement(a.EuiFlexItem,{grow:!1},o.length>0&&r.a.createElement(T.a,{legendItems:o,height:e,minWidth:l}))))}));M.displayName="AlertsHistogram";var A=n(5);const _=A.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.headerTitle",{defaultMessage:"Trend"}),F=A.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.notAvailableTooltip",{defaultMessage:"Not available for trend view"}),D=A.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.viewAlertsButtonLabel",{defaultMessage:"View alerts"}),N=(e,t,n)=>A.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.showingAlertsTitle",{values:{totalAlertsFormatted:e,totalAlerts:t,modifier:n},defaultMessage:"Showing: {modifier}{totalAlertsFormatted} {totalAlerts, plural, =1 {alert} other {alerts}}"});var P=n(123),R=n(131),L=n(521),q=n(646),B=n(391),z=n(177),$=n(483),V=n(124);const U=Object(c.v4)(),G=(e="kibana.alert.rule.name",t)=>({title:"Alerts",description:"",visualizationType:"lnsXY",state:{visualization:{title:"Empty XY chart",legend:{isVisible:!0,position:"right",legendSize:"xlarge"},valueLabels:"hide",preferredSeriesType:"bar_stacked",layers:[{layerId:U,accessors:["e09e0380-0740-4105-becc-0a4ca12e3944"],position:"top",seriesType:"bar_stacked",showGridlines:!1,layerType:"data",xAccessor:"aac9d7d0-13a3-480a-892b-08207a787926",splitAccessor:"34919782-4546-43a5-b668-06ac934d3acd"}],yRightExtent:{mode:"full"},yLeftExtent:{mode:"full"},axisTitlesVisibilitySettings:{x:!1,yLeft:!1,yRight:!0},valuesInLegend:!0},query:{query:"",language:"kuery"},filters:null!=t&&t.filters?t.filters:[],datasourceStates:{formBased:{layers:{[U]:{columns:{"aac9d7d0-13a3-480a-892b-08207a787926":{label:"@timestamp",dataType:"date",operationType:"date_histogram",sourceField:"@timestamp",isBucketed:!0,scale:"interval",params:{interval:"auto"}},"e09e0380-0740-4105-becc-0a4ca12e3944":{label:"Count of records",dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___"},"34919782-4546-43a5-b668-06ac934d3acd":{label:`Top values of ${e}`,dataType:"string",operationType:"terms",scale:"ordinal",sourceField:e,isBucketed:!0,params:{size:1e3,orderBy:{type:"column",columnId:"e09e0380-0740-4105-becc-0a4ca12e3944"},orderDirection:"desc",otherBucket:!0,missingBucket:!1,parentFormat:{id:"terms"},secondaryFields:[]}}},columnOrder:["34919782-4546-43a5-b668-06ac934d3acd","aac9d7d0-13a3-480a-892b-08207a787926","e09e0380-0740-4105-becc-0a4ca12e3944"],incompleteColumns:{}}}}},internalReferences:[],adHocDataViews:{}},references:[{type:"index-pattern",id:"{dataViewId}",name:`indexpattern-datasource-layer-${U}`}]});var H=n(110),W=n(403),Q=n(55),Y=n.n(Q),K=n(413);const X={value:0,relation:"eq"},J="detections-histogram",Z=s()(a.EuiFlexItem).withConfig({displayName:"ViewAlertsFlexItem",componentId:"sc-tvqkga-0"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeL)),ee=s()(a.EuiFlexItem).withConfig({displayName:"OptionsFlexItem",componentId:"sc-tvqkga-1"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeS)),te=[],ne=Object(i.memo)((({alignHeader:e,chartHeight:t=155,chartOptionsContextMenu:n,combinedQueries:o,comboboxRef:s,defaultStackByOption:S=L.a,extraActions:k,filters:w,headerChildren:I,inspectTitle:T,legendPosition:C="right",onFieldSelected:U,onlyField:Q,paddingSize:ne="m",panelHeight:ae=L.d,query:ie,runtimeMappings:re,setComboboxInputRef:oe,showCountsInLegend:se=!1,showGroupByPlaceholder:le=!1,showLegend:ce=!0,showLinkToAlerts:ue=!1,showStackBy:de=!0,showTotalAlertsCount:pe=!1,signalIndexName:me,stackByLabel:fe,stackByWidth:ge,timelineId:be,title:ye=_,titleSize:he="m",updateDateRange:ve,hideQueryToggle:Ee=!1,isExpanded:xe,setIsExpanded:je})=>{var Oe;const{to:Se,from:ke,deleteQuery:we,setQuery:Ie}=Object(p.a)(),Te=Object(i.useMemo)((()=>`${J}-${Object(c.v4)()}`),[]),Ce=`alerts-trend-embeddable-${Te}`,[Me,Ae]=Object(i.useState)(!0),[_e,Fe]=Object(i.useState)(!1),[De,Ne]=Object(i.useState)(X),[Pe,Re]=Object(i.useState)(null==Q?S:Q),Le=Object(V.a)("chartEmbeddablesEnabled"),qe=Object(V.a)("alertsPageChartsEnabled"),Be=Object(i.useCallback)((e=>{Re(e),null!=U&&U(e)}),[U]);Object(i.useEffect)((()=>{Re(null==Q?S:Q)}),[S,Q]);const{toggleStatus:ze,setToggleStatus:$e}=Object(z.a)(J),Ve=Object(i.useCallback)((e=>{qe&&void 0!==je?je(e):$e(e)}),[$e,je,qe]),Ue=Object(i.useMemo)((()=>qe&&void 0!==je?!xe:!ze),[qe,je,xe,ze]),Ge=Object(i.useMemo)((()=>({from:ke,to:Se})),[ke,Se]),{loading:He,data:We,setQuery:Qe,response:Ye,request:Ke,refetch:Xe}=Object(b.a)({query:Object(O.d)(Pe,ke,Se,Object(O.a)(o),re),indexName:me,skip:Ue||Le,queryName:y.a.HISTOGRAM}),Je=Object(j.j)(),{navigateToApp:Ze}=Je.services.application,{formatUrl:et,search:tt}=Object(h.m)(R.a.alerts),nt=(({totalAlertsObj:e,visualizationId:t,isChartEmbeddablesEnabled:n})=>{const[a]=Object(j.p)(m.O),r=Object(K.a)({visualizationId:t}),o=Object(i.useMemo)((()=>N(Y()(e.value).format(a),e.value,"gte"===e.relation?">":"lte"===e.relation?"<":"")),[e.value,e.relation,a]),s=Object(i.useMemo)((()=>{const e=null!=r?r[0].hits.total:0;return N(Y()(e).format(a),e,"")}),[a,r]);return n?s:o})({totalAlertsObj:De,visualizationId:Ce,isChartEmbeddablesEnabled:Le}),at=Object(i.useCallback)((e=>{e.preventDefault(),Ze(m.l,{deepLinkId:R.a.alerts,path:Object(h.d)(tt)})}),[Ze,tt]),it=Object(i.useMemo)((()=>Object(O.c)(We)),[We]),rt=Object(i.useMemo)((()=>{var e,t;return ce&&null!=(null==We||null===(e=We.aggregations)||void 0===e||null===(t=e.alertsByGrouping)||void 0===t?void 0:t.buckets)?We.aggregations.alertsByGrouping.buckets.map(((e,t)=>{var n;return{color:t<v.a.length?v.a[t]:void 0,count:se?e.doc_count:void 0,dataProviderId:Object(f.i)(`draggable-legend-item-${Object(c.v4)()}-${Pe}-${e.key}`),field:Pe,timelineId:be,value:null!==(n=null==e?void 0:e.key_as_string)&&void 0!==n?n:e.key}})):te}),[null==We||null===(Oe=We.aggregations)||void 0===Oe?void 0:Oe.alertsByGrouping.buckets,Pe,se,ce,be]);Object(i.useEffect)((()=>{let e=!1;return e||Object(O.f)({isInitialLoading:Me,isLoadingAlerts:He})||Ae(!1),()=>{e=!0}}),[Me,He,Ae]),Object(B.a)({deleteQuery:we,loading:He,refetch:Xe,request:Ke,response:Ye,setQuery:Ie,uniqueQueryId:Te}),Object(i.useEffect)((()=>{var e;Ne(null!==(e=null==We?void 0:We.hits.total)&&void 0!==e?e:{value:0,relation:"eq"})}),[We]),Object(i.useEffect)((()=>{try{let t=null;var e;t=null!=o?Object(O.e)(o):Object(u.buildEsQuery)(void 0,null!=ie?[ie]:[],null!==(e=null==w?void 0:w.filter((e=>!1===e.meta.disabled)))&&void 0!==e?e:[],{...Object(d.getEsQueryConfig)(Je.services.uiSettings),dateFormatTZ:void 0}),Fe(!1),Qe(Object(O.d)(Pe,ke,Se,Object(l.isEmpty)(t)?[]:[t],re))}catch(e){Fe(!0),Qe(Object(O.d)(Pe,ke,Se,[],re))}}),[Pe,ke,Se,ie,w,o,re]);const ot=Object(i.useMemo)((()=>{if(ue)return r.a.createElement(Z,{grow:!1},r.a.createElement(P.g,{"data-test-subj":"alerts-histogram-panel-go-to-alerts-page",onClick:at,href:et(Object(h.d)())},D))}),[ue,at,et]),st=Object(i.useMemo)((()=>{return null==Q?ye:(e=Q,A.i18n.translate("xpack.securitySolution.detectionEngine.alerts.histogram.topNLabel",{values:{fieldName:e},defaultMessage:"Top {fieldName}"}));var e}),[Q,ye]),lt=Object(i.useMemo)((()=>qe&&void 0!==xe?xe:ze),[qe,xe,ze]);return r.a.createElement(E.c,{show:!Me&&lt},r.a.createElement(q.a,{height:ae,hasBorder:!0,paddingSize:ne,"data-test-subj":"alerts-histogram-panel",$toggleStatus:lt},r.a.createElement(g.a,{alignHeader:e,id:Te,inspectTitle:T,outerDirection:"column",title:st,titleSize:he,toggleStatus:lt,toggleQuery:Ee?void 0:Ve,showInspectButton:!Le&&null==n,subtitle:!Me&&pe&&nt,isInspectDisabled:_e},r.a.createElement(a.EuiFlexGroup,{alignItems:"flexStart","data-test-subj":"panelFlexGroup",gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},de&&r.a.createElement(r.a.Fragment,null,r.a.createElement(q.b,{"data-test-subj":"stackByComboBox",inputRef:oe,onSelect:Be,prepend:fe,ref:s,selected:Pe,useLensCompatibleFields:Le,width:ge}),le&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{"data-test-subj":"placeholderSpacer",size:"s"}),r.a.createElement(a.EuiToolTip,{"data-test-subj":"placeholderTooltip",content:F},r.a.createElement(q.b,{"data-test-subj":"stackByPlaceholder",isDisabled:!0,onSelect:l.noop,prepend:$.b,selected:"",useLensCompatibleFields:Le,width:ge})))),null!=I&&I),null!=n&&!Le&&r.a.createElement(ee,{grow:!1},n(Te)),ot)),lt?Le?r.a.createElement(W.a,{"data-test-subj":"embeddable-matrix-histogram",extraActions:k,extraOptions:{filters:w},getLensAttributes:G,height:null!=t?t:155,id:Ce,inspectTitle:null!=T?T:ye,scopeId:H.SourcererScopeName.detections,stackByField:Pe,timerange:Ge}):Me?r.a.createElement(x.a,null):r.a.createElement(M,{chartHeight:t,data:it,from:ke,legendItems:rt,legendPosition:C,legendMinWidth:se?300:void 0,loading:He,to:Se,showLegend:ce,updateDateRange:ve}):null))}));ne.displayName="AlertsHistogramPanel"},function(e,t,n){"use strict";n.d(t,"a",(function(){return k}));var a=n(40),i=n(2),r=n.n(i),o=n(103),s=n(126),l=n(118),c=n(105),u=n(111),d=n(139),p=n(42),m=n(246),f=n.n(m),g=n(125),b=n(106),y=n(242),h=n(248),v=n(560);const E={title:{type:g.a.TEXT,validations:[{validator:g.h.emptyField("")}]},description:{type:g.a.TEXTAREA,validations:[]}};var x=n(159),j=n(196);const O=Object(g.j)({component:g.b}),S=r.a.memo((({closeSaveTimeline:e,initialFocus:t,timelineId:n,showWarning:s})=>{const{startTransaction:d}=Object(x.b)(),m=Object(i.useMemo)((()=>u.b.getTimelineByIdSelector()),[]),{isSaving:S,description:k="",status:w,title:I="",timelineType:T}=Object(c.a)((e=>Object(p.pick)(["isSaving","description","status","title","timelineType"],m(e,n)))),C=f()(S),M=Object(o.useDispatch)(),A=Object(y.a)({timelineId:l.c.active,timelineType:b.l.default}),_=Object(i.useCallback)(((e,t)=>(t&&M(u.a.updateTitleAndDescription({id:n,...e})),Promise.resolve())),[M,n]),F=Object(i.useMemo)((()=>({title:I,description:k})),[I,k]),{form:D}=Object(g.k)({id:"timelineTitleAndDescriptionForm",schema:E,onSubmit:_,options:{stripEmptyFields:!1},defaultValue:F}),{isSubmitted:N,isSubmitting:P,submit:R}=D,L=Object(i.useCallback)((()=>{d({name:j.f.SAVE}),R()}),[R,d]),q=Object(i.useCallback)((()=>{s&&A(),e()}),[e,A,s]),B=Object(i.useMemo)((()=>w===b.k.draft&&s?T===b.l.template?v.e:v.d:v.c),[s,w,T]),z=Object(i.useMemo)((()=>w===b.k.draft?T===b.l.template?v.l:v.k:T===b.l.template?v.h:v.g),[w,T]),$=Object(i.useMemo)((()=>w===b.k.draft&&s?T===b.l.template?v.l:v.k:v.j),[s,w,T]),V=Object(i.useMemo)((()=>v.p(T)),[T]),U=Object(i.useMemo)((()=>`${v.m} (${v.i})`),[]),G=Object(i.useMemo)((()=>({"aria-label":v.n,autoFocus:"title"===t,"data-test-subj":"save-timeline-title",disabled:S,spellCheck:!0,placeholder:T===b.l.template?h.k:h.l})),[t,S,T]),H=Object(i.useMemo)((()=>({"aria-label":v.m,autoFocus:"description"===t,"data-test-subj":"save-timeline-description",disabled:S,placeholder:h.f})),[t,S]);return Object(i.useEffect)((()=>{N&&!S&&C&&e()}),[N,S,C,e]),r.a.createElement(a.EuiModal,{"data-test-subj":"save-timeline-modal",maxWidth:1024,onClose:e},S&&r.a.createElement(a.EuiProgress,{size:"s",color:"primary",position:"absolute","data-test-subj":"progress-bar"}),r.a.createElement(a.EuiModalHeader,{"data-test-subj":"modal-header"},z),r.a.createElement(a.EuiModalBody,null,s&&r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(a.EuiCallOut,{title:V,color:"danger",iconType:"warning","data-test-subj":"save-timeline-callout"}),r.a.createElement(a.EuiSpacer,{size:"m"})),r.a.createElement(g.c,{form:D},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(O,{path:"title",fullWidth:!0,label:v.o,euiFieldProps:G}),r.a.createElement(a.EuiSpacer,null)),r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(O,{label:U,path:"description",fullWidth:!0,euiFieldProps:H}),r.a.createElement(a.EuiSpacer,null)),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,{grow:!1,component:"span"},r.a.createElement(a.EuiButton,{size:"s",fill:!1,onClick:q,isDisabled:S,"data-test-subj":"close-button"},B)),r.a.createElement(a.EuiFlexItem,{grow:!1,component:"span"},r.a.createElement(a.EuiButton,{size:"s",isDisabled:S||P,fill:!0,onClick:L,"data-test-subj":"save-button"},$)))))))}));S.displayName="TimelineTitleAndDescription";const k=r.a.memo((({initialFocus:e,timelineId:t,toolTip:n})=>{const p=Object(o.useDispatch)(),m=Object(i.useMemo)((()=>Object(d.createSelector)(u.b.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.showSaveModal)&&void 0!==t&&t}))),[]),f=Object(c.a)((e=>m(e,t))),[g,b]=Object(i.useState)(!1),y=Object(i.useCallback)((()=>{b(!1),f&&p(u.a.toggleModalSaveTimeline({id:l.c.active,showModalSaveTimeline:!1}))}),[p,b,f]),h=Object(i.useCallback)((()=>{b(!0)}),[b]),{kibanaSecuritySolutionsPrivileges:{crud:E}}=Object(s.a)(),x=Object(i.useMemo)((()=>E?n:v.b),[n,E]),j=Object(i.useMemo)((()=>r.a.createElement(a.EuiButtonIcon,{"aria-label":v.f,isDisabled:!E,onClick:h,iconType:"pencil","data-test-subj":"save-timeline-button-icon"})),[h,E]);return"title"===e&&f||g?r.a.createElement(r.a.Fragment,null,j,r.a.createElement(S,{closeSaveTimeline:y,initialFocus:e,timelineId:t,showWarning:"title"===e&&f})):r.a.createElement(a.EuiToolTip,{content:null!=x?x:"","data-test-subj":"save-timeline-btn-tooltip"},j)}));k.displayName="SaveTimelineButton"},function(e,t,n){"use strict";n.d(t,"b",(function(){return fe})),n.d(t,"a",(function(){return he}));var a=n(42),i=n(40),r=n(2),o=n.n(r),s=n(103),l=n(41),c=n.n(l),u=n(59),d=n(111),p=n(133),m=n(190),f=n(110),g=n(941),b=n(106),y=n(105),h=n(302),v=n(148),E=n(268),x=n(104),j=n.n(x),O=(n(21),n(220)),S=n(913),k=n(124),w=n(606),I=n(309),T=n(118),C=n(519),M=n(915),A=n(5);const _=A.i18n.translate("xpack.securitySolution.timeline.tabs.queyTabTimelineTitle",{defaultMessage:"Query"}),F=A.i18n.translate("xpack.securitySolution.timeline.tabs.eqlTabTimelineTitle",{defaultMessage:"Correlation"}),D=A.i18n.translate("xpack.securitySolution.timeline.tabs.analyserTabTimelineTitle",{defaultMessage:"Analyzer"}),N=A.i18n.translate("xpack.securitySolution.timeline.tabs.notesTabTimelineTitle",{defaultMessage:"Notes"}),P=A.i18n.translate("xpack.securitySolution.timeline.tabs.pinnedTabTimelineTitle",{defaultMessage:"Pinned"}),R=A.i18n.translate("xpack.securitySolution.timeline.tabs.securityAssistantTimelineTitle",{defaultMessage:"Elastic AI Assistant"}),L=A.i18n.translate("xpack.securitySolution.timeline.tabs.discoverInTimeline",{defaultMessage:"Discover"}),q=A.i18n.translate("xpack.securitySolution.timeline.tabs.sessionTabTimelineTitle",{defaultMessage:"Session View"});var B=n(17),z=n(640);const $=c.a.div.attrs((({$isVisible:e=!1,isOverflowYScroll:t=!1})=>({style:{display:e?"flex":"none",overflow:t?"hidden scroll":"hidden"}}))).withConfig({displayName:"HideShowContainer",componentId:"sc-1ib7jds-0"})(["flex:1;"]);var V=c()($).withConfig({displayName:"_StyledHideShowContainer",componentId:"sc-1ib7jds-1"})(["overflow:hidden !important;"]);const U=(e,t=o.a.createElement(i.EuiSkeletonText,{lines:10}))=>{var n;const a=o.a.forwardRef(((n,a)=>o.a.createElement(r.Suspense,{fallback:t},o.a.createElement(e,j()({},n,{ref:a})))));return a.displayName=`${null!==(n=e.displayName)&&void 0!==n?n:"Tab"}WithSuspense`,a},G=c.a.div.withConfig({displayName:"AssistantTabContainer",componentId:"sc-1ib7jds-2"})(["overflow-y:auto;width:100%;"]),H=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(15),n.e(16),n.e(48)]).then(n.bind(null,1663))))),W=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(15),n.e(16),n.e(45)]).then(n.bind(null,1670))))),Q=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(46)]).then(n.bind(null,1649))))),Y=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(41)]).then(n.bind(null,1673))))),K=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(15),n.e(47)]).then(n.bind(null,1650))))),X=U(Object(r.lazy)((()=>Promise.all([n.e(1),n.e(5),n.e(7),n.e(10),n.e(9),n.e(13),n.e(49)]).then(n.bind(null,1651))))),J=U(Object(r.lazy)((()=>n.e(44).then(n.bind(null,1674))))),Z=Object(r.memo)((({isAssistantEnabled:e,renderCellValue:t,rowRenderers:n,timelineId:a,shouldRefocusPrompt:s,setConversationId:l})=>o.a.createElement(r.Suspense,{fallback:o.a.createElement(i.EuiSkeletonText,{lines:10})},o.a.createElement(G,null,o.a.createElement(O.a,{isAssistantEnabled:e,conversationId:z.a,setConversationId:l,shouldRefocusPrompt:s})))));Z.displayName="AssistantTab";const ee=Object(r.memo)((({activeTimelineTab:e,renderCellValue:t,rowRenderers:n,timelineId:a,timelineType:i,setConversationId:s,showTimeline:l})=>{const c=Object(k.a)("discoverInTimeline"),{hasAssistantPrivilege:u,isAssistantEnabled:d}=Object(I.a)(),p=Object(r.useCallback)((e=>{switch(e){case T.d.graph:return o.a.createElement(Q,{timelineId:a});case T.d.notes:return o.a.createElement(Y,{timelineId:a});case T.d.session:return o.a.createElement(X,{timelineId:a});default:return null}}),[a]),m=Object(r.useMemo)((()=>[T.d.graph,T.d.notes,T.d.session].includes(e)),[e]),{conversations:f}=Object(w.a)(),g=Object(r.useMemo)((()=>f[z.a].messages.length>0),[f]);return o.a.createElement(o.a.Fragment,null,o.a.createElement($,{$isVisible:T.d.query===e,"data-test-subj":`timeline-tab-content-${T.d.query}`},o.a.createElement(H,{renderCellValue:t,rowRenderers:n,timelineId:a})),o.a.createElement($,{$isVisible:T.d.pinned===e,"data-test-subj":`timeline-tab-content-${T.d.pinned}`},o.a.createElement(K,{renderCellValue:t,rowRenderers:n,timelineId:a})),i===b.l.default&&o.a.createElement($,{$isVisible:T.d.eql===e,"data-test-subj":`timeline-tab-content-${T.d.eql}`},o.a.createElement(W,{renderCellValue:t,rowRenderers:n,timelineId:a})),o.a.createElement($,{$isVisible:m,isOverflowYScroll:e===T.d.session,"data-test-subj":`timeline-tab-content-${T.d.graph}-${T.d.notes}`},m&&p(e)),u&&o.a.createElement(V,{$isVisible:e===T.d.securityAssistant,isOverflowYScroll:e===T.d.securityAssistant,"data-test-subj":"timeline-tab-content-security-assistant"},(e===T.d.securityAssistant||g)&&o.a.createElement(Z,{isAssistantEnabled:d,renderCellValue:t,rowRenderers:n,timelineId:a,setConversationId:s,shouldRefocusPrompt:l&&e===T.d.securityAssistant})),c&&o.a.createElement($,{$isVisible:T.d.discover===e,"data-test-subj":`timeline-tab-content-${T.d.discover}`},o.a.createElement(J,null)))}));ee.displayName="ActiveTimelineTab";const te=c()(i.EuiBadge).withConfig({displayName:"CountBadge",componentId:"sc-1ib7jds-3"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeS)),ne=c()(i.EuiTab).withConfig({displayName:"StyledEuiTab",componentId:"sc-1ib7jds-4"})([".euiTab__content{display:flex;flex-direction:row;white-space:pre;}:focus{text-decoration:none;> span > span{text-decoration:underline;}}"]),ae=({renderCellValue:e,rowRenderers:t,timelineId:n,timelineFullScreen:l,timelineType:c,graphEventId:u,sessionViewConfig:p,timelineDescription:m})=>{const f=Object(k.a)("discoverInTimeline"),{hasAssistantPrivilege:g}=Object(I.a)(),h=Object(s.useDispatch)(),v=Object(r.useMemo)((()=>Object(M.a)()),[]),E=Object(r.useMemo)((()=>Object(M.g)()),[]),x=Object(r.useMemo)((()=>Object(M.e)()),[]),j=Object(r.useMemo)((()=>Object(M.d)()),[]),O=Object(r.useMemo)((()=>Object(M.c)()),[]),w=Object(r.useMemo)((()=>Object(M.b)()),[]),A=Object(y.b)((e=>v(e,n))),$=Object(y.b)((e=>E(e,n))),V=Object(y.b)((e=>x(e,n))),U=Object(y.a)((e=>O(e,n))),G=Object(y.a)((e=>w(e,n))),H=Object(y.a)((e=>j(e))),W=Object(B.b)().isEnterprise(),[Q,Y]=Object(r.useState)(z.a),{reportAssistantInvoked:K}=Object(S.a)(),X=Object(r.useMemo)((()=>{const e=Object.values(G).reduce(((e,t)=>[...e,...t]),[]);return[...U,...e]}),[U,G]),J=Object(r.useMemo)((()=>H.filter((e=>X.includes(e.id))).length+(Object(a.isEmpty)(m)?0:1)),[H,X,m]),Z=Object(r.useCallback)((e=>{h(d.a.setActiveTabTimeline({id:n,activeTab:e}))}),[h,n]),ae=Object(r.useCallback)((()=>{Z(T.d.query)}),[Z]),ie=Object(r.useCallback)((()=>{Z(T.d.eql)}),[Z]),re=Object(r.useCallback)((()=>{Z(T.d.graph)}),[Z]),oe=Object(r.useCallback)((()=>{Z(T.d.notes)}),[Z]),se=Object(r.useCallback)((()=>{Z(T.d.pinned)}),[Z]),le=Object(r.useCallback)((()=>{Z(T.d.session)}),[Z]),ce=Object(r.useCallback)((()=>{Z(T.d.securityAssistant),A!==T.d.securityAssistant&&K({conversationId:Q,invokedBy:z.a})}),[A,Q,K,Z]),ue=Object(r.useCallback)((()=>{Z(T.d.discover)}),[Z]);return Object(r.useEffect)((()=>{u||A!==T.d.graph||ae()}),[A,u,ae]),o.a.createElement(o.a.Fragment,null,!l&&o.a.createElement(i.EuiTabs,null,o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.query}`,onClick:ae,isSelected:A===T.d.query,disabled:!1,key:T.d.query},o.a.createElement("span",null,_),$&&o.a.createElement(C.b,null)),c===b.l.default&&o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.eql}`,onClick:ie,isSelected:A===T.d.eql,disabled:!1,key:T.d.eql},o.a.createElement("span",null,F),$&&o.a.createElement(C.a,null)),o.a.createElement(i.EuiTab,{"data-test-subj":`timelineTabs-${T.d.graph}`,onClick:re,isSelected:A===T.d.graph,disabled:!u,key:T.d.graph},D),W&&o.a.createElement(i.EuiTab,{"data-test-subj":`timelineTabs-${T.d.session}`,onClick:le,isSelected:A===T.d.session,disabled:null===p,key:T.d.session},q),o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.notes}`,onClick:oe,isSelected:A===T.d.notes,disabled:c===b.l.template,key:T.d.notes},o.a.createElement("span",null,N),$&&J>0&&c===b.l.default&&o.a.createElement("div",null,o.a.createElement(te,null,J))),o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.pinned}`,onClick:se,disabled:c===b.l.template,isSelected:A===T.d.pinned,key:T.d.pinned},o.a.createElement("span",null,P),$&&V>0&&c===b.l.default&&o.a.createElement("div",null,o.a.createElement(te,null,V))),g&&o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.securityAssistant}`,onClick:ce,disabled:c===b.l.template,isSelected:A===T.d.securityAssistant,key:T.d.securityAssistant},o.a.createElement("span",null,R)),f&&o.a.createElement(ne,{"data-test-subj":`timelineTabs-${T.d.discover}`,onClick:ue,isSelected:A===T.d.discover,disabled:!1,key:T.d.discover},o.a.createElement("span",null,L))),o.a.createElement(ee,{activeTimelineTab:A,renderCellValue:e,rowRenderers:t,timelineId:n,timelineType:c,timelineDescription:m,setConversationId:Y,showTimeline:$}))},ie=Object(r.memo)(ae);var re=n(170),oe=n(178),se=n(722),le=n(45),ce=n(56),ue=n(102),de=n(221),pe=n(122);const me=c.a.div.withConfig({displayName:"TimelineTemplateBadge",componentId:"sc-4r2lej-0"})(["background:",";color:#fff;padding:10px 15px;font-size:0.8em;"],(({theme:e})=>e.eui.euiColorVis3_behindText)),fe=Object(r.createContext)({timelineId:null}),ge=({timelineId:e})=>{const t=Object(r.useMemo)((()=>d.b.getTimelineByIdSelector()),[]);return Object(y.b)((n=>{var a;return(null!==(a=t(n,e))&&void 0!==a?a:p.b).isSaving}))?o.a.createElement(i.EuiProgress,{size:"s",color:"primary",position:"absolute"}):null},be=o.a.memo(ge),ye=({renderCellValue:e,rowRenderers:t,timelineId:n})=>{const l=Object(s.useDispatch)(),c=Object(r.useRef)(null),x=Object(r.useMemo)((()=>d.b.getTimelineByIdSelector()),[]),j=Object(r.useMemo)((()=>pe.e.scopeIdSelector()),[]),{selectedPatterns:O,selectedDataViewId:S}=Object(y.a)((e=>j(e,f.SourcererScopeName.timeline))),{dataViewId:k,indexNames:w,graphEventId:I,savedObjectId:C,timelineType:M,description:A,sessionViewConfig:_,initialized:F}=Object(y.a)((e=>{var t;return Object(a.pick)(["indexNames","dataViewId","graphEventId","savedObjectId","timelineType","description","sessionViewConfig","initialized"],null!==(t=x(e,n))&&void 0!==t?t:p.b)})),{timelineFullScreen:D}=Object(oe.c)();Object(r.useEffect)((()=>{C||F||l(d.a.createTimeline({id:n,columns:m.b,dataViewId:S,indexNames:O,expandedDetail:h.a.getExpandedDetail(),show:!1}))}),[]);const N=Object(r.useCallback)((()=>{!C||null==S||null===k&&0===w.length||k===S&&w.sort().join()===O.sort().join()||l(d.a.updateDataView({dataViewId:S,id:n,indexNames:O}))}),[l,C,S,k,O,w,n]);Object(r.useEffect)((()=>{N()}),[S,O]);const P=Object(r.useCallback)((()=>{var e;const t=null===(e=c.current)||void 0===e?void 0:e.querySelector(se.a);var n,a;null!=t?t.focus():null===(n=c.current)||void 0===n||null===(a=n.querySelector(".globalFilterBar__addButton"))||void 0===a||a.focus()}),[c]),R=Object(r.useCallback)((()=>{var e,t;null===(e=c.current)||void 0===e||null===(t=e.querySelector(`.${v.d}`))||void 0===t||t.focus()}),[c]),L=Object(r.useCallback)((e=>{Object(u.isTab)(e)&&Object(v.l)({containerElement:c.current,keyboardEvent:e,onSkipFocusBeforeEventsTable:P,onSkipFocusAfterEventsTable:R})}),[c,P,R]),q=Object(r.useMemo)((()=>({timelineId:n})),[n]),B=(()=>{const{search:e,pathname:t}=Object(le.useLocation)(),{spaces:n}=Object(ue.j)().services,a=Object(r.useMemo)((()=>d.b.getTimelineByIdSelector()),[]),{resolveTimelineConfig:s,savedObjectId:l,show:c,graphEventId:u,activeTab:m}=Object(y.a)((e=>{var t;return null!==(t=a(e,T.c.active))&&void 0!==t?t:p.b})),f=Object(r.useCallback)((()=>{var a,r,d;const p=new URLSearchParams(e),f=null!==(a=p.get(de.a.timeline))&&void 0!==a?a:void 0,g={id:null!=l?l:"",isOpen:!!c,activeTab:m,graphEventId:u},b=null!==(r=Object(ce.safeDecode)(null!=f?f:""))&&void 0!==r?r:g,y=null==b?void 0:b.id;if(!n||"conflict"!==(null==s?void 0:s.outcome)||null==(null==s?void 0:s.alias_target_id)||null==y)return null;const h=null!==(d=null==s?void 0:s.alias_target_id)&&void 0!==d?d:"",v={...b,id:h},E=Object(ce.encode)(v);p.set(de.a.timeline,E);const x=`${t}?${p.toString()}${window.location.hash}`;return o.a.createElement(o.a.Fragment,null,n.ui.components.getLegacyUrlConflict({objectNoun:de.a.timeline,currentObjectId:y,otherObjectId:h,otherObjectPath:x}),o.a.createElement(i.EuiSpacer,null))}),[m,u,t,null==s?void 0:s.alias_target_id,null==s?void 0:s.outcome,l,e,c,n]);return Object(r.useMemo)((()=>f()),[f])})();return o.a.createElement(fe.Provider,{value:q},o.a.createElement(re.B,{"data-test-subj":"timeline","data-timeline-id":n,onKeyDown:L,ref:c},o.a.createElement(be,{timelineId:n}),M===b.l.template&&o.a.createElement(me,null,E.f),B,o.a.createElement(re.y,{$isVisible:!D,"data-test-subj":"timeline-hide-show-container"},o.a.createElement(g.b,{timelineId:n}),o.a.createElement(g.a,{timelineId:n})),o.a.createElement(ie,{graphEventId:I,sessionViewConfig:_,renderCellValue:e,rowRenderers:t,timelineId:n,timelineType:M,timelineDescription:A,timelineFullScreen:D})))};ye.displayName="StatefulTimelineComponent";const he=o.a.memo(ye)},function(e,t,n){"use strict";n.d(t,"a",(function(){return M}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(103),c=n(42);const u=n(5).i18n.translate("xpack.securitySolution.components.histogram.stackByOptions.stackByLabel",{defaultMessage:"Stack by"});var d=n(166),p=n(520),m=n(456),f=n(959),g=n(151),b=n(114),y=n(311),h=n(390),v=n(177),E=n(124),x=n(211),j=n(403),O=n(726),S=n(645);const k=({isInitialLoading:e,barChart:t,configs:n,stackByField:a,scopeId:r})=>e?i.a.createElement(S.a,null):i.a.createElement(O.a,{barChart:t,configs:n,stackByField:a,scopeId:r}),w=i.a.memo(k);k.displayName="MatrixHistogramChartContentComponent";var I=n(413);const T=o()(p.a).withConfig({displayName:"HistogramPanel",componentId:"sc-cnfih-0"})(["display:flex;flex-direction:column;",""],(({height:e})=>null!=e?`min-height: ${e}px;`:"")),C=({chartHeight:e,defaultStackByOption:t,endDate:n,errorMessage:r,filterQuery:o,getLensAttributes:p,headerChildren:O,histogramType:S,hideHistogramIfEmpty:k=!1,id:C,indexNames:M,runtimeMappings:A,isPtrIncluded:_,legendPosition:F,lensAttributes:D,mapping:N,onError:P,paddingSize:R="m",panelHeight:L=300,setAbsoluteRangeDatePickerTarget:q=b.a.global,setQuery:B,showInspectButton:z=!1,showLegend:$,showSpacer:V=!0,stackByOptions:U,startDate:G,subtitle:H,scopeId:W,sourcererScopeId:Q,title:Y,titleSize:K,yTickFormatter:X,skip:J,hideQueryToggle:Z=!1,applyGlobalQueriesAndFilters:ee=!0})=>{const te=`${C}-embeddable`,ne=Object(l.useDispatch)(),ae=Object(a.useCallback)((({x:e})=>{if(!e)return;const[t,n]=e;ne(Object(g.setAbsoluteRangeDatePicker)({id:q,from:new Date(t).toISOString(),to:new Date(n).toISOString()}))}),[ne,q]),ie=Object(a.useMemo)((()=>Object(m.b)({chartHeight:e,from:G,legendPosition:F,to:n,onBrushEnd:ae,yTickFormatter:X,showLegend:$})),[e,G,F,n,ae,X,$]),[re,oe]=Object(a.useState)(!0),[se,le]=Object(a.useState)(t);Object(a.useEffect)((()=>{le(t)}),[t]);const ce=Object(a.useCallback)((e=>{var n;le(null!==(n=U.find((t=>t.value===e.target.value)))&&void 0!==n?n:t)}),[t,U]),{toggleStatus:ue,setToggleStatus:de}=Object(v.a)(C),[pe,me]=Object(a.useState)(J||!ue);Object(a.useEffect)((()=>{me(J||!ue)}),[J,ue]);const fe=Object(a.useCallback)((e=>{de(e),me(!e)}),[me,de]),ge=Object(E.a)("chartEmbeddablesEnabled"),be={endDate:n,errorMessage:r,filterQuery:o,histogramType:S,indexNames:M,onError:P,startDate:G,stackByField:se.value,runtimeMappings:A,isPtrIncluded:_,skip:pe||ge},[ye,{data:he,inspect:ve,totalCount:Ee,refetch:xe}]=Object(f.a)(be),je=Object(a.useMemo)((()=>null!=Y&&"function"==typeof Y?Y(se):Y),[Y,se]),Oe=Object(I.a)({visualizationId:te}),Se=Object(a.useMemo)((()=>{if(re)return null;if("function"==typeof H){if(ge){if(!Oe||(e=Oe[0],!Object.values(null!==(t=e.aggregations)&&void 0!==t?t:{}).some((({buckets:e})=>e.length>0))))return H(0);const n=Oe[0].hits.total;return n>=0?H(n):null}return Ee>=0?H(Ee):null}var e,t;return H}),[ge,re,H,Ee,Oe]),ke=Object(a.useMemo)((()=>!!(Ee<=0&&k)),[Ee,k]),we=Object(a.useMemo)((()=>Object(m.c)(he,N)),[he,N]);Object(a.useEffect)((()=>{ye||re||B({id:C,inspect:ve,loading:ye,refetch:xe}),re&&we&&he&&oe(!1)}),[we,he,C,ve,ge,re,ye,xe,oe,B]);const Ie=Object(a.useMemo)((()=>({from:G,to:n})),[G,n]),Te=Object(a.useMemo)((()=>({dnsIsPtrIncluded:null!=_&&_,filters:o?[{query:Object(c.isString)(o)?JSON.parse(o):o,meta:{}}]:void 0})),[_,o]);return ke?null:i.a.createElement(i.a.Fragment,null,i.a.createElement(y.a,{show:!re,targetClassNames:[x.a]},i.a.createElement(T,{"data-test-subj":`${C}Panel`,height:ue?L:void 0,paddingSize:R},ye&&!re&&i.a.createElement(s.EuiProgress,{"data-test-subj":"initialLoadingPanelMatrixOverTime",size:"xs",position:"absolute",color:"accent"}),i.a.createElement(d.a,{id:C,height:ue?void 0:0,title:je,titleSize:K,toggleStatus:ue,toggleQuery:Z?void 0:fe,subtitle:Se,inspectMultiple:!0,showInspectButton:z&&!ge,isInspectDisabled:void 0===o},i.a.createElement(s.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},(p||D)&&Ie&&!ge&&i.a.createElement(s.EuiFlexItem,{grow:!1},i.a.createElement(h.a,{className:"histogram-viz-actions",extraOptions:Te,getLensAttributes:p,isInspectButtonDisabled:void 0===o,lensAttributes:D,queryId:C,stackByField:se.value,timerange:Ie,title:Y})),i.a.createElement(s.EuiFlexItem,{grow:!1},U.length>1&&i.a.createElement(s.EuiSelect,{onChange:ce,options:U,prepend:u,value:null==se?void 0:se.value})),i.a.createElement(s.EuiFlexItem,{grow:!1},O))),ue?ge?i.a.createElement(j.a,{scopeId:Q,applyGlobalQueriesAndFilters:ee,"data-test-subj":"embeddable-matrix-histogram",extraOptions:Te,getLensAttributes:p,height:null!=e?e:150,id:te,inspectTitle:Y,lensAttributes:D,stackByField:se.value,timerange:Ie}):i.a.createElement(w,{isInitialLoading:re,barChart:we,configs:ie,stackByField:se.value,scopeId:W}):null)),V&&i.a.createElement(s.EuiSpacer,{"data-test-subj":"spacer",size:"l"}))},M=i.a.memo(C)},function(e,t,n){"use strict";n.d(t,"b",(function(){return w})),n.d(t,"a",(function(){return I}));var a=n(130),i=n.n(a),r=n(42),o=n(2),s=n(103),l=n(3),c=n(51),u=n(102),d=n(216),p=n(111),m=n(518),f=n(115),g=n(113);const b=n(5).i18n.translate("xpack.securitySolution.timelineEvents.errorSearchDescription",{defaultMessage:"An error has occurred on timeline events search"});var y=n(118),h=n(175),v=n(302),E=n(108),x=n(303),j=n(4);const O="timelineEventsQuery",S=[{field:"@timestamp",direction:g.b.asc,type:"date",esTypes:["date"]}],k=e=>({...Object(r.isEmpty)(null==e?void 0:e.eventCategoryField)?{}:{eventCategoryField:null==e?void 0:e.eventCategoryField},...Object(r.isEmpty)(null==e?void 0:e.size)?{}:{size:null==e?void 0:e.size},...Object(r.isEmpty)(null==e?void 0:e.tiebreakerField)?{}:{tiebreakerField:null==e?void 0:e.tiebreakerField},...Object(r.isEmpty)(null==e?void 0:e.timestampField)?{}:{timestampField:null==e?void 0:e.timestampField}}),w=({dataViewId:e,endDate:t,eqlOptions:n,id:a=O,indexNames:w,fields:I,filterQuery:T,runtimeMappings:C,startDate:M,language:A="kuery",limit:_,sort:F=S,skip:D=!1,timerangeKind:N})=>{const[{pageName:P}]=Object(h.a)(),R=Object(s.useDispatch)(),{data:L}=Object(u.j)().services,q=Object(o.useRef)(r.noop),B=Object(o.useRef)(new AbortController),z=Object(o.useRef)(new l.Subscription),[$,V]=Object(o.useState)(!1),[U,G]=Object(o.useState)(a===y.c.active?v.a.getActivePage():0),[H,W]=Object(o.useState)(null),Q=Object(o.useRef)(null),{startTracking:Y}=Object(x.a)(),K=Object(o.useCallback)((()=>{null!=a&&m.a.some((e=>e===a))&&(R(p.a.clearEventsLoading({id:a})),R(p.a.clearEventsDeleted({id:a})))}),[R,a]),X=Object(o.useCallback)((e=>{K(),a===y.c.active&&(v.a.setExpandedDetail({}),v.a.setActivePage(e)),G(e)}),[K,a]),J=Object(o.useCallback)((()=>{null!=q.current&&q.current(),X(0)}),[X]),Z=Object(o.useCallback)((e=>{R(p.a.setTimelineUpdatedAt({id:a,updated:e}))}),[R,a]),[ee,te]=Object(o.useState)({id:a,inspect:{dsl:[],response:[]},refetch:J,totalCount:-1,pageInfo:{activePage:0,querySize:0},events:[],loadPage:X,updatedAt:0}),{addWarning:ne}=Object(E.a)(),ae=Object(o.useCallback)((async(t,n)=>{if(null==t||""===P||D)return;const i=async()=>{Q.current=t,B.current=new AbortController,V(!0);const{endTracking:i}=Y({name:`${j.l} timeline events search`});z.current=L.search.search(t,{strategy:"eql"===t.language?"timelineEqlSearchStrategy":"timelineSearchStrategy",abortSignal:B.current.signal,indexPattern:{id:e}}).subscribe({next:e=>{Object(c.isCompleteResponse)(e)?(i("success"),V(!1),te((i=>{const r={...i,events:(o=e.edges,o.map((e=>e.node))),inspect:Object(f.getInspectResponse)(e,i.inspect),pageInfo:e.pageInfo,totalCount:e.totalCount,updatedAt:Date.now()};var o;return Z(r.updatedAt),a===y.c.active&&(v.a.setExpandedDetail({}),v.a.setPageName(P),"eql"===t.language?(v.a.setEqlRequest(t),v.a.setEqlResponse(r)):(v.a.setRequest(t),v.a.setResponse(r))),n&&n(r),r})),z.current.unsubscribe()):Object(c.isErrorResponse)(e)&&(i("invalid"),V(!1),ne(b),z.current.unsubscribe())},error:e=>{i(B.current.signal.aborted?"aborted":"error"),V(!1),L.search.showError(e),z.current.unsubscribe()}})};if(a===y.c.active&&""!==v.a.getPageName()&&P!==v.a.getPageName()){if(v.a.setPageName(P),B.current.abort(),V(!1),"eql"===t.language?(Q.current=v.a.getEqlRequest(),q.current=i.bind(null,v.a.getEqlRequest())):(Q.current=v.a.getRequest(),q.current=i.bind(null,v.a.getRequest())),te((e=>{const n="eql"===t.language?v.a.getEqlResponse():v.a.getResponse();return null!=n?{...n,refetch:J,loadPage:X}:e})),"eql"!==t.language&&null!=v.a.getResponse())return;if("eql"===t.language&&null!=v.a.getEqlResponse())return}z.current.unsubscribe(),B.current.abort(),await i(),q.current=i}),[P,D,a,Y,L.search,e,Z,ne,J,X]);Object(o.useEffect)((()=>{0!==w.length&&W((e=>{var r,o,s,l,c,u;const p=e,m={defaultIndex:null!==(r=null==e?void 0:e.defaultIndex)&&void 0!==r?r:[],filterQuery:null!==(o=null==e?void 0:e.filterQuery)&&void 0!==o?o:"",querySize:null!==(s=null==e?void 0:e.pagination.querySize)&&void 0!==s?s:0,sort:null!==(l=null==e?void 0:e.sort)&&void 0!==l?l:S,timerange:null!==(c=null==e?void 0:e.timerange)&&void 0!==c?c:{},runtimeMappings:null!==(u=null==e?void 0:e.runtimeMappings)&&void 0!==u?u:{},...k(p)},f=M&&t?{timerange:{interval:"12h",from:M,to:t}}:{},b={defaultIndex:w,filterQuery:Object(d.a)(T),querySize:_,sort:F,runtimeMappings:C,...f,...k(n)},h=i()(m,b)?U:0,E={defaultIndex:w,factoryQueryType:g.A.all,fieldRequested:I,fields:I,filterQuery:Object(d.a)(T),pagination:{activePage:h,querySize:_},language:A,runtimeMappings:C,sort:F,...f,...n||{}};return U!==h&&(G(h),a===y.c.active&&v.a.setActivePage(h)),i()(e,E)?e:E}))}),[R,w,U,t,n,T,a,A,_,M,F,I,C]);const ie=Object(o.useCallback)((async e=>{a===y.c.active&&"absolute"!==N&&i()(Q.current,H)||await ae(H,e)}),[a,H,ae,N]);return Object(o.useEffect)((()=>{Object(r.isEmpty)(T)&&te({id:a,inspect:{dsl:[],response:[]},refetch:J,totalCount:-1,pageInfo:{activePage:0,querySize:0},events:[],loadPage:X,updatedAt:0})}),[T,a,J,X]),[$,ee,ie]},I=({dataViewId:e,endDate:t,eqlOptions:n,id:a=O,indexNames:i,fields:r,filterQuery:s,runtimeMappings:l,startDate:c,language:u="kuery",limit:d,sort:p=S,skip:m=!1,timerangeKind:f})=>{const[g,b,y]=w({dataViewId:e,endDate:t,eqlOptions:n,id:a,indexNames:i,fields:r,filterQuery:s,runtimeMappings:l,startDate:c,language:u,limit:d,sort:p,skip:m,timerangeKind:f});return Object(o.useEffect)((()=>{y&&y()}),[y]),[g,b]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(45),l=n(130),c=n.n(l),u=n(102),d=n(18),p=n(19),m=n(175);const f=({disabled:e,hrefWithSearch:t,id:n,name:i,isSelected:s,isBeta:l,betaOptions:c})=>{var m;const{getAppUrl:f,navigateTo:g}=Object(u.l)(),b=Object(r.useCallback)((e=>{e.preventDefault(),g({path:t,restoreScroll:!0}),Object(d.h)(d.a.CLICK,`${d.c.TAB_CLICKED}${n}`)}),[g,t,n]),y=f({path:t});return o.a.createElement(a.EuiTab,{"data-href":y,"data-test-subj":`navigation-${n}`,disabled:e,isSelected:s,href:y,onClick:b,append:l&&o.a.createElement(a.EuiBadge,{color:"#E0E5EE"},null!==(m=null==c?void 0:c.text)&&void 0!==m?m:p.a)},i)},g=o.a.memo(f),b=({navTabs:e})=>{const[{tabName:t}]=Object(m.a)(),n=Object(r.useCallback)((()=>Object(i.getOr)("","id",Object.values(e).find((e=>t===e.id)))),[t,e]),[l,c]=Object(r.useState)(n());Object(r.useEffect)((()=>{const e=n();e!==l&&c(e)}),[t,e,n,l]);const{search:u}=Object(s.useLocation)(),d=Object(r.useMemo)((()=>Object.values(e).map((e=>{const t=l===e.id;return o.a.createElement(g,{key:`navigation-${e.id}`,id:e.id,hrefWithSearch:e.href+u,name:e.name,disabled:e.disabled,isSelected:t,isBeta:e.isBeta,betaOptions:e.betaOptions})}))),[e,l,u]);return o.a.createElement(a.EuiTabs,null,d)};b.displayName="TabNavigationComponent";const y=o.a.memo(b,((e,t)=>c()(e.navTabs,t.navTabs)));y.displayName="TabNavigation"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(102),r=n(109),o=n(59);const s=({closePopover:e,draggableId:t,fieldName:n,keyboardHandlerRef:s,openPopover:l})=>{const{timelines:c}=Object(i.j)().services,u=c.getUseAddToTimeline(),{beginDrag:d,cancelDrag:p,dragToLocation:m,endDrag:f,hasDraggableLock:g}=u({draggableId:t,fieldName:n}),[b,y]=Object(a.useState)(null),h=Object(a.useCallback)((()=>{y((e=>e?(p(e),null):null))}),[p]),v=Object(a.useCallback)((n=>{const a=document.querySelector(`[data-rbd-drag-handle-draggable-id="${t}"]`);var i;a&&((g()||!g()&&" "===n.key)&&(n.preventDefault(),n.stopPropagation()),(({beginDrag:e,cancelDragActions:t,closePopover:n,draggableElement:a,dragActions:i,dragToLocation:s,endDrag:l,keyboardEvent:c,openPopover:u,setDragActions:d})=>{let p=null;switch(c.key){case" ":i?(l(i),d(null)):(null!=n&&n(),d(e()));break;case"Escape":t();break;case"Tab":(e=>{const t=e.querySelectorAll("a, button");t.forEach((e=>{e.setAttribute("tabindex","-1")})),setTimeout((()=>{t.forEach((e=>{e.setAttribute("tabindex","0")}))}),0)})(a);break;case"ArrowUp":p=a.getBoundingClientRect(),s({dragActions:i,position:{x:p.x,y:p.y-r.f}});break;case"ArrowDown":p=a.getBoundingClientRect(),s({dragActions:i,position:{x:p.x,y:p.y+r.f}});break;case"ArrowLeft":p=a.getBoundingClientRect(),s({dragActions:i,position:{x:p.x-r.f,y:p.y}});break;case"ArrowRight":p=a.getBoundingClientRect(),s({dragActions:i,position:{x:p.x+r.f,y:p.y}});break;case"Enter":Object(o.stopPropagationAndPreventDefault)(c),i||null==u||u()}})({beginDrag:d,cancelDragActions:h,closePopover:e,dragActions:b,draggableElement:a,dragToLocation:m,endDrag:f,keyboardEvent:n,openPopover:l,setDragActions:y}),null===(i=s.current)||void 0===i||i.focus())}),[d,h,e,b,t,m,f,g,s,l,y]);return Object(a.useMemo)((()=>({onBlur:h,onKeyDown:v})),[h,v])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(2),i=n(419),r=n(5);r.i18n.translate("xpack.securitySolution.overviewHost.errorSearchDescription",{defaultMessage:"An error has occurred on host overview search"});const o=r.i18n.translate("xpack.securitySolution.overviewHost.failSearchDescription",{defaultMessage:"Failed to run search on host overview"});var s=n(194);const l="hostsDetailsQuery",c=({endDate:e,hostName:t,indexNames:n,id:r=l,skip:c=!1,startDate:u})=>{const{loading:d,result:p,search:m,refetch:f,inspect:g}=Object(s.a)({factoryQueryType:i.d.details,initialResult:{hostDetails:{}},errorMessage:o,abort:c}),b=Object(a.useMemo)((()=>({endDate:e,hostDetails:p.hostDetails,id:r,inspect:g,isInspected:!1,refetch:f,startDate:u})),[e,p.hostDetails,r,g,f,u]),y=Object(a.useMemo)((()=>({defaultIndex:n,factoryQueryType:i.d.details,hostName:t,timerange:{interval:"12h",from:u,to:e}})),[e,t,n,u]);return Object(a.useEffect)((()=>{c||m(y)}),[y,m,c]),[d,b]}},function(e,t,n){"use strict";n.d(t,"d",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"a",(function(){return u}));var a=n(2),i=n.n(a),r=n(895),o=n(854);const s=()=>i.a.createElement(r.a,{docPath:o.h,linkText:o.i}),l=()=>i.a.createElement(r.a,{docPath:o.d,linkText:o.e}),c=()=>i.a.createElement(r.a,{docPath:o.f,linkText:o.g}),u=()=>i.a.createElement(r.a,{docPath:o.b,linkText:o.c})},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(340),i=n(377);const r=async(e,t,n=!1)=>{var r,o;const s=await t.get(e,!0,n),l=s.toSpec(),c=Object(a.a)(s.getIndexPattern().split(",")),u=await t.getExistingIndices(c);return{loading:!1,id:null!==(r=l.id)&&void 0!==r?r:"",title:s.getIndexPattern(),indexFields:s.fields,fields:l.fields,patternList:u,dataView:l,browserFields:Object(i.a)(null!==(o=l.id)&&void 0!==o?o:"",l.fields).browserFields,runtimeMappings:l.runtimeFieldMap}}},,function(e,t){e.exports=function(){}},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),n(270).NetworkType.details,function(e){e.anomalies="anomalies",e.flows="flows",e.tls="tls",e.http="http",e.events="events",e.users="users"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(195);const i=(e,t)=>`/name/${e}${Object(a.a)(t)}`,r=(e,t,n)=>`/name/${e}/${t}${Object(a.a)(n)}`,o=(e,t)=>`/${e}${Object(a.a)(t)}`},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.dragAndDrop.copyToClipboardTooltip",{defaultMessage:"Copy to Clipboard"}),r=a.i18n.translate("xpack.securitySolution.dragAndDrop.draggableKeyboardInstructionsNotDraggingScreenReaderOnly",{defaultMessage:"Press enter for options, or press space to begin dragging."});a.i18n.translate("xpack.securitySolution.dragAndDrop.fieldLabel",{defaultMessage:"Field"}),a.i18n.translate("xpack.securitySolution.dragAndDrop.closeButtonLabel",{defaultMessage:"Close"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(40),i=n(2),r=n.n(i),o=n(140),s=n(939);const l=r.a.memo((({hideActions:e=[],modalTitle:t,onClose:n,onOpen:i})=>r.a.createElement(a.EuiModal,{"data-test-subj":"open-timeline-modal",maxWidth:1100,onClose:n},r.a.createElement(s.a,{closeModalTimeline:n,hideActions:e,isModal:!0,defaultPageSize:10,onOpenTimeline:i,title:null!=t?t:o.H}))));l.displayName="OpenTimelineModal"},function(e,t,n){"use strict";n.d(t,"b",(function(){return y})),n.d(t,"a",(function(){return h})),n.d(t,"c",(function(){return v}));var a=n(42),i=n(2),r=n(103),o=n(5),s=n(161),l=n(12),c=n(108),u=n(116),d=n(158),p=n(164),m=n(254),f=n(148),g=n(909),b=n(110);const y="createRuleFromTimeline",h="createRuleFromEql",v=e=>{const t=Object(r.useDispatch)(),{addError:n}=Object(c.a)(),{browserFields:v,dataViewId:E,selectedPatterns:x}=Object(u.d)(b.SourcererScopeName.timeline),j=Object(i.useRef)(!1),[O,S]=Object(i.useState)(null),[k,w]=Object(i.useState)(!1),I=Object(i.useCallback)((e=>{w(!0),S(e),e.dataViewId===E||Object(a.isEmpty)(e.indexNames)||t(d.a.setSelectedDataView({id:b.SourcererScopeName.timeline,selectedDataViewId:e.dataViewId,selectedPatterns:e.indexNames}))}),[E,t]),[T]=Object(i.useState)({dataViewId:E,selectedPatterns:x}),C=Object(i.useMemo)((()=>null==O||Object(a.isEmpty)(v)||null!==O.dataViewId&&null!==E&&E!==O.dataViewId?null:v),[v,E,O]),M=Object(m.e)(y),A=Object(i.useMemo)(M,[M]),_=Object(m.e)(h),F=Object(i.useMemo)(_,[_]),D=Object(i.useCallback)((()=>{if(null!=O&&null!=C){try{const t=()=>{var e,t,n,a,i,r,o;return{dataProviders:null!=O.dataProviders&&O.dataProviders.length>0?Object(s.f)(Object(f.g)(O.dataProviders,C),{fields:[],title:x.join(",")}):"",query:{query:null!==(e=null===(t=O.kqlQuery.filterQuery)||void 0===t||null===(n=t.kuery)||void 0===n?void 0:n.expression)&&void 0!==e?e:"",language:null!==(a=null===(i=O.kqlQuery.filterQuery)||void 0===i||null===(r=i.kuery)||void 0===r?void 0:r.kind)&&void 0!==a?a:"kuery"},filters:null!==(o=O.filters)&&void 0!==o?o:[],eqlOptions:{}}},n=()=>{var e;return{dataProviders:"",query:{query:null!==(e=O.eqlOptions.query)&&void 0!==e?e:"",language:"eql"},filters:[],eqlOptions:{eqlOptions:O.eqlOptions}}},a=j.current?n():t();w(!1),e({index:x,queryBar:{filters:""!==a.dataProviders?[...a.filters,Object(g.b)(a.dataProviders)]:a.filters,query:a.query,saved_id:null},...a.eqlOptions})}catch(e){w(!1),n(e,{toastMessage:o.i18n.translate("xpack.securitySolution.ruleFromTimeline.error.toastMessage",{defaultMessage:"Failed to create rule from timeline with id: {id}",values:{id:O.id}}),title:o.i18n.translate("xpack.securitySolution.ruleFromTimeline.error.title",{defaultMessage:"Failed to import rule from timeline"})})}j.current=!1,T.dataViewId!==E&&t(d.a.setSelectedDataView({id:b.SourcererScopeName.timeline,selectedDataViewId:T.dataViewId,selectedPatterns:T.selectedPatterns}))}}),[n,E,t,T.dataViewId,T.selectedPatterns,C,x,O,e]);Object(i.useEffect)((()=>{null!=C&&D()}),[D,C]);const N=Object(i.useCallback)((e=>{null!=O&&e===O.id||Object(p.h)({timelineId:e,onOpenTimeline:I,updateIsLoading:({id:e,isLoading:n})=>t(Object(l.updateIsLoading)({id:e,isLoading:n})),updateTimeline:Object(p.b)(t)})}),[t,I,O]),[P,R]=Object(i.useState)(!1);return Object(i.useEffect)((()=>{if(!P){let e=null;null!=A?e=A:null!=F&&(e=F,j.current=!0),null!=e&&(R(!0),N(e),w(!0))}}),[N,A,F,P]),{loading:k,onOpenTimeline:I}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n.n(a),r=n(130),o=n.n(r),s=n(13),l=n(72),c=n(14);const u=Object(a.memo)((({dateRangeFrom:e,dateRangeTo:t,hideSavedQuery:n=!1,indexPattern:r,isLoading:u=!1,isRefreshPaused:d,filterQuery:p,filterManager:m,filters:f,onChangedQuery:g,onSubmitQuery:b,refreshInterval:y,savedQuery:h,onSavedQuery:v,dataTestSubj:E,displayStyle:x,isDisabled:j})=>{const O=Object(a.useCallback)((e=>{null==e.query||o()(e.query,p)||b(e.query)}),[p,b]),S=Object(a.useCallback)((e=>{g&&null!=e.query&&!o()(e.query,p)&&g(e.query)}),[p,g]),k=Object(a.useCallback)((e=>{const{query:t,filters:n,timefilter:a}=e.attributes;b(t,a),m.setFilters(n||[]),v(e)}),[m,b,v]),w=Object(a.useCallback)((()=>{null!=h&&(b({query:"",language:h.attributes.query.language}),m.setFilters([]),v(void 0))}),[m,b,v,h]),I=Object(a.useCallback)((e=>{m.setFilters(e)}),[m]),T=Object(a.useMemo)((()=>[r]),[r]),C=Object(a.useMemo)((()=>new s.TimeHistory(new c.Storage(localStorage))),[]);return i.a.createElement(l.SearchBar,{showSubmitButton:!1,dateRangeFrom:e,dateRangeTo:t,filters:f,indexPatterns:T,isLoading:u,isRefreshPaused:d,query:p,onClearSavedQuery:w,onFiltersUpdated:I,onQueryChange:S,onQuerySubmit:O,onSaved:v,onSavedQueryUpdated:k,refreshInterval:y,showAutoRefreshOnly:!1,showFilterBar:!n,showDatePicker:!1,showQueryInput:!0,showSaveQuery:!0,timeHistory:C,dataTestSubj:E,savedQuery:h,displayStyle:x,isDisabled:j})}));u.displayName="QueryBar"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(40),i=n(2),r=n.n(i),o=n(41);const s=n.n(o)()((({iconSide:e,children:t,...n})=>r.a.createElement(a.EuiLink,n,t))).withConfig({displayName:"Link",componentId:"sc-z5mbxm-0"})(["",""],(({iconSide:e,theme:t})=>Object(o.css)(["align-items:center;display:inline-flex;vertical-align:top;white-space:nowrap;"," ",""],"left"===e&&Object(o.css)([".euiIcon{margin-right:",";}"],t.eui.euiSizeXS),"right"===e&&Object(o.css)(["flex-direction:row-reverse;.euiIcon{margin-left:",";}"],t.eui.euiSizeXS))));s.displayName="Link";const l=r.a.memo((({ariaLabel:e,children:t,color:n,dataTestSubj:o,disabled:l,href:c,iconSide:u="left",iconSize:d="s",iconType:p,onClick:m})=>{const f=Object(i.useCallback)((e=>"object"==typeof e&&null!=e&&"props"in e&&e.props&&e.props.children?f(e.props.children):null!=e&&Object.keys(e).length>0?e:""),[]),g=Object(i.useMemo)((()=>e||f(t)),[e,t,f]);return r.a.createElement(s,{className:"siemLinkIcon",color:n,"data-test-subj":o,disabled:l,href:c,iconSide:u,onClick:m,"aria-label":g},r.a.createElement(a.EuiIcon,{size:d,type:p}),r.a.createElement("span",{className:"siemLinkIcon__label"},t))}));l.displayName="LinkIcon"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=(e,t)=>{const n=window.URL.createObjectURL(e),a=document.createElement("a");a.href=n,a.download=t,a.click(),window.URL.revokeObjectURL(n),a.remove()}},function(e,t,n){"use strict";n.d(t,"a",(function(){return v}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(106),u=n(479),d=n(164),p=n(140),m=n(117),f=n(268),g=n(113);const b=l()(a.EuiFlexItem).withConfig({displayName:"TimelineContentItem",componentId:"sc-t3gz96-0"})(["max-width:calc(100% - 56px);"]),y=l()(a.EuiFilterButton).withConfig({displayName:"StyledEuiFilterButton",componentId:"sc-t3gz96-1"})(["border-top:0;border-bottom:0;"]),h=({hideUntitled:e=!1,getSelectableOptions:t,onClosePopover:n,onTimelineChange:s,timelineType:l,placeholder:h})=>{const[v,E]=Object(r.useState)(50),[x,j]=Object(r.useState)(0),[O,S]=Object(r.useState)(""),[k,w]=Object(r.useState)(!1),{fetchAllTimeline:I,timelines:T,loading:C,totalCount:M}=Object(u.b)(),A=Object(r.useRef)(null),_=Object(r.useRef)(null),F=Object(r.useMemo)((()=>Object(i.debounce)(500,S)),[]),D=Object(r.useCallback)((e=>{F(e)}),[F]),N=Object(r.useCallback)((()=>{w(!k)}),[k]),P=Object(r.useCallback)(((e,t,n)=>{if(e<t&&A.current&&_.current){const e=A.current.clientHeight,t=_.current.clientHeight;n>10&&t-n<1.2*e&&t>x&&(j(t),E(v+50))}}),[x,v]),R=Object(r.useCallback)(((e,t)=>{const n=Object(d.f)({...e,title:e.timelineTitle})?p.ab:e.timelineTitle,r=null!=e.description&&e.description.trim().length>0?e.description:null;return o.a.createElement(a.EuiFlexGroup,{gutterSize:"s",justifyContent:"spaceBetween",alignItems:"center",responsive:!1},o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(a.EuiIcon,{type:"on"===e.checked?"check":"empty",color:"primary"})),o.a.createElement(b,{grow:!0},o.a.createElement(a.EuiFlexGroup,{gutterSize:"none",direction:"column",responsive:!1},o.a.createElement(a.EuiFlexItem,{"data-test-subj":"timeline"},o.a.createElement(a.EuiToolTip,{content:n,anchorClassName:"eui-textTruncate eui-alignMiddle"},o.a.createElement(a.EuiHighlight,{search:t},n))),o.a.createElement(a.EuiFlexItem,null,o.a.createElement(a.EuiToolTip,{content:r,anchorClassName:"eui-textTruncate eui-alignMiddle"},o.a.createElement(a.EuiTextColor,{color:"subdued",component:"span"},o.a.createElement("small",null,null!=r?r:Object(m.d)())))))),o.a.createElement(a.EuiFlexItem,{grow:!1},o.a.createElement(a.EuiIcon,{type:null!=e.favorite&&Object(i.isEmpty)(e.favorite)?"starEmpty":"starFilled"})))}),[]),L=Object(r.useCallback)((e=>{const t=e.filter((e=>"on"===e.checked));var a;null!=t&&t.length>0&&s(Object(i.isEmpty)(t[0].timelineTitle)?p.ab:t[0].timelineTitle,"-1"===t[0].id?null:t[0].id,null!==(a=t[0].graphEventId)&&void 0!==a?a:""),n()}),[n,s]),q=Object(r.useCallback)(((e,t)=>o.a.createElement(o.a.Fragment,null,t,e)),[]),B=Object(r.useMemo)((()=>({"data-test-subj":"timeline-super-select-search-box",placeholder:null!=h?h:f.e(l),onSearch:D,incremental:!1,append:o.a.createElement(y,{"data-test-subj":"only-favorites-toggle",hasActiveFilters:k,onClick:N},p.D)})),[N,D,k,l,h]),z=Object(r.useMemo)((()=>({rowHeight:50,showIcons:!1,windowProps:{onScroll:({scrollOffset:t})=>P((null!=T?T:[]).filter((t=>!e||""!==t.title)).length,M,t),outerRef:A,innerRef:_}})),[P,e,M,T]);return Object(r.useEffect)((()=>{I({pageInfo:{pageIndex:1,pageSize:v},search:O,sort:{sortField:c.f.updated,sortOrder:g.b.desc},onlyUserFavorite:k,status:null,timelineType:l})}),[I,k,v,O,l]),o.a.createElement(a.EuiSelectable,{"data-test-subj":"selectable-input",height:260,isLoading:C&&null==T,listProps:z,renderOption:R,onChange:L,searchable:!0,searchProps:B,singleSelection:!0,options:($=t({timelines:null!=T?T:[],onlyFavorites:k,searchTimelineValue:O,timelineType:l}),$.map((({title:e,...t})=>({...t,title:void 0,timelineTitle:e}))))},q);var $},v=Object(r.memo)(h)},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("xpack.securitySolution.alertsView.osqueryAlertTitle",{defaultMessage:"Run Osquery"})},function(e,t,n){const a=n(292);e.exports=(e,t)=>{const n=a(e,t);return n?n.version:null}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(41);const o=n.n(r).a.div.withConfig({displayName:"Wrapper",componentId:"sc-4ssvqk-0"})(["",""],(({theme:e})=>Object(r.css)([".siemSubtitle__item{color:",";font-size:",";line-height:",";@media only screen and (min-width:","){display:inline-block;margin-right:",";&:last-child{margin-right:0;}}}"],e.eui.euiTextSubduedColor,e.eui.euiFontSizeXS,e.eui.euiLineHeight,e.eui.euiBreakpoints.s,e.eui.euiSize)));o.displayName="Wrapper";const s=i.a.memo((({children:e,dataTestSubj:t="header-panel-subtitle"})=>"string"==typeof e?i.a.createElement("p",{className:"siemSubtitle__item siemSubtitle__item--text","data-test-subj":t},e):i.a.createElement("div",{className:"siemSubtitle__item siemSubtitle__item--node","data-test-subj":t},e)));s.displayName="SubtitleItem";const l=i.a.memo((({items:e})=>i.a.createElement(o,{className:"siemSubtitle"},Array.isArray(e)?e.map(((e,t)=>i.a.createElement(s,{key:t},e))):i.a.createElement(s,null,e))));l.displayName="Subtitle"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(4),r=n(102);const o=({defaultValue:e,key:t,plugin:n=i.i,isInvalidDefault:o})=>{const{storage:s}=Object(r.j)().services,[l,c]=Object(a.useState)(!1),[u,d]=Object(a.useState)(e),p=Object(a.useCallback)((()=>{const a=s.get(`${n}.${t}`),i=typeof a!=typeof e,r=null!=o&&o(a);d(i||r?e:a)}),[e,o,t,n,s]),m=Object(a.useCallback)((e=>{if("function"==typeof e){const a=e;d((e=>{const i=a(e);return s.set(`${n}.${t}`,i),i}))}else s.set(`${n}.${t}`,e),d(e)}),[t,n,s]);return Object(a.useEffect)((()=>{l||(p(),c(!0))}),[l,p]),[u,m,c]}},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.eventsViewer.showingLabel",{defaultMessage:"Showing"}),r=(a.i18n.translate("xpack.securitySolution.eventsViewer.eventsLabel",{defaultMessage:"Events"}),e=>a.i18n.translate("xpack.securitySolution.eventsViewer.unit",{values:{totalCount:e},defaultMessage:"{totalCount, plural, =1 {event} other {events}}"})),o=a.i18n.translate("xpack.securitySolution.eventsViewer.actionsColumnLabel",{defaultMessage:"Actions"}),s=a.i18n.translate("xpack.securitySolution.eventsViewer.timelineEvents.errorSearchDescription",{defaultMessage:"An error has occurred on timeline events search"})},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(5);const i=e=>a.i18n.translate("xpack.securitySolution.configurations.suppressedAlerts",{defaultMessage:"Alert has {numAlertsSuppressed} suppressed alerts",values:{numAlertsSuppressed:e}}),r=180,o=190},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(42);const i=e=>{const t=Object(a.get)(["agent","type",0],e),n=Object(a.get)(["process","entity_id"],e),i=Object(a.get)(["process","entity_id",0],e),r=Object(a.get)(["event","module",0],e),o=Object(a.get)(["event","dataset"],e),s=Array.isArray(o)&&o.some((e=>e.includes("windows.sysmon"))),l="endpoint"===t||"winlogbeat"===t&&"sysmon"===r||s,c=null!=n&&1===n.length&&""!==i;return l&&c}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(46),i=n(102),r=n(498);function o({documentId:e,isActiveTimeline:t,indices:n}){const o=Object(i.i)(),{selectedPatterns:s}=Object(r.a)(t),l=[...new Set(s.concat(n))],{loading:c,id:u,schema:d}=function({documentId:e,indices:t}){const n=Object(i.i)(),r=Object(a.useQuery)(["getAlertPrevalenceSchema",e],(()=>n.get("/api/endpoint/resolver/entity",{query:{_id:e,indices:t}})));if(r.isLoading)return{loading:!0,error:!1,id:null,schema:null};if(r.data&&r.data.length>0){const{data:[{schema:e,id:t}]}=r;return{loading:!1,error:!1,id:t,schema:e}}return{loading:!1,error:!0,id:null,schema:null}}({documentId:e,indices:l}),p=Object(a.useQuery)(["getAlertPrevalenceFromProcessTree",u],(()=>o.post("/api/endpoint/resolver/tree",{body:JSON.stringify({schema:d,ancestors:200,descendants:500,indexPatterns:l,nodes:[u],includeHits:!0})})),{enabled:null!==d&&null!==u});return p.isLoading||c?{loading:!0,error:!1,alertIds:void 0,statsNodes:void 0}:p.data?{loading:!1,error:!1,alertIds:p.data.alertIds,statsNodes:p.data.statsNodes}:{loading:!1,error:!0,alertIds:void 0,statsNodes:void 0}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(44),l=n(40),c=n(41),u=n.n(c),d=n(488);const p=u()(l.EuiButtonEmpty).withConfig({displayName:"EuiButtonEmptyStyled",componentId:"sc-1h0vyjj-0"})(["margin-bottom:",";.euiIcon{width:",";height:",";}.text{font-size:",";margin-inline-start:",";}"],(({theme:e})=>e.eui.euiSizeS),(({theme:e})=>e.eui.euiSizeM),(({theme:e})=>e.eui.euiSizeM),(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiSizeXS)),m=Object(r.memo)((({backButtonLabel:e,backButtonUrl:t,onBackButtonNavigateTo:n,...a})=>{const r=Object(d.a)(...n);return o.a.createElement(p,i()({"data-test-subj":"backToOrigin"},a,{flush:"left",size:"xs",iconType:"arrowLeft",href:t,onClick:r,textProps:{className:"text"}}),e||o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.list.backButton",defaultMessage:"Back"}))}));m.displayName="BackToExternalAppButton"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(184);const i=(e,t)=>e===a.UsersType.details&&null!=t?[{fieldName:"user.name",fieldValue:t}]:[]},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.withExceptions="withExceptions",e.withExceptionsExcludeExpiredExceptions="withExceptionsExcludeExpiredExceptions",e.withoutExceptions="withoutExceptions"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"e",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"d",(function(){return l}));const a=e=>e.sort(((e,t)=>e.toLowerCase().localeCompare(t.toLowerCase()))),i=({query:e,searchValue:t,filterOptions:n,defaultSearchTerm:a})=>{const i=null==e?void 0:e.ast.getFieldClauses();return null!=i&&i.length>0?i.reduce(((e,{field:t,value:n})=>(e[t]=`${n}`,e)),n):{[a]:t}},r=async e=>{const t=(await e.text()).split("\n").filter(Boolean).slice(-1)[0];return JSON.parse(t)},o=async e=>{const t=await r(e);return{skipped:0,succeeded:t.exported_rules_count,failed:t.missing_rules_count,total:t.exported_rules_count+t.missing_rules_count}},s={low:0,medium:1,high:2,critical:3},l=e=>{var t;return null!==(t=s[e])&&void 0!==t?t:-1}},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));class BadRequestError extends Error{}n(760),n(761);var a=n(1137),i=n.n(a),r=n(340),o=n(4),s=n(665);const l=async({body:e,dataViewService:t,dataViewId:n})=>{if(null===n)return;let a=await t.getIdsWithTitle();const l=a.find((e=>e.id===n)),{patternList:c}=e,u=Object(r.a)(c).join();let d;if(void 0===l)try{d=await t.createAndSave({allowNoIndex:!0,id:n,title:u,timeFieldName:o.W},!0)}catch(e){const a=(e=>i.a.isBoom(e)?{message:e.output.payload.message,statusCode:e.output.statusCode}:null!=e.statusCode?null!=e.body&&null!=e.body.error?{statusCode:e.statusCode,message:`${e.body.error.type}: ${e.body.error.reason}`}:{statusCode:e.statusCode,message:e.message}:e instanceof BadRequestError?{message:e.message,statusCode:400}:{message:null!=e.message?e.message:"(unknown error message)",statusCode:500})(e);if("DuplicateDataViewError"!==e.name&&409!==a.statusCode)throw a;d=await t.get(n)}else{const e=l?Object(r.a)(l.title.split(",")).join():"";d=await t.get(n),u!==e&&(d.title=u,await t.updateSavedObject(d))}if(a.some((e=>e.id===n)))a=a.map((e=>e.id===n?{...e,title:u}:e));else if(null!==d){var p,m;a.push({id:null!==(p=d.id)&&void 0!==p?p:n,title:null===(m=d)||void 0===m?void 0:m.title})}const f=await Object(s.a)(n,t);return{defaultDataView:f,kibanaDataViews:a.map((e=>e.id===n?f:{id:e.id,patternList:e.title.split(","),title:e.title}))}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return Jt}));var a=n(2),i=n.n(a),r=n(103),o=n(40),s=n(119),l=n(115),c=n(111),u=n(133),d=n(118),p=n(105),m=n(220),f=n(130),g=n.n(f),b=n(309),y=n(476),h=n(568),v=n(348),E=n(573),x=n(867),j=n(186),O=n(266),S=n(399),k=n(748),w=n(155),I=n(1063);const T=()=>({promptContextId:void 0}),C=({browserFields:e,entityType:t="events",expandedEvent:n,handleOnEventClosed:r,isDraggable:s,isFlyoutView:l,runtimeMappings:c,tabType:u,scopeId:d,isReadOnly:p})=>{var f,g;const{hasAssistantPrivilege:C}=Object(b.a)(),M=C?m.j:T,A=Object(O.a)(),{indexName:_}=n,F=null!==(f=Object(j.a)(_,A))&&void 0!==f?f:_,[D,N,P,R,L]=Object(v.a)({entityType:t,indexName:null!=F?F:"",eventId:null!==(g=n.eventId)&&void 0!==g?g:"",runtimeMappings:c,skip:!n.eventId}),{isolateAction:q,isHostIsolationPanelOpen:B,isIsolateActionSuccessBannerVisible:z,handleIsolationActionSuccess:$,showAlertDetails:V,showHostIsolationPanel:U}=Object(E.a)(),{alertId:G,isAlert:H,hostName:W,ruleName:Q,timestamp:Y}=Object(j.b)(N),K=Object(a.useMemo)((()=>l?w.A:w.D),[l]),X=Object(a.useCallback)((async()=>Object(y.d)(null!=N?N:[])),[N]),{promptContextId:J}=M(H?"alert":"event",H?w.e:w.i,H?Object(w.d)(K):Object(w.h)(K),X,null,H?I.a[I.b].suggestedUserPrompt:I.a[I.d].suggestedUserPrompt,H?w.f:w.j),Z=Object(a.useMemo)((()=>l||B?i.a.createElement(x.c,{eventId:n.eventId,eventIndex:F,isHostIsolationPanelOpen:B,isAlert:H,isolateAction:q,loading:D,ruleName:Q,showAlertDetails:V,timestamp:Y,promptContextId:J}):i.a.createElement(h.b,{eventId:n.eventId,eventIndex:F,isAlert:H,loading:D,ruleName:Q,timestamp:Y,handleOnEventClosed:r,promptContextId:J})),[l,B,n.eventId,F,H,q,D,Q,V,Y,r,J]),ee=Object(a.useMemo)((()=>l?i.a.createElement(x.a,{alertId:G,browserFields:e,detailsData:N,detailsEcsData:R,event:n,hostName:W,handleIsolationActionSuccess:$,handleOnEventClosed:r,isAlert:H,isDraggable:s,isolateAction:q,isIsolateActionSuccessBannerVisible:z,isHostIsolationPanelOpen:B,loading:D,rawEventData:P,showAlertDetails:V,scopeId:d,isReadOnly:p}):B?i.a.createElement(i.a.Fragment,null,z&&i.a.createElement(S.c,{hostName:W,alertId:G,isolateAction:q}),i.a.createElement(o.EuiFlyoutBody,null,i.a.createElement(k.a,{details:N,cancelCallback:V,successCallback:$,isolateAction:q}))):i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(h.a,{browserFields:e,detailsData:N,detailsEcsData:R,event:n,isAlert:H,isDraggable:s,loading:D,rawEventData:P,scopeId:d,timelineTabType:u,handleOnEventClosed:r}))),[G,e,N,R,n,$,r,W,H,s,l,B,z,p,q,D,P,V,u,d]);return null!=n&&n.eventId?i.a.createElement(i.a.Fragment,null,Z,ee,i.a.createElement(x.b,{detailsData:N,detailsEcsData:R,refetchFlyoutData:L,handleOnEventClosed:r,isHostIsolationPanelOpen:B,isReadOnly:p,loadingEventDetails:D,onAddIsolationStatusClick:U,scopeId:d})):null},M=i.a.memo(C,((e,t)=>g()(e.browserFields,t.browserFields)&&g()(e.expandedEvent,t.expandedEvent)&&e.scopeId===t.scopeId&&e.isDraggable===t.isDraggable));var A=n(5),_=n(41),F=n.n(_),D=n(114),N=n(123),P=n(134),R=n(116),L=n(879),q=n(151),B=n(367),z=n(647),$=n(298),V=n(663);const U=F.a.h4.withConfig({displayName:"StyledTitle",componentId:"sc-1xbsnt9-0"})(["word-break:break-all;word-wrap:break-word;white-space:pre-wrap;"]),G=({hostName:e})=>i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement(U,null,A.i18n.translate("xpack.securitySolution.timeline.sidePanel.hostDetails.title",{defaultMessage:"Host details"}),`: ${e}`)),H=({hostName:e})=>i.a.createElement(N.d,{hostName:e,isButton:!0},A.i18n.translate("xpack.securitySolution.timeline.sidePanel.hostDetails.hostDetailsPageLink",{defaultMessage:"View details page"})),W=({contextID:e,scopeId:t,hostName:n,isDraggable:o=!1})=>{const{to:s,from:c,isInitializing:u}=Object(P.a)(),{selectedPatterns:d}=Object(R.d)(),p=Object(r.useDispatch)(),[m,{hostDetails:f}]=Object(V.b)({endDate:s,hostName:n,indexNames:d,startDate:c}),g=Object(a.useCallback)(((e,t)=>{const n=Object($.a)(e,t);p(Object(q.setAbsoluteRangeDatePicker)({id:D.a.global,from:n.from,to:n.to}))}),[p]);return i.a.createElement(B.a,{criteriaFields:Object(z.a)(f),startDate:c,endDate:s,skip:u},(({isLoadingAnomaliesData:a,anomaliesData:r,jobNameById:u})=>i.a.createElement(L.a,{contextID:e,sourcererScopeId:Object(l.getSourcererScopeId)(t),id:V.a,isInDetailsSidePanel:!0,data:f,anomaliesData:r,isDraggable:o,isLoadingAnomaliesData:a,indexNames:d,loading:m,startDate:c,endDate:s,narrowDateRange:g,hostName:n,jobNameById:u})))},Q=F()(o.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-1i9mt5q-0"})([".euiFlyoutBody__overflow{display:flex;flex:1;overflow:hidden;.euiFlyoutBody__overflowContent{flex:1;overflow-x:hidden;overflow-y:scroll;margin-bottom:64px;padding:",";}}"],(({theme:e})=>`${e.eui.euiSizeXS} ${e.eui.euiSizeM} 0px`)),Y=F()(o.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-1i9mt5q-1"})(["flex:1 0 auto;"]),K=F()(o.EuiFlexItem).withConfig({displayName:"StyledEuiFlexButtonWrapper",componentId:"sc-1i9mt5q-2"})(["align-self:flex-start;flex:1 0 auto;"]),X=F.a.div.withConfig({displayName:"StyledPanelContent",componentId:"sc-1i9mt5q-3"})(["display:block;height:100%;overflow-y:scroll;overflow-x:hidden;"]),J=i.a.memo((({contextID:e,scopeId:t,expandedHost:n,handleOnHostClosed:a,isDraggable:r,isFlyoutView:s})=>{const{hostName:l}=n;return l?s?i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(G,{hostName:l})),i.a.createElement(Q,null,i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(H,{hostName:l}),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(W,{contextID:e,scopeId:t,hostName:l}))):i.a.createElement(i.a.Fragment,null,i.a.createElement(Y,{justifyContent:"spaceBetween",wrap:!1},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(G,{hostName:l})),i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiButtonIcon,{iconType:"cross","aria-label":A.i18n.translate("xpack.securitySolution.timeline.sidePanel.hostDetails.close",{defaultMessage:"close"}),onClick:a}))),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(K,{grow:!1},i.a.createElement(H,{hostName:l})),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(X,null,i.a.createElement(W,{contextID:e,scopeId:t,hostName:l,isDraggable:r}))):null}));var Z=n(51),ee=n(273),te=n(1098),ne=n(1099),ae=n(102),ie=n(161),re=n(122),oe=n(1130),se=n(280),le=n(610),ce=n(385),ue=n(416);const de=F.a.h4.withConfig({displayName:"StyledTitle",componentId:"sc-1jm2ava-0"})(["word-break:break-all;word-wrap:break-word;white-space:pre-wrap;"]),pe=({ip:e})=>i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement(de,null,A.i18n.translate("xpack.securitySolution.timeline.sidePanel.networkDetails.title",{defaultMessage:"Network details"}),`: ${e}`)),me=({expandedNetwork:{ip:e,flowTarget:t}})=>i.a.createElement(N.h,{ip:e,flowTarget:t,isButton:!0},A.i18n.translate("xpack.securitySolution.timeline.sidePanel.networkDetails.networkDetailsPageLink",{defaultMessage:"View details page"})),fe=({contextID:e,expandedNetwork:t,isDraggable:n})=>{const{ip:o,flowTarget:s}=t,l=Object(r.useDispatch)(),{to:c,from:u,isInitializing:d}=Object(P.a)(),m=Object(a.useMemo)((()=>re.d.globalQuerySelector()),[]),f=Object(a.useMemo)((()=>re.d.globalFiltersQuerySelector()),[]),g=Object(p.a)(m),b=Object(p.a)(f),y=se.c.NetworkType.details,h=Object(a.useCallback)(((e,t)=>{const n=Object($.a)(e,t);l(Object(q.setAbsoluteRangeDatePicker)({id:D.a.global,from:n.from,to:n.to}))}),[l]),{services:{uiSettings:v}}=Object(ae.j)(),{indicesExist:E,indexPattern:x,selectedPatterns:j}=Object(R.d)(),[O,S]=Object(ie.i)({config:Object(Z.getEsQueryConfig)(v),indexPattern:x,queries:[g],filters:b}),[k,{id:w,networkDetails:I}]=Object(oe.b)({skip:d||void 0===O,filterQuery:O,indexNames:j,ip:o});Object(ee.a)({id:w,filterQuery:O,kqlError:S,query:g,startDate:u,endDate:c});const{jobNameById:T}=Object(ce.a)(),C=Object(a.useMemo)((()=>Object.keys(T)),[T]),[M,A]=Object(le.a)({criteriaFields:Object(ne.a)(o,s),startDate:u,endDate:c,skip:d,jobIds:C,aggregationInterval:"auto"});return E?i.a.createElement(te.a,{contextID:e,id:w,ip:o,data:I,anomaliesData:A,loading:k,isInDetailsSidePanel:!0,isLoadingAnomaliesData:M,isDraggable:n,type:y,flowTarget:s,startDate:u,endDate:c,narrowDateRange:h,indexPatterns:j,jobNameById:T}):i.a.createElement(ue.a,null)},ge=F()(o.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-1tify25-0"})([".euiFlyoutBody__overflow{display:flex;flex:1;overflow-x:hidden;overflow-y:scroll;.euiFlyoutBody__overflowContent{flex:1;overflow-x:hidden;overflow-y:scroll;padding:",";}}"],(({theme:e})=>`${e.eui.euiSizeXS} ${e.eui.euiSizeM} 64px`)),be=F()(o.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-1tify25-1"})(["flex:1 0 auto;"]),ye=F()(o.EuiFlexItem).withConfig({displayName:"StyledEuiFlexButtonWrapper",componentId:"sc-1tify25-2"})(["align-self:flex-start;flex:1 0 auto;"]),he=F.a.div.withConfig({displayName:"StyledPanelContent",componentId:"sc-1tify25-3"})(["display:block;height:100%;overflow-y:scroll;overflow-x:hidden;"]),ve=i.a.memo((({contextID:e,expandedNetwork:t,handleOnNetworkClosed:n,isFlyoutView:a,isDraggable:r})=>{const{ip:s}=t;return a?i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(pe,{ip:s})),i.a.createElement(ge,null,i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(me,{expandedNetwork:t}),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(fe,{contextID:e,expandedNetwork:t}))):i.a.createElement(i.a.Fragment,null,i.a.createElement(be,{justifyContent:"spaceBetween",wrap:!1},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(pe,{ip:s})),i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiButtonIcon,{iconType:"cross","aria-label":A.i18n.translate("xpack.securitySolution.timeline.sidePanel.networkDetails.close",{defaultMessage:"close"}),onClick:n}))),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(ye,{grow:!1},i.a.createElement(me,{expandedNetwork:t})),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(he,null,i.a.createElement(fe,{contextID:e,expandedNetwork:t,isDraggable:r})))}));var Ee=n(21),xe=n(797),je=n(386),Oe=n(686),Se=n(184);const ke=F.a.h4.withConfig({displayName:"StyledTitle",componentId:"sc-19b6yfb-0"})(["word-break:break-all;word-wrap:break-word;white-space:pre-wrap;"]),we=({userName:e})=>i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement(ke,null,A.i18n.translate("xpack.securitySolution.timeline.sidePanel.userDetails.title",{defaultMessage:"User details"}),`: ${e}`)),Ie=({userName:e})=>i.a.createElement(N.m,{userName:e,isButton:!0},A.i18n.translate("xpack.securitySolution.timeline.sidePanel.networkDetails.userDetails",{defaultMessage:"View details page"})),Te=({contextID:e,scopeId:t,userName:n,isDraggable:o})=>{const{to:s,from:c,isInitializing:u}=Object(P.a)(),{selectedPatterns:d}=Object(R.d)(),p=Object(r.useDispatch)(),[m,{userDetails:f}]=Object(je.b)({endDate:s,startDate:c,userName:n,indexNames:d,skip:u}),g=Object(a.useCallback)(((e,t)=>{const n=Object($.a)(e,t);p(Object(q.setAbsoluteRangeDatePicker)({id:D.a.global,from:n.from,to:n.to}))}),[p]);return i.a.createElement(B.a,{criteriaFields:Object(Oe.a)(Se.UsersType.details,n),startDate:c,endDate:s,skip:u},(({isLoadingAnomaliesData:a,anomaliesData:r,jobNameById:u})=>i.a.createElement(xe.a,{userName:n,isInDetailsSidePanel:!0,data:f,loading:m,contextID:e,sourcererScopeId:Object(l.getSourcererScopeId)(t),isDraggable:o,id:"usersDetailsQuery",anomaliesData:r,isLoadingAnomaliesData:a,startDate:c,endDate:s,narrowDateRange:g,indexPatterns:d,jobNameById:u})))},Ce=F()(o.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-iwngk-0"})([".euiFlyoutBody__overflow{display:flex;flex:1;overflow-x:hidden;overflow-y:scroll;.euiFlyoutBody__overflowContent{flex:1;overflow-x:hidden;overflow-y:scroll;padding:",";}}"],(({theme:e})=>`${e.eui.euiSizeXS} ${e.eui.euiSizeM} 64px`)),Me=({contextID:e,scopeId:t,userName:n})=>i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(we,{userName:n})),i.a.createElement(Ce,null,i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(Ie,{userName:n}),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(Te,{contextID:e,scopeId:t,userName:n}))),Ae=F()(o.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-190swzt-0"})(["flex:1 0 auto;"]),_e=F()(o.EuiFlexItem).withConfig({displayName:"StyledEuiFlexButtonWrapper",componentId:"sc-190swzt-1"})(["align-self:flex-start;flex:1 0 auto;"]),Fe=F.a.div.withConfig({displayName:"StyledPanelContent",componentId:"sc-190swzt-2"})(["display:block;height:100%;overflow-y:scroll;overflow-x:hidden;"]),De=({contextID:e,scopeId:t,userName:n,isDraggable:a,handleOnClose:r})=>i.a.createElement(i.a.Fragment,null,i.a.createElement(Ae,{justifyContent:"spaceBetween",wrap:!1},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(we,{userName:n})),i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiButtonIcon,{iconType:"cross","aria-label":A.i18n.translate("xpack.securitySolution.timeline.sidePanel.networkDetails.close",{defaultMessage:"close"}),onClick:r}))),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(_e,{grow:!1},i.a.createElement(Ie,{userName:n})),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(Fe,null,i.a.createElement(Te,{contextID:e,scopeId:t,userName:n,isDraggable:a})));var Ne=n(8);const Pe=A.i18n.translate("xpack.securitySolution.timeline.userDetails.observedBadge",{defaultMessage:"OBSERVED"}),Re=A.i18n.translate("xpack.securitySolution.timeline.userDetails.managedBadge",{defaultMessage:"MANAGED"}),Le=A.i18n.translate("xpack.securitySolution.timeline.userDetails.userLabel",{defaultMessage:"User"}),qe=A.i18n.translate("xpack.securitySolution.timeline.userDetails.failManagedUserDescription",{defaultMessage:"Failed to run search on user managed data"}),Be=A.i18n.translate("xpack.securitySolution.timeline.userDetails.managedDataTitle",{defaultMessage:"Managed data"}),ze=A.i18n.translate("xpack.securitySolution.timeline.userDetails.observedDataTitle",{defaultMessage:"Observed data"}),$e=A.i18n.translate("xpack.securitySolution.timeline.userDetails.hideObservedDataButton",{defaultMessage:"Hide observed data"}),Ve=A.i18n.translate("xpack.securitySolution.timeline.userDetails.showObservedDataButton",{defaultMessage:"Show observed data"}),Ue=A.i18n.translate("xpack.securitySolution.timeline.userDetails.hideManagedDataButton",{defaultMessage:"Hide Azure AD data"}),Ge=A.i18n.translate("xpack.securitySolution.timeline.userDetails.showManagedDataButton",{defaultMessage:"Show Azure AD data"}),He=A.i18n.translate("xpack.securitySolution.timeline.userDetails.riskScoreLabel",{defaultMessage:"Risk score"}),We=A.i18n.translate("xpack.securitySolution.timeline.userDetails.valuesColumnTitle",{defaultMessage:"Values"}),Qe=A.i18n.translate("xpack.securitySolution.timeline.userDetails.fieldColumnTitle",{defaultMessage:"Field"}),Ye=A.i18n.translate("xpack.securitySolution.timeline.userDetails.userIdLabel",{defaultMessage:"User ID"}),Ke=A.i18n.translate("xpack.securitySolution.timeline.userDetails.maxAnomalyScoreByJobLabel",{defaultMessage:"Max anomaly score by job"}),Xe=A.i18n.translate("xpack.securitySolution.timeline.userDetails.firstSeenLabel",{defaultMessage:"First seen"}),Je=A.i18n.translate("xpack.securitySolution.timeline.userDetails.lastSeenLabel",{defaultMessage:"Last seen"}),Ze=A.i18n.translate("xpack.securitySolution.timeline.userDetails.hostOsNameLabel",{defaultMessage:"Operating system"}),et=A.i18n.translate("xpack.securitySolution.timeline.userDetails.familyLabel",{defaultMessage:"Family"}),tt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.ipAddressesLabel",{defaultMessage:"IP addresses"}),nt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.fullNameLabel",{defaultMessage:"Full name"}),at=A.i18n.translate("xpack.securitySolution.timeline.userDetails.firstNameLabel",{defaultMessage:"First name"}),it=A.i18n.translate("xpack.securitySolution.timeline.userDetails.lastNameLabel",{defaultMessage:"Last name"}),rt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.phoneLabel",{defaultMessage:"Phone"}),ot=A.i18n.translate("xpack.securitySolution.timeline.userDetails.noActiveIntegrationTitle",{defaultMessage:"You don’t have any active integrations"}),st=A.i18n.translate("xpack.securitySolution.timeline.userDetails.noActiveIntegrationText",{defaultMessage:"External integrations can provide additional metadata and help you manage users."}),lt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.addExternalIntegrationButton",{defaultMessage:"Add external integrations"}),ct=A.i18n.translate("xpack.securitySolution.timeline.userDetails.noAzureDataTitle",{defaultMessage:"No metadata found for this user"}),ut=A.i18n.translate("xpack.securitySolution.timeline.userDetails.noAzureDataText",{defaultMessage:"If you expected to see metadata for this user, make sure you have configured your integrations properly."}),dt=(A.i18n.translate("xpack.securitySolution.timeline.userDetails.closeButton",{defaultMessage:"close"}),A.i18n.translate("xpack.securitySolution.timeline.userDetails.observedUserInspectTitle",{defaultMessage:"Observed user"})),pt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.managedUserInspectTitle",{defaultMessage:"Managed user"});var mt=n(113),ft=n(284),gt=n(194),bt=n(886),yt=n(872);const ht=["logs-entityanalytics_azure.users-*"],vt="entityanalytics_azure",Et=`/detail/${vt}/overview`,xt="managedUserDetailsQuery";var jt=n(218),Ot=n(132),St=n(117),kt=n(212);const wt=({riskScoreState:e})=>{const{euiTheme:t}=Object(o.useEuiTheme)(),{fontSize:n}=Object(o.useEuiFontSize)("xs"),{data:a,isAuthorized:r}=e,s=a&&a.length>0?a[0]:void 0;return r?i.a.createElement(o.EuiFlexGroup,{alignItems:"center",gutterSize:"none",responsive:!1,"data-test-subj":"user-details-risk-score"},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(It,{$_css:t.font.weight.bold,$_css2:n,$_css3:t.size.xs},He,": ")),s?i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiFlexItem,{grow:!1},Math.round(s.user.risk.calculated_score_norm)),i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(kt.b,{severity:mt.y.high,hideBackgroundColor:!0}))):Object(St.d)()):null};var It=F()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-18knn5l-0"})(["font-weight:",";font-size:",";margin-right:",";"],(e=>e.$_css),(e=>e.$_css2),(e=>e.$_css3)),Tt=n(44),Ct=n(649),Mt=n(42),At=n(48),_t=n(224),Ft=n(473);const Dt={name:Qe,field:"label",render:e=>i.a.createElement(Pt,{$_css:At.euiLightVars.euiFontWeightMedium,$_css2:At.euiLightVars.euiTitleColor},e)},Nt=({anomalies:e})=>{const{to:t,from:n}=Object(P.a)(),o=Object(r.useDispatch)(),s=Object(a.useCallback)(((e,t)=>{const n=Object($.a)(e,t);o(Object(q.setAbsoluteRangeDatePicker)({id:D.a.global,from:n.from,to:n.to}))}),[o]);return i.a.createElement(Ft.a,{anomalies:e.anomalies,startDate:n,endDate:t,isLoading:e.isLoading,narrowDateRange:s,jobNameById:e.jobNameById})};var Pt=F()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-1eh5srw-0"})(["font-weight:",";color:",";"],(e=>e.$_css),(e=>e.$_css2)),Rt=n(149);const Lt=({observedUser:e,contextID:t,scopeId:n,isDraggable:r})=>{const{euiTheme:s}=Object(o.useEuiTheme)(),c=(u=e,Object(a.useMemo)((()=>{var e,t,n,a,i,r,o;return u.details?[{label:Ye,values:null===(e=u.details.user)||void 0===e?void 0:e.id,field:"user.id"},{label:"Domain",values:null===(t=u.details.user)||void 0===t?void 0:t.domain,field:"user.domain"},{label:Ke,field:"anomalies",values:u.anomalies},{label:Xe,values:u.firstSeen.date?[u.firstSeen.date]:void 0,field:"@timestamp"},{label:Je,values:u.lastSeen.date?[u.lastSeen.date]:void 0,field:"@timestamp"},{label:Ze,values:null===(n=u.details.host)||void 0===n||null===(a=n.os)||void 0===a?void 0:a.name,field:"host.os.name"},{label:et,values:null===(i=u.details.host)||void 0===i||null===(r=i.os)||void 0===r?void 0:r.family,field:"host.os.family"},{label:tt,values:null===(o=u.details.host)||void 0===o?void 0:o.ip,field:"host.ip"}]:[]}),[u.details,u.anomalies,u.firstSeen,u.lastSeen]));var u;const[d,p]=Object(a.useState)(!1),m=Object(a.useCallback)((()=>{p((e=>!e))}),[p]),f=Object(a.useMemo)((()=>((e,t,n)=>[Dt,{name:We,field:"values",render:(a,{field:r})=>function(e,t){return"anomalies"===e}(r)&&a?i.a.createElement(Nt,{anomalies:a}):"@timestamp"===r?i.a.createElement(Ot.b,{value:Object(Mt.head)(a)}):i.a.createElement(_t.a,{rowItems:a,attrName:r,idPrefix:e?`observedUser-${e}`:"observedUser",isDraggable:n,sourcererScopeId:Object(l.getSourcererScopeId)(t)})}])(t,n,r)),[t,n,r]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement("h5",null,ze)),i.a.createElement(o.EuiSpacer,{size:"l"}),i.a.createElement(Rt.c,null,i.a.createElement(Bt,{isLoading:e.isLoading,id:"observedUser-data","data-test-subj":"observedUser-data",forceState:d?"open":"closed",buttonProps:{"data-test-subj":"observedUser-accordion-button",css:Ee.css`
              color: ${s.colors.primary};
            `},buttonContent:d?$e:Ve,onToggle:m,extraAction:i.a.createElement(i.a.Fragment,null,i.a.createElement(qt,{$_css:s.size.s},i.a.createElement(Rt.b,{queryId:je.a,title:dt})),e.lastSeen.date&&i.a.createElement(Tt.FormattedMessage,{id:"xpack.securitySolution.timeline.userDetails.observedUserUpdatedTime",defaultMessage:"Updated {time}",values:{time:i.a.createElement(Ot.b,{value:e.lastSeen.date,dateFormat:"MMM D, YYYY",relativeThresholdInHrs:168})}}))},i.a.createElement(o.EuiPanel,{color:"subdued"},i.a.createElement(Ct.a,{loading:e.isLoading||e.firstSeen.isLoading||e.lastSeen.isLoading||e.anomalies.isLoading,"data-test-subj":"observedUser-table",columns:f,items:c})))))};var qt=F()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-czrrgy-0"})(["margin-right:",";"],(e=>e.$_css)),Bt=F()(o.EuiAccordion).withConfig({displayName:"_StyledEuiAccordion",componentId:"sc-czrrgy-1"})([".euiAccordion__optionalAction{margin-left:auto;}"]);const zt=({managedUser:e,contextID:t,scopeId:n,isDraggable:r})=>{const{euiTheme:s}=Object(o.useEuiTheme)(),c=(u=e.details,Object(a.useMemo)((()=>{var e;return u?[{label:Ye,value:u.user.id,field:"user.id"},{label:nt,value:u.user.full_name,field:"user.full_name"},{label:at,value:u.user.first_name},{label:it,value:u.user.last_name},{label:rt,value:null===(e=u.user.phone)||void 0===e?void 0:e.join(", ")}]:null}),[u]));var u;const[d,p]=Object(a.useState)(!1),m=Object(a.useCallback)((()=>{p((e=>!e))}),[p]),f=Object(a.useMemo)((()=>((e,t,n)=>[Dt,{name:We,field:"value",render:(a,{field:r})=>r&&a?i.a.createElement(_t.a,{rowItems:[a],attrName:r,idPrefix:e?`managedUser-${e}`:"managedUser",isDraggable:n,sourcererScopeId:Object(l.getSourcererScopeId)(t)}):Object(St.a)(a)}])(t,n,r)),[r,t,n]),{getAppUrl:g}=Object(ae.c)(),b=Object(a.useMemo)((()=>g({appId:"integrations",path:Et})),[g]);return e.isLoading||e.isIntegrationEnabled?i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement("h5",null,Be)),i.a.createElement(o.EuiSpacer,{size:"l"}),i.a.createElement(Rt.c,null,i.a.createElement(Vt,{isLoading:e.isLoading,id:"managedUser-data","data-test-subj":"managedUser-data",forceState:d?"open":"closed",buttonProps:{"data-test-subj":"managedUser-accordion-button",css:Ee.css`
              color: ${s.colors.primary};
            `},buttonContent:d?Ue:Ge,onToggle:m,extraAction:i.a.createElement(i.a.Fragment,null,i.a.createElement($t,{$_css:s.size.s},i.a.createElement(Rt.b,{queryId:xt,title:pt})),e.lastSeen.date&&i.a.createElement(Tt.FormattedMessage,{id:"xpack.securitySolution.timeline.userDetails.updatedTime",defaultMessage:"Updated {time}",values:{time:i.a.createElement(Ot.b,{value:e.lastSeen.date,dateFormat:"MMM D, YYYY",relativeThresholdInHrs:168})}}))},i.a.createElement(o.EuiPanel,{color:"subdued"},c||e.isLoading?i.a.createElement(Ct.a,{loading:e.isLoading,"data-test-subj":"managedUser-table",columns:f,items:null!=c?c:[]}):i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiCallOut,{"data-test-subj":"managedUser-no-data",title:ct,color:"warning",iconType:"help"},i.a.createElement("p",null,ut))))))):i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiTitle,{size:"s"},i.a.createElement("h5",null,Be)),i.a.createElement(o.EuiSpacer,{size:"l"}),i.a.createElement(o.EuiPanel,{"data-test-subj":"managedUser-integration-disable-callout"},i.a.createElement(o.EuiEmptyPrompt,{title:i.a.createElement("h2",null,ot),body:i.a.createElement("p",null,st),actions:i.a.createElement(o.EuiButton,{fill:!0,href:b},lt)})))};var $t=F()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-nbm1eh-0"})(["margin-right:",";"],(e=>e.$_css)),Vt=F()(o.EuiAccordion).withConfig({displayName:"_StyledEuiAccordion",componentId:"sc-nbm1eh-1"})([".euiAccordion__optionalAction{margin-left:auto;}"]);const Ut=({userName:e,observedUser:t,managedUser:n,riskScoreState:r,contextID:s,scopeId:l,isDraggable:c})=>{const{euiTheme:u}=Object(o.useEuiTheme)(),{fontSize:d}=Object(o.useEuiFontSize)("xl"),p=Object(a.useMemo)((()=>Object(Ne.max)([t.lastSeen,n.lastSeen].map((e=>e.date&&new Date(e.date))))),[n.lastSeen,t.lastSeen]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiFlexGroup,{gutterSize:"m",alignItems:"center",responsive:!1,"data-test-subj":"user-details-content-header"},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiIcon,{type:"user",size:"m"})),i.a.createElement(o.EuiFlexItem,{grow:!1},Le),i.a.createElement(o.EuiFlexItem,{grow:!1},t.lastSeen.date&&i.a.createElement(o.EuiBadge,{"data-test-subj":"user-details-content-observed-badge",color:"hollow"},Pe)),i.a.createElement(o.EuiFlexItem,{grow:!1},n.lastSeen.date&&i.a.createElement(o.EuiBadge,{"data-test-subj":"user-details-content-managed-badge",color:"hollow"},Re))),i.a.createElement(o.EuiSpacer,{size:"m"}),t.lastSeen.isLoading||n.lastSeen.isLoading?i.a.createElement(o.EuiProgress,{size:"xs",color:"accent"}):i.a.createElement(o.EuiHorizontalRule,{margin:"none"}),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(N.m,{userName:e},i.a.createElement(Ht,{$_css:d,$_css2:u.font.weight.bold,$_css3:Object(o.euiTextBreakWord)()},e)),i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(o.EuiText,{size:"xs","data-test-subj":"user-details-content-lastSeen"},Je,": ",p&&i.a.createElement(Ot.c,{value:p})),i.a.createElement(o.EuiHorizontalRule,{margin:"xs"}),i.a.createElement(wt,{riskScoreState:r}),i.a.createElement(o.EuiHorizontalRule,{margin:"xs"}),i.a.createElement(o.EuiSpacer,{size:"xxl"}),i.a.createElement(Lt,{observedUser:t,contextID:s,scopeId:l,isDraggable:c}),i.a.createElement(o.EuiSpacer,null),i.a.createElement(zt,{managedUser:n,contextID:s,scopeId:l,isDraggable:c}))},Gt=({userName:e,contextID:t,scopeId:n,isDraggable:r=!1})=>{const{to:o,from:s,isInitializing:l}=Object(P.a)(),c=Object(ft.c)({riskEntity:mt.w.user}),u=(e=>{const{selectedPatterns:t}=Object(R.d)(),{to:n,from:i,isInitializing:r,deleteQuery:o,setQuery:s}=Object(P.a)(),[l,{userDetails:c,inspect:u,refetch:d,id:p}]=Object(je.b)({endDate:n,startDate:i,userName:e,indexNames:t,skip:r});Object(jt.b)({deleteQuery:o,inspect:u,refetch:d,setQuery:s,queryId:p,loading:l});const[m,{firstSeen:f}]=Object(bt.a)({field:"user.name",value:e,defaultIndex:t,order:mt.b.asc,filterQuery:mt.m}),[g,{lastSeen:b}]=Object(bt.a)({field:"user.name",value:e,defaultIndex:t,order:mt.b.desc,filterQuery:mt.m});return Object(a.useMemo)((()=>({details:c,isLoading:l,firstSeen:{date:f,isLoading:m},lastSeen:{date:b,isLoading:g}})),[f,b,m,g,l,c])})(e),d=(e=>{const{to:t,from:n,isInitializing:i,deleteQuery:r,setQuery:o}=Object(P.a)(),{loading:s,result:{userDetails:l},search:c,refetch:u,inspect:d}=Object(gt.a)({factoryQueryType:mt.B.managedDetails,initialResult:{},errorMessage:qe});Object(a.useEffect)((()=>{i||c({defaultIndex:ht,factoryQueryType:mt.B.managedDetails,userName:e})}),[n,c,t,e,i]);const{data:p,isLoading:m}=Object(yt.a)({packages:[vt]});Object(jt.b)({deleteQuery:r,inspect:d,refetch:u,setQuery:o,queryId:xt,loading:s});const f=Object(a.useMemo)((()=>!(null==p||!p.some((({package_name:e,is_enabled:t})=>e===vt&&t)))),[p]),[g,{firstSeen:b}]=Object(bt.a)({field:"user.name",value:e,defaultIndex:ht,order:mt.b.asc}),[y,{lastSeen:h}]=Object(bt.a)({field:"user.name",value:e,defaultIndex:ht,order:mt.b.desc});return Object(a.useMemo)((()=>({details:l,isLoading:s||m,isIntegrationEnabled:f,firstSeen:{date:b,isLoading:g},lastSeen:{date:h,isLoading:y}})),[b,f,m,h,g,y,s,l])})(e);return i.a.createElement(B.a,{criteriaFields:Object(Oe.a)(Se.UsersType.details,e),startDate:s,endDate:o,skip:l},(({isLoadingAnomaliesData:a,anomaliesData:o,jobNameById:s})=>i.a.createElement(Ut,{userName:e,managedUser:d,observedUser:{...u,anomalies:{isLoading:a,anomalies:o,jobNameById:s}},riskScoreState:c,contextID:t,scopeId:n,isDraggable:r})))};var Ht=F()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-1yxtora-0"})(["font-size:",";font-weight:",";",""],(e=>e.$_css),(e=>e.$_css2),(e=>e.$_css3));const Wt=A.i18n.translate("xpack.securitySolution.timeline.userDetails.closeButton",{defaultMessage:"close"}),Qt=({contextID:e,scopeId:t,userName:n,handleOnClose:a,isFlyoutView:r,isDraggable:s,isNewUserDetailsFlyoutEnable:l})=>l?r?i.a.createElement(o.EuiFlyoutBody,null,i.a.createElement(Gt,{userName:n,contextID:e,scopeId:t,isDraggable:s})):i.a.createElement("div",{className:"eui-yScroll"},i.a.createElement(o.EuiSpacer,{size:"m"}),i.a.createElement(Kt,{iconType:"cross","aria-label":Wt,onClick:a}),i.a.createElement(Gt,{userName:n,contextID:e,scopeId:t,isDraggable:s})):r?i.a.createElement(Me,{userName:n,contextID:e,scopeId:t}):i.a.createElement(De,{userName:n,contextID:e,isDraggable:s,handleOnClose:a,scopeId:t}),Yt=i.a.memo(Qt);var Kt=F()(o.EuiButtonIcon).withConfig({displayName:"_StyledEuiButtonIcon",componentId:"sc-uienxr-0"})(["float:right;"]),Xt=n(124);const Jt=i.a.memo((({browserFields:e,entityType:t,handleOnPanelClosed:n,isFlyoutView:m,runtimeMappings:f,tabType:g,scopeId:b,isReadOnly:y})=>{var h,v,E,x;const j=Object(r.useDispatch)(),O=Object(Xt.a)("newUserDetailsFlyout"),S=Object(a.useMemo)((()=>Object(l.isTimelineScope)(b)?c.b.getTimelineByIdSelector():Object(l.isInTableScope)(b)?s.j.getTableByIdSelector():void 0),[b]),k=Object(p.a)((e=>{var t,n;return null===(t=null!==(n=S&&S(e,b))&&void 0!==n?n:u.b)||void 0===t?void 0:t.expandedDetail}));Object(a.useEffect)((()=>()=>{j(s.h.toggleDetailPanel({id:b}))}),[j,b]);const w=Object(a.useCallback)((()=>{const e=Object(l.getScopedActions)(b);e&&j(e.toggleDetailPanel({id:b}))}),[j,b]),I=null!=g?g:d.d.query,T=Object(a.useCallback)((()=>{n?n():w()}),[w,n]);if(!k)return null;const C=k[I];if(null==C||!C.panelView)return null;let A=null,_="s",F=b;const D=`${b}-${I}`,N=b===d.c.active&&I===d.d.query;return"eventDetail"===(null==C?void 0:C.panelView)&&null!=C&&null!==(h=C.params)&&void 0!==h&&h.eventId&&(_="m",F=C.params.eventId,A=i.a.createElement(M,{browserFields:e,entityType:t,expandedEvent:null==C?void 0:C.params,handleOnEventClosed:T,isDraggable:N,isFlyoutView:m,runtimeMappings:f,tabType:I,scopeId:b,isReadOnly:y})),"hostDetail"===(null==C?void 0:C.panelView)&&null!=C&&null!==(v=C.params)&&void 0!==v&&v.hostName&&(F=C.params.hostName,A=i.a.createElement(J,{contextID:D,expandedHost:null==C?void 0:C.params,handleOnHostClosed:T,isDraggable:N,isFlyoutView:m,scopeId:b})),"userDetail"===(null==C?void 0:C.panelView)&&null!=C&&null!==(E=C.params)&&void 0!==E&&E.userName&&(F=C.params.userName,O&&(_="m"),A=i.a.createElement(Yt,{contextID:D,userName:C.params.userName,handleOnClose:T,isDraggable:N,isFlyoutView:m,isNewUserDetailsFlyoutEnable:O,scopeId:b})),"networkDetail"===(null==C?void 0:C.panelView)&&null!=C&&null!==(x=C.params)&&void 0!==x&&x.ip&&(F=C.params.ip,A=i.a.createElement(ve,{contextID:D,expandedNetwork:null==C?void 0:C.params,handleOnNetworkClosed:T,isDraggable:N,isFlyoutView:m})),m?i.a.createElement(o.EuiFlyout,{"data-test-subj":"timeline:details-panel:flyout",size:_,onClose:T,ownFocus:!1,key:F},A):A}));Jt.displayName="DetailsPanel"},function(e,t,n){"use strict";n.d(t,"d",(function(){return g.d})),n.d(t,"a",(function(){return g.a})),n.d(t,"f",(function(){return g.f})),n.d(t,"c",(function(){return g.c})),n.d(t,"e",(function(){return g.e})),n.d(t,"b",(function(){return g.b}));var a=n(43),i=n(112);a.exact(a.type({rules_custom_installed:i.n,rules_installed:i.n,rules_not_installed:i.n,rules_not_updated:i.n,timelines_installed:i.n,timelines_not_installed:i.n,timelines_not_updated:i.n})),a.exact(a.type({rules_installed:i.n,rules_updated:i.n,timelines_installed:i.n,timelines_updated:i.n}));const r=a.exact(a.type({rule_id:a.string,version:a.number})),o=a.exact(a.type({mode:a.literal("SPECIFIC_RULES"),rules:a.array(r)})),s=a.exact(a.type({mode:a.literal("ALL_RULES")}));let l,c;a.union([s,o]),function(e){e.ALREADY_INSTALLED="ALREADY_INSTALLED"}(l||(l={})),function(e){e.BASE="BASE",e.CURRENT="CURRENT",e.TARGET="TARGET"}(c||(c={}));const u=Object(i.u)("PickVersionValues",c),d=a.exact(a.intersection([a.type({rule_id:a.string,revision:a.number,version:a.number}),a.partial({pick_version:u})])),p=a.exact(a.intersection([a.type({mode:a.literal("SPECIFIC_RULES"),rules:a.array(d)}),a.partial({pick_version:u})])),m=a.exact(a.intersection([a.type({mode:a.literal("ALL_RULES")}),a.partial({pick_version:u})]));let f;a.union([m,p]),function(e){e.RULE_UP_TO_DATE="RULE_UP_TO_DATE"}(f||(f={}));var g=n(494),b=n(128);const y=e=>a.intersection([a.exact(a.type(e.required)),a.exact(a.type(Object(b.cb)(e.optional)))]);let h;!function(e){e.index_patterns="index_patterns",e.data_view="data_view"}(h||(h={}));const v=a.exact(a.type({type:a.literal(h.index_patterns),index_patterns:b.i})),E=a.exact(a.type({type:a.literal(h.data_view),data_view_id:b.d})),x=a.union([v,E]);let j;!function(e){e.inline_query="inline_query",e.saved_query="saved_query"}(j||(j={}));const O=a.exact(a.type({type:a.literal(j.inline_query),query:b.B,language:b.k,filters:b.u})),S=a.exact(a.type({type:a.literal(j.saved_query),saved_query_id:b.fb})),k=a.union([O,S]),w=a.exact(a.type({query:b.B,language:a.literal("eql"),filters:b.u})),I=a.exact(a.type({interval:Object(i.q)({allowedUnits:["s","m","h"]}),lookback:Object(i.q)({allowedUnits:["s","m","h"]})})),T=a.exact(a.type({field_name:b.y})),C=a.exact(a.type({field_name:b.R,fallback_disabled:b.S})),M=a.exact(a.type({timeline_id:b.O,timeline_title:b.P})),A=a.exact(a.type({type:b.c}));var _=n(193);const F=y({required:{rule_id:b.E,version:b.H,meta:b.w,name:b.x,tags:b.F,description:b.s,severity:_.p,severity_mapping:_.q,risk_score:_.d,risk_score_mapping:_.e,references:b.C,false_positives:b.t,threat:b.L,note:b.j,setup:b.I,related_integrations:b.o,required_fields:b.p,author:b.q,license:b.v,rule_schedule:I,actions:_.g,throttle:_.l,exceptions_list:b.g,max_signals:b.l},optional:{rule_name_override:T,timestamp_override:C,timeline_template:M,building_block:A}}),D=y({required:{type:a.literal("query"),kql_query:k},optional:{data_source:x,alert_suppression:b.a}}),N=y({required:{type:a.literal("saved_query"),kql_query:k},optional:{data_source:x,alert_suppression:b.a}}),P=y({required:{type:a.literal("eql"),eql_query:w},optional:{data_source:x,event_category_override:b.f,timestamp_field:b.Q,tiebreaker_field:b.N}}),R=y({required:{type:a.literal("threat_match"),kql_query:k,threat_query:O,threat_index:_.y,threat_mapping:_.B},optional:{data_source:x,threat_indicator_path:_.z,concurrent_searches:_.r,items_per_search:_.s}}),L=y({required:{type:a.literal("threshold"),kql_query:k,threshold:b.M},optional:{data_source:x}}),q=y({required:{type:a.literal("machine_learning"),machine_learning_job_id:_.t,anomaly_threshold:b.W},optional:{}}),B=y({required:{type:a.literal("new_terms"),kql_query:O,new_terms_fields:b.m,history_window_start:b.h},optional:{data_source:x}});let z,$;a.intersection([F,a.union([D,N,P,R,L,q,B])]),n(8),Symbol("MissingVersion"),function(e){e.StockValueNoUpdate="BASE=A, CURRENT=A, TARGET=A",e.StockValueCanUpdate="BASE=A, CURRENT=A, TARGET=B",e.CustomizedValueNoUpdate="BASE=A, CURRENT=B, TARGET=A",e.CustomizedValueSameUpdate="BASE=A, CURRENT=B, TARGET=B",e.CustomizedValueCanUpdate="BASE=A, CURRENT=B, TARGET=C"}(z||(z={})),function(e){e.Current="CURRENT",e.Target="TARGET",e.Merged="MERGED",e.Conflict="CONFLICT"}($||($={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return Z})),n.d(t,"d",(function(){return te})),n.d(t,"f",(function(){return D})),n.d(t,"e",(function(){return ae})),n.d(t,"g",(function(){return U})),n.d(t,"h",(function(){return oe})),n.d(t,"j",(function(){return Q})),n.d(t,"c",(function(){return se})),n.d(t,"i",(function(){return de}));var a=n(2),i=n.n(a),r=n(40),o=n(5),s=n(58),l=n(4),c=n(566),u=n(198);const d=Object(a.memo)((({handleRefresh:e,http:t,handleCloseFlyout:n,addSuccess:d,addError:p})=>{const{navigateToApp:m}=Object(s.useKibana)().services.application,{start:f,...g}=Object(c.a)(),b=Object(a.useRef)(new AbortController);let y;!function(e){e.name="name",e.description="description"}(y||(y={}));const[h,v]=Object(a.useState)({name:"",description:""}),E=({target:e},t)=>{const{value:n}=e;v({...h,[t]:n})};Object(a.useEffect)((()=>{null!=g.result&&m(l.l,{deepLinkId:l.wc.exceptions,path:`/details/${g.result.list_id}`})}),[g,m]);const x=Object(a.useCallback)((()=>{var e;g.loading||""===h.name||(b.current=new AbortController,f({http:t,signal:b.current.signal,name:h.name,description:null!==(e=h.description)&&void 0!==e?e:""}))}),[g.loading,h.name,h.description,f,t]),j=Object(a.useCallback)((t=>{d({text:Object(u.ob)(h.name),title:u.ib}),e(),n()}),[d,n,e,h]),O=Object(a.useCallback)((e=>{var t;e.message.includes("AbortError")||null!=e&&null!==(t=e.body)&&void 0!==t&&t.message.includes("AbortError")||p(e,{title:o.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListErrorTitle",{defaultMessage:"creation error"})})}),[p]);return Object(a.useEffect)((()=>{g.loading||(null!=g&&g.result?j(g.result):null!=g&&g.error&&O(null==g?void 0:g.error))}),[null==g?void 0:g.error,g.loading,g.result,O,j]),i.a.createElement(r.EuiFlyout,{ownFocus:!0,size:"s",onClose:n,"data-test-subj":"createSharedExceptionListFlyout"},i.a.createElement(r.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(r.EuiTitle,{size:"m"},i.a.createElement("h2",{"data-test-subj":"createSharedExceptionListTitle"},u.h))),i.a.createElement(r.EuiFlyoutBody,null,i.a.createElement(r.EuiText,null,u.f),i.a.createElement(r.EuiFieldText,{placeholder:u.g,value:h.name,onChange:e=>E(e,y.name),"aria-label":"Shared exception list name","data-test-subj":"createSharedExceptionListNameInput"}),i.a.createElement(r.EuiSpacer,null),i.a.createElement(r.EuiText,null,u.d),i.a.createElement(r.EuiTextArea,{placeholder:u.e,value:h.description,onChange:e=>E(e,y.description),"aria-label":"Shared exception list description","data-test-subj":"createSharedExceptionListDescriptionInput"})),i.a.createElement(r.EuiFlyoutFooter,null,i.a.createElement(r.EuiFlexGroup,{justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{iconType:"cross",onClick:n,flush:"left"},u.a)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{"data-test-subj":"exception-lists-form-create-shared",onClick:x,disabled:""===h.name},u.c)))))}));d.displayName="CreateSharedListFlyout";var p=n(180),m=n(120),f=n(244),g=n(41),b=n.n(g),y=n(48),h=n(598),v=n(418);const E=b()(r.EuiFlexItem).withConfig({displayName:"StyledFlexItem",componentId:"sc-19zoulh-0"})(["border-right:1px solid #d3dae6;padding:"," "," "," 0;"],y.euiThemeVars.euiSizeXS,y.euiThemeVars.euiSizeS,y.euiThemeVars.euiSizeXS),x=b()(r.EuiText).withConfig({displayName:"TextContainer",componentId:"sc-19zoulh-1"})(["width:max-content;"]),j=Object(a.memo)((({title:e,badgeString:t})=>i.a.createElement(r.EuiFlexGroup,{alignItems:"center"},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(x,{grow:!0,size:"xs"},`${e}:`)),i.a.createElement(E,null,i.a.createElement(r.EuiBadge,null,t)))));j.displayName="TitleBadge";var O=n(132),S=n(50),k=n.n(S);const w=o.i18n.translate("xpack.securitySolution.exceptions.commentEventLabel",{defaultMessage:"added a comment"}),I=(o.i18n.translate("xpack.securitySolution.exceptions.operatingSystemFullLabel",{defaultMessage:"Operating System"}),o.i18n.translate("xpack.securitySolution.exceptions.viewer.addToEndpointListLabel",{defaultMessage:"Add endpoint exception"}),o.i18n.translate("xpack.securitySolution.exceptions.viewer.addToDetectionsListLabel",{defaultMessage:"Add rule exception"}),o.i18n.translate("xpack.securitySolution.exceptions.viewer.addCommentPlaceholder",{defaultMessage:"Add a new comment..."}),o.i18n.translate("xpack.securitySolution.exceptions.viewer.addToClipboard",{defaultMessage:"Comment"}));o.i18n.translate("xpack.securitySolution.exceptions.clearExceptionsLabel",{defaultMessage:"Remove Exception List"}),o.i18n.translate("xpack.securitySolution.exceptions.fetchError",{defaultMessage:"Error fetching exception list"}),o.i18n.translate("xpack.securitySolution.exceptions.errorLabel",{defaultMessage:"Error"}),o.i18n.translate("xpack.securitySolution.exceptions.cancelLabel",{defaultMessage:"Cancel"}),o.i18n.translate("xpack.securitySolution.exceptions.modalErrorAccordionText",{defaultMessage:"Show rule reference information:"}),o.i18n.translate("xpack.securitySolution.exceptions.disassociateExceptionListError",{defaultMessage:"Failed to remove exception list"}),o.i18n.translate("xpack.securitySolution.exceptions.operatingSystemWindows",{defaultMessage:"Windows"}),o.i18n.translate("xpack.securitySolution.exceptions.operatingSystemMac",{defaultMessage:"macOS"}),o.i18n.translate("xpack.securitySolution.exceptions.operatingSystemWindowsAndMac",{defaultMessage:"Windows and macOS"}),o.i18n.translate("xpack.securitySolution.exceptions.operatingSystemLinux",{defaultMessage:"Linux"}),o.i18n.translate("xpack.securitySolution.exceptions.fetchingReferencesErrorToastTitle",{defaultMessage:"Error fetching exception references"});var T=n(880);const C=e=>e.map((e=>({username:e.created_by,timestamp:k()(e.created_at).format("on MMM Do YYYY @ HH:mm:ss"),event:w,timelineAvatar:i.a.createElement(r.EuiAvatar,{size:"l",name:e.created_by.toUpperCase()}),children:i.a.createElement(r.EuiText,{size:"s"},e.comment),actions:i.a.createElement(T.a,{"data-test-subj":"copy-to-clipboard",text:e.comment,titleSummary:I})})));var M=n(866),A=n(123),_=n(201);const F=({referenceName:e,referenceId:t,external:n,dataTestSubj:a})=>i.a.createElement(A.k,{"data-test-subj":`linkToRuleSecuritySolutionLink${null!=a?a:""}`,deepLinkId:l.wc.rules,path:Object(_.c)(t,M.b.alerts),target:n?"_blank":void 0},e);F.displayName="LinkToRuleDetailsComponent";const D=i.a.memo(F);D.displayName="LinkToRuleDetails";var N=n(44),P=n(317);const R=b.a.span.withConfig({displayName:"StyledText",componentId:"sc-1q48q07-0"})(["font-weight:bold;color:",";"],(({theme:e})=>e.eui.euiColorDarkestShade)),L=b()(r.EuiFlexGroup).withConfig({displayName:"MyUtilities",componentId:"sc-1q48q07-1"})(["height:50px;"]),q=b.a.span.withConfig({displayName:"StyledCondition",componentId:"sc-1q48q07-2"})(["display:inline-block !important;vertical-align:middle !important;line-height:1;"]),B=({dataTestSubj:e,pagination:t,lastUpdated:n,exceptionsTitle:a})=>{const{pageSize:o,totalItemCount:s}=t;return i.a.createElement(L,{alignItems:"center",justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(P.a,null,i.a.createElement(P.d,null,i.a.createElement(P.c,null,i.a.createElement(P.e,{dataTestSubj:`${e}ShowingText`},i.a.createElement(N.FormattedMessage,{id:"xpack.securitySolution.exceptions.viewer.paginationDetails",defaultMessage:"Showing {partOne} of {partTwo}",values:{partOne:i.a.createElement(R,null,`1-${Math.min(o,s)}`),partTwo:i.a.createElement(R,null,`${s}`)}})),a&&i.a.createElement(R,{"data-test-subj":`${e}exceptionsTitle`},a))))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiText,{size:"s","data-test-subj":`${e}LastUpdated`},i.a.createElement(N.FormattedMessage,{id:"xpack.securitySolution.exceptions.viewer.lastUpdated",defaultMessage:"Updated {updated}",values:{updated:i.a.createElement(q,null,i.a.createElement(O.b,{value:n,tooltipAnchorClassName:"eui-textTruncate"}))}}))))};B.displayName="ExceptionsUtilityComponent";const z=i.a.memo(B);z.displayName="ExceptionsUtility";var $=n(567);const V=({isReadOnly:e,exceptions:t,listType:n,lastUpdated:r,pagination:o,emptyViewerTitle:s,emptyViewerBody:l,emptyViewerButtonText:c,viewerStatus:u,ruleReferences:d,hideUtility:p=!1,onDeleteException:g,onEditExceptionItem:b,onPaginationChange:y,onCreateExceptionListItem:h})=>{const v=Object(a.useMemo)((()=>n===m.b.ENDPOINT?$.c:$.d),[n]),E=Object(a.useMemo)((()=>n===m.b.ENDPOINT?$.a:$.b),[n]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(f.c,{viewerStatus:u,listType:n,ruleReferences:d,isReadOnly:e,exceptions:t,emptyViewerTitle:s,emptyViewerBody:l,emptyViewerButtonText:c,pagination:o,lastUpdated:r,editActionLabel:v,deleteActionLabel:E,onPaginationChange:y,onEditExceptionItem:b,onDeleteException:g,getFormattedComments:C,securityLinkAnchorComponent:D,formattedDateComponent:O.a,onCreateExceptionListItem:h,exceptionsUtilityComponent:()=>p?null:i.a.createElement(z,{exceptionsTitle:$.e,pagination:o,lastUpdated:r})}))};V.displayName="ListExceptionItemsComponent";const U=i.a.memo(V);U.displayName="ListExceptionItems";var G=n(757),H=n(592),W=n(874);const Q=Object(a.memo)((({linkedRules:e,showButtonLoader:t,saveIsDisabled:n=!0,onSave:a,onCancel:o,onRuleSelectionChange:s})=>{const l=Object(r.useGeneratedHtmlId)({prefix:"complicatedFlyoutTitle"});return i.a.createElement(r.EuiFlyout,{hideCloseButton:!0,ownFocus:!0,onClose:o,"aria-labelledby":l},i.a.createElement(r.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(r.EuiTitle,{size:"m"},i.a.createElement("h2",{id:l},u.V)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiText,{size:"s",color:"subdued"},u.Y)),i.a.createElement(r.EuiFlyoutBody,null,i.a.createElement(W.a,{initiallySelectedRules:e,onRuleSelectionChange:s})),i.a.createElement(r.EuiFlyoutFooter,null,i.a.createElement(r.EuiFlexGroup,{justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{onClick:o,flush:"left"},u.X)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{"data-test-subj":"manageListRulesSaveButton",isLoading:t,disabled:n,onClick:a,fill:!0},u.Z)))))}));Q.displayName="ManageRules";var Y=n(743);const K=p.css`
  z-index: 100;
  .euiAccordion__buttonContent {
    cursor: pointer;
    width: 100%;
  }
`,X=b()(r.EuiPanel).withConfig({displayName:"ExceptionPanel",componentId:"sc-11ogn3z-0"})(["margin:-"," "," 0 ",";"],y.euiThemeVars.euiSizeS,y.euiThemeVars.euiSizeM,y.euiThemeVars.euiSizeM),J=b()(r.EuiFlexGroup).withConfig({displayName:"ListHeaderContainer",componentId:"sc-11ogn3z-1"})(["padding:",";text-align:initial;"],y.euiThemeVars.euiSizeS),Z=Object(a.memo)((({exceptionsList:e,handleDelete:t,handleExport:n,handleDuplicate:a,readOnly:o})=>{const{linkedRules:s,showManageRulesFlyout:l,showManageButtonLoader:c,disableManageButton:d,onManageRules:p,onSaveManageRules:g,onCancelManageRules:b,onRuleSelectionChange:y}=Object(G.a)(e.list_id),{listId:E,listName:x,listType:O,createdAt:S,createdBy:k,exceptions:w,pagination:I,ruleReferences:T,toggleAccordion:C,openAccordionId:M,menuActionItems:A,listDescription:_,exceptionItemsCount:F,onEditExceptionItem:D,onDeleteException:N,onPaginationChange:P,setToggleAccordion:R,exceptionViewerStatus:L,showAddExceptionFlyout:q,showEditExceptionFlyout:B,exceptionToEdit:z,onAddExceptionClick:$,handleConfirmExceptionFlyout:V,handleCancelExceptionItemFlyout:W,goToExceptionDetail:Z,emptyViewerTitle:ee,emptyViewerBody:te,emptyViewerButtonText:ne,handleCancelExpiredExceptionsModal:ae,handleConfirmExpiredExceptionsModal:ie,showIncludeExpiredExceptionsModal:re}=Object(H.a)({exceptionsList:e,handleExport:n,handleDelete:t,handleDuplicate:a,handleManageRules:p});return i.a.createElement(r.EuiFlexGroup,{gutterSize:"none"},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiPanel,{hasShadow:!1},i.a.createElement(r.EuiAccordion,{buttonProps:{className:K},id:M,arrowDisplay:"none",onToggle:()=>R(!C),buttonContent:i.a.createElement(r.EuiPanel,null,i.a.createElement(J,{gutterSize:"m",alignItems:"flexStart"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonIcon,{iconType:C?"arrowDown":"arrowRight","aria-label":"Next"})),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFlexGroup,{direction:"column",key:E,alignItems:"flexStart",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!0},i.a.createElement(r.EuiText,{size:"m"},i.a.createElement(r.EuiLink,{"data-test-subj":"exception-list-name",onClick:Z},x))),i.a.createElement(r.EuiFlexItem,{grow:!0},i.a.createElement(r.EuiText,{size:"xs"},i.a.createElement(r.EuiTextColor,{color:"subdued"},_))))),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFlexGroup,{alignItems:"center"},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(j,{title:u.i,badgeString:S})),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(j,{title:u.b,badgeString:k})),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(j,{title:u.l,badgeString:F})),i.a.createElement(r.EuiFlexItem,{"data-test-subj":"exceptionListCardLinkedRulesBadge"},i.a.createElement(j,{title:u.fb,badgeString:s.length.toString()})),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(f.e,{disableActions:o,dataTestSubj:"sharedListOverflowCard",actions:A})))))),"data-test-subj":`exceptionsManagementListCard-${E}`},i.a.createElement(X,{hasBorder:!0},i.a.createElement(U,{isReadOnly:o,exceptions:w,listType:e.type,pagination:I,hideUtility:!0,viewerStatus:L,ruleReferences:T,onDeleteException:N,onEditExceptionItem:D,onPaginationChange:P,onCreateExceptionListItem:$,lastUpdated:null,emptyViewerTitle:ee,emptyViewerBody:te,emptyViewerButtonText:ne}))))),q?i.a.createElement(v.a,{rules:null,isBulkAction:!1,isEndpointItem:O===m.b.ENDPOINT,sharedListToAddTo:[e],onCancel:W,onConfirm:V,"data-test-subj":"addExceptionItemFlyoutInSharedLists",showAlertCloseOptions:!1}):null,B&&z?i.a.createElement(h.a,{list:e,itemToEdit:z,showAlertCloseOptions:!0,openedFromListDetailPage:!0,onCancel:W,onConfirm:V,"data-test-subj":"editExceptionItemFlyoutInSharedLists"}):null,l?i.a.createElement(Q,{linkedRules:s,showButtonLoader:c,saveIsDisabled:d,onSave:g,onCancel:b,onRuleSelectionChange:y}):null,re?i.a.createElement(Y.b,{handleCloseModal:ae,onModalConfirm:ie,action:re}):null)}));Z.displayName="ExceptionsListCard";var ee=n(594);const te=i.a.memo((({handleRefresh:e,http:t,addSuccess:n,addError:o,setDisplayImportListFlyout:s})=>{var l;const c=Object(a.useRef)(null),d=Object(r.useGeneratedHtmlId)({prefix:"filePicker"}),[p,m]=Object(a.useState)(null),[f,g]=Object(a.useState)(!1),[b,y]=Object(a.useState)(!1),[h,v]=Object(a.useState)(!1),E=Object(a.useCallback)((()=>{var e;null!==(e=c.current)&&void 0!==e&&e.fileInput&&(c.current.fileInput.value="",c.current.handleChange()),m(null),v(!1),y(!1),g(!1)}),[]),{start:x,...j}=Object(ee.a)(),O=Object(a.useRef)(new AbortController),S=Object(a.useCallback)((()=>{!j.loading&&p&&(O.current=new AbortController,Array.from(p).forEach((e=>x({file:e,http:t,signal:O.current.signal,overwrite:f,overwriteExceptions:f,asNewList:b}))))}),[b,p,t,x,j.loading,f]),k=Object(a.useCallback)((t=>{E(),n({title:u.lb}),e()}),[E,n,e]),w=Object(a.useCallback)((e=>{e.forEach((e=>{e.error.message.includes("AbortError")||o(e.error.message,{title:u.kb})}))}),[o]);Object(a.useEffect)((()=>{var e;if(!j.loading)if(null!=j&&null!==(e=j.result)&&void 0!==e&&e.success)k(null==j?void 0:j.result);else{var t,n;const e=[];var a,i;null!=j&&null!==(t=j.error)&&void 0!==t&&t.body&&e.push({error:{...null==j||null===(a=j.error)||void 0===a?void 0:a.body}}),null!=j&&null!==(n=j.result)&&void 0!==n&&n.errors&&(null==j||null===(i=j.result)||void 0===i||i.errors.forEach((t=>{t.error.message.includes("already exists")&&v(!0),e.push(t)}))),w(e)}}),[w,k,null==j?void 0:j.error,j.loading,null==j?void 0:j.result,null==j||null===(l=j.result)||void 0===l?void 0:l.errors]);const I=Object(a.useCallback)((e=>{m(null!=e?e:null)}),[]);return i.a.createElement(r.EuiFlyout,{ownFocus:!0,size:"s",onClose:()=>s(!1)},i.a.createElement(r.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(r.EuiTitle,{size:"m"},i.a.createElement("h2",null,u.R))),i.a.createElement(r.EuiFlyoutBody,null,i.a.createElement(r.EuiText,null,u.Q),i.a.createElement(r.EuiFilePicker,{id:d,multiple:!0,ref:c,initialPromptText:u.U,onChange:I,display:"large","aria-label":"Use aria labels when no actual label is in use"}),h&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,null),i.a.createElement(r.EuiTextColor,{color:"danger"},u.T),i.a.createElement(r.EuiSpacer,null),i.a.createElement(r.EuiCheckbox,{id:"basicCheckboxId",label:u.S,checked:f,"data-test-subj":"importExceptionListOverwriteExistingCheckbox",onChange:e=>{g(!f),y(!1)}}),i.a.createElement(r.EuiCheckbox,{id:"createNewListCheckbox",label:u.P,"data-test-subj":"importExceptionListCreateNewCheckbox",checked:b,onChange:e=>{y(!b),g(!1)}}))),i.a.createElement(r.EuiFlyoutFooter,null,i.a.createElement(r.EuiFlexGroup,{justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{"data-test-subj":"exceptionListsImportFormCloseBTN",iconType:"cross",onClick:()=>s(!1),flush:"left"},u.a)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{"data-test-subj":"exception-lists-form-import-action",onClick:S,disabled:null==p||j.loading},u.jb)))))})),ne=({linkTitle:e,listId:t,external:n,dataTestSubj:a})=>i.a.createElement(A.k,{"data-test-subj":`linkToRuleSecuritySolutionLink${null!=a?a:""}`,deepLinkId:l.wc.exceptions,path:`/details/${t}`,target:n?"_blank":void 0},e);ne.displayName="LinkToListDetailsComponent";const ae=i.a.memo(ne);ae.displayName="LinkToListDetails";var ie=n(595);const re=({list:e,isReadOnly:t,refreshExceptions:n})=>{const{listName:a,exceptions:o,listType:s,lastUpdated:l,pagination:c,emptyViewerTitle:d,emptyViewerBody:p,emptyViewerButtonText:g,viewerStatus:b,ruleReferences:y,showAddExceptionFlyout:E,showEditExceptionFlyout:x,exceptionToEdit:j,exceptionViewerStatus:O,onSearch:S,onAddExceptionClick:k,onDeleteException:w,onEditExceptionItem:I,onPaginationChange:T,handleCancelExceptionItemFlyout:C,handleConfirmExceptionFlyout:M}=Object(ie.a)(e,n);return i.a.createElement(i.a.Fragment,null,E?i.a.createElement(v.a,{rules:null,isBulkAction:!1,isEndpointItem:s===m.b.ENDPOINT,sharedListToAddTo:[e],onCancel:C,onConfirm:M,"data-test-subj":"addExceptionItemFlyoutInList",showAlertCloseOptions:!1}):b===f.i.EMPTY||b===f.i.LOADING?i.a.createElement(f.a,{isReadOnly:t,viewerStatus:b,onEmptyButtonStateClick:k,title:u.B,body:u.y(a),buttonText:u.z}):i.a.createElement(r.EuiPanel,{hasBorder:!1,hasShadow:!1},i.a.createElement(i.a.Fragment,null,x&&j&&i.a.createElement(h.a,{list:e,itemToEdit:j,showAlertCloseOptions:!0,openedFromListDetailPage:!0,onCancel:C,onConfirm:M,"data-test-subj":"editExceptionItemFlyoutInList"}),i.a.createElement(f.g,{addExceptionButtonText:s===m.b.ENDPOINT?u.x:u.w,listType:s,onSearch:S,onAddExceptionClick:k,isSearching:b===f.i.SEARCHING,isButtonFilled:!1,buttonIconType:"plusInCircle"}),i.a.createElement(U,{viewerStatus:O,listType:s,ruleReferences:y,isReadOnly:t,exceptions:o,emptyViewerTitle:d,emptyViewerBody:p,emptyViewerButtonText:g,pagination:c,lastUpdated:l,onPaginationChange:T,onEditExceptionItem:I,onDeleteException:w,onCreateExceptionListItem:k}))))};re.displayName="ListWithSearchComponent";const oe=i.a.memo(re);oe.displayName="ListWithSearch";const se=({onRefresh:e,totalExceptionLists:t,setSort:n,sort:a,sortFields:o})=>{var s;const l=null==o?void 0:o.find((e=>e.field===(null==a?void 0:a.field)));return i.a.createElement(P.a,{border:!0},i.a.createElement(P.d,null,i.a.createElement(P.c,null,i.a.createElement(P.e,{dataTestSubj:"showingExceptionLists"},u.gb(t))),i.a.createElement(P.c,null,i.a.createElement(P.b,{dataTestSubj:"refreshRulesAction",iconSide:"left",iconType:"refresh",onClick:e},u.eb))),i.a.createElement(P.d,null,i.a.createElement(i.a.Fragment,null,i.a.createElement(P.c,null,a&&i.a.createElement(P.b,{dataTestSubj:"sortExceptions",iconSide:"right",iconType:"asc"===a.order?"sortUp":"sortDown",popoverPanelPaddingSize:"s",popoverContent:()=>i.a.createElement(r.EuiContextMenuPanel,{size:"s",items:null==o?void 0:o.map((e=>{const t=(null==l?void 0:l.field)===e.field;let o=e.defaultOrder;return t&&(o="asc"===a.order?"desc":"asc"),i.a.createElement(r.EuiContextMenuItem,{key:e.field,onClick:()=>null==n?void 0:n({field:e.field,order:o})},i.a.createElement(le,null,e.label," ",(null==l?void 0:l.field)===e.field&&i.a.createElement(ce,{type:"asc"===a.order?"sortUp":"sortDown"})))}))})},i.a.createElement(le,null,u.hb," ",null==o||null===(s=o.find((e=>e.field===a.field)))||void 0===s?void 0:s.label))))))},le=b()("div").withConfig({displayName:"SortMenuItem",componentId:"sc-1h5b7pp-0"})(["display:flex;align-items:center;"]),ce=b()(r.EuiIcon).withConfig({displayName:"SortIcon",componentId:"sc-1h5b7pp-1"})(["margin-left:8px;"]);se.displayName="ExceptionsTableUtilityBar";const ue={strict:!0,fields:{created_by:{type:"string"},name:{type:"string"},type:{type:"string"},list_id:{type:"string"},tags:{type:"string"}}},de=i.a.memo((({onSearch:e})=>i.a.createElement(r.EuiSearchBar,{"data-test-subj":"exceptionsHeaderSearch","aria-label":u.m,onChange:e,box:{"data-test-subj":"exceptionsHeaderSearchInput",placeholder:u.D,incremental:!1,schema:ue}})));de.displayName="ListsSearchBar"},,function(e,t,n){"use strict";n.d(t,"c",(function(){return v})),n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return x}));var a=n(2),i=n.n(a),r=n(40),o=n(145),s=n(42);const l=n(5).i18n.translate("xpack.securitySolution.callouts.dismissButton",{defaultMessage:"Dismiss"}),c=({message:e,text:t,onClick:n=s.noop})=>{const{type:o}=e,c=o,u=null!=t?t:l,d=Object(a.useCallback)((()=>n(e)),[n,e]);return i.a.createElement(r.EuiButton,{color:c,"data-test-subj":"callout-dismiss-btn",onClick:d},u)},u=({message:e,iconType:t,dismissButtonText:n,onDismiss:a,showDismissButton:o=!0})=>{const{type:s,id:l,title:u,description:p}=e,m=null!=t?t:d(s);return i.a.createElement(r.EuiCallOut,{color:s,title:u,iconType:m,"data-test-subj":`callout-${l}`,"data-test-messages":`[${l}]`},p,o&&i.a.createElement(c,{message:e,text:n,onClick:a}))},d=e=>{switch(e){case"primary":return"iInCircle";case"success":return"cheer";case"warning":return"help";case"danger":return"warning";default:return Object(o.a)(e)}},p=Object(a.memo)(u);var m=n(788),f=n.n(m),g=n(1111);const b=(e,t)=>y(e,s.identity,(()=>t)),y=(e,t,n)=>{const a=e.map((e=>[t(e),n(e)]));return Object(s.fromPairs)(a)},h=({namespace:e,condition:t,message:n})=>{const{isVisible:o,dismiss:l}=((e,t="common")=>{const{getMessages:n,addMessage:i}=Object(g.a)(),[r,o]=f()({}),l=(e=>`kibana.securitySolution.${e}.callouts.dismissed`)(t),c=Object(a.useCallback)((()=>Object.entries(r).filter((([e,t])=>t)).map((([e,t])=>e))),[r]),u=Object(a.useCallback)((e=>{var t;return null!==(t=r[e.id])&&void 0!==t&&t}),[r]),d=Object(a.useCallback)((e=>{const{id:t,type:n}=e;o.set(t,!1),"primary"!==n&&"success"!==n||i(l,t)}),[o,i,l]),p=Object(a.useCallback)((e=>{const t=n(l),a=Object(s.difference)(e,t),i=Object(s.intersection)(e,t);o.setAll({...b(a,!0),...b(i,!1)})}),[n,l,o]);return Object(a.useEffect)((()=>{const t=e.map((e=>e.id)),n=Object.keys(r);Object(s.isEqual)(t,n)||p(t)}),[e,r,p]),{getVisibleMessageIds:c,isVisible:u,dismiss:d}})([n],e);return t&&o(n)?i.a.createElement(i.a.Fragment,null,i.a.createElement(p,{message:n,onDismiss:l}),i.a.createElement(r.EuiSpacer,{size:"l"})):null},v=Object(a.memo)(h),E=({condition:e,message:t})=>e?i.a.createElement(p,{message:t,showDismissButton:!1}):null,x=Object(a.memo)(E)},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(2),i=n(102),r=n(109),o=n(214),s=n(5);const l=s.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.fetchListsIndex.errorDescription",{defaultMessage:"Failed to retrieve the lists index"}),c=s.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.createListsIndex.errorDescription",{defaultMessage:"Failed to create the lists index"});var u=n(108),d=n(126);const p=e=>{const[t]=Object.keys(e),n=e[t];return null!=n&&n.manage},m=e=>{const[t]=Object.keys(e),n=e[t];return null!=n&&n.read},f=e=>{const[t]=Object.keys(e),n=e[t];return null!=n&&(n.create||n.create_doc||n.index||n.write)},g=()=>{const[e,t]=Object(a.useState)({isAuthenticated:null,canManageIndex:null,canReadIndex:null,canWriteIndex:null}),{listPrivileges:n}=Object(d.a)();return Object(a.useEffect)((()=>{if(null!=n.result){const{is_authenticated:e,lists:{index:a},listItems:{index:i}}=n.result;t({isAuthenticated:e,canReadIndex:m(a)&&m(i),canManageIndex:p(a)&&p(i),canWriteIndex:f(a)&&f(i)})}}),[n.result]),Object(a.useEffect)((()=>{null!=n.error&&t({isAuthenticated:!1,canManageIndex:!1,canReadIndex:!1,canWriteIndex:!1})}),[n.error]),{loading:n.loading,...e}},b=()=>{const{createIndex:e,indexExists:t,loading:n,error:s}=(()=>{const[e,t]=Object(a.useState)(null),[n,s]=Object(a.useState)(null),{lists:d}=Object(i.j)().services,p=Object(i.i)(),{addError:m}=Object(u.a)(),{canReadIndex:f,canManageIndex:b,canWriteIndex:y}=g(),{loading:h,start:v,...E}=Object(o.k)(),{loading:x,start:j,...O}=Object(o.d)(),S=h||x,k=Object(a.useCallback)((()=>{d&&f&&b&&v({http:p})}),[p,d,v,f,b]),w=Object(a.useCallback)((()=>{d&&b&&y&&j({http:p})}),[j,p,d,b,y]);return Object(a.useEffect)((()=>{h||n||null!==e||k()}),[n,e,k,h]),Object(a.useEffect)((()=>{null!=E.result&&t(E.result.list_index&&E.result.list_item_index)}),[E.result]),Object(a.useEffect)((()=>{null!=O.result&&k()}),[O.result,k]),Object(a.useEffect)((()=>{const e=E.error;null!=e&&(Object(r.v)(e)&&404===e.body.status_code?t(!1):(s(e),m(e,{title:l})))}),[m,E.error]),Object(a.useEffect)((()=>{const e=O.error;null!=e&&(s(e),m(e,{title:c}))}),[m,O.error]),{createIndex:w,error:n,indexExists:e,loading:S}})(),{canManageIndex:d,canWriteIndex:p,loading:m}=g(),{lists:f}=Object(i.j)().services,b=null!=f,y=n||m,h=!1===t,v=!b||h&&(!1===d||!0===d&&null!=s);return Object(a.useEffect)((()=>{h&&d&&e()}),[d,e,h]),{canManageIndex:d,canWriteIndex:p,enabled:b,loading:y,needsConfiguration:v}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return T}));var a=n(2),i=n.n(a),r=n(1376),o=n.n(r),s=n(694),l=n(40),c=n(5),u=n(44),d=n(4);const p=({values:e})=>i.a.createElement(i.a.Fragment,null,e.map(((t,n)=>i.a.createElement(i.a.Fragment,{key:n},i.a.createElement(l.EuiCode,null,t),n<e.length-1?", ":""))));var m=n(664);const f=c.i18n.translate("xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageTitle",{defaultMessage:"Insufficient privileges"}),g=c.i18n.translate("xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.cannotEditRules",{defaultMessage:"Without that privilege you cannot create or edit detection engine rules."}),b=c.i18n.translate("xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.cannotEditLists",{defaultMessage:"Without these privileges, you cannot create or edit value lists."}),y=c.i18n.translate("xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.cannotEditAlerts",{defaultMessage:"Without these privileges, you cannot view or change status of alerts."}),h=({indexPrivileges:e,featurePrivileges:t=[]})=>i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.messageDetail",defaultMessage:"{essence} {indexPrivileges} {featurePrivileges} Related documentation: {docs}",values:{essence:i.a.createElement("p",null,i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.essenceDescription",defaultMessage:"You need the following privileges to fully access this functionality. Contact your administrator for further assistance."})),indexPrivileges:e.length>0?i.a.createElement(i.a.Fragment,null,i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.indexPrivilegesTitle",defaultMessage:"Missing Elasticsearch index privileges:"}),i.a.createElement("ul",null,e.map((([e,t])=>i.a.createElement("li",{key:e},x(e,t)))))):null,featurePrivileges:t.length>0?i.a.createElement(i.a.Fragment,null,i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.featurePrivilegesTitle",defaultMessage:"Missing Kibana feature privileges:"}),i.a.createElement("ul",null,t.map((([e,t])=>i.a.createElement("li",{key:e},j(e,t)))))):null,docs:i.a.createElement("ul",null,i.a.createElement("li",null,i.a.createElement(m.b,null)),i.a.createElement("li",null,i.a.createElement(m.d,null)))}}),v={[d.qc]:{all:g},[d.S]:{write:y},[d.M]:{write:b},[d.L]:{write:b}},E=(e,t)=>{var n;const a=null===(n=Object.entries(v).find((([e])=>t.startsWith(e))))||void 0===n?void 0:n[1];return e.map((e=>null==a?void 0:a[e])).filter(Boolean).join(" ")},x=(e,t)=>i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.missingIndexPrivileges",defaultMessage:"Missing {privileges} privileges for the {index} index. {explanation}",values:{privileges:i.a.createElement(p,{values:t}),index:i.a.createElement(l.EuiCode,null,e),explanation:E(t,e)}}),j=(e,t)=>i.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.missingPrivilegesCallOut.messageBody.missingFeaturePrivileges",defaultMessage:"Missing {privileges} privileges for the {index} feature. {explanation}",values:{privileges:i.a.createElement(p,{values:t}),index:i.a.createElement(l.EuiCode,null,e),explanation:E(t,e)}});var O=n(181),S=n(126);const k=["read","write","view_index_metadata","maintenance"],w=e=>{const t=(e=>{const[t]=Object.keys(e);return t})(e),n=e[t],a=k.filter((e=>!n[e]));if(a.length)return[t,a]},I=()=>{const e=(()=>{const{detectionEnginePrivileges:e,listPrivileges:t}=Object(S.a)(),[{canUserCRUD:n}]=Object(O.b)();return Object(a.useMemo)((()=>{const a=[],i=[];if(null==n||null==t.result||null==e.result)return{featurePrivileges:a,indexPrivileges:i};!1===n&&a.push([d.qc,["all"]]);const r=w(t.result.listItems.index);r&&i.push(r);const o=w(t.result.lists.index);o&&i.push(o);const s=w(e.result.index);return s&&i.push(s),{featurePrivileges:a,indexPrivileges:i}}),[n,t,e])})(),t=Object(a.useMemo)((()=>e.indexPrivileges.length>0||e.featurePrivileges.length>0?{type:"primary",id:`missing-user-privileges-${o()(e)}`,title:f,description:h(e)}:null),[e]);return t&&i.a.createElement(s.c,{namespace:"detections",condition:!0,message:t})},T=Object(a.memo)(I)},,function(e,t,n){"use strict";n.d(t,"b",(function(){return b})),n.d(t,"a",(function(){return y}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(102),c=n(222),u=n(1033),d=n(5);const p=d.i18n.translate("xpack.securitySolution.noPermissionsTitle",{defaultMessage:"Privileges required"}),m=d.i18n.translate("xpack.securitySolution.noPrivilegesDefaultMessage",{defaultMessage:"To view this page, you must update privileges. For more information, contact your Kibana administrator."}),f=d.i18n.translate("xpack.securitySolution.goToDocumentationButton",{defaultMessage:"View documentation"}),g=s()(r.EuiFlexItem).withConfig({displayName:"SizedEuiFlexItem",componentId:"sc-156zz3c-0"})(["min-height:460px;font-size:1.1rem;"]),b=i.a.memo((({pageName:e,docLinkSelector:t})=>i.a.createElement(c.a,null,i.a.createElement(r.EuiFlexGroup,null,i.a.createElement(g,null,i.a.createElement(r.EuiPageTemplate.EmptyPrompt,null,i.a.createElement(y,{pageName:e,docLinkSelector:t})))))));b.displayName="NoPrivilegePage";const y=i.a.memo((({pageName:e,docLinkSelector:t})=>{const{docLinks:n}=Object(l.j)().services,r=Object(a.useMemo)((()=>({feature:{icon:"documents",label:f,url:t(n.links),target:"_blank"}})),[t,n.links]),o=e?(e=>d.i18n.translate("xpack.securitySolution.noPrivilegesPerPageMessage",{values:{pageName:e},defaultMessage:"To view {pageName}, you must update privileges. For more information, contact your Kibana administrator."}))(e):m;return i.a.createElement(u.a,{actions:r,message:o,"data-test-subj":"noPrivilegesPage",title:p})}));y.displayName="NoPrivileges"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(40),i=n(2),r=n.n(i);const o=n(5).i18n.translate("xpack.securitySolution.accessibility.tooltipWithKeyboardShortcut.pressTooltipLabel",{defaultMessage:"Press"}),s=({additionalScreenReaderOnlyContext:e="",content:t,shortcut:n,showShortcut:i})=>r.a.createElement(r.a.Fragment,null,r.a.createElement("div",{"data-test-subj":"content"},t),""!==e&&r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"additionalScreenReaderOnlyContext"},r.a.createElement("p",null,e)),i&&r.a.createElement(a.EuiText,{color:"subdued","data-test-subj":"shortcut",size:"s",textAlign:"center"},r.a.createElement("span",null,o)," ",r.a.createElement(a.EuiBadge,{color:"hollow"},n))),l=r.a.memo(s);l.displayName="TooltipWithKeyboardShortcut"},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return o}));var a=n(8),i=n(493);function r(e,t){var n,a,i;return null!==(n=null===(a=e.packagePrivileges)||void 0===a||null===(i=a.endpoint)||void 0===i?void 0:i.actions[t].executePackageAction)&&void 0!==n&&n}const o=(e,t,n=[])=>{var o;const s=e.isPlatinumPlus(),l=e.isEnterprise(),c=n.includes("superuser"),u=r(t,"writeSecuritySolution"),d=r(t,"readSecuritySolution"),p=r(t,"writeEndpointList"),m=r(t,"readEndpointList"),f=r(t,"writePolicyManagement"),g=r(t,"readPolicyManagement"),b=r(t,"writeActionsLogManagement"),y=r(t,"readActionsLogManagement"),h=r(t,"writeHostIsolation"),v=r(t,"writeHostIsolationRelease"),E=r(t,"writeProcessOperations"),x=r(t,"writeTrustedApplications"),j=r(t,"readTrustedApplications"),O=r(t,"writeHostIsolationExceptions"),S=r(t,"readHostIsolationExceptions"),k=r(t,"accessHostIsolationExceptions"),w=r(t,"deleteHostIsolationExceptions"),I=r(t,"writeBlocklist"),T=r(t,"readBlocklist"),C=r(t,"writeEventFilters"),M=r(t,"readEventFilters"),A=r(t,"writeFileOperations"),_=r(t,"writeExecuteOperations"),F={canWriteSecuritySolution:u,canReadSecuritySolution:d,canAccessFleet:null!==(o=null==t?void 0:t.fleet.all)&&void 0!==o&&o,canAccessEndpointManagement:c,canCreateArtifactsByPolicy:s,canWriteEndpointList:p,canReadEndpointList:m,canWritePolicyManagement:f,canReadPolicyManagement:g,canWriteActionsLogManagement:b,canReadActionsLogManagement:y&&l,canAccessEndpointActionsLogManagement:y&&s,canIsolateHost:h&&s,canUnIsolateHost:v,canKillProcess:E&&l,canSuspendProcess:E&&l,canGetRunningProcesses:E&&l,canAccessResponseConsole:!1,canWriteExecuteOperations:_&&l,canWriteFileOperations:A&&l,canWriteTrustedApplications:x,canReadTrustedApplications:j,canWriteHostIsolationExceptions:O&&s,canAccessHostIsolationExceptions:k&&s,canReadHostIsolationExceptions:S,canDeleteHostIsolationExceptions:w,canWriteBlocklist:I,canReadBlocklist:T,canWriteEventFilters:C,canReadEventFilters:M};return F.canAccessResponseConsole=l&&Object.values(Object(a.omit)(i.g,"release")).some((e=>F[e])),F},s=()=>({canWriteSecuritySolution:!1,canReadSecuritySolution:!1,canAccessFleet:!1,canAccessEndpointActionsLogManagement:!1,canAccessEndpointManagement:!1,canCreateArtifactsByPolicy:!1,canWriteEndpointList:!1,canReadEndpointList:!1,canWritePolicyManagement:!1,canReadPolicyManagement:!1,canWriteActionsLogManagement:!1,canReadActionsLogManagement:!1,canIsolateHost:!1,canUnIsolateHost:!1,canKillProcess:!1,canSuspendProcess:!1,canGetRunningProcesses:!1,canAccessResponseConsole:!1,canWriteFileOperations:!1,canWriteExecuteOperations:!1,canWriteTrustedApplications:!1,canReadTrustedApplications:!1,canWriteHostIsolationExceptions:!1,canAccessHostIsolationExceptions:!1,canReadHostIsolationExceptions:!1,canDeleteHostIsolationExceptions:!1,canWriteBlocklist:!1,canReadBlocklist:!1,canWriteEventFilters:!1,canReadEventFilters:!1})},function(e,t,n){"use strict";n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return g}));var a=n(40),i=n(2),r=n.n(i),o=n(140);const s=r.a.memo((({onClick:e})=>r.a.createElement(a.EuiButtonEmpty,{color:"text","data-test-subj":"open-timeline-button",iconSide:"left",iconType:"folderOpen",onClick:e},o.G)));s.displayName="OpenTimelineModalButton";var l=n(671),c=n(248),u=n(412),d=n(912);const p="add-timeline-button",m=["createFrom"],f=({timelineId:e})=>{const[t,n]=Object(i.useState)(!1),[o,f]=Object(i.useState)(!1),g=Object(i.useCallback)((()=>n(!t)),[t]),b=Object(i.useCallback)((()=>n(!1)),[]),y=Object(i.useCallback)((()=>f(!1)),[]),h=Object(i.useCallback)((()=>{b(),f(!0)}),[b]),v=Object(i.useMemo)((()=>r.a.createElement(a.EuiButtonIcon,{className:p,"data-test-subj":"settings-plus-in-circle",iconType:"plusInCircle",color:"primary",size:"m",onClick:g,"aria-label":c.a})),[g]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiPopover,{anchorPosition:"downRight",button:v,id:"timelineSettingsPopover",panelProps:{"data-test-subj":"timeline-addPopupPanel"},isOpen:t,closePopover:b,ownFocus:!0,repositionOnScroll:!0},r.a.createElement(a.EuiFlexGroup,{alignItems:"flexStart",direction:"column",gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(u.c,{timelineId:e,title:c.h,closeGearMenu:b})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(d.a,{closeGearMenu:b,timelineId:e,title:c.g})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(s,{onClick:h}))))),o?r.a.createElement(l.a,{onClose:y,hideActions:m}):null)},g=r.a.memo(f)},,function(e,t,n){"use strict";e.exports=n(968)},function(e,t,n){"use strict";let a,i;n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i})),function(e){e.host="host",e.user="user"}(a||(a={})),function(e){e.NOT_INSTALLED="NOT_INSTALLED",e.DISABLED="DISABLED",e.ENABLED="ENABLED"}(i||(i={}))},function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.userName="user.name",e.hostName="host.name"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=(e,t)=>Object.keys(t).reduce(((e,n)=>e.replace(new RegExp(`\\{${n}\\}`,"g"),String(t[n]))),e)},function(e,t,n){"use strict";n.d(t,"h",(function(){return o})),n.d(t,"i",(function(){return l})),n.d(t,"g",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"j",(function(){return d})),n.d(t,"e",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"d",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"c",(function(){return b}));var a=n(42),i=n(769),r=n(114);const o=(e,t,n)=>({...n,global:{...n.global,fullScreen:e===r.a.global?t:n.global.fullScreen},timeline:{...n.timeline,fullScreen:e===r.a.timeline?t:n.timeline.fullScreen}}),s=(e,t,n)=>t!==r.a.global&&t!==r.a.timeline||n!==r.a.socTrends?t!==r.a.socTrends||n!==r.a.global&&n!==r.a.timeline?e:Object(i.a)(e):Object(i.b)(e),l=(e,t,n)=>{const i=Object(a.get)(e,n);return null!=i?{...[e,...i.linkTo].reduce(((i,r)=>({...i,[r]:{...Object(a.get)(r,n),timerange:s(t,e,r)}})),e===r.a.timeline?{...n,global:{...n.global,linkTo:[]}}:n)}:n},c=e=>e.global.linkTo.indexOf(r.a.timeline)>-1?f([r.a.global,r.a.timeline],e):m([r.a.global,r.a.timeline],e),u=e=>e.global.linkTo.indexOf(r.a.socTrends)>-1?f([r.a.global,r.a.socTrends],e):m([r.a.global,r.a.socTrends],e),d=({inputId:e,id:t,inspect:n,loading:i,refetch:r,state:o,searchSessionId:s})=>{const l=o[e].queries.findIndex((e=>e.id===t));return{...o,[e]:{...Object(a.get)(e,o),queries:l>-1?[...o[e].queries.slice(0,l),{id:t,inspect:n,isInspected:o[e].queries[l].isInspected,loading:i,refetch:r,searchSessionId:o[e].queries[l].searchSessionId,selectedInspectIndex:o[e].queries[l].selectedInspectIndex},...o[e].queries.slice(l+1)]:[...o[e].queries,{id:t,inspect:n,isInspected:!1,loading:i,refetch:r,selectedInspectIndex:0,searchSessionId:s}]}}},p=({id:e,inputId:t,isInspected:n,selectedInspectIndex:i,state:r,searchSessionId:o})=>{const s=r[t].queries.findIndex((t=>t.id===e)),l=s>-1?r[t].queries[s]:null;return{...r,[t]:{...Object(a.get)(t,r),queries:s>-1?[...r[t].queries.slice(0,s),{...l,isInspected:n,selectedInspectIndex:i,searchSessionId:o},...r[t].queries.slice(s+1)]:[...r[t].queries]}}},m=(e,t)=>{if(2!==e.length)throw new Error("Only link 2 input states at a time");if(e.includes(r.a.socTrends)&&e.includes(r.a.timeline))throw new Error("Do not link socTrends to timeline. Only link socTrends to global");if(1===Array.from(new Set(e)).length)throw new Error("Input linkTo cannot link to itself");if(e.includes(r.a.timeline)&&e.includes(r.a.global)){const e=t.timeline.linkTo.includes(r.a.socTrends)||t.global.linkTo.includes(r.a.socTrends)?[r.a.socTrends]:[];return{...t,timeline:{...t.timeline,linkTo:[...e,r.a.global]},global:{...t.global,linkTo:[...e,r.a.timeline]},...t.socTrends&&e.length?{socTrends:{...t.socTrends,linkTo:[r.a.global,r.a.timeline]}}:{}}}if(e.includes(r.a.socTrends)&&e.includes(r.a.global)){const e=t.global.linkTo.includes(r.a.timeline)?[r.a.timeline]:[];return{...t,...t.socTrends?{socTrends:{...t.socTrends,linkTo:[...e,r.a.global]}}:{},global:{...t.global,linkTo:[...e,r.a.socTrends]},...e.length?{timeline:{...t.timeline,linkTo:[r.a.global,r.a.socTrends]}}:{}}}return t},f=(e,t)=>{if(2!==e.length)throw new Error("Only remove linkTo from 2 input states at a time");if(e.includes(r.a.socTrends)&&e.includes(r.a.timeline))throw new Error("Do not remove link socTrends to timeline. Only remove link socTrends to global");if(1===Array.from(new Set(e)).length)throw new Error("Input linkTo cannot remove link to itself");if(e.includes(r.a.timeline)&&e.includes(r.a.global)){const e=t.timeline.linkTo.includes(r.a.socTrends)||t.global.linkTo.includes(r.a.socTrends)?[r.a.socTrends]:[];return{...t,timeline:{...t.timeline,linkTo:[]},global:{...t.global,linkTo:e},...t.socTrends&&e.length?{socTrends:{...t.socTrends,linkTo:[r.a.global]}}:{}}}if(e.includes(r.a.socTrends)&&e.includes(r.a.global)){const e=t.global.linkTo.includes(r.a.timeline)?[r.a.timeline]:[];return{...t,...t.socTrends?{socTrends:{...t.socTrends,linkTo:[]}}:{},global:{...t.global,linkTo:e},...e.length?{timeline:{...t.timeline,linkTo:[r.a.global]}}:{}}}return t},g=({inputId:e,id:t,state:n})=>{const i=n[e].queries.findIndex((e=>e.id===t));return{...n,[e]:{...Object(a.get)(e,n),queries:i>-1?[...n[e].queries.slice(0,i),...n[e].queries.slice(i+1)]:[...n[e].queries]}}},b=e=>"queries"in e},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(22);const i=n.n(a)()("x-pack/security_solution/groups")("UPDATE_GROUPS")},,function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"e",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.timelines.pageTitle",{defaultMessage:"Timelines"}),r=a.i18n.translate("xpack.securitySolution.timelines.allTimelines.panelTitle",{defaultMessage:"All timelines"}),o=a.i18n.translate("xpack.securitySolution.timelines.allTimelines.importTimelineTitle",{defaultMessage:"Import"}),s=a.i18n.translate("xpack.securitySolution.timelines.allTimelines.errorFetchingTimelinesTitle",{defaultMessage:"Failed to query all timelines data"}),l=a.i18n.translate("xpack.securitySolution.timelines.updateTimelineErrorTitle",{defaultMessage:"Timeline error"}),c=a.i18n.translate("xpack.securitySolution.timelines.updateTimelineErrorText",{defaultMessage:"Something went wrong"})},function(e,t,n){"use strict";n.d(t,"h",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"c",(function(){return b})),n.d(t,"e",(function(){return y})),n.d(t,"a",(function(){return h})),n.d(t,"i",(function(){return v})),n.d(t,"I",(function(){return E})),n.d(t,"w",(function(){return x})),n.d(t,"H",(function(){return j})),n.d(t,"d",(function(){return S})),n.d(t,"g",(function(){return k})),n.d(t,"z",(function(){return w})),n.d(t,"J",(function(){return I})),n.d(t,"x",(function(){return T})),n.d(t,"F",(function(){return C})),n.d(t,"G",(function(){return M})),n.d(t,"B",(function(){return F})),n.d(t,"C",(function(){return P})),n.d(t,"D",(function(){return q})),n.d(t,"E",(function(){return $})),n.d(t,"y",(function(){return V})),n.d(t,"A",(function(){return U})),n.d(t,"k",(function(){return W})),n.d(t,"p",(function(){return Q})),n.d(t,"s",(function(){return Y})),n.d(t,"r",(function(){return K})),n.d(t,"q",(function(){return X})),n.d(t,"v",(function(){return J})),n.d(t,"n",(function(){return Z})),n.d(t,"j",(function(){return ee})),n.d(t,"K",(function(){return te})),n.d(t,"t",(function(){return ne})),n.d(t,"u",(function(){return ae})),n.d(t,"o",(function(){return ie})),n.d(t,"l",(function(){return re})),n.d(t,"m",(function(){return oe})),n.d(t,"f",(function(){return se}));var a=n(42),i=n(47),r=n(150),o=n(118),s=n(106),l=n(387),c=n(133),u=n(286),d=n(176),p=n(302),m=n(434);const f=e=>null!==e,g=({id:e,noteId:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,noteIds:[...a.noteIds,t]}}},b=({id:e,noteId:t,eventId:n,timelineById:i})=>{const r=i[e],o=Object(a.getOr)([],`eventIdToNoteIds.${n}`,r);return{...i,[e]:{...r,eventIdToNoteIds:{...r.eventIdToNoteIds,[n]:Object(a.uniq)([...o,t])}}}},y=({id:e,resolveTimelineConfig:t,timeline:n,timelineById:a})=>{var i;return((e,t,n)=>e===o.c.active&&t.savedObjectId!==n.savedObjectId)(e,a[e],n)&&(p.a.setActivePage(0),p.a.setExpandedDetail({})),{...a,[e]:{...n,filterManager:a[e].filterManager,isLoading:a[e].isLoading,initialized:null!==(i=n.initialized)&&void 0!==i?i:a[e].initialized,resolveTimelineConfig:t,dateRange:n.status===s.k.immutable&&n.timelineType===s.l.template?{start:u.a.toISOString(),end:u.b.toISOString()}:n.dateRange}}},h=({id:e,timelineById:t,timelineType:n,dateRange:a,...r})=>{const o=t[e],{from:u,to:d}=Object(l.a)({from:"",to:""}),p=null!=a?a:{start:u,end:d},m=n===s.l.template?{templateTimelineId:Object(i.v4)(),templateTimelineVersion:1}:{};return{...t,[e]:{id:e,...o||{},...c.b,...r,dateRange:p,savedObjectId:null,version:null,isSaving:!1,isLoading:!1,timelineType:n,...m}}},v=({id:e,eventId:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,pinnedEventIds:{...a.pinnedEventIds,[t]:!0}}}},E=({id:e,show:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,show:t}}},x=({id:e,graphEventId:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,graphEventId:t,...""===t&&e===o.c.active?{activeTab:a.prevActiveTab,prevActiveTab:a.activeTab}:{}}}},j=({id:e,sessionViewConfig:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,sessionViewConfig:t}}},O=(e,t)=>e.field===t.field&&e.value===t.value&&e.operator===t.operator,S=({id:e,providers:t,timelineById:n})=>{const i=n[e];return""!==i.highlightedDropAndProviderId?((e,t,n,i)=>{if(0===t.length)return i;let r=Object(a.cloneDeep)(n.dataProviders);return t.forEach((e=>{const t=r.findIndex((e=>e.id===n.highlightedDropAndProviderId)),o=r[t],s=o.and.findIndex((t=>t.id===e.id)),{and:l,...c}=e;if(Object(a.isEqualWith)(O,o.queryMatch,c.queryMatch)||-1===s&&o.and.filter((e=>Object(a.isEqualWith)(O,e.queryMatch,c.queryMatch))).length>0)return i;r=[...r.slice(0,t),{...r[t],and:s>-1?[...o.and.slice(0,s),c,...o.and.slice(s+1)]:[...o.and,c]},...r.slice(t+1)]})),{...i,[e]:{...n,dataProviders:r}}})(e,t,i,n):((e,t,n,i)=>{if(0===t.length)return i;let r=Object(a.cloneDeep)(n.dataProviders);return t.forEach((e=>{const t=r.findIndex((t=>t.id===e.id));t>-1&&!Object(a.isEmpty)(r[t].and)&&(e.id=`${e.id}-${r.filter((t=>t.id===e.id)).length}`),r=t>-1&&Object(a.isEmpty)(r[t].and)?[...r.slice(0,t),e,...r.slice(t+1)]:[...r,e]})),{...i,[e]:{...n,dataProviders:r}}})(e,t,i,n)},k=({id:e,filterQuery:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,kqlQuery:{...a.kqlQuery,filterQuery:t}}}},w=({id:e,kqlMode:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,kqlMode:t}}},I=({description:e,id:t,title:n,timelineById:a})=>{const i=a[t];return{...a,[t]:{...i,description:e.trim(),title:n.trim()}}},T=({id:e,isFavorite:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,isFavorite:t}}},C=({id:e,providers:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,dataProviders:t}}},M=({id:e,start:t,end:n,timelineById:a})=>{const i=a[e];return{...a,[e]:{...i,dateRange:{start:t,end:n}}}},A=(e,t,n,a)=>a.dataProviders.map((a=>a.id===n?{...a,and:a.and.map((n=>n.id===e?{...n,enabled:t}:n))}:a)),_=(e,t,n)=>n.dataProviders.map((n=>n.id===t?{...n,enabled:e}:n)),F=({id:e,providerId:t,enabled:n,timelineById:a,andProviderId:i})=>{const r=a[e];return{...a,[e]:{...r,dataProviders:i?A(i,n,t,r):_(n,t,r)}}},D=(e,t,n,a)=>a.dataProviders.map((a=>a.id===n?{...a,and:a.and.map((n=>n.id===e?{...n,excluded:t}:n))}:a)),N=(e,t,n)=>n.dataProviders.map((n=>n.id===t?{...n,excluded:e}:n)),P=({id:e,providerId:t,excluded:n,timelineById:a,andProviderId:i})=>{const r=a[e];return{...a,[e]:{...r,dataProviders:i?D(i,n,t,r):N(n,t,r)}}},R=({excluded:e,field:t,operator:n,providerId:a,timeline:i,value:r})=>i.dataProviders.map((i=>i.id===a?{...i,excluded:e,queryMatch:{...i.queryMatch,field:t,displayField:t,value:r,displayValue:Object(m.d)(r),operator:n}}:i)),L=({andProviderId:e,excluded:t,field:n,operator:a,providerId:i,timeline:r,value:o})=>r.dataProviders.map((r=>r.id===i?{...r,and:r.and.map((i=>i.id===e?{...i,excluded:t,queryMatch:{...i.queryMatch,field:n,displayField:n,value:o,displayValue:Object(m.d)(o),operator:a}}:i))}:r)),q=({andProviderId:e,excluded:t,field:n,id:a,operator:i,providerId:r,timelineById:o,value:s})=>{const l=o[a];return{...o,[a]:{...l,dataProviders:e?L({andProviderId:e,excluded:t,field:n,operator:i,providerId:r,timeline:l,value:s}):R({excluded:t,field:n,operator:i,providerId:r,timeline:l,value:s})}}},B=(e,t,n,a)=>a.dataProviders.map((a=>a.id===n?{...a,and:a.and.map((n=>n.id===e?{...n,type:t,name:t===r.a.template?`${n.queryMatch.field}`:"",queryMatch:{...n.queryMatch,displayField:void 0,displayValue:void 0,value:t===r.a.template?`{${n.queryMatch.field}}`:"",operator:t===r.a.template?r.d:r.b}}:n))}:a)),z=(e,t,n)=>n.dataProviders.map((n=>n.id===t?{...n,type:e,name:e===r.a.template?`${n.queryMatch.field}`:"",queryMatch:{...n.queryMatch,displayField:void 0,displayValue:void 0,value:e===r.a.template?`{${n.queryMatch.field}}`:"",operator:e===r.a.template?r.d:r.b}}:n)),$=({andProviderId:e,id:t,providerId:n,type:a,timelineById:i})=>{const o=i[t];return o.timelineType!==s.l.template&&a===r.a.template?i:{...i,[t]:{...o,dataProviders:e?B(e,a,n,o):z(a,n,o)}}},V=({id:e,itemsPerPage:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,itemsPerPage:t}}},U=({id:e,itemsPerPageOptions:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,itemsPerPageOptions:t}}},G=(e,t,n)=>{var a,i,r,o;const s=n.dataProviders.findIndex((e=>e.id===t)),l=null===(a=n.dataProviders[s])||void 0===a?void 0:a.and.findIndex((t=>t.id===e));return[...n.dataProviders.slice(0,s),{...n.dataProviders[s],and:null!==(i=n.dataProviders[s])&&void 0!==i&&i.and?[...null===(r=n.dataProviders[s])||void 0===r?void 0:r.and.slice(0,l),...null===(o=n.dataProviders[s])||void 0===o?void 0:o.and.slice(l+1)]:[]},...n.dataProviders.slice(s+1)]},H=(e,t)=>{var n;const a=t.dataProviders.findIndex((t=>t.id===e));return[...t.dataProviders.slice(0,a),...null!==(n=t.dataProviders[a])&&void 0!==n&&n.and.length?[{...t.dataProviders[a].and.slice(0,1)[0],and:[...t.dataProviders[a].and.slice(1)]}]:[],...t.dataProviders.slice(a+1)]},W=({id:e,providerId:t,timelineById:n,andProviderId:a})=>{const i=n[e];return{...n,[e]:{...i,dataProviders:a?G(a,t,i):H(t,i)}}},Q=({id:e,eventId:t,timelineById:n})=>{const i=n[e];return{...n,[e]:{...i,pinnedEventIds:Object(a.omit)(t,i.pinnedEventIds)}}},Y=({id:e,savedQueryId:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,savedQueryId:t}}},K=({id:e,filters:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,filters:t}}},X=({id:e,excludedRowRendererIds:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,excludedRowRendererIds:t}}},J=e=>{var t;const{tabType:n,id:a,...i}=e,r=new Set(["eventDetail","hostDetail","networkDetail","userDetail"]),o=null!=n?n:"query",s={params:i.params?{...i.params}:{},panelView:i.panelView};return{[o]:r.has(null!==(t=i.panelView)&&void 0!==t?t:"")?s:{}}},Z=({id:e,eventIds:t,isLoading:n,timelineById:i})=>{const r=i[e],o=n?Object(a.union)(r.loadingEventIds,t):r.loadingEventIds.filter((e=>!t.includes(e)));return{...i,[e]:{...r,loadingEventIds:o}}},ee=({id:e,columnId:t,timelineById:n})=>{const a=n[e],i=a.columns.filter((e=>e.id!==t));return{...n,[e]:{...a,columns:i}}},te=({column:e,id:t,index:n,timelineById:a})=>{const i=a[t];if(-1!==i.columns.findIndex((t=>t.id===e.id))){const r=i.columns.filter((t=>t.id!==e.id));return r.splice(n,0,e),{...a,[t]:{...i,columns:r}}}const r=[...i.columns];return r.splice(n,0,e),{...a,[t]:{...i,columns:r}}},ne=({id:e,columns:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,columns:t}}},ae=({id:e,sort:t,timelineById:n})=>{const a=n[e];return{...n,[e]:{...a,sort:t}}},ie=({id:e,eventIds:t,isSelectAllChecked:n=!1,isSelected:i,timelineById:r})=>{const o=r[e],s=i?{...o.selectedEventIds,...t}:Object(a.omit)(Object.keys(t),o.selectedEventIds);return{...r,[e]:{...o,selectedEventIds:s,isSelectAllChecked:n}}},re=({id:e,eventIds:t,isDeleted:n,timelineById:i})=>{const r=i[e],o=n?Object(a.union)(r.deletedEventIds,t):r.deletedEventIds.filter((e=>!t.includes(e))),s=Object.fromEntries(Object.entries(r.selectedEventIds).filter((([e])=>!o.includes(e)))),l=Object.keys(s).length>0&&r.isSelectAllChecked;return{...i,[e]:{...r,deletedEventIds:o,selectedEventIds:s,isSelectAllChecked:l}}},oe=({id:e,timelineById:t,timelineSettingsProps:n})=>{var i;const r=t[e];return null!=r&&r.initialized?t:{...t,[e]:{...c.b,...Object(c.a)(e),...r,...n,...!r||Object(a.isEmpty)(r.columns)&&!Object(a.isEmpty)(n.defaultColumns)?{columns:n.defaultColumns}:{},sort:null!==(i=n.sort)&&void 0!==i?i:c.b.sort,loadingEventIds:c.b.loadingEventIds,initialized:!0}}},se=({id:e,columnId:t,delta:n,timelineById:a})=>{var i;const r=a[e],o=r.columns.findIndex((e=>e.id===t));if(-1===o)return{...a,[e]:{...r}};const s=(null!==(i=r.columns[o].initialWidth)&&void 0!==i?i:d.a)+n,l=Math.max(d.c,s),c={...r.columns[o],initialWidth:l},u=[...r.columns.slice(0,o),c,...r.columns.slice(o+1)];return{...a,[e]:{...r,columns:u}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(42),i=n(50),r=n.n(i);const o=e=>{if(Object(a.isString)(e)&&""!==e.trim()){const t=r()(new Date(e));return t.isValid()||isNaN(+e)?t:r()(new Date(+e))}return r()(new Date(e))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(42);function i(e){return Object(a.isString)(e)?r(e):`${e}`}function r(e){return`"${function(e=""){return o(e)}(e)}"`}const o=Object(a.flow)((e=>e.replace(/["]/g,"\\$&")),(e=>e.replace(/\t/g,"\\t").replace(/\r/g,"\\r").replace(/\n/g,"\\n")))},function(e,t,n){"use strict";n.d(t,"b",(function(){return p})),n.d(t,"a",(function(){return m}));var a=n(42),i=n(119),r=n(4);n(102);const o="securityDataTable",s="timelines",l={},c=e=>e?Object.keys(e).reduce(((t,n)=>{const a=e[n];return{...t,[n]:{defaultColumns:a.defaultColumns,dataViewId:a.dataViewId,excludedRowRendererIds:a.excludedRowRendererIds,filters:a.filters,indexNames:a.indexNames,loadingEventIds:a.loadingEventIds,isSelectAllChecked:a.isSelectAllChecked,itemsPerPage:a.itemsPerPage,itemsPerPageOptions:a.itemsPerPageOptions,showCheckboxes:a.showCheckboxes,graphEventId:a.graphEventId,sessionViewConfig:a.sessionViewConfig,selectAll:a.selectAll,id:a.id,title:a.title,initialized:a.initialized,updated:a.updated,sort:a.sort,selectedEventIds:a.selectedEventIds,deletedEventIds:a.deletedEventIds,expandedDetail:a.expandedDetail,totalCount:a.totalCount||0,viewMode:r.Jc.gridView,additionalFilters:{showBuildingBlockAlerts:!1,showOnlyThreatIndicatorAlerts:!1},...Array.isArray(a.columns)?{columns:a.columns.map(u).map(d)}:{}}}}),{}):l,u=e=>({...e,...Number.isInteger(e.width)&&!Number.isInteger(e.initialWidth)?{initialWidth:e.width}:e.initialWidth?{initialWidth:e.initialWidth}:{}}),d=e=>({...e,...Object(a.isEmpty)(e.label)||null!=e.displayAsText?e.displayAsText?{displayAsText:e.displayAsText}:{}:{displayAsText:e.label}}),p=(e,t)=>{let n=e.get(o);const a=e.get(s);if(!n){if(!a)return l;n=c(a)}return((e,t)=>{const n={[i.e.alertsOnAlertsPage]:`detection-engine-alert-table-${r.e.ALERTS_PAGE}-gridView`,[i.e.alertsOnRuleDetailsPage]:`detection-engine-alert-table-${r.e.RULE_DETAILS}-gridView`};Object.keys(t).filter((t=>t in n&&!e.get(n[t]))).map((e=>({[n[e]]:{columns:t[e].columns,sort:t[e].sort.map((e=>({[e.columnId]:{order:e.sortDirection}}))),visibleColumns:t[e].columns}}))).forEach((t=>Object.keys(t).forEach((n=>{e.set(n,t[n])}))))})(e,n),(e=>{[`detection-engine-alert-table-${r.e.ALERTS_PAGE}-gridView`,`detection-engine-alert-table-${r.e.RULE_DETAILS}-gridView`].forEach((t=>{const n=e.get(t);if(n&&"visibleColumns"in n){const a=n.visibleColumns;if(a.every((e=>"string"==typeof e)))return;const i=a.map((e=>"string"==typeof e?e:e.id)).filter(Boolean);e.set(t,{...n,visibleColumns:i})}}))})(e),t.reduce(((e,t)=>{const a=n[t];return a?{...e,[t]:{...a,...null==a.sort||Array.isArray(a.sort)?{}:{sort:[a.sort]}}}:{...e}}),{})},m=(e,t,n)=>{const a=f(n),i=(e=>{let t=e.get(o);const n=e.get(s);if(!t){if(!n)return l;t=c(n)}return t})(e);e.set(o,{...i,[t]:a})},f=e=>{const{isLoading:t,loadingText:n,queryFields:a,unit:i,...r}=e;return r}},function(e,t,n){e.exports=n(33)(811)},function(e,t,n){e.exports=n(33)(1608)},function(e,t,n){e.exports=n(33)(3344)},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return g}));var a=n(40),i=n(50),r=n.n(i),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(47),d=n(551),p=n(168);d.f;const m=c.a.h3.withConfig({displayName:"TitleText",componentId:"sc-7x1zh4-0"})(["margin:0 5px;cursor:default;user-select:none;"]);m.displayName="TitleText",s.a.memo((({noteIds:e})=>s.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(a.EuiIcon,{color:"text",size:"l",type:"editorComment"})),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(a.EuiTitle,{size:"s"},s.a.createElement(m,null,d.e))),s.a.createElement(a.EuiFlexItem,{grow:!1},s.a.createElement(p.c,{color:"hollow"},e.length))))).displayName="NotesCount";const f=({newNote:e,user:t})=>({created:r.a.utc().toDate(),id:Object(u.v4)(),lastEdit:null,note:e,saveObjectId:null,user:t,version:null}),g=({associateNote:e,newNote:t,updateNewNote:n,updateNote:a,user:i})=>{const r=f({newNote:t,user:i});a(r),e(r.id),n("")}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a={BULK_QUERY_STATUS_UPDATE:"Data table bulkQueryStatusUpdate",BULK_STATUS_UPDATE:"Data table bulkStatusUpdate",STATUS_UPDATE:"Data table statusUpdate"}},,function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"f",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"c",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(5);const i="timeline",r=a.i18n.translate("xpack.securitySolution.actions.cellValue.addToTimeline.displayName",{defaultMessage:"Add to timeline"}),o=a.i18n.translate("xpack.securitySolution.actions.cellValue.addToNewTimeline.displayName",{defaultMessage:"Investigate in timeline"}),s=e=>a.i18n.translate("xpack.securitySolution.actions.addToTimeline.addedFieldMessage",{values:{fieldOrValue:e},defaultMessage:"Added {fieldOrValue} to timeline"}),l=a.i18n.translate("xpack.securitySolution.actions.cellValue.addToTimeline.warningTitle",{defaultMessage:"Unable to add to timeline"}),c=a.i18n.translate("xpack.securitySolution.actions.cellValue.addToTimeline.warningMessage",{defaultMessage:"Filter received is empty or cannot be added to timeline"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return p}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(497);const c="exit-full-screen",u=s()(a.EuiButton).withConfig({displayName:"StyledEuiButton",componentId:"sc-ve6et8-0"})(["margin:",";"],(({theme:e})=>e.eui.euiSizeS)),d=({fullScreen:e,setFullScreen:t})=>{const n=Object(i.useCallback)((()=>{t(!1)}),[t]),o=Object(i.useCallback)((e=>{"Escape"===e.key&&(e.preventDefault(),n())}),[n]);return e?r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiWindowEvent,{event:"keydown",handler:o}),r.a.createElement(u,{className:c,"data-test-subj":"exit-full-screen",fullWidth:!1,iconType:"fullScreen",isDisabled:!e,onClick:n},l.a)):null};d.displayName="ExitFullScreenComponent";const p=r.a.memo(d)},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(294);const c=s.a.div.withConfig({displayName:"PlaceHolder",componentId:"sc-pcodem-0"})(["padding:",";"],(e=>e.theme.eui.euiSizeS)),u=({count:e,onClick:t})=>{const n=Object(i.useCallback)((()=>t&&t()),[t]);return e?t?r.a.createElement(a.EuiLink,{onClick:n},r.a.createElement("b",null,r.a.createElement(l.a,{count:e}))):r.a.createElement("b",null,r.a.createElement(l.a,{count:e})):r.a.createElement(c,null)};u.displayName="ChartLabelComponent";const d=r.a.memo(u)},function(e,t,n){"use strict";n.d(t,"b",(function(){return y})),n.d(t,"a",(function(){return h}));var a=n(40),i=n(2),r=n.n(i),o=n(57),s=n(8),l=n(41),c=n.n(l),u=n(297),d=n(424),p=n(725);const m={chartMargins:{top:0,bottom:0,left:0,right:0},partition:{idealFontSizeJump:1.1,outerSizeRatio:1,emptySizeRatio:.8,circlePadding:4}},f=c()(a.EuiFlexGroup).withConfig({displayName:"DonutTextWrapper",componentId:"sc-g5h38u-0"})(["top:",";width:100%;max-width:77px;position:absolute;z-index:1;",""],(({$isChartEmbeddablesEnabled:e,$dataExists:t})=>e&&!t?"66%":"34%;"),(({className:e,$donutTextWrapperStyles:t})=>e&&t?`&.${e} {${t}}`:"")),g=c()(a.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItem",componentId:"sc-g5h38u-1"})(["position:relative;align-items:center;"]),b=({children:e,dataExists:t,donutTextWrapperClassName:n,donutTextWrapperStyles:o,isChartEmbeddablesEnabled:s,label:l,title:c})=>{const{euiTheme:u}=Object(a.useEuiTheme)(),d=Object(i.useMemo)((()=>({color:u.colors.disabled})),[u.colors.disabled]),p=s?void 0:"eui-textTruncate";return r.a.createElement(a.EuiFlexGroup,{alignItems:"center",justifyContent:"center",responsive:!1,gutterSize:"l","data-test-subj":"donut-chart"},r.a.createElement(g,{grow:s},r.a.createElement(f,{$dataExists:t,$donutTextWrapperStyles:o,$isChartEmbeddablesEnabled:s,alignItems:"center",className:n,direction:"column",gutterSize:"none",justifyContent:"center"},r.a.createElement(a.EuiFlexItem,null,c),l&&r.a.createElement(a.EuiFlexItem,{className:p},r.a.createElement(a.EuiToolTip,{content:l},r.a.createElement(a.EuiText,{className:p,size:"s",style:t?void 0:d},l)))),e))},y=r.a.memo(b),h=({data:e,fillColor:t,height:n=90,label:l,legendItems:c,onPartitionClick:f,title:g,totalCount:b})=>{const{baseTheme:h,theme:v}=Object(u.i)(),E=Object(i.useCallback)((e=>{if(f){var t;const n=e.flat(2),a=n.length>0&&"groupByRollup"in n[0]&&null!=(null===(t=n[0])||void 0===t?void 0:t.groupByRollup)?`${n[0].groupByRollup}`:"";Object(s.isEmpty)(a.trim())||f(a.toLowerCase())}}),[f]);return r.a.createElement(y,{dataExists:null!=e&&e.length>0,label:l,title:g,isChartEmbeddablesEnabled:!1},r.a.createElement(r.a.Fragment,null,null==e||null==b||0===b?r.a.createElement(p.a,{size:n}):r.a.createElement(o.Chart,{size:n},r.a.createElement(o.Settings,{theme:[m,v],baseTheme:h,onElementClick:E}),r.a.createElement(o.Partition,{id:"donut-chart",data:e,layout:o.PartitionLayout.sunburst,valueAccessor:e=>e.value,valueFormatter:e=>`${Object(o.defaultPartitionValueFormatter)(e)}`,layers:[{groupByRollup:e=>{var t;return null!==(t=e.label)&&void 0!==t?t:e.key},nodeLabel:e=>e,shape:{fillColor:t}}]})),c&&(null==c?void 0:c.length)>0&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(d.a,{legendItems:c,height:n}))))}},function(e,t,n){"use strict";n.d(t,"b",(function(){return l})),n.d(t,"a",(function(){return p}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40);const l="#FAFBFD",c=o.a.div.withConfig({displayName:"BigRing",componentId:"sc-1m6sj8k-0"})(["border-radius:50%;",""],(({size:e})=>`height: ${e}px;\n    width: ${e}px;\n    background-color: ${l};\n    text-align: center;\n    line-height: ${e}px;`)),u=o.a.div.withConfig({displayName:"SmallRing",componentId:"sc-1m6sj8k-1"})(["border-radius:50%;",""],(({size:e})=>`\n    height: ${e}px;\n    width: ${e}px;\n    background-color: ${Object(s.useEuiBackgroundColor)("plain")};\n    display: inline-block;\n    vertical-align: middle;`)),d=({size:e=90,donutWidth:t=20})=>e-t>0?i.a.createElement(c,{size:e,"data-test-subj":"empty-donut"},i.a.createElement(u,{size:e-t,"data-test-subj":"empty-donut-small"})):null,p=i.a.memo(d)},function(e,t,n){"use strict";n.d(t,"a",(function(){return R}));var a=n(104),i=n.n(a),r=n(40),o=n(2),s=n.n(o),l=n(57),c=n(42),u=n(343),d=n.n(u),p=n(47),m=n(41),f=n.n(m),g=n(130),b=n.n(g),y=n(153),h=n(102),v=n(456),E=n(293),x=n(228),j=n(327),O=n(917),S=n(297),k=n(424),w=n(390),I=n(311),T=n(211);const C=f()(r.EuiFlexItem).withConfig({displayName:"LegendFlexItem",componentId:"sc-1257qcd-0"})(["overview:hidden;"]),M=e=>null!=e&&!!Object(c.get)("value.length",e)&&(e.value||[]).every((({x:e,y:t})=>Object(c.isNumber)(t)&&t>=0)),A=["y"],_=[e=>Object(x.a)(e.g)?e.g:j.c],F=({data:e,forceHiddenLegend:t=!1,yAxisTitle:n,...a})=>{const r=Object(S.i)(),u=Object(h.m)(),p=Object(c.get)("configs.axis.xTickFormatter",a),m=Object(c.get)("configs.axis.yTickFormatter",a),f=Object(c.getOr)(0,"configs.axis.tickSize",a),g=`stat-items-barchart-${e[0].key}-x`,b=`stat-items-barchart-${e[0].key}-y`,y={...S.e,...d()(Object(c.get)("configs.settings",a),r)},v=Object(o.useMemo)((()=>d()({tickLine:{size:f}},Object(c.getOr)({},"configs.axis.bottom.style",a))),[a,f]),E=Object(o.useMemo)((()=>d()({tickLine:{size:f}},Object(c.getOr)({},"configs.axis.left.style",a))),[a,f]),x=Object(c.get)("configs.axis.bottom.labelFormat",a);return a.width&&a.height?s.a.createElement(l.Chart,null,s.a.createElement(l.Settings,i()({},y,{showLegend:y.showLegend&&!t})),e.map((e=>{var t;const n=e.key;return M(e)?s.a.createElement(l.BarSeries,{id:n,key:n,name:e.key,xScaleType:Object(c.getOr)(l.ScaleType.Linear,"configs.series.xScaleType",a),yScaleType:Object(c.getOr)(l.ScaleType.Linear,"configs.series.yScaleType",a),xAccessor:"x",yAccessors:A,timeZone:u,splitSeriesAccessors:_,data:null!==(t=e.value)&&void 0!==t?t:[],stackAccessors:Object(c.get)("configs.series.stackAccessors",a),color:e.color?e.color:void 0,barSeriesStyle:Object(c.get)("configs.series.barSeriesStyle",a)}):null})),s.a.createElement(l.Axis,{id:g,position:l.Position.Bottom,showOverlappingTicks:!1,style:v,tickFormat:p,labelFormat:x}),s.a.createElement(l.Axis,{id:b,position:l.Position.Left,style:E,tickFormat:m,title:n})):null};F.displayName="BarChartBaseComponent";const D=s.a.memo(F);D.displayName="BarChartBase";const N=[],P=({barChart:e,configs:t,stackByField:n,scopeId:a,visualizationActionsOptions:l})=>{const{ref:u,width:d,height:m}=Object(E.b)(),f=Object(o.useMemo)((()=>null!=e&&null!=n?e.map(((e,t)=>{var i;return{color:null!==(i=e.color)&&void 0!==i?i:t<v.a.length?v.a[t]:void 0,dataProviderId:Object(y.i)(`draggable-legend-item-${Object(p.v4)()}-${n}-${e.key}`),scopeId:a,field:n,value:e.key}})):N),[e,n,a]),g=Object(c.get)("yAxisTitle",t),b=Object(c.get)("customHeight",t),h=Object(c.get)("customWidth",t),x=Object(S.g)(b,m),j=Object(S.h)(h,d),A=Object(o.useMemo)((()=>{return t=e,Array.isArray(t)&&!Object(S.f)(t)&&t.some(M);var t}),[e]);return s.a.createElement(S.d,null,s.a.createElement(I.a,{targetClassNames:[T.a]},A&&e&&s.a.createElement(S.a,{gutterSize:"none"},s.a.createElement(r.EuiFlexItem,{grow:!0},s.a.createElement(S.c,{ref:u,height:x},s.a.createElement(D,{configs:t,data:e,yAxisTitle:g,forceHiddenLegend:null!=n,height:x,width:x}))),s.a.createElement(C,{grow:!1},s.a.createElement(k.a,{legendItems:f,height:m}))),!A&&s.a.createElement(O.a,{height:x,width:j,data:e}),null!=l&&s.a.createElement(w.a,i()({},l,{className:"viz-actions"}))))},R=s.a.memo(P,((e,t)=>e.stackByField===t.stackByField&&e.scopeId===t.scopeId&&b()(e.configs,t.configs)&&b()(e.barChart,t.barChart)))},,,function(e,t,n){"use strict";n.d(t,"T",(function(){return i})),n.d(t,"n",(function(){return r})),n.d(t,"L",(function(){return o})),n.d(t,"p",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return c})),n.d(t,"ab",(function(){return u})),n.d(t,"M",(function(){return d})),n.d(t,"u",(function(){return p})),n.d(t,"s",(function(){return m})),n.d(t,"t",(function(){return f})),n.d(t,"r",(function(){return g})),n.d(t,"q",(function(){return b})),n.d(t,"cb",(function(){return y})),n.d(t,"Q",(function(){return h})),n.d(t,"bb",(function(){return v})),n.d(t,"O",(function(){return E})),n.d(t,"P",(function(){return x})),n.d(t,"eb",(function(){return j})),n.d(t,"v",(function(){return O})),n.d(t,"R",(function(){return S})),n.d(t,"X",(function(){return k})),n.d(t,"Z",(function(){return w})),n.d(t,"Y",(function(){return I})),n.d(t,"G",(function(){return T})),n.d(t,"H",(function(){return C})),n.d(t,"F",(function(){return M})),n.d(t,"J",(function(){return A})),n.d(t,"I",(function(){return _})),n.d(t,"E",(function(){return F})),n.d(t,"N",(function(){return D})),n.d(t,"c",(function(){return N})),n.d(t,"K",(function(){return P})),n.d(t,"S",(function(){return R})),n.d(t,"d",(function(){return L})),n.d(t,"m",(function(){return q})),n.d(t,"o",(function(){return B})),n.d(t,"g",(function(){return z})),n.d(t,"f",(function(){return $})),n.d(t,"l",(function(){return V})),n.d(t,"j",(function(){return U})),n.d(t,"k",(function(){return G})),n.d(t,"h",(function(){return H})),n.d(t,"i",(function(){return W})),n.d(t,"e",(function(){return Q})),n.d(t,"db",(function(){return Y})),n.d(t,"W",(function(){return K})),n.d(t,"U",(function(){return X})),n.d(t,"V",(function(){return J})),n.d(t,"w",(function(){return Z})),n.d(t,"C",(function(){return ee})),n.d(t,"A",(function(){return te})),n.d(t,"z",(function(){return ne})),n.d(t,"B",(function(){return ae})),n.d(t,"D",(function(){return ie})),n.d(t,"x",(function(){return re})),n.d(t,"y",(function(){return oe}));var a=n(5);a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.idTitle",{defaultMessage:"List ID"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.listName",{defaultMessage:"Name"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.actionsTitle",{defaultMessage:"Actions"});const i=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.showingExceptionLists",{values:{totalLists:e},defaultMessage:"Showing {totalLists} {totalLists, plural, =1 {list} other {lists}}"}),r=(a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.rulesAssignedTitle",{defaultMessage:"Rules assigned to"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.dateCreatedTitle",{defaultMessage:"Date created"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.dateUpdatedTitle",{defaultMessage:"Last edited"}),a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.errorFetching",{defaultMessage:"Error fetching exception lists"})),o=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allExceptionLists.filters.noExceptionsTitle",{defaultMessage:"No exception lists found"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allExceptionLists.search.placeholder",{defaultMessage:"Search exception lists"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allExceptions.tableTitle",{defaultMessage:"Shared Exception Lists"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allExceptions.tableSubtitle",{defaultMessage:"To view rule specific exceptions navigate to that rule's details page."}),u=e=>a.i18n.translate("xpack.securitySolution.exceptions.allExceptionsRowPerPage",{defaultMessage:"Rows per page: {rowSize}",values:{rowSize:e}}),d=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.allExceptions.filters.noListsBody",{defaultMessage:"We weren't able to find any exception lists."}),p=e=>a.i18n.translate("xpack.securitySolution.exceptions.list.export_success",{values:{listName:e},defaultMessage:'Exception list "{listName}" exported successfully'}),m=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.exportError",{defaultMessage:"Exception list export error"}),f=e=>a.i18n.translate("xpack.securitySolution.exceptions.list.duplicate_success",{values:{listName:e},defaultMessage:'Exception list "{listName}" duplicated successfully'}),g=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.duplicateError",{defaultMessage:"Exception list duplication error"}),b=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.deleteError",{defaultMessage:"Error occurred deleting exception list"}),y=e=>a.i18n.translate("xpack.securitySolution.exceptions.referenceModalSuccessDescription",{defaultMessage:"Exception list - {listId} - deleted successfully.",values:{listId:e}}),h=a.i18n.translate("xpack.securitySolution.exceptions.referenceModalTitle",{defaultMessage:"Remove exception list"}),v=e=>a.i18n.translate("xpack.securitySolution.exceptions.referenceModalDefaultDescription",{defaultMessage:"Are you sure you wish to DELETE exception list with the name {listName}?",values:{listName:e}}),E=a.i18n.translate("xpack.securitySolution.exceptions.referenceModalCancelButton",{defaultMessage:"Cancel"}),x=a.i18n.translate("xpack.securitySolution.exceptions.referenceModalDeleteButton",{defaultMessage:"Remove exception list"}),j=e=>a.i18n.translate("xpack.securitySolution.exceptions.referenceModalDescription",{defaultMessage:"This exception list is associated with ({referenceCount}) {referenceCount, plural, =1 {rule} other {rules}}. Removing this exception list will also remove its reference from the associated rules.",values:{referenceCount:e}}),O=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.searchPlaceholder",{defaultMessage:"Search by name or list_id:id"}),S=a.i18n.translate("xpack.securitySolution.detectionEngine.rules.all.exceptions.refresh",{defaultMessage:"Refresh"}),k=a.i18n.translate("xpack.securitySolution.exceptions.exceptionListsImportButton",{defaultMessage:"Import list"}),w=a.i18n.translate("xpack.securitySolution.lists.exceptionListImportSuccessTitle",{defaultMessage:"Exception list imported"}),I=a.i18n.translate("xpack.securitySolution.lists.exceptionListUploadError",{defaultMessage:"There was an error uploading the exception list."}),T=a.i18n.translate("xpack.securitySolution.exceptions.manageExceptions.importExceptionList",{defaultMessage:"Import exception list"}),C=a.i18n.translate("xpack.securitySolution.exceptionsTable.importExceptionListFlyoutHeader",{defaultMessage:"Import shared exception list"}),M=a.i18n.translate("xpack.securitySolution.exceptionsTable.importExceptionListFlyoutBody",{defaultMessage:"Select shared exception lists to import"}),A=a.i18n.translate("xpack.securitySolution.exceptionsTable.importExceptionListWarning",{defaultMessage:"We found a pre-existing list with that id"}),_=a.i18n.translate("xpack.securitySolution.exceptionsTable.importExceptionListOverwrite",{defaultMessage:"Overwrite the existing list"}),F=a.i18n.translate("xpack.securitySolution.exceptionsTable.importExceptionListAsNewList",{defaultMessage:"Create new list"}),D=a.i18n.translate("xpack.securitySolution.exceptions.badge.readOnly.tooltip",{defaultMessage:"Unable to create, edit or delete exceptions"}),N=a.i18n.translate("xpack.securitySolution.exceptions.exceptionListsCloseImportFlyout",{defaultMessage:"Close"}),P=a.i18n.translate("xpack.securitySolution.exceptions.exceptionListsFilePickerPrompt",{defaultMessage:"Select or drag and drop multiple files"}),R=a.i18n.translate("xpack.securitySolution.exceptionsTable.rulesCountLabel",{defaultMessage:"Rules"}),L=a.i18n.translate("xpack.securitySolution.exceptionsTable.createdBy",{defaultMessage:"Created By"}),q=a.i18n.translate("xpack.securitySolution.exceptionsTable.createdAt",{defaultMessage:"Date created"}),B=a.i18n.translate("xpack.securitySolution.exceptionsTable.exceptionsCountLabel",{defaultMessage:"Exceptions"}),z=a.i18n.translate("xpack.securitySolution.exceptions.manageExceptions.createSharedListButton",{defaultMessage:"Create shared list"}),$=a.i18n.translate("xpack.securitySolution.exceptions.manageExceptions.createItemButton",{defaultMessage:"Create exception item"}),V=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListTitle",{defaultMessage:"Create shared exception list"}),U=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListFlyoutNameField",{defaultMessage:"Shared exception list name"}),G=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListFlyoutNameFieldPlaceholder",{defaultMessage:"New exception list"}),H=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListFlyoutDescription",{defaultMessage:"Description (optional)"}),W=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListFlyoutDescriptionPlaceholder",{defaultMessage:"New exception list description"}),Q=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListFlyoutCreateButton",{defaultMessage:"Create shared exception list"}),Y=e=>a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListSuccessDescription",{defaultMessage:"List with name {listName} was created!",values:{listName:e}}),K=a.i18n.translate("xpack.securitySolution.exceptions.createSharedExceptionListSuccessTitle",{defaultMessage:"Created list"}),X=a.i18n.translate("xpack.securitySolution.exceptions.sortBy",{defaultMessage:"Sort by:"}),J=a.i18n.translate("xpack.securitySolution.exceptions.sortByCreateAt",{defaultMessage:"Created At"}),Z=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalCancelButton",{defaultMessage:"Cancel"}),ee=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalExportTitle",{defaultMessage:"Export exception list?"}),te=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalDuplicateTitle",{defaultMessage:"Duplicate exception list?"}),ne=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalIncludeDuplicateDescription",{defaultMessage:"You’re duplicating an exception list. Switch the toggle off to exclude expired exceptions."}),ae=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalIncludeExportDescription",{defaultMessage:"You’re exporting an exception list. Switch the toggle off to exclude expired exceptions."}),ie=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalIncludeSwitchLabel",{defaultMessage:"Include expired exceptions"}),re=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalConfirmDuplicateButton",{defaultMessage:"Duplicate"}),oe=a.i18n.translate("xpack.securitySolution.exceptions.expiredExceptionModalConfirmExportButton",{defaultMessage:"Export"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(42),i=n(176),r=n(190);const o=(e,t)=>e?e.map((e=>{const n=e.id.split("."),i=n.length>1?n[0]:(({browserFields:e,field:t})=>Object(a.has)(`base.fields.${t}`,e)?"base":t)({field:e.id,browserFields:t});return{...e,...Object(a.get)([i,"fields",e.id],t)}})):[],s=(e,t)=>{var n;return{columnHeaderType:r.a,id:e,initialWidth:i.a,...null!==(n=t.find((t=>t.id===e)))&&void 0!==n?n:{}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(102),r=n(245);const o=(e=[])=>{const{getAppUrl:t}=Object(i.c)();return Object(a.useMemo)((()=>e.reduce(((e,n)=>{var a;const i=n.id,o=Object(r.j)(i);return e[i]={href:t({path:o}),children:null!==(a=n.name)&&void 0!==a?a:i,target:"_blank"},e}),{})),[t,e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(45),i=n(2),r=n(8),o=n(290);const s=()=>{const e=Object(a.useLocation)(),t=Object(a.useHistory)(),{toUrlParams:n,urlParams:s}=Object(o.a)();return Object(i.useCallback)(((a,i=!1)=>{t.push({...e,search:n(i?a:Object(r.pickBy)({...s,...a},(e=>void 0!==e)))})}),[s,t,e,n])}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return x})),n.d(t,"b",(function(){return j}));var a=n(40),i=n(2),r=n.n(i),o=n(42),s=n(119),l=n(17),c=n(105),u=n(382),d=n(291),p=n(272),m=n(199),f=n(188),g=n(116),b=n(946),y=n(682),h=n(4),v=n(183),E=n(328);const x=e=>{var t,n,s,l,c,u;const{columnId:g,rowIndex:h,scopeId:v}=e,E=Object(i.useMemo)((()=>g===f.n&&Object(p.c)(v)&&0===h&&!e.isDetails),[g,e.isDetails,h,v]),x=null===(t=e.ecsData)||void 0===t||null===(n=t.kibana)||void 0===n||null===(s=n.alert.suppression)||void 0===s||null===(l=s.docs_count)||void 0===l?void 0:l[0],j=null===(c=Object(o.find)({field:"kibana.alert.suppression.docs_count"},e.data))||void 0===c||null===(u=c.value)||void 0===u?void 0:u[0],O=x?parseInt(x,10):j,S=r.a.createElement(d.a,{isTourAnchor:E,step:m.a.pointToAlertName,tourId:m.b.alertsCases},r.a.createElement(b.a,e));return g===f.n&&O&&O>0?r.a.createElement(a.EuiFlexGroup,{gutterSize:"xs"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"top",content:Object(y.c)(O)},r.a.createElement(a.EuiIcon,{type:"layers"}))),r.a.createElement(a.EuiFlexItem,{grow:!1},S)):S},j=({scopeId:e,tableId:t})=>()=>{var n;const{browserFields:a}=Object(g.d)(e),d=Object(i.useMemo)((()=>Object(v.a)(a)),[a]),p=Object(i.useMemo)((()=>s.j.getTableByIdSelector()),[]),m=Object(l.b)(),f=(null!==(n=Object(c.b)((e=>{var n;return(null!==(n=p(e,t))&&void 0!==n?n:s.q).viewMode})))&&void 0!==n?n:s.q.viewMode)===h.Jc.gridView?Object(E.b)(m):E.a;return Object(i.useCallback)((({columnId:e,colIndex:n,data:i,ecsData:s,eventId:l,header:c,isDetails:p=!1,isDraggable:m=!1,isExpandable:g,isExpanded:b,rowIndex:y,rowRenderers:h,setCellProps:v,linkValues:E,truncate:j=!0})=>{var O;const S=null!=c?c:{id:e,...d[e]},k=i.map((e=>{let t=e;if(["_id","_index"].includes(e.field)){var n;const a=null!==(n=e.value)&&void 0!==n?n:"";t={field:e.field,value:Array.isArray(a)?a:[a]}}return t})),w=f.find((t=>t.id===e)),I=Object(o.getOr)([],null!==(O=null==w?void 0:w.linkField)&&void 0!==O?O:"",s);return r.a.createElement(x,{browserFields:a,columnId:e,data:k,ecsData:s,eventId:l,header:S,isDetails:p,isDraggable:m,isExpandable:g,isExpanded:b,linkValues:null!=E?E:I,rowIndex:y,colIndex:n,rowRenderers:null!=h?h:u.b,setCellProps:v,scopeId:t,truncate:j,asPlainText:!1})}),[d,a,f])}},function(e,t,n){"use strict";var a;n.d(t,"a",(function(){return i})),function(e){e.GROUP_TOGGLED="alerts_table_toggled_",e.GROUPED_ALERTS="alerts_table_group_by_"}(a||(a={}));const i={groupToggled:({isOpen:e,groupingId:t,groupNumber:n})=>`${a.GROUP_TOGGLED}${e?"on":"off"}_${t}_group-${n}`,groupChanged:({groupingId:e,selected:t})=>`${a.GROUPED_ALERTS}${e}_${t}`}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"i",(function(){return o})),n.d(t,"j",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"a",(function(){return u})),n.d(t,"h",(function(){return d})),n.d(t,"g",(function(){return p})),n.d(t,"f",(function(){return m}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.installedTitle",{defaultMessage:"Installed"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.installedTooltip",{defaultMessage:"Integration is installed. Configure an integration policy and ensure Elastic Agents are assigned this policy to ingest compatible events."}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.uninstalledTitle",{defaultMessage:"Not installed"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.uninstalledTooltip",{defaultMessage:"Integration is not installed. Follow the integration link to install and configure the integration."}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.enabledTitle",{defaultMessage:"Installed: enabled"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.enabledTooltip",{defaultMessage:"Integration is installed and an integration policy with the required configuration exists. Ensure Elastic Agents are assigned this policy to ingest compatible events."}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.badgeTitle",{defaultMessage:"integrations"}),d=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.popoverTitle",{values:{integrationsCount:e},defaultMessage:"[{integrationsCount}] Related {integrationsCount, plural, =1 {integration} other {integrations}} available"}),p=e=>a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.popoverDescription",{values:{integrationsCount:e},defaultMessage:"Install and configure {integrationsCount, plural, =1 {the below integration} other {one or more of the below integrations}} to ingest the necessary data for this detection rule:"}),m=(e,t)=>a.i18n.translate("xpack.securitySolution.detectionEngine.relatedIntegrations.popoverDescriptionInstalledVersionTooltip",{values:{installedVersion:e,requiredVersion:t},defaultMessage:"Version mismatch -- please resolve! Installed version `{installedVersion}` when required version `{requiredVersion}`"})},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"c",(function(){return l}));var a=n(238);const i=({group:e,id:t,action_type_id:n,params:a,uuid:i,frequency:r,alerts_filter:o})=>({group:e,id:t,params:a,actionTypeId:n,...o&&{alertsFilter:o},...i&&{uuid:i},...r&&{frequency:r}}),r=({group:e,id:t,actionTypeId:n,params:a,uuid:i,frequency:r,alertsFilter:o})=>({group:e,id:t,params:a,action_type_id:n,...o&&{alerts_filter:o},...i&&{uuid:i},...r&&{frequency:r}}),o=({group:e,id:t,params:n,frequency:a,alertsFilter:i})=>({group:e,id:t,params:n,...i&&{alerts_filter:i},...a&&{frequency:a}}),s=({action_type_id:e,params:t})=>{if(e===a.a.OSQUERY){const{saved_query_id:n,ecs_mapping:a,pack_id:i,...r}=t;return{params:{...r,savedQueryId:n,ecsMapping:a,packId:i},actionTypeId:e}}return{params:t,actionTypeId:e}},l=({actionTypeId:e,params:t})=>{if(e===a.a.OSQUERY){const{savedQueryId:n,ecsMapping:a,packId:i,...r}=t;return{params:{...r,saved_query_id:n,ecs_mapping:a,pack_id:i},action_type_id:e}}return{params:t,action_type_id:e}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"d",(function(){return u})),n.d(t,"e",(function(){return d}));var a=n(43),i=n(112),r=n(600),o=n(262);let s;!function(e){e.Prebuilt="prebuilt",e.Custom="custom"}(s||(s={}));const l=a.partial({searchTerm:a.string,source:Object(i.u)("RuleSource",s),tags:a.array(a.string),enabled:a.boolean,ruleExecutionStatus:o.c}),c=a.partial({field:r.b.props.field,order:r.b.props.order}),u=a.partial({perPage:r.a.props.perPage}),d=a.partial({page:r.a.props.page,perPage:r.a.props.perPage})},function(e,t,n){"use strict";n.d(t,"c",(function(){return d})),n.d(t,"d",(function(){return p})),n.d(t,"b",(function(){return m})),n.d(t,"a",(function(){return f})),n.d(t,"g",(function(){return g})),n.d(t,"f",(function(){return b})),n.d(t,"e",(function(){return y})),n.d(t,"i",(function(){return h})),n.d(t,"h",(function(){return v}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(48),c=n(589);const u=o()(s.EuiHealth).withConfig({displayName:"StyledEuiHealth",componentId:"sc-1rr4lsj-0"})(["line-height:inherit;"]),d=l.euiLightVars.euiColorVis0,p=l.euiLightVars.euiColorVis5,m=l.euiLightVars.euiColorVis7,f=l.euiLightVars.euiColorVis9,g=47,b=73,y=99,h=[{value:"low",inputDisplay:i.a.createElement(u,{color:d},c.i)},{value:"medium",inputDisplay:i.a.createElement(u,{color:p},c.j)},{value:"high",inputDisplay:i.a.createElement(u,{color:m},c.h)},{value:"critical",inputDisplay:i.a.createElement(u,{color:f},c.f)}],v={low:21,medium:g,high:b,critical:y}},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return b}));var a=n(41),i=n.n(a),r=n(2),o=n.n(r),s=n(597),l=n(756),c=n(125),u=n(469),d=n(855);const p=i()(c.c).withConfig({displayName:"StyledForm",componentId:"sc-tp8win-0"})(["max-width:235px !important;"]),m=({isLoading:e,isUpdateView:t=!1,form:n})=>o.a.createElement(o.a.Fragment,null,o.a.createElement(u.a,{addPadding:!t},o.a.createElement(p,{form:n,"data-test-subj":"stepScheduleRule"},o.a.createElement(c.e,{path:"interval",component:l.a,componentProps:{idAria:"detectionEngineStepScheduleRuleInterval",isDisabled:e,dataTestSubj:"detectionEngineStepScheduleRuleInterval",minimumValue:1}}),o.a.createElement(c.e,{path:"from",component:l.a,componentProps:{idAria:"detectionEngineStepScheduleRuleFrom",isDisabled:e,dataTestSubj:"detectionEngineStepScheduleRuleFrom",minimumValue:1}})))),f=Object(r.memo)(m),g=({addPadding:e,defaultValues:t,descriptionColumns:n,isInPanelView:a=!1})=>o.a.createElement(u.a,{addPadding:e},o.a.createElement(s.a,{columns:n,schema:d.a,data:t,isInPanelView:a})),b=Object(r.memo)(g)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n(46),r=n(495),o=n(108),s=n(137);const l=({savedQueryId:e,ruleType:t,onError:n})=>{var l;const c=Object(r.a)(),{addError:u}=Object(o.a)(),d=Object(i.useQuery)(["detectionEngine","rule","savedQuery",e],(async()=>e&&"saved_query"===t?c.getSavedQuery(e):null),{onError:null!=n?n:e=>{u(e,{title:s.Lc})},retry:!1,refetchOnWindowFocus:!1}),p=Object(a.useMemo)((()=>{var e;return d.data?{saved_id:d.data.id,filters:null!==(e=d.data.attributes.filters)&&void 0!==e?e:[],query:d.data.attributes.query,title:d.data.attributes.title}:null}),[d.data]);return{isSavedQueryLoading:!!e&&d.isLoading,savedQueryBar:p,savedQuery:null!==(l=d.data)&&void 0!==l?l:void 0}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(143);const r=({exceptionLists:e})=>{const[t,n]=Object(a.useState)(!0),[r,o]=Object(a.useState)([]),[s,l]=Object(a.useState)({}),c=Object(a.useCallback)((t=>{const n=e.reduce(((e,{id:t,...n})=>(e[t]={...n,id:t,rules:[]},e)),{});return t.reduce(((e,t)=>{const n=t.exceptions_list;return null!=n&&n.length>0&&n.forEach((n=>{const a=e[n.id];null!=a&&(e[n.id]={...a,rules:[...a.rules,t]})})),e}),n)}),[e]);return Object(a.useEffect)((()=>{let t=!0;const a=new AbortController;return(async()=>{if(0===e.length&&t)return n(!1),o([]),void l({});try{n(!0);const{data:e}=await Object(i.j)({pagination:{page:1,perPage:1e4},signal:a.signal}),r=c(e),s=Object.keys(r).map((e=>r[e]));o(s),l(r),t&&n(!1)}catch(e){t&&n(!1)}})(),()=>{t=!1,a.abort()}}),[e.length,c]),[t,r,s]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l}));var a=n(2),i=n.n(a),r=n(40),o=n(198);const s={DUPLICATE:"duplicate",EXPORT:"export"},l=Object(a.memo)((({handleCloseModal:e,onModalConfirm:t,action:n})=>{const[l,c]=Object(a.useState)(!0),u=Object(a.useCallback)((()=>{c(!l)}),[c,l]),d=Object(a.useCallback)((()=>{t(l),e()}),[l,e,t]);return i.a.createElement(r.EuiConfirmModal,{title:n===s.EXPORT?o.M:o.K,onCancel:e,onConfirm:d,cancelButtonText:o.G,confirmButtonText:n===s.EXPORT?o.I:o.H,defaultFocusedButton:"confirm","data-test-subj":"includeExpiredExceptionsConfirmationModal"},i.a.createElement(r.EuiText,null,n===s.EXPORT?o.L:o.J),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiSwitch,{label:o.N,checked:l,onChange:u,"data-test-subj":"includeExpiredExceptionsConfirmationModalSwitch"}))}));l.displayName="IncludeExpiredExceptionsModal"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f}));var a=n(2),i=n.n(a),r=n(24),o=n(110),s=n(116),l=n(348),c=n(186),u=n(266),d=n(175);const p=Object(a.createContext)(void 0),m=({id:e,indexName:t,scopeId:n,ruleId:m,children:f})=>{var g;const b=Object(u.a)(),y=t?null!==(g=Object(c.a)(t,b))&&void 0!==g?g:t:"",[{pageName:h}]=Object(d.a)(),v=h===r.c.detections?o.SourcererScopeName.detections:o.SourcererScopeName.default,E=Object(s.d)(v),[x,j,O,S]=Object(l.a)({indexName:y,eventId:null!=e?e:"",runtimeMappings:E.runtimeMappings,skip:!e}),k=Object(a.useMemo)((()=>e&&t&&n?{eventId:e,indexName:t,scopeId:n,ruleId:null!=m?m:"",indexPattern:E.indexPattern,dataAsNestedObject:S}:void 0),[e,t,n,m,E.indexPattern,S]);return i.a.createElement(p.Provider,{value:k},f)},f=()=>{const e=Object(a.useContext)(p);if(!e)throw new Error("PreviewPanelContext can only be used within PreviewPanelContext provider");return e}},function(e,t,n){"use strict";n.d(t,"a",(function(){return Et})),n.d(t,"b",(function(){return St})),n.d(t,"c",(function(){return wt}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(5),c=n(8),u=n(246),d=n.n(u),p=n(44),m=n(672),f=n(204),g=n(648),b=n(486),y=n(162),h=n(417),v=n(213),E=n(597),x=n(3),j=n(130),O=n.n(j),S=n(13),k=n(671),w=n(673),I=n(102),T=n(495),C=n(125);const M=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.importTimelineModalTitle",{defaultMessage:"Import query from saved timeline"}),A=["duplicate","createFrom"],_=e=>{var t;return{filters:null!==(t=e.attributes.filters)&&void 0!==t?t:[],query:e.attributes.query,saved_id:e.id,title:e.attributes.title}},F=({defaultSavedQuery:e,browserFields:t,dataTestSubj:n,field:o,idAria:s,indexPattern:l,isLoading:c=!1,onCloseTimelineSearch:u,openTimelineSearch:d=!1,resizeParentContainer:p,onValidityChange:m,isDisabled:f,resetToSavedQuery:g,onOpenTimeline:b,onSavedQueryError:y})=>{const{value:h,setValue:v}=o,[E,j]=Object(i.useState)(-1),[F,D]=Object(i.useState)(!1),[N,P]=Object(i.useState)(e),[R,L]=Object(i.useState)(!1),{isInvalid:q,errorMessage:B}=Object(C.i)(o),{uiSettings:z}=Object(I.j)().services,[$]=Object(i.useState)(new S.FilterManager(z)),V=Object(T.a)();Object(i.useEffect)((()=>{null!=m&&m(!q)}),[q,m]),Object(i.useEffect)((()=>{let e=!0;const t=new x.Subscription;return $.setFilters([]),t.add($.getUpdates$().subscribe({next:()=>{if(e){const e=$.getFilters(),{filters:t}=h;O()(t,e)||v({...h,filters:e})}}})),()=>{e=!1,t.unsubscribe()}}),[h,$,v]),Object(i.useEffect)((()=>{let e=!0;return async function(){const{filters:t,saved_id:n}=h;if(O()(t,$.getFilters())||$.setFilters(t),null!=n&&null!=N&&n!==N.id||null!=n&&null==N)try{const t=await V.getSavedQuery(n);e&&null!=t&&P(t),L(!1)}catch{P(void 0),L(!0)}else null==n&&null!=N&&P(void 0)}(),()=>{e=!1}}),[h,$,N,V,L,v]),Object(i.useEffect)((()=>{R&&(null==y||y())}),[y,R]),Object(i.useEffect)((()=>{if(g&&N){const e=_(N);v(e)}}),[g,N,v]);const U=Object(i.useCallback)((e=>{const{query:t}=h;O()(t,e)||v({...h,query:e})}),[h,v]),G=Object(i.useCallback)((e=>{const{query:t}=h;if(!O()(t,e)){const t=R?null:h.saved_id;v({...h,query:e,saved_id:t})}}),[h,v,R]),H=Object(i.useCallback)((e=>{if(null!=e){const{saved_id:t}=h;if(L(!1),P(e),e.id!==t){const t=_(e);v(t)}else v({filters:[],query:{query:"",language:"kuery"},saved_id:null})}}),[h,v,L]),W=Object(i.useCallback)((()=>{D(!0),u()}),[u]),Q=Object(i.useCallback)((e=>{D(!1),null==b||b(e)}),[b]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiFormRow,{label:o.label,labelAppend:o.labelAppend,helpText:o.helpText,error:B,isInvalid:q,fullWidth:!0,"data-test-subj":n,describedByIds:s?[s]:void 0},r.a.createElement(a.EuiMutationObserver,{observerOptions:{subtree:!0,attributes:!0,childList:!0},onMutation:()=>{if(null!=p){const e=document.getElementById("kbnTypeahead__items");if(null!=e){const t=e.getBoundingClientRect(),n=document.getElementById("define-rule");if(null!=n){const e=n.getBoundingClientRect();(-1===E||e.height<E+t.height)&&p(E+t.height-100),-1===E&&j(e.height)}}else p(-1)}}},(e=>r.a.createElement("div",{ref:e},r.a.createElement(w.a,{indexPattern:l,isLoading:c||F,isRefreshPaused:!1,filterQuery:h.query,filterManager:$,filters:$.getFilters()||[],onChangedQuery:G,onSubmitQuery:U,savedQuery:N,onSavedQuery:H,hideSavedQuery:!1,displayStyle:"inPage",isDisabled:f}))))),d?r.a.createElement(k.a,{hideActions:A,modalTitle:M,onClose:W,onOpen:Q}):null)};var D=n(197);const N=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.eqlTypeTitle",{defaultMessage:"Event Correlation"}),P=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.eqlTypeDescription",{defaultMessage:"Use Event Query Language (EQL) to match events, generate sequences, and stack data"}),R=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.queryTypeTitle",{defaultMessage:"Custom query"}),L=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.queryTypeDescription",{defaultMessage:"Use KQL or Lucene to detect issues across indices."}),q=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.mlTypeTitle",{defaultMessage:"Machine Learning"}),B=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.mlTypeDescription",{defaultMessage:"Select ML job to detect anomalous activity."}),z=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.thresholdTypeTitle",{defaultMessage:"Threshold"}),$=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.thresholdTypeDescription",{defaultMessage:"Aggregate query results to detect when number of matches exceeds threshold."}),V=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.threatMatchTitle",{defaultMessage:"Indicator Match"}),U=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.threatMatchDescription",{defaultMessage:"Use indicators from intelligence sources to detect matching events and alerts."}),G=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.newTermsTitle",{defaultMessage:"New Terms"}),H=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.newTermsDescription",{defaultMessage:"Find documents with values appearing for the first time."}),W=s.a.span.withConfig({displayName:"SmallText",componentId:"sc-1i47q47-0"})(["font-size:",";"],(({theme:e})=>e.eui.euiFontSizeS)),Q=({hasValidLicense:e=!1})=>r.a.createElement(W,null,e?B:r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.ruleTypeField.mlTypeDisabledDescription",defaultMessage:"Access to ML requires a {subscriptionsLink}.",values:{subscriptionsLink:r.a.createElement(a.EuiLink,{href:"https://www.elastic.co/subscriptions",target:"_blank"},r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.components.stepDefineRule.ruleTypeField.subscriptionsLink",defaultMessage:"Platinum subscription"}))}}));Q.displayName="MlCardDescriptionComponent";const Y=r.a.memo(Q);Y.displayName="MlCardDescription";const K=Object(i.memo)((({describedByIds:e=[],field:t,isUpdateView:n,hasValidLicense:o,isMlAdmin:s})=>{const l=t.value,c=Object(i.useCallback)((e=>{t.setValue(e)}),[t]),u=Object(i.useCallback)((()=>c("eql")),[c]),d=Object(i.useCallback)((()=>c("machine_learning")),[c]),p=Object(i.useCallback)((()=>c("query")),[c]),m=Object(i.useCallback)((()=>c("threshold")),[c]),g=Object(i.useCallback)((()=>c("threat_match")),[c]),b=Object(i.useCallback)((()=>c("new_terms")),[c]),y=Object(i.useMemo)((()=>({onClick:u,isSelected:Object(D.b)(l)})),[l,u]),h=Object(i.useMemo)((()=>({onClick:p,isSelected:Object(D.e)(l)})),[l,p]),v=Object(i.useMemo)((()=>({isDisabled:!o||!s,onClick:d,isSelected:Object(f.d)(l)})),[l,d,o,s]),E=Object(i.useMemo)((()=>({onClick:m,isSelected:Object(D.g)(l)})),[l,m]),x=Object(i.useMemo)((()=>({onClick:g,isSelected:Object(D.f)(l)})),[l,g]),j=Object(i.useMemo)((()=>({onClick:b,isSelected:Object(D.d)(l)})),[l,b]);return r.a.createElement(a.EuiFormRow,{fullWidth:!0,"data-test-subj":"selectRuleType",describedByIds:e,label:t.label},r.a.createElement(a.EuiFlexGrid,{columns:3},(!n||h.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"customRuleType",title:R,titleSize:"xs",description:L,icon:r.a.createElement(a.EuiIcon,{size:"xl",type:"search"}),selectable:h,layout:"horizontal"})),(!n||v.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"machineLearningRuleType",title:q,titleSize:"xs",description:r.a.createElement(Y,{hasValidLicense:o}),icon:r.a.createElement(a.EuiIcon,{size:"l",type:"machineLearningApp"}),isDisabled:v.isDisabled&&!v.isSelected,selectable:v,layout:"horizontal"})),(!n||E.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"thresholdRuleType",title:z,titleSize:"xs",description:$,icon:r.a.createElement(a.EuiIcon,{size:"l",type:"indexFlush"}),selectable:E,layout:"horizontal"})),(!n||y.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"eqlRuleType",title:N,titleSize:"xs",description:P,icon:r.a.createElement(a.EuiIcon,{size:"l",type:"eql"}),selectable:y,layout:"horizontal"})),(!n||x.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"threatMatchRuleType",title:V,titleSize:"xs",description:U,icon:r.a.createElement(a.EuiIcon,{size:"l",type:"list"}),selectable:x,layout:"horizontal"})),(!n||j.isSelected)&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiCard,{"data-test-subj":"newTermsRuleType",title:G,titleSize:"xs",description:H,icon:r.a.createElement(a.EuiIcon,{size:"l",type:"magnifyWithPlus"}),selectable:j,layout:"horizontal"}))))}));K.displayName="SelectRuleType";const X=({describedByIds:e=[],field:t})=>{const n=t.value,o=Object(i.useCallback)((e=>{const n=Number(e.currentTarget.value);t.setValue(n)}),[t]);return r.a.createElement(a.EuiFormRow,{label:t.label,"data-test-subj":"anomalyThresholdSlider",describedByIds:e},r.a.createElement(a.EuiFlexGroup,null,r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiRange,{value:n,onChange:o,fullWidth:!0,showInput:!0,showRange:!0,showTicks:!0,tickInterval:25,min:0,max:100}))))};var J=n(474),Z=n(471);const ee=s.a.div.withConfig({displayName:"HelpTextWarningContainer",componentId:"sc-1r7zcmv-0"})(["margin-top:10px;"]),te=({href:e,notRunningJobIds:t})=>r.a.createElement(r.a.Fragment,null,r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.machineLearningJobIdHelpText",defaultMessage:"We've provided a few common jobs to get you started. To add your own custom jobs, assign a group of 'security' to those jobs in the {machineLearning} application to make them appear here.",values:{machineLearning:r.a.createElement(a.EuiLink,{href:e,target:"_blank"},r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.components.mlJobSelect.machineLearningLink",defaultMessage:"Machine Learning"}))}}),t.length>0&&r.a.createElement(ee,{"data-test-subj":"ml-warning-not-running-jobs"},r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement("span",null,1===t.length?r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.mlEnableJobSingle",defaultMessage:"The selected ML job, {jobName}, is not currently running. We will start {jobName} when you enable this rule.",values:{jobName:t[0]}}):r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.mlEnableJobMulti",defaultMessage:"The selected ML jobs, {jobNames}, are not currently running. We will start all of these jobs when you enable this rule.",values:{jobNames:t.reduce(((e,t,n,a)=>e+(n<a.length-1?", ":", and ")+t))}}))))),ne=r.a.memo(te),ae=l.i18n.translate("xpack.securitySolution.detectionEngine.mlSelectJob.createCustomJobButtonTitle",{defaultMessage:"Create custom job"}),ie=s.a.div.withConfig({displayName:"JobDisplayContainer",componentId:"sc-jfjxl-0"})(["width:100%;height:100%;display:flex;flex-direction:column;"]),re=s()(a.EuiFlexGroup).withConfig({displayName:"MlJobSelectEuiFlexGroup",componentId:"sc-jfjxl-1"})(["margin-bottom:5px;"]),oe=s()(a.EuiButton).withConfig({displayName:"MlJobEuiButton",componentId:"sc-jfjxl-2"})(["margin-top:20px;"]),se=({description:e,name:t,id:n})=>r.a.createElement(ie,null,r.a.createElement("strong",null,null!=t?t:n),r.a.createElement(a.EuiToolTip,{content:e},r.a.createElement(a.EuiText,{size:"xs",color:"subdued"},r.a.createElement("p",null,e)))),le=e=>{var t;return r.a.createElement(se,{id:e.value.id,description:e.value.description,name:null===(t=e.value)||void 0===t?void 0:t.name})},ce=({describedByIds:e=[],field:t})=>{const n=t.value,{isInvalid:o,errorMessage:s}=Object(C.i)(t),{loading:l,jobs:c}=Object(J.a)(),{getUrlForApp:u,navigateToApp:d}=Object(I.j)().services.application,p=u("ml"),m=Object(i.useCallback)((e=>{const n=e.map((e=>e.value.id));t.setValue(n)}),[t]),g=c.map((e=>{var t,n;return{value:{id:e.id,description:e.description,name:null===(t=e.customSettings)||void 0===t?void 0:t.security_app_display_name},label:`${null===(n=e.customSettings)||void 0===n?void 0:n.security_app_display_name} ${e.id}`}})),b=g.filter((e=>n.includes(e.value.id))).map((e=>{var t;return{...e,label:null!==(t=e.value.name)&&void 0!==t?t:e.value.id}})),y=Object(i.useMemo)((()=>c.filter((({id:e})=>n.includes(e))).reduce(((e,t)=>(Object(f.c)(t.jobState,t.datafeedState)||e.push(t.id),e)),[])),[c,n]);return r.a.createElement(re,{justifyContent:"flexStart"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiFormRow,{label:t.label,helpText:r.a.createElement(ne,{href:p,notRunningJobIds:y}),isInvalid:o,error:s,"data-test-subj":"mlJobSelect",describedByIds:e},r.a.createElement(a.EuiFlexGroup,null,r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiComboBox,{isLoading:l,onChange:m,options:g,placeholder:Z.k,renderOption:le,rowHeight:50,selectedOptions:b}))))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(oe,{iconType:"popout",iconSide:"right",onClick:()=>d("ml",{openInNewTab:!0})},ae)))};var ue=n(1131),de=n(469);const pe=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.thresholdField.thresholdFieldPlaceholderText",{defaultMessage:"All results"}),me=s()(a.EuiFlexItem).withConfig({displayName:"OperatorWrapper",componentId:"sc-1raxjfh-0"})(["align-self:center;"]),fe=["detectionEngineStepDefineRuleThresholdField"],ge=["detectionEngineStepDefineRuleThresholdValue"],be=["detectionEngineStepDefineRuleThresholdCardinalityField"],ye=["detectionEngineStepDefineRuleThresholdCardinalityValue"],he=({thresholdField:e,thresholdValue:t,browserFields:n,thresholdCardinalityField:o,thresholdCardinalityValue:s})=>{const l=Object(i.useMemo)((()=>({fullWidth:!0,noSuggestions:!1,options:n.map((e=>({label:e.name}))),placeholder:pe,onCreateOption:void 0,style:{width:"410px"}})),[n]),c=Object(i.useMemo)((()=>({fullWidth:!0,noSuggestions:!1,options:n.map((e=>({label:e.name}))),placeholder:pe,onCreateOption:void 0,style:{width:"410px"},singleSelection:{asPlainText:!0}})),[n]);return r.a.createElement(a.EuiFlexGroup,{direction:"column",style:{marginLeft:0}},r.a.createElement(a.EuiFlexGroup,null,r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(C.b,{field:e,idAria:fe[0],"data-test-subj":fe[0],describedByIds:fe,type:e.type,euiFieldProps:l})),r.a.createElement(me,{grow:!1},">="),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(C.b,{field:t,idAria:ge[0],"data-test-subj":ge[0],describedByIds:ge,type:t.type}))),r.a.createElement(a.EuiFlexGroup,null,r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(C.b,{field:o,idAria:be[0],"data-test-subj":be[0],describedByIds:be,type:o.type,euiFieldProps:c})),r.a.createElement(me,{grow:!1},">="),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(C.b,{field:s,idAria:ye[0],"data-test-subj":ye[0],describedByIds:ye,type:s.type}))))},ve=r.a.memo(he),Ee=()=>{const[e,t]=Object(i.useState)(!1),{docLinks:n}=Object(I.j)().services,o=r.a.createElement(a.EuiButtonIcon,{iconType:"questionInCircle",onClick:()=>t(!e),"aria-label":"Open help popover"});return r.a.createElement(a.EuiPopover,{button:o,isOpen:e,closePopover:()=>t(!1)},r.a.createElement(a.EuiText,{style:{width:320},size:"s"},r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsTooltipContent",defaultMessage:"Choose how to handle events with missing {suppressBy} fields. Either group events with missing fields together, or create a separate alert for each event. {learnMoreLink}",values:{suppressBy:r.a.createElement("strong",null,r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsTooltipSuppressByDescription",defaultMessage:"Suppress alerts by"})),learnMoreLink:r.a.createElement(a.EuiLink,{href:n.links.siem.configureAlertSuppression,target:"_blank"},r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.createRule.stepDefineRule.alertSuppressionMissingFieldsTooltipLink",defaultMessage:"Learn more"}))}})))},xe=r.a.memo(Ee);xe.displayName="SuppressionInfoIcon";var je=n(590),Oe=n(1124);const Se=l.i18n.translate("xpack.securitySolution.detectionEngine.stepDefineRule.pickDataView",{defaultMessage:"Select a Data View"}),ke=l.i18n.translate("xpack.securitySolution.detectionEngine.stepDefineRule.dataViewNotFoundLabel",{defaultMessage:"Selected data view not found"}),we=l.i18n.translate("xpack.securitySolution.detectionEngine.stepDefineRule.dataViewIncludesAlertsIndexLabel",{defaultMessage:"Default Security data view"}),Ie=l.i18n.translate("xpack.securitySolution.detectionEngine.stepDefineRule.dataViewIncludesAlertsIndexDescription",{defaultMessage:"The default Security data view includes the alerts index. This could result in redundant alerts being generated from existing alerts."}),Te=({kibanaDataViews:e,field:t})=>{let n,o,s;if(null!=t){const e=Object(C.i)(t);n=e.isInvalid,o=e.errorMessage,s=t.value}const c=Object(i.useMemo)((()=>null!=e&&Object.keys(e).length>0),[e]),u=Object(i.useMemo)((()=>null!=s&&""!==s&&c&&!Object.hasOwn(e,s)),[c,s,e]),[d,p]=Object(i.useState)(u||null==s||""===s?[]:[{id:e[s].id,label:e[s].title}]),[m,f]=Object(i.useState)(!1);Object(i.useEffect)((()=>{if(!u&&s){const t=e[s].title,n=e[s].id;f("security-solution-default"===n),p([{id:n,label:t}])}else p([])}),[s,t,e,u,f]);const g=Object(i.useMemo)((()=>c?Object.values(e).map((e=>({label:e.title,id:e.id}))):[]),[c,e]);return r.a.createElement(r.a.Fragment,null,u&&null!=s&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiCallOut,{title:ke,color:"warning",iconType:"help"},r.a.createElement("p",null,(b=s,l.i18n.translate("xpack.securitySolution.detectionEngine.stepDefineRule.dataViewNotFoundDescription",{values:{dataView:b},defaultMessage:'Your data view of "id": "{dataView}" was not found. It could be that it has since been deleted.'})))),r.a.createElement(a.EuiSpacer,{size:"s"})),m&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiCallOut,{title:we,color:"warning",iconType:"help","data-test-subj":"defaultSecurityDataViewWarning"},r.a.createElement("p",null,Ie)),r.a.createElement(a.EuiSpacer,{size:"s"})),r.a.createElement(a.EuiFormRow,{label:null==t?void 0:t.label,helpText:null==t?void 0:t.helpText,error:o,isInvalid:n,"data-test-subj":"pick-rule-data-source"},r.a.createElement(a.EuiComboBox,{isClearable:!0,singleSelection:{asPlainText:!0},onChange:e=>{const n=e;if(p(null!=n?n:[]),null!=n&&n.length>0&&null!=n[0].id){const e=n[0].id;null==t||t.setValue(e)}else null==t||t.setValue(void 0)},options:g,selectedOptions:d,"aria-label":Se,placeholder:Se,"data-test-subj":"detectionsDataViewSelectorDropdown"})));var b};var Ce=n(370),Me=n(316),Ae=n(522);const _e=s()(a.EuiFlexItem).withConfig({displayName:"FlexItemWithLabel",componentId:"sc-17p8w56-0"})(["padding-top:20px;text-align:center;"]),Fe=s()(a.EuiFlexItem).withConfig({displayName:"FlexItemWithoutLabel",componentId:"sc-17p8w56-1"})(["text-align:center;"]),De=({entry:e,indexPattern:t,threatIndexPatterns:n,showLabel:o,onChange:s})=>{const l=Object(i.useCallback)((([t])=>{const{updatedEntry:n,index:a}=Object(Ce.e)(e,t);s(n,a)}),[s,e]),c=Object(i.useCallback)((([t])=>{const{updatedEntry:n,index:a}=Object(Ce.f)(e,t);s(n,a)}),[s,e]),u=Object(i.useMemo)((()=>{const n=r.a.createElement(Me.b,{placeholder:Ae.c,indexPattern:t,selectedField:e.field,isClearable:!1,isLoading:!1,isDisabled:null==t,onChange:l,"data-test-subj":"entryField",fieldInputWidth:360});return o?r.a.createElement(a.EuiFormRow,{label:Ae.b,"data-test-subj":"entryItemFieldInputFormRow"},n):r.a.createElement(a.EuiFormRow,{label:"","data-test-subj":"entryItemFieldInputFormRow"},n)}),[l,t,e,o]),d=Object(i.useMemo)((()=>{const t=r.a.createElement(Me.b,{placeholder:Ae.c,indexPattern:n,selectedField:e.value,isClearable:!1,isLoading:!1,isDisabled:null==n,onChange:c,"data-test-subj":"threatEntryField",fieldInputWidth:360});return o?r.a.createElement(a.EuiFormRow,{label:Ae.f,"data-test-subj":"threatFieldInputFormRow"},t):r.a.createElement(a.EuiFormRow,{label:"","data-test-subj":"threatFieldInputFormRow"},t)}),[c,n,e,o]);return r.a.createElement(a.EuiFlexGroup,{direction:"row",gutterSize:"s",alignItems:"center",justifyContent:"spaceAround","data-test-subj":"itemEntryContainer"},r.a.createElement(a.EuiFlexItem,{grow:!1},u),r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(a.EuiFlexGroup,{justifyContent:"spaceAround",alignItems:"center"},o?r.a.createElement(_e,{grow:!0},Ae.d):r.a.createElement(Fe,{grow:!0},Ae.d))),r.a.createElement(a.EuiFlexItem,{grow:!1},d))};De.displayName="EntryItem";const Ne=s()(a.EuiFlexItem).withConfig({displayName:"MyFirstRowContainer",componentId:"sc-12uv1nj-0"})(["padding-top:20px;"]),Pe=r.a.memo((({entries:e,isOnlyItem:t,entryIndex:n,itemIndex:o,onDelete:s})=>{const l=t&&1===e.length&&0===o&&(null==e[0].field||""===e[0].field),c=Object(i.useCallback)((()=>{s(n)}),[s,n]),u=r.a.createElement(a.EuiButtonIcon,{color:"danger",iconType:"trash",onClick:c,isDisabled:l,"aria-label":"entryDeleteButton",className:"itemEntryDeleteButton","data-test-subj":"itemEntryDeleteButton"});return 0===n&&0===o?r.a.createElement(Ne,{grow:!1,"data-test-subj":"firstRowDeleteButton"},u):r.a.createElement(a.EuiFlexItem,{grow:!1,"data-test-subj":"deleteButton"},u)}));Pe.displayName="EntryDeleteButton";var Re=n(603);const Le=s()(a.EuiFlexItem).withConfig({displayName:"MyInvisibleAndBadge",componentId:"sc-80qzis-0"})(["visibility:hidden;"]),qe=s()(a.EuiFlexItem).withConfig({displayName:"MyFirstRowContainer",componentId:"sc-80qzis-1"})(["padding-top:20px;"]),Be=r.a.memo((({entriesLength:e,entryItemIndex:t})=>{const n=r.a.createElement(Re.a,{includeAntennas:!0,type:"and"});return e>1&&0===t?r.a.createElement(qe,{grow:!1,"data-test-subj":"entryItemEntryFirstRowAndBadge"},n):e<=1?r.a.createElement(Le,{grow:!1,"data-test-subj":"entryItemEntryInvisibleAndBadge"},n):r.a.createElement(a.EuiFlexItem,{grow:!1,"data-test-subj":"entryItemEntryAndBadge"},n)}));Be.displayName="AndBadge";const ze=s()(a.EuiFlexItem).withConfig({displayName:"MyOverflowContainer",componentId:"sc-1omlazu-0"})(["overflow:hidden;width:100%;"]),$e=r.a.memo((({listItem:e,listItemIndex:t,indexPattern:n,threatIndexPatterns:o,isOnlyItem:s,andLogicIncluded:l,onDeleteEntryItem:c,onChangeEntryItem:u})=>{const d=Object(i.useCallback)(((n,a)=>{const i=[...e.entries.slice(0,a),{...n},...e.entries.slice(a+1)],r={...e,entries:i};u(r,t)}),[u,e,t]),p=Object(i.useCallback)((n=>{const a=Object(Ce.i)(e,n);c(a,t)}),[e,c,t]),m=Object(i.useMemo)((()=>null!=n&&e.entries.length>0?Object(Ce.g)(n,o,e.entries):[]),[e.entries,n,o]);return r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{gutterSize:"s","data-test-subj":"entriesContainer"},l&&r.a.createElement(Be,{entriesLength:e.entries.length,entryItemIndex:t}),r.a.createElement(ze,{grow:6},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",direction:"column"},m.map(((i,l)=>r.a.createElement(a.EuiFlexItem,{key:i.id,grow:1},r.a.createElement(a.EuiFlexGroup,{gutterSize:"xs",alignItems:"center",direction:"row"},r.a.createElement(ze,{grow:1},r.a.createElement(De,{entry:i,threatIndexPatterns:o,indexPattern:n,showLabel:0===t&&0===l,onChange:d})),r.a.createElement(Pe,{entries:e.entries,isOnlyItem:s,entryIndex:i.entryIndex,itemIndex:t,onDelete:p})))))))))}));$e.displayName="ListItem";const Ve=s()(a.EuiButton).withConfig({displayName:"MyEuiButton",componentId:"sc-gfoihj-0"})(["min-width:95px;"]),Ue=({isOrDisabled:e=!1,isAndDisabled:t=!1,onAndClicked:n,onOrClicked:i})=>r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(Ve,{fill:!0,size:"s",iconType:"plusInCircle",onClick:n,"data-test-subj":"andButton",isDisabled:t},Ae.a)),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(Ve,{fill:!0,size:"s",iconType:"plusInCircle",onClick:i,isDisabled:e,"data-test-subj":"orButton"},Ae.e))),Ge=s()(a.EuiFlexItem).withConfig({displayName:"MyInvisibleAndBadge",componentId:"sc-a20478-0"})(["visibility:hidden;"]),He=s()(Re.a).withConfig({displayName:"MyAndBadge",componentId:"sc-a20478-1"})(["& > .euiFlexItem{margin:0;}"]),We=s()(a.EuiFlexItem).withConfig({displayName:"MyButtonsContainer",componentId:"sc-a20478-2"})(["margin:16px 0;"]),Qe={andLogicIncluded:!1,entries:[],entriesToDelete:[]},Ye=({listItems:e,indexPatterns:t,threatIndexPatterns:n,onChange:o})=>{const[{entries:s,entriesToDelete:l,andLogicIncluded:c},u]=Object(i.useReducer)(((e,t)=>{switch(t.type){case"setEntries":{const n=t.entries.filter((({entries:e})=>e.length>1)).length>0;return{...e,andLogicIncluded:n,entries:t.entries}}case"setDefault":return{...e,...t.initialState,entries:[{...t.lastEntry,entries:[Object(Ce.d)()]}]};default:return e}}),{...Qe}),d=Object(i.useCallback)((e=>{u({type:"setEntries",entries:e})}),[u]),p=Object(i.useCallback)((e=>{u({type:"setDefault",initialState:Qe,lastEntry:e})}),[u]),m=Object(i.useCallback)(((e,t)=>{const n=[...s.slice(0,t),{...e},...s.slice(t+1)];d(n)}),[d,s]),f=Object(i.useCallback)(((e,t)=>{0===e.entries.length?0===[...s.slice(0,t),...s.slice(t+1)].length?p(e):d([...s.slice(0,t),...s.slice(t+1)]):m(e,t)}),[m,d,s,p]),g=Object(i.useCallback)((()=>{const e=s[s.length-1],{entries:t}=e,n={...e,entries:[...t,Object(Ce.d)()]};d([...s.slice(0,s.length-1),{...n}])}),[d,s]),b=Object(i.useCallback)((()=>{const e=Object(Ce.h)();d([...s,{...e}])}),[d,s]),y=Object(i.useCallback)((()=>{g()}),[g]);return Object(i.useEffect)((()=>{o({entryItems:Object(Ce.c)(s),entriesToDelete:l})}),[o,l,s]),Object(i.useEffect)((()=>{(0===s.length||1===s.length&&null!=s[0].entries&&0===s[0].entries.length)&&b()}),[s,b]),Object(i.useEffect)((()=>{e.length>0&&d(e)}),[]),r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",direction:"column"},s.map(((e,i)=>{var o;const l=null!==(o=e.id)&&void 0!==o?o:`${i}`;return r.a.createElement(a.EuiFlexItem,{grow:1,key:l},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",direction:"column"},0!==i&&(c?r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",direction:"row"},r.a.createElement(Ge,{grow:!1},r.a.createElement(He,{includeAntennas:!0,type:"and"})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(He,{type:"or"})))):r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(He,{type:"or"}))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement($e,{key:l,listItem:e,indexPattern:t,threatIndexPatterns:n,listItemIndex:i,andLogicIncluded:c,isOnlyItem:1===s.length,onDeleteEntryItem:f,onChangeEntryItem:m}))))})),r.a.createElement(We,{"data-test-subj":"andOrOperatorButtons"},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},c&&r.a.createElement(Ge,{grow:!1},r.a.createElement(Re.a,{includeAntennas:!0,type:"and"})),r.a.createElement(a.EuiFlexItem,{grow:1},r.a.createElement(Ue,{isOrDisabled:!1,isAndDisabled:!1,onOrClicked:b,onAndClicked:y})))))};Ye.displayName="ThreatMatch";const Ke=Object(C.j)({component:C.b}),Xe=({threatIndexModified:e,handleResetThreatIndices:t,threatMapping:n,indexPatterns:o,threatIndexPatterns:s,threatIndexPatternsLoading:l,threatBrowserFields:c,onValidityChange:u})=>{const{setValue:d,value:p}=n,{isInvalid:m,errorMessage:f}=Object(C.i)(n),[g,b]=Object(i.useState)(!1);Object(i.useEffect)((()=>{u&&u(!m&&g)}),[g,m,u]);const y=Object(i.useCallback)((({entryItems:e})=>{d(e)}),[d]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiFlexGroup,{direction:"column"},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(Ke,{path:"threatIndex",config:{...je.a.threatIndex,labelAppend:e?r.a.createElement(Et,{onClick:t,iconType:"refresh"},Z.m):null},componentProps:{idAria:"detectionEngineStepDefineRuleThreatMatchIndices","data-test-subj":"detectionEngineStepDefineRuleThreatMatchIndices",euiFieldProps:{fullWidth:!0,isDisabled:!1,placeholder:""}}})),r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(C.e,{path:"threatQueryBar",config:{...je.a.threatQueryBar,labelAppend:null},component:F,componentProps:{browserFields:c,idAria:"detectionEngineStepDefineThreatRuleQueryBar",indexPattern:s,isDisabled:!1,isLoading:l,dataTestSubj:"detectionEngineStepDefineThreatRuleQueryBar",openTimelineSearch:!1,onValidityChange:b}}))),r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiFormRow,{label:n.label,labelAppend:n.labelAppend,helpText:n.helpText,error:f,isInvalid:m,fullWidth:!0},r.a.createElement(Ye,{listItems:p,indexPatterns:o,threatIndexPatterns:s,"data-test-subj":"threatmatch-builder","id-aria":"threatmatch-builder",onChange:y})),r.a.createElement(a.EuiSpacer,{size:"m"}))},Je=r.a.memo(Xe);var Ze=n(183);const et=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.newTermsField.placeholderText",{defaultMessage:"Select a field"}),tt=({browserFields:e,field:t})=>{const n=Object(i.useMemo)((()=>({fullWidth:!0,noSuggestions:!1,options:e.map((e=>({label:e.name}))),placeholder:et,onCreateOption:void 0,style:{width:"410px"}})),[e]);return r.a.createElement(C.b,{field:t,idAria:"detectionEngineStepDefineRuleNewTermsField",euiFieldProps:n})},nt=r.a.memo(tt);var at=n(756),it=n(895),rt=n(1049),ot=n(894),st=n(17),lt=n(207),ct=n(104),ut=n.n(ct);const dt=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.secondsOptionDescription",{defaultMessage:"Seconds"}),pt=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.minutesOptionDescription",{defaultMessage:"Minutes"}),mt=l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.hoursOptionDescription",{defaultMessage:"Hours"}),ft=(l.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.daysOptionDescription",{defaultMessage:"Days"}),s()(a.EuiFormRow).withConfig({displayName:"StyledEuiFormRow",componentId:"sc-tpunic-0"})(["max-width:none;.euiFormControlLayout{max-width:235px;width:auto;}.euiFormControlLayout__childrenWrapper > *:first-child{box-shadow:none;height:38px;width:100%;}.euiFormControlLayout__childrenWrapper > select{background-color:",";color:",";}.euiFormControlLayout--group .euiFormControlLayout{min-width:100px;}.euiFormControlLayoutIcons{color:",";}.euiFormControlLayout:not(:first-child){border-left:1px solid ",";}"],(({theme:e})=>Object(a.transparentize)(e.eui.euiColorPrimary,.1)),(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiColorLightShade))),gt=s()(a.EuiSelect).withConfig({displayName:"MyEuiSelect",componentId:"sc-tpunic-1"})(["width:auto;"]),bt=({durationValueField:e,durationUnitField:t,minimumValue:n=0,isDisabled:o,durationUnitOptions:s=[{value:"s",text:dt},{value:"m",text:pt},{value:"h",text:mt}]})=>{const{isInvalid:l,errorMessage:c}=Object(C.i)(e),{value:u,setValue:d}=e,{value:p,setValue:m}=t,f=Object(i.useCallback)((e=>{m(e.target.value)}),[m]),g=Object(i.useCallback)((e=>{const t=((e,t=0)=>{const n=parseInt(e,10);return Number.isNaN(n)?t:Math.max(t,Math.min(n,Number.MAX_SAFE_INTEGER))})(e.target.value,n);d(t)}),[n,d]),b={disabled:o};return r.a.createElement(ft,{error:c,isInvalid:l},r.a.createElement(a.EuiFormControlLayout,{append:r.a.createElement(gt,ut()({fullWidth:!1,options:s,onChange:f,value:p,"data-test-subj":"timeType"},b))},r.a.createElement(a.EuiFieldNumber,ut()({fullWidth:!1,min:n,max:Number.MAX_SAFE_INTEGER,onChange:g,value:u,"data-test-subj":"interval"},b))))},yt=r.a.memo(bt),ht=Object(C.j)({component:C.b}),vt=s.a.div.withConfig({displayName:"StyledVisibleContainer",componentId:"sc-1pj0rui-0"})(["display:",";"],(e=>e.isVisible?"block":"none")),Et=s()(a.EuiButtonEmpty).withConfig({displayName:"MyLabelButton",componentId:"sc-1pj0rui-1"})(["height:18px;font-size:12px;.euiIcon{width:14px;height:14px;}"]);Et.defaultProps={flush:"right"};const xt=s()(a.EuiFormRow).attrs((({$isVisible:e})=>({style:{display:e?"flex":"none"}}))).withConfig({displayName:"RuleTypeEuiFormRow",componentId:"sc-1pj0rui-2"})([""]),jt=s()(xt).withConfig({displayName:"IntendedRuleTypeEuiFormRow",componentId:"sc-1pj0rui-3"})(["",""],(({theme:e})=>`padding-left: ${e.eui.euiSizeXL};`)),Ot=({isLoading:e,isUpdateView:t=!1,kibanaDataViews:n,indicesConfig:o,threatIndicesConfig:s,defaultSavedQuery:u,form:h,optionsSelected:E,setOptionsSelected:x,indexPattern:j,isIndexPatternLoading:O,browserFields:S,isQueryBarValid:k,setIsQueryBarValid:w,setIsThreatQueryBarValid:I,ruleType:T,index:M,threatIndex:A,groupByFields:_,dataSourceType:N,shouldLoadQueryDynamically:P,queryBarTitle:R,queryBarSavedId:L})=>{const q=Object(y.a)(),[B,z]=Object(i.useState)(!1),[$,V]=Object(i.useState)(!1),[U,G]=Object(i.useState)(!1),H=Object(st.b)(),{getFields:W,reset:Q,setFieldValue:Y}=h,J=(({field:e,setFieldValue:t,value:n})=>{const a=Object(i.useRef)(!1),r=Object(i.useRef)(),[o,s]=Object(i.useState)((()=>null));return Object(i.useEffect)((()=>{a.current&&n===r.current&&(a.current=!1,r.current=void 0,o())}),[n,o]),Object(i.useCallback)(((n,i)=>{t(e,n),s((()=>i)),r.current=n,a.current=!0}),[e,t])})({field:"ruleType",value:T,setFieldValue:Y}),ee=Object(i.useCallback)((({index:e,queryBar:t,eqlOptions:n})=>{const a=()=>{Y("index",e),Y("queryBar",t)};"eql"===t.query.language?(J("eql",a),x((e=>({...e,...null!=n?n:{}})))):a()}),[Y,J,x]),{onOpenTimeline:te,loading:ne}=Object(m.c)(ee),ae=d()(T),ie=Object(i.useCallback)((e=>{h.setFieldValue("dataSourceType",e),h.getFields().index.reset({resetValue:!1}),h.getFields().dataViewId.reset({resetValue:!1})}),[h]),[re,oe]=Object(i.useState)([]);Object(i.useEffect)((()=>{const{fields:e}=j;oe(function(e){return e.filter((e=>!0===e.aggregatable))}(e))}),[j]);const se=Object(i.useMemo)((()=>(e=>{const t=new Set(["string","number","ip","boolean"]);return e.filter((e=>!0===e.aggregatable&&t.has(e.type)))})(re)),[re]),[le,{browserFields:pe,indexPatterns:me}]=Object(Ze.b)(A);Object(i.useEffect)((()=>{Q({resetValues:!1})}),[Q,T]),Object(i.useEffect)((()=>{V(!Object(c.isEqual)(M,o))}),[M,o]),Object(i.useEffect)((()=>{G(!Object(c.isEqual)(A,s))}),[A,s]),Object(i.useEffect)((()=>{const{queryBar:e}=W();null!=e&&(Object(D.f)(T)&&!Object(D.f)(ae)&&Object(c.isEqual)(e.value,rt.a.forNormalRules)?e.reset({defaultValue:rt.a.forThreatMatchRules}):!Object(D.f)(T)&&Object(D.f)(ae)&&Object(c.isEqual)(e.value,rt.a.forThreatMatchRules)&&e.reset({defaultValue:rt.a.forNormalRules}))}),[T,ae,W]);const fe=Object(i.useCallback)((()=>{k||h.setFieldValue("shouldLoadQueryDynamically",!1)}),[k,h]),ge=Object(i.useCallback)((()=>{W().index.setValue(o)}),[W,o]),be=Object(i.useCallback)((()=>{W().threatIndex.setValue(s)}),[W,s]),ye=Object(i.useCallback)((()=>{z(!0)}),[]),he=Object(i.useCallback)((()=>{z(!1)}),[]),Ee=Object(i.useCallback)((({thresholdField:e,thresholdValue:t,thresholdCardinalityField:n,thresholdCardinalityValue:a})=>r.a.createElement(ve,{browserFields:re,thresholdField:e,thresholdValue:t,thresholdCardinalityField:n,thresholdCardinalityValue:a})),[re]),Se=Object(i.useCallback)((({threatMapping:e})=>r.a.createElement(Je,{handleResetThreatIndices:be,indexPatterns:j,threatBrowserFields:pe,threatIndexModified:U,threatIndexPatterns:me,threatIndexPatternsLoading:le,threatMapping:e,onValidityChange:I})),[be,j,I,pe,U,me,le]),ke=Object(i.useCallback)((({groupByRadioSelection:e,groupByDurationUnit:t,groupByDurationValue:n})=>r.a.createElement(a.EuiRadioGroup,{disabled:!H.isAtLeast(lt.ab)||null==_||0===_.length,idSelected:e.value,options:[{id:v.b.PerRuleExecution,label:"Per rule execution"},{id:v.b.PerTimePeriod,label:r.a.createElement(r.a.Fragment,null,"Per time period",r.a.createElement(yt,{durationValueField:n,durationUnitField:t,isDisabled:!H.isAtLeast(lt.ab)||0===(null==_?void 0:_.length)||e.value!==v.b.PerTimePeriod,minimumValue:1}))}],onChange:t=>{e.setValue(t)},"data-test-subj":"groupByDurationOptions"})),[H,_]),we=Object(i.useCallback)((({suppressionMissingFields:e})=>r.a.createElement(a.EuiRadioGroup,{disabled:!H.isAtLeast(lt.ab)||null==_||0===_.length,idSelected:e.value,options:[{id:lt.b.Suppress,label:Z.c},{id:lt.b.DoNotSuppress,label:Z.a}],onChange:t=>{e.setValue(t)},"data-test-subj":"suppressionMissingFieldsOptions"})),[H,_]),Ie=Object(i.useMemo)((()=>[{id:v.a.IndexPatterns,label:l.i18n.translate("xpack.securitySolution.ruleDefine.indexTypeSelect.indexPattern",{defaultMessage:"Index Patterns"}),iconType:N===v.a.IndexPatterns?"checkInCircleFilled":"empty","data-test-subj":`rule-index-toggle-${v.a.IndexPatterns}`},{id:v.a.DataView,label:l.i18n.translate("xpack.securitySolution.ruleDefine.indexTypeSelect.dataView",{defaultMessage:"Data View"}),iconType:N===v.a.DataView?"checkInCircleFilled":"empty","data-test-subj":`rule-index-toggle-${v.a.DataView}`}]),[N]),Ce=Object(i.useMemo)((()=>null==n||0===Object.keys(n).length?r.a.createElement(a.EuiLoadingSpinner,{size:"l"}):r.a.createElement(C.e,{key:"DataViewSelector",path:"dataViewId",component:Te,componentProps:{kibanaDataViews:n}})),[n]),Me=Object(i.useMemo)((()=>r.a.createElement(xt,{label:Z.o,$isVisible:!0,fullWidth:!0},r.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"s","data-test-subj":"dataViewIndexPatternButtonGroupFlexGroup"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.dataViewSelectorText1",defaultMessage:"Use Kibana "}),r.a.createElement(it.a,{guidePath:"kibana",docPath:"data-views.html",linkText:"Data Views"}),r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.dataViewSelectorText2",defaultMessage:" or specify individual "}),r.a.createElement(it.a,{guidePath:"kibana",docPath:"index-patterns-api-create.html",linkText:"index patterns"}),r.a.createElement(p.FormattedMessage,{id:"xpack.securitySolution.dataViewSelectorText3",defaultMessage:" as your rule's data source to be searched."}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(xt,{$isVisible:!0},r.a.createElement(a.EuiButtonGroup,{isFullWidth:!0,legend:"Rule index pattern or data view selector","data-test-subj":"dataViewIndexPatternButtonGroup",idSelected:N,onChange:ie,options:Ie,color:"primary"}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(vt,{isVisible:N===v.a.DataView},Ce),r.a.createElement(vt,{isVisible:N===v.a.IndexPatterns},r.a.createElement(ht,{path:"index",config:{...Object(c.omit)(je.a.index,"label"),labelAppend:$?r.a.createElement(Et,{onClick:ge,iconType:"refresh"},Z.m):null},componentProps:{idAria:"detectionEngineStepDefineRuleIndices","data-test-subj":"detectionEngineStepDefineRuleIndices",euiFieldProps:{fullWidth:!0,placeholder:"",isDisabled:ne,isLoading:ne}}})))))),[ne,N,ie,Ie,Ce,$,ge]),Ae=Object(i.useMemo)((()=>r.a.createElement(C.e,{key:"QueryBarDefineRule",path:"queryBar",config:{...je.a.queryBar,label:Z.l,labelAppend:r.a.createElement(Et,{"data-test-subj":"importQueryFromSavedTimeline",onClick:ye,disabled:P},Z.h)},component:F,componentProps:{browserFields:S,idAria:"detectionEngineStepDefineRuleQueryBar",indexPattern:j,isDisabled:e||P||ne,resetToSavedQuery:P,isLoading:O||ne,dataTestSubj:"detectionEngineStepDefineRuleQueryBar",openTimelineSearch:B,onValidityChange:w,onCloseTimelineSearch:he,onSavedQueryError:fe,defaultSavedQuery:u,onOpenTimeline:te}})),[ye,P,S,j,e,ne,O,B,w,he,fe,u,te]),_e=Object(i.useCallback)(((e,t)=>{x((n=>({...n,[e]:t})))}),[x]),Fe=Object(i.useMemo)((()=>Object(c.isEmpty)(j.fields)?{keywordFields:[],dateFields:[],nonDateFields:[]}:{keywordFields:j.fields.filter((e=>{var t;return null===(t=e.esTypes)||void 0===t?void 0:t.includes("keyword")})).map((e=>({label:e.name}))),dateFields:j.fields.filter((e=>"date"===e.type)).map((e=>({label:e.name}))),nonDateFields:j.fields.filter((e=>"date"!==e.type)).map((e=>({label:e.name})))}),[j]),De=Object(i.useMemo)((()=>({describedByIds:["detectionEngineStepDefineRuleType"],isUpdateView:t,hasValidLicense:Object(b.a)(q),isMlAdmin:Object(g.a)(q)})),[t,q]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(de.a,{addPadding:!t},r.a.createElement(C.c,{form:h,"data-test-subj":"stepDefineRule"},r.a.createElement(vt,{isVisible:!1},r.a.createElement(C.e,{path:"dataSourceType",componentProps:{euiFieldProps:{fullWidth:!0,placeholder:""}}})),r.a.createElement(C.e,{path:"ruleType",component:K,componentProps:De}),r.a.createElement(xt,{$isVisible:!Object(f.d)(T),fullWidth:!0},r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"s"}),Me,r.a.createElement(a.EuiSpacer,{size:"s"}),Object(D.b)(T)?r.a.createElement(C.e,{key:"EqlQueryBar",path:"queryBar",component:Oe.a,componentProps:{optionsData:Fe,optionsSelected:E,isSizeOptionDisabled:!0,onOptionsChange:_e,onValidityChange:w,idAria:"detectionEngineStepDefineRuleEqlQueryBar",isDisabled:e,isLoading:O,indexPattern:j,showFilterBar:!0,dataTestSubj:"detectionEngineStepDefineRuleEqlQueryBar"},config:{...je.a.queryBar,label:Z.e}}):Ae)),Object(D.e)(T)&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"s"}),r.a.createElement(xt,{label:Z.n,$isVisible:Boolean(L),fullWidth:!0},r.a.createElement(ht,{path:"shouldLoadQueryDynamically",componentProps:{idAria:"detectionEngineStepDefineRuleShouldLoadQueryDynamically","data-test-subj":"detectionEngineStepDefineRuleShouldLoadQueryDynamically",euiFieldProps:{disabled:e,label:R?Z.s(R):Z.t()}}}))),r.a.createElement(xt,{$isVisible:Object(D.e)(T),"data-test-subj":"alertSuppressionInput"},r.a.createElement(C.e,{path:"groupByFields",component:ot.a,componentProps:{browserFields:se,disabledText:Z.g,isDisabled:!H.isAtLeast(lt.ab)&&0===(null==_?void 0:_.length)}})),r.a.createElement(jt,{$isVisible:Object(D.e)(T),"data-test-subj":"alertSuppressionDuration"},r.a.createElement(C.f,{fields:{groupByRadioSelection:{path:"groupByRadioSelection"},groupByDurationValue:{path:"groupByDuration.value"},groupByDurationUnit:{path:"groupByDuration.unit"}}},ke)),r.a.createElement(jt,{$isVisible:Object(D.e)(T),"data-test-subj":"alertSuppressionMissingFields",label:r.a.createElement("span",null,Z.b," ",r.a.createElement(xe,null)),fullWidth:!0},r.a.createElement(C.f,{fields:{suppressionMissingFields:{path:"suppressionMissingFields"}}},we)),r.a.createElement(xt,{$isVisible:Object(f.d)(T),fullWidth:!0},r.a.createElement(r.a.Fragment,null,r.a.createElement(C.e,{path:"machineLearningJobId",component:ce,componentProps:{describedByIds:["detectionEngineStepDefineRulemachineLearningJobId"]}}),r.a.createElement(C.e,{path:"anomalyThreshold",component:X,componentProps:{describedByIds:["detectionEngineStepDefineRuleAnomalyThreshold"]}}))),r.a.createElement(xt,{$isVisible:Object(D.g)(T),"data-test-subj":"thresholdInput",fullWidth:!0},r.a.createElement(r.a.Fragment,null,r.a.createElement(C.f,{fields:{thresholdField:{path:"threshold.field"},thresholdValue:{path:"threshold.value"},thresholdCardinalityField:{path:"threshold.cardinality.field"},thresholdCardinalityValue:{path:"threshold.cardinality.value"}}},Ee))),r.a.createElement(xt,{$isVisible:Object(D.f)(T),"data-test-subj":"threatMatchInput",fullWidth:!0},r.a.createElement(r.a.Fragment,null,r.a.createElement(C.f,{fields:{threatMapping:{path:"threatMapping"}}},Se))),r.a.createElement(xt,{$isVisible:Object(D.d)(T),"data-test-subj":"newTermsInput",fullWidth:!0},r.a.createElement(r.a.Fragment,null,r.a.createElement(C.e,{path:"newTermsFields",component:nt,componentProps:{browserFields:se}}),r.a.createElement(C.e,{path:"historyWindowSize",component:at.a,componentProps:{idAria:"detectionEngineStepDefineRuleHistoryWindowSize",dataTestSubj:"detectionEngineStepDefineRuleHistoryWindowSize",timeTypes:["m","h","d"]}}))),r.a.createElement(C.e,{path:"timeline",component:ue.a,componentProps:{idAria:"detectionEngineStepDefineRuleTimeline",isDisabled:e,dataTestSubj:"detectionEngineStepDefineRuleTimeline"}}))))},St=Object(i.memo)(Ot),kt=({addPadding:e,defaultValues:t,descriptionColumns:n,indexPattern:a,isInPanelView:i=!1})=>{const o=Object(h.e)(t);return r.a.createElement(de.a,{"data-test-subj":"definitionRule",addPadding:e},r.a.createElement(E.a,{columns:n,schema:Object(h.b)(je.a,t.ruleType),data:Object(h.b)(o,t.ruleType),indexPatterns:a,isInPanelView:i}))},wt=Object(i.memo)(kt)},function(e,t,n){"use strict";n.d(t,"a",(function(){return be})),n.d(t,"b",(function(){return he}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(197),c=n(104),u=n.n(c),d=n(42),p=n(137),m=n(125);const f=s()(a.EuiFormRow).withConfig({displayName:"MyEuiFormRow",componentId:"sc-7izzbw-0"})([".euiFormRow__labelWrapper{.euiText{padding-right:32px;}}"]),g=s()(a.EuiButtonEmpty).withConfig({displayName:"MyAddItemButton",componentId:"sc-7izzbw-1"})(["margin:4px 0px;font-size:12px;.euiIcon{width:12px;height:12px;}"]);g.defaultProps={flush:"left",iconType:"plusInCircle",size:"s"};const b=({addText:e,dataTestSubj:t,field:n,idAria:o,isDisabled:s,validate:l})=>{const[c,b]=Object(i.useState)(!1),{isInvalid:y,errorMessage:h}=Object(m.i)(n),[v,E]=Object(i.useState)(-1),x=Object(i.useRef)([]),j=Object(i.useCallback)((e=>{const t=n.value,a=[...t.slice(0,e),...t.slice(e+1)];n.setValue(0===a.length?[""]:a),x.current=[...x.current.slice(0,e),...x.current.slice(e+1)],x.current=x.current.map(((t,n)=>(n>=e&&null!=x.current[e]&&(t.value="re-render"),t)))}),[n]),O=Object(i.useCallback)((()=>{const e=n.value;n.setValue([...e,""])}),[n]),S=Object(i.useCallback)(((e,t)=>{const a=n.value,i=e.target.value;n.setValue([...a.slice(0,t),i,...a.slice(t+1)])}),[n]),k=Object(i.useCallback)(((e,t)=>{null!=t&&(x.current=[...x.current.slice(0,e),t,...x.current.slice(e+1)])}),[x]);Object(i.useEffect)((()=>{-1===v||Object(d.isEmpty)(x.current)||null==x.current[v]||(x.current[v].focus(),E(-1))}),[v,x.current]);const w=n.value;return r.a.createElement(f,{label:n.label,labelAppend:n.labelAppend,error:c?h:null,isInvalid:c&&y,fullWidth:!0,"data-test-subj":t,describedByIds:o?[o]:void 0},r.a.createElement(r.a.Fragment,null,w.map(((e,t)=>{const n={disabled:s,...t===w.length-1?{inputRef:k.bind(null,t)}:{},value:e,isInvalid:null!=l&&c&&l(e)};return r.a.createElement("div",{key:t},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(a.EuiFieldText,u()({onBlur:()=>b(!0),onChange:e=>S(e,t),fullWidth:!0},n))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonIcon,{color:"danger",iconType:"trash",isDisabled:s||Object(d.isEmpty)(e)&&1===w.length,onClick:()=>j(t),"aria-label":p.ub}))),w.length-1!==t&&r.a.createElement(a.EuiSpacer,{size:"s"}))})),r.a.createElement(g,{onClick:O,isDisabled:s},e)))};var y=n(597),h=n(8),v=n(334);const E=[{framework:"MITRE ATT&CK",tactic:{id:"none",name:"none",reference:"none"},technique:[]}];Object(v.c)([]);var x=n(5);const j=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.threatsDescription",{defaultMessage:"threats"}),O=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.tacticsDescription",{defaultMessage:"tactic"}),S=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.techniquesDescription",{defaultMessage:"technique"}),k=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.subtechniquesDescription",{defaultMessage:"subtechnique"}),w=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.addTacticTitle",{defaultMessage:"Add tactic"}),I=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.addTechniqueTitle",{defaultMessage:"Add technique"}),T=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.addSubtechniqueTitle",{defaultMessage:"Add subtechnique"}),C=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.tacticPlaceHolderDescription",{defaultMessage:"Select a tactic ..."}),M=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.techniquePlaceHolderDescription",{defaultMessage:"Select a technique ..."}),A=x.i18n.translate("xpack.securitySolution.detectionEngine.mitreAttack.subtechniquePlaceHolderDescription",{defaultMessage:"Select a subtechnique ..."}),_=s.a.div.withConfig({displayName:"SubtechniqueContainer",componentId:"sc-1wna1kp-0"})(["margin-left:48px;"]),F=({field:e,idAria:t,isDisabled:o,threatIndex:s,techniqueIndex:l,onFieldChange:c})=>{const u=e.value,[m,f]=Object(i.useState)([]);Object(i.useEffect)((()=>{!async function(){const e=await n.e(19).then(n.bind(null,1443));f(e.subtechniques)}()}),[]);const b=Object(i.useMemo)((()=>{var e;return[...null!==(e=u[s].technique)&&void 0!==e?e:[]]}),[u,s]),y=Object(i.useCallback)((t=>{var n;const a=[...e.value],i=null!==(n=b[l].subtechnique)&&void 0!==n?n:[];null!=i&&(i.splice(t,1),b[l]={...b[l],subtechnique:i},a[s].technique=b,c(a))}),[e,c,l,b,s]),h=Object(i.useCallback)((()=>{const t=[...e.value],n=b[l].subtechnique;b[l]=null!=n?{...b[l],subtechnique:[...n,{id:"none",name:"none",reference:"none"}]}:{...b[l],subtechnique:[{id:"none",name:"none",reference:"none"}]},t[s].technique=b,c(t)}),[e,c,l,b,s]),v=Object(i.useCallback)(((t,n)=>{const a=[...e.value],{id:i,reference:r,name:o}=m.find((e=>e.value===n))||{id:"",name:"",reference:""},u=b[l].subtechnique;null!=u&&c([...a.slice(0,s),{...a[s],technique:[...b.slice(0,l),{...b[l],subtechnique:[...u.slice(0,t),{id:i,reference:r,name:o},...u.slice(t+1)]},...b.slice(l+1)]},...a.slice(s+1)])}),[e.value,m,b,l,c,s]),E=Object(i.useCallback)(((t,n,i)=>{const o=m.filter((e=>e.techniqueId===b[l].id));return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSuperSelect,{id:"mitreAttackSubtechnique",options:[..."none"===i.name?[{inputDisplay:r.a.createElement(r.a.Fragment,null,A),value:"none",disabled:n}]:[],...o.map((e=>({inputDisplay:r.a.createElement(r.a.Fragment,null,e.label),value:e.value,disabled:n})))],prepend:`${e.label} ${k}`,"aria-label":"",onChange:v.bind(null,t),fullWidth:!0,valueOfSelected:Object(d.camelCase)(i.name),"data-test-subj":"mitreAttackSubtechnique",disabled:n,placeholder:A}))}),[m,e.label,v,b,l]),x=Object(i.useMemo)((()=>b[l].subtechnique),[b,l]);return r.a.createElement(_,null,null!=x&&x.map(((e,n)=>r.a.createElement("div",{key:n},r.a.createElement(a.EuiSpacer,{size:"s"}),r.a.createElement(a.EuiFormRow,{fullWidth:!0,describedByIds:t?[`${t} ${k}`]:void 0},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!0},E(n,o,e)),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonIcon,{color:"danger",iconType:"trash",isDisabled:o,onClick:()=>y(n),"aria-label":p.ub}))))))),r.a.createElement(g,{"data-test-subj":"addMitreAttackSubtechnique",onClick:h,isDisabled:o},T))},D=(e,t)=>e.some((e=>e.techniqueId===t.id)),N=s.a.div.withConfig({displayName:"TechniqueContainer",componentId:"sc-1e8h3t0-0"})(["",""],(({theme:e})=>Object(o.css)(["margin-left:24px;padding-left:24px;border-left:2px solid ",";"],e.eui.euiColorLightestShade))),P=({field:e,idAria:t,isDisabled:o,threatIndex:s,onFieldChange:l})=>{var c;const u=e.value,[m,f]=Object(i.useState)([]),[b,y]=Object(i.useState)([]);Object(i.useEffect)((()=>{!async function(){const e=await n.e(19).then(n.bind(null,1443));f(e.techniques),y(e.subtechniques)}()}),[]);const h=Object(i.useCallback)((t=>{var n;const a=[...e.value],i=null!==(n=a[s].technique)&&void 0!==n?n:[];i.splice(t,1),a[s]={...a[s],technique:i},l(a)}),[e,s,l]),v=Object(i.useCallback)((()=>{var t;const n=[...e.value];n[s]={...n[s],technique:[...null!==(t=n[s].technique)&&void 0!==t?t:[],{id:"none",name:"none",reference:"none",subtechnique:[]}]},l(n)}),[e,s,l]),E=Object(i.useCallback)(((t,n)=>{var a;const i=[...e.value],{id:r,reference:o,name:c}=m.find((e=>e.value===n))||{id:"",name:"",reference:""},u=null!==(a=i[s].technique)&&void 0!==a?a:[];l([...i.slice(0,s),{...i[s],technique:[...u.slice(0,t),{id:r,reference:o,name:c,subtechnique:[]},...u.slice(t+1)]},...i.slice(s+1)])}),[e.value,m,s,l]),x=Object(i.useCallback)(((t,n,i,o)=>{const s=m.filter((e=>e.tactics.includes(Object(d.kebabCase)(t))));return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSuperSelect,{id:"mitreAttackTechnique",options:[..."none"===o.name?[{inputDisplay:r.a.createElement(r.a.Fragment,null,M),value:"none",disabled:i}]:[],...s.map((e=>({inputDisplay:r.a.createElement(r.a.Fragment,null,e.label),value:e.value,disabled:i})))],prepend:`${e.label} ${S}`,"aria-label":"",onChange:E.bind(null,n),fullWidth:!0,valueOfSelected:Object(d.camelCase)(o.name),"data-test-subj":"mitreAttackTechnique",disabled:i,placeholder:M}))}),[e.label,m,E]),j=null!==(c=u[s].technique)&&void 0!==c?c:[];return r.a.createElement(N,null,j.map(((n,i)=>r.a.createElement("div",{key:i},r.a.createElement(a.EuiSpacer,{size:"s"}),r.a.createElement(a.EuiFormRow,{fullWidth:!0,describedByIds:t?[`${t} ${S}`]:void 0},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!0},x(u[s].tactic.name,i,o,n)),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonIcon,{color:"danger",iconType:"trash",isDisabled:o,onClick:()=>h(i),"aria-label":p.ub})))),r.a.createElement(F,{field:e,idAria:t,isDisabled:o||"none"===n.name||!1===D(b,n),threatIndex:s,techniqueIndex:i,onFieldChange:l})))),r.a.createElement(g,{"data-test-subj":"addMitreAttackTechnique",onClick:v,isDisabled:o},I))},R=s.a.div.withConfig({displayName:"MitreAttackContainer",componentId:"sc-17z3rkk-0"})(["margin-top:16px;"]),L=s()(a.EuiFormRow).withConfig({displayName:"InitialMitreAttackFormRow",componentId:"sc-17z3rkk-1"})([".euiFormRow__labelWrapper{.euiText{padding-right:32px;}}"]),q=Object(i.memo)((({field:e,idAria:t,isDisabled:o})=>{const s=Object(i.useCallback)((t=>{const n=[...e.value];n.splice(t,1),Object(d.isEmpty)(n)?e.setValue(E):e.setValue(n)}),[e]),l=Object(i.useCallback)((()=>{const t=[...e.value];Object(d.isEmpty)(t[t.length-1])?e.setValue([{tactic:{id:"none",name:"none",reference:"none"},technique:[]}]):e.setValue([...t,{tactic:{id:"none",name:"none",reference:"none"},technique:[]}])}),[e]),[c,u]=Object(i.useState)([]);Object(i.useEffect)((()=>{!async function(){const e=await n.e(19).then(n.bind(null,1443));u(e.tactics)}()}),[]);const m=Object(i.useCallback)(((t,n)=>{const a=[...e.value],{id:i,reference:r,name:o}=c.find((e=>e.value===n))||{id:"",name:"",reference:""};a.splice(t,1,{...a[t],tactic:{id:i,reference:r,name:o},technique:[]}),e.setValue([...a])}),[e,c]),f=Object(i.useMemo)((()=>[...e.value]),[e]),b=Object(i.useCallback)(((t,n,i)=>{const l=t.tactic.name;return r.a.createElement(a.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},r.a.createElement(a.EuiFlexItem,{grow:!0},r.a.createElement(a.EuiSuperSelect,{id:"mitreAttackTactic",options:[..."none"===l?[{inputDisplay:r.a.createElement(r.a.Fragment,null,C),value:"none",disabled:i}]:[],...c.map((e=>({inputDisplay:r.a.createElement(r.a.Fragment,null,e.label),value:e.value,disabled:i})))],prepend:`${e.label} ${O}`,"aria-label":"",onChange:m.bind(null,n),fullWidth:!0,valueOfSelected:Object(d.camelCase)(l),"data-test-subj":"mitreAttackTactic",placeholder:C})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiButtonIcon,{color:"danger",iconType:"trash",isDisabled:o||Object(h.isEqual)(f,E),onClick:()=>s(n),"aria-label":p.ub})))}),[e.label,o,s,c,m,f]),y=Object(i.useCallback)((t=>{e.setValue(t)}),[e]);return r.a.createElement(R,null,f.map(((n,i)=>r.a.createElement("div",{key:i},0===i?r.a.createElement(L,{fullWidth:!0,label:`${e.label} ${j}`,labelAppend:e.labelAppend,describedByIds:t?[`${t} ${O}`]:void 0},r.a.createElement(r.a.Fragment,null,b(n,i,o))):r.a.createElement(a.EuiFormRow,{fullWidth:!0,describedByIds:t?[`${t} ${O}`]:void 0},b(n,i,o)),r.a.createElement(P,{field:e,threatIndex:i,isDisabled:o||"none"===n.tactic.name,idAria:t,onFieldChange:y})))),r.a.createElement(g,{"data-test-subj":"addMitreAttackTactic",onClick:l,isDisabled:o},w))}));var B=n(739),z=n(228),$=n(893),V=n(589),U=n(469),G=n(481),H=n(316),W=n(102),Q=n(810);const Y=s.a.div.withConfig({displayName:"NestedContent",componentId:"sc-1dv52ek-0"})(["margin-left:24px;"]),K=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemComboBoxColumn",componentId:"sc-1dv52ek-1"})(["max-width:376px;"]),X=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemIconColumn",componentId:"sc-1dv52ek-2"})(["width:20px;"]),J=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemSeverityColumn",componentId:"sc-1dv52ek-3"})(["width:80px;"]),Z=({dataTestSubj:e,field:t,idAria:n,indices:o,isDisabled:s,options:l,setRiskScore:c})=>{const{services:u}=Object(W.j)(),{value:p,isMappingChecked:m,mapping:f}=t.value,{setValue:g}=t,b=Object(i.useCallback)(((e,t)=>{g({value:p,isMappingChecked:m,mapping:[...f.slice(0,t),...e,...f.slice(t+1)]})}),[p,m,f,g]),y=Object(i.useCallback)(((e,t,[n])=>{var a;const i=[{...f[e],field:null!==(a=null==n?void 0:n.name)&&void 0!==a?a:"",value:null!=n?f[e].value:"",operator:"equals",severity:t}];b(i,e)}),[f,b]),h=Object(i.useCallback)((e=>{g({value:e,isMappingChecked:m,mapping:f}),c(e)}),[m,f,g,c]),v=Object(i.useCallback)(((e,t,n)=>{const a=[{...f[e],field:f[e].field,value:null!=f[e].field&&""!==f[e].field?n:"",operator:"equals",severity:t}];b(a,e)}),[f,b]),E=Object(i.useCallback)((()=>{g({value:p,mapping:[...f],isMappingChecked:!m})}),[m,f,p,g]),x=Object(i.useMemo)((()=>r.a.createElement("div",null,r.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,Q.b)),r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(a.EuiText,{size:"xs"},Q.c))),[]),j=Object(i.useMemo)((()=>r.a.createElement("div",null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",onClick:s?d.noop:E},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiCheckbox,{id:"severity-mapping-override",checked:m,disabled:s,onChange:E})),r.a.createElement(a.EuiFlexItem,null,Q.d)),r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(Y,null,r.a.createElement(a.EuiText,{size:"xs"},Q.e)))),[E,s,m]);return r.a.createElement(a.EuiFlexGroup,{direction:"column"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFormRow,{label:x,labelAppend:t.labelAppend,helpText:t.helpText,error:"errorMessage",isInvalid:!1,fullWidth:!0,"data-test-subj":"detectionEngineStepAboutRuleSeverity",describedByIds:["detectionEngineStepAboutRuleSeverity"]},r.a.createElement(a.EuiSuperSelect,{fullWidth:!1,disabled:!1,valueOfSelected:p,onChange:h,options:l,"data-test-subj":"select"}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFormRow,{label:j,labelAppend:t.labelAppend,helpText:m?r.a.createElement(Y,null,Q.f):"",error:"errorMessage",isInvalid:!1,fullWidth:!0,"data-test-subj":`${e}-severityOverride`,describedByIds:n?[n]:void 0},r.a.createElement(Y,null,r.a.createElement(a.EuiSpacer,{size:"s"}),m&&r.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},r.a.createElement(K,null,r.a.createElement(a.EuiFormLabel,null,Q.g)),r.a.createElement(K,null,r.a.createElement(a.EuiFormLabel,null,Q.h)),r.a.createElement(X,{grow:!1}),r.a.createElement(J,{grow:!1},r.a.createElement(a.EuiFormLabel,null,Q.a)))),f.map(((e,t)=>{var n;return r.a.createElement(a.EuiFlexItem,{key:`${e.severity}-${t}`},r.a.createElement(a.EuiFlexGroup,{"data-test-subj":"severityOverrideRow",alignItems:"center",gutterSize:"s"},r.a.createElement(K,null,r.a.createElement(H.b,{placeholder:"",selectedField:ee(e,o),isLoading:!1,isDisabled:s,isClearable:!1,indexPattern:o,onChange:y.bind(null,t,e.severity),"data-test-subj":`detectionEngineStepAboutRuleSeverityMappingField-${e.severity}-${t}`,"aria-label":`detectionEngineStepAboutRuleSeverityMappingField-${e.severity}-${t}`})),r.a.createElement(K,null,r.a.createElement(H.a,{autocompleteService:u.unifiedSearch.autocomplete,placeholder:"",selectedField:ee(e,o),selectedValue:e.value,isClearable:!1,isDisabled:s,isLoading:!1,indexPattern:o,onChange:v.bind(null,t,e.severity),"data-test-subj":`detectionEngineStepAboutRuleSeverityMappingValue-${e.severity}-${t}`,"aria-label":`detectionEngineStepAboutRuleSeverityMappingValue-${e.severity}-${t}`})),r.a.createElement(X,{grow:!1},r.a.createElement(a.EuiIcon,{type:"sortRight"})),r.a.createElement(J,{grow:!1},null===(n=l.find((t=>t.value===e.severity)))||void 0===n?void 0:n.inputDisplay)))})))))))},ee=(e,t)=>{const{field:n}=e,[a]=t.fields.filter((({name:e})=>n===e));return null!=a?a:{name:n,type:"string"}};var te=n(811);const ne=s.a.div.withConfig({displayName:"NestedContent",componentId:"sc-1udkauk-0"})(["margin-left:24px;"]),ae=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemComboBoxColumn",componentId:"sc-1udkauk-1"})(["max-width:376px;"]),ie=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemIconColumn",componentId:"sc-1udkauk-2"})(["width:20px;"]),re=s()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemRiskScoreColumn",componentId:"sc-1udkauk-3"})(["width:160px;"]),oe=({dataTestSubj:e,field:t,idAria:n,indices:o,isDisabled:s,placeholder:l})=>{const{value:c,isMappingChecked:u,mapping:p}=t.value,{setValue:m}=t,f=Object(i.useMemo)((()=>["number"]),[]),g=Object(i.useMemo)((()=>se(p,o)),[p,o]),b=Object(i.useCallback)((e=>{const t=e.target.value;m({value:Number(t.trim()),isMappingChecked:u,mapping:p})}),[m,u,p]),y=Object(i.useCallback)((([e])=>{var t;m({value:c,isMappingChecked:u,mapping:[{field:null!==(t=null==e?void 0:e.name)&&void 0!==t?t:"",operator:"equals",value:"",risk_score:void 0}]})}),[m,c,u]),h=Object(i.useCallback)((()=>{m({value:c,isMappingChecked:!u,mapping:[...p]})}),[m,c,u,p]),v=Object(i.useMemo)((()=>r.a.createElement("div",null,r.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,te.a)),r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(a.EuiText,{size:"xs"},te.c))),[]),E=Object(i.useMemo)((()=>r.a.createElement("div",null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",onClick:s?d.noop:h},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiCheckbox,{id:"risk_score-mapping-override",checked:u,disabled:s,onChange:h})),r.a.createElement(a.EuiFlexItem,null,te.e)),r.a.createElement(a.EuiSpacer,{size:"xs"}),r.a.createElement(ne,null,r.a.createElement(a.EuiText,{size:"xs"},te.f)))),[u,h,s]);return r.a.createElement(a.EuiFlexGroup,{direction:"column"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFormRow,{label:v,labelAppend:t.labelAppend,helpText:t.helpText,error:"errorMessage",isInvalid:!1,fullWidth:!0,"data-test-subj":`${e}-defaultRisk`,describedByIds:n?[n]:void 0},r.a.createElement(a.EuiRange,{value:c,onChange:b,max:100,min:0,showRange:!0,showInput:!0,fullWidth:!1,showTicks:!0,tickInterval:25,"data-test-subj":`${e}-defaultRiskRange`}))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFormRow,{label:E,labelAppend:t.labelAppend,helpText:u?r.a.createElement(ne,null,te.g):"",error:"errorMessage",isInvalid:!1,fullWidth:!0,"data-test-subj":`${e}-riskOverride`,describedByIds:n?[n]:void 0},r.a.createElement(ne,null,r.a.createElement(a.EuiSpacer,{size:"s"}),u&&r.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},r.a.createElement(ae,null,r.a.createElement(a.EuiFormLabel,null,te.h)),r.a.createElement(ie,{grow:!1}),r.a.createElement(re,{grow:!1},r.a.createElement(a.EuiFormLabel,null,te.a)))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},r.a.createElement(ae,null,r.a.createElement(H.b,{placeholder:null!=l?l:"",indexPattern:o,selectedField:g,fieldTypeFilter:f,isLoading:!1,isClearable:!1,isDisabled:s,onChange:y,"data-test-subj":e,"aria-label":n})),r.a.createElement(ie,{grow:!1},r.a.createElement(a.EuiIcon,{type:"sortRight"})),r.a.createElement(re,{grow:!1},r.a.createElement(a.EuiText,{size:"s"},te.d)))))))))},se=(e,t)=>{var n,a;const i=null!==(n=null==e||null===(a=e[0])||void 0===a?void 0:a.field)&&void 0!==n?n:"",[r]=t.fields.filter((({name:e})=>null!=i&&i===e));return null!=r?r:{name:i,type:"number"}},le=({dataTestSubj:e,field:t,idAria:n,indices:o,isDisabled:s,fieldType:l,placeholder:c})=>{const u=Object(i.useCallback)((([e])=>{var n;t.setValue(null!==(n=null==e?void 0:e.name)&&void 0!==n?n:"")}),[t]),d=Object(i.useMemo)((()=>{var e;const n=null!==(e=t.value)&&void 0!==e?e:"",[a]=o.fields.filter((({name:e})=>null!=n&&n===e));return a}),[t.value,o]),p=Object(i.useMemo)((()=>[l]),[l]);return r.a.createElement(a.EuiFormRow,{"data-test-subj":e,describedByIds:n?[n]:void 0,fullWidth:!0,helpText:t.helpText,label:t.label,labelAppend:t.labelAppend},r.a.createElement(H.b,{placeholder:null!=c?c:"",indexPattern:o,selectedField:d,fieldTypeFilter:p,isLoading:!1,isDisabled:s,isClearable:!1,onChange:u,"data-test-subj":e,"aria-label":n,fieldInputWidth:500}))};var ce=n(183),ue=n(4),de=n(881),pe=n(894);const me=Object(m.j)({component:m.b});s.a.div.withConfig({displayName:"ThreeQuartersContainer",componentId:"sc-1uryycj-0"})(["max-width:740px;"]).displayName="ThreeQuartersContainer";const fe=s.a.div.withConfig({displayName:"TagContainer",componentId:"sc-1uryycj-1"})(["margin-top:16px;"]);fe.displayName="TagContainer";const ge=({ruleType:e,machineLearningJobId:t,index:n,dataViewId:o,timestampOverride:s,isActive:c=!1,isUpdateView:u=!1,isLoading:d,form:p})=>{const{data:f}=Object(W.j)().services,g=Object(i.useMemo)((()=>Object(l.f)(e)),[e]),{ruleIndices:y}=Object(de.a)(t,n),[h,{indexPatterns:v}]=Object(ce.b)(y),[E,x]=Object(i.useState)(v);Object(i.useEffect)((()=>{null==n||""!==o&&null!=o||x(v)}),[o,n,v]),Object(i.useEffect)((()=>{(async()=>{if(null!=o&&""!==o){const e=await f.dataViews.get(o);x(e)}})()}),[f.dataViews,o,v,x]);const{getFields:j}=p,O=Object(i.useCallback)((e=>{const t=B.h[e];if(null!=t){const e=j().riskScore;e.setValue({...e.value,value:t})}}),[j]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(U.a,{addPadding:!u},r.a.createElement(m.c,{form:p},r.a.createElement(me,{path:"name",componentProps:{idAria:"detectionEngineStepAboutRuleName","data-test-subj":"detectionEngineStepAboutRuleName",euiFieldProps:{fullWidth:!0,disabled:d}}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(me,{path:"description",componentProps:{idAria:"detectionEngineStepAboutRuleDescription","data-test-subj":"detectionEngineStepAboutRuleDescription",euiFieldProps:{disabled:d,compressed:!0,fullWidth:!0}}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(m.e,{path:"severity",component:Z,componentProps:{dataTestSubj:"detectionEngineStepAboutRuleSeverityField",idAria:"detectionEngineStepAboutRuleSeverityField",isDisabled:d||h,options:B.i,indices:E,setRiskScore:O}})),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(me,{path:"riskScore",component:oe,componentProps:{dataTestSubj:"detectionEngineStepAboutRuleRiskScore",idAria:"detectionEngineStepAboutRuleRiskScore",isDisabled:d||h,indices:E}})),r.a.createElement(fe,null,r.a.createElement(me,{path:"tags",componentProps:{idAria:"detectionEngineStepAboutRuleTags","data-test-subj":"detectionEngineStepAboutRuleTags",euiFieldProps:{fullWidth:!0,isDisabled:d||h,placeholder:""}}})),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(a.EuiAccordion,{"data-test-subj":"advancedSettings",id:"advancedSettingsAccordion",buttonContent:V.d},r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(m.e,{path:"references",component:b,componentProps:{addText:V.b,idAria:"detectionEngineStepAboutRuleReferenceUrls",isDisabled:d,dataTestSubj:"detectionEngineStepAboutRuleReferenceUrls",validate:z.c}}),r.a.createElement(m.e,{path:"falsePositives",component:b,componentProps:{addText:V.a,idAria:"detectionEngineStepAboutRuleFalsePositives",isDisabled:d,dataTestSubj:"detectionEngineStepAboutRuleFalsePositives"}}),r.a.createElement(m.e,{path:"threat",component:q,componentProps:{idAria:"detectionEngineStepAboutRuleMitreThreat",isDisabled:d,dataTestSubj:"detectionEngineStepAboutRuleMitreThreat"}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(m.e,{path:"investigationFields",component:pe.a,componentProps:{browserFields:E.fields,isDisabled:d||h,fullWidth:!0}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(m.e,{path:"note",component:G.a,componentProps:{idAria:"detectionEngineStepAboutRuleNote",isDisabled:d,dataTestSubj:"detectionEngineStepAboutRuleNote",placeholder:V.c}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(me,{path:"author",componentProps:{idAria:"detectionEngineStepAboutRuleAuthor","data-test-subj":"detectionEngineStepAboutRuleAuthor",euiFieldProps:{fullWidth:!0,isDisabled:d,placeholder:""}}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(me,{path:"license",componentProps:{idAria:"detectionEngineStepAboutRuleLicense","data-test-subj":"detectionEngineStepAboutRuleLicense",euiFieldProps:{fullWidth:!0,disabled:d,placeholder:""}}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(a.EuiFormRow,{label:V.g,fullWidth:!0},r.a.createElement(me,{path:"isAssociatedToEndpointList",componentProps:{idAria:"detectionEngineStepAboutRuleAssociatedToEndpointList","data-test-subj":"detectionEngineStepAboutRuleAssociatedToEndpointList",euiFieldProps:{disabled:d}}})),r.a.createElement(a.EuiFormRow,{label:V.e,fullWidth:!0},r.a.createElement(me,{path:"isBuildingBlock",componentProps:{idAria:"detectionEngineStepAboutRuleBuildingBlock","data-test-subj":"detectionEngineStepAboutRuleBuildingBlock",euiFieldProps:{disabled:d}}})),r.a.createElement(a.EuiSpacer,{size:"l"}),g&&r.a.createElement(r.a.Fragment,null,r.a.createElement(me,{path:"threatIndicatorPath",componentProps:{idAria:"detectionEngineStepAboutThreatIndicatorPath","data-test-subj":"detectionEngineStepAboutThreatIndicatorPath",euiFieldProps:{fullWidth:!0,disabled:d,placeholder:ue.I}}})),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(m.e,{path:"ruleNameOverride",component:le,componentProps:{dataTestSubj:"detectionEngineStepAboutRuleRuleNameOverride",fieldType:"string",idAria:"detectionEngineStepAboutRuleRuleNameOverride",indices:E,isDisabled:d||h,placeholder:""}}),r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(m.e,{path:"timestampOverride",component:le,componentProps:{dataTestSubj:"detectionEngineStepAboutRuleTimestampOverride",fieldType:"date",idAria:"detectionEngineStepAboutRuleTimestampOverride",indices:E,isDisabled:d||h,placeholder:""}}),!!s&&"@timestamp"!==s&&r.a.createElement(r.a.Fragment,null,r.a.createElement(me,{path:"timestampOverrideFallbackDisabled",componentProps:{idAria:"detectionTimestampOverrideFallbackDisabled","data-test-subj":"detectionTimestampOverrideFallbackDisabled",euiFieldProps:{disabled:d}}}))))))},be=Object(i.memo)(ge),ye=({addPadding:e,defaultValues:t,descriptionColumns:n,isInPanelView:a=!1})=>r.a.createElement(U.a,{"data-test-subj":"aboutStep",addPadding:e},r.a.createElement(y.a,{columns:n,schema:$.a,data:t,isInPanelView:a})),he=Object(i.memo)(ye)},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r}));const a="matrixHistogram";let i;!function(e){e.authentications="authentications",e.anomalies="anomalies",e.events="events",e.alerts="alerts",e.dns="dns",e.preview="preview"}(i||(i={}));const r={[i.alerts]:"aggregations.alertsGroup.buckets",[i.anomalies]:"aggregations.anomalyActionGroup.buckets",[i.authentications]:"aggregations.eventActionGroup.buckets",[i.dns]:"aggregations.dns_name_query_count.buckets",[i.events]:"aggregations.eventActionGroup.buckets",[i.preview]:"aggregations.preview.buckets"}},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(2),i=n.n(a),r=n(42),o=n(822),s=n(40),l=n(44),c=n(108),u=n(375),d=n(239),p=n(461),m=n(399);const f=i.a.memo((({endpointId:e,hostName:t,casesInfo:n,cancelCallback:r,successCallback:o})=>{const[f,g]=Object(a.useState)(""),[b,y]=Object(a.useState)(!1),h=n.map((e=>e.id)),{loading:v,isolateHost:E}=(({endpointId:e,comment:t,caseIds:n})=>{const[i,r]=Object(a.useState)(!1),{addError:o}=Object(c.a)();return{loading:i,isolateHost:Object(a.useCallback)((async()=>{try{r(!0);const a=await Object(d.b)({endpointId:e,comment:t,caseIds:n&&n.length>0?n:void 0});return r(!1),!!a.action}catch(e){return r(!1),o(e.message,{title:u.b}),!1}}),[e,t,n,o])}})({endpointId:e,comment:f,caseIds:h}),x=Object(a.useCallback)((async()=>{const e=await E();y(e),e&&o&&o()}),[E,o]),j=Object(a.useCallback)((()=>r()),[r]),O=Object(a.useCallback)((({comment:e})=>g(e)),[]),S=Object(a.useMemo)((()=>n.length),[n]),k=Object(a.useMemo)((()=>i.a.createElement(m.a,{onClick:j,buttonText:p.c})),[j]),w=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(s.EuiSpacer,{size:"m"}),i.a.createElement(m.b,{hostName:t,onCancel:j,onConfirm:x,onChange:O,comment:f,isLoading:v,messageAppend:i.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.detections.hostIsolation.impactedCases",defaultMessage:"This action will be added to {cases}.",values:{cases:i.a.createElement("b",null,Object(p.a)(S))}})}))),[t,j,x,O,f,v,S]);return b?k:w}));f.displayName="IsolateHost";const g=i.a.memo((({endpointId:e,hostName:t,casesInfo:n,cancelCallback:r,successCallback:o})=>{const[f,g]=Object(a.useState)(""),[b,y]=Object(a.useState)(!1),h=n.map((e=>e.id)),{loading:v,unIsolateHost:E}=(({endpointId:e,comment:t,caseIds:n})=>{const[i,r]=Object(a.useState)(!1),{addError:o}=Object(c.a)();return{loading:i,unIsolateHost:Object(a.useCallback)((async()=>{try{r(!0);const a=await Object(d.c)({endpointId:e,comment:t,caseIds:n&&n.length>0?n:void 0});return r(!1),!!a.action}catch(e){return r(!1),o(e.message,{title:u.b}),!1}}),[e,t,n,o])}})({endpointId:e,comment:f,caseIds:h}),x=Object(a.useCallback)((async()=>{const e=await E();y(e),e&&o&&o()}),[o,E]),j=Object(a.useCallback)((()=>r()),[r]),O=Object(a.useCallback)((({comment:e})=>g(e)),[]),S=Object(a.useMemo)((()=>n.length),[n]),k=Object(a.useMemo)((()=>i.a.createElement(m.a,{onClick:j,buttonText:p.c})),[j]),w=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(s.EuiSpacer,{size:"m"}),i.a.createElement(m.d,{hostName:t,onCancel:j,onConfirm:x,onChange:O,comment:f,isLoading:v,messageAppend:i.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.detections.hostIsolation.impactedCases",defaultMessage:"This action will be added to {cases}.",values:{cases:i.a.createElement("b",null,Object(p.a)(S))}})}))),[t,j,x,O,f,v,S]);return b?k:w}));g.displayName="UnisolateHost";const b=i.a.memo((({details:e,cancelCallback:t,successCallback:n,isolateAction:s})=>{const l=Object(a.useMemo)((()=>{var t;const n=null===(t=Object(r.find)({category:"agent",field:"agent.id"},e))||void 0===t?void 0:t.values;return n?n[0]:""}),[e]),c=Object(a.useMemo)((()=>{var t;const n=null===(t=Object(r.find)({category:"host",field:"host.name"},e))||void 0===t?void 0:t.values;return n?n[0]:""}),[e]),u=Object(a.useMemo)((()=>{var t;const n=null===(t=Object(r.find)({category:"_id",field:"_id"},e))||void 0===t?void 0:t.values;return n?n[0]:""}),[e]),{casesInfo:d}=Object(o.a)({alertId:u});return"isolateHost"===s?i.a.createElement(f,{endpointId:l,hostName:c,casesInfo:d,cancelCallback:t,successCallback:n}):i.a.createElement(g,{endpointId:l,hostName:c,casesInfo:d,cancelCallback:t,successCallback:n})}));b.displayName="HostIsolationContent"},function(e,t,n){"use strict";n.d(t,"a",(function(){return p}));var a=n(43),i=n(120),r=n(128);a.exact(a.type({id:r.z})),a.exact(a.type({items:a.array(i.i)})),a.exact(a.type({name:a.string,description:a.string}));var o=n(112);a.intersection([a.exact(a.type({namespace_types:i.a})),a.exact(a.partial({ids:o.l,list_ids:o.l}))]);const s=a.exact(a.type({name:r.x,id:r.z,rule_id:r.E,exception_lists:i.y})),l=a.intersection([i.o,a.exact(a.type({referenced_rules:a.array(s)}))]),c=a.record(i.B,l);a.exact(a.type({references:a.array(c)}));var u=n(4);const d=`${u.Cb}/rules`,p=(u.gb,`${d}/exceptions/_find_references`)},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"c",(function(){return b}));var a=n(8),i=n(197),r=n(102),o=n(213),s=n(3),l=n(51);const c=e=>"parsing_exception"===e||"verification_exception"===e||"mapping_exception"===e,u=e=>Object(a.has)(e,"error.type"),d=e=>e.error.root_cause.filter((e=>c(e.type))).map((e=>e.reason));var p=n(371);let m;!function(e){e.FAILED_REQUEST="ERR_FAILED_REQUEST",e.INVALID_EQL="ERR_INVALID_EQL"}(m||(m={}));const f=(e,t)=>{let n,a=[];return(...i)=>(n&&clearTimeout(n),n=setTimeout((()=>{const t=e(...i);a.forEach((e=>e(t))),a=[]}),t),new Promise((e=>a.push(e))))},g=async(...e)=>{const[{value:t,formData:n}]=e,{query:f}=t,g=f.query,{dataViewId:b,index:y,ruleType:h}=n;if(void 0===h&&!Object(a.isEmpty)(g)||Object(i.b)(h)&&!Object(a.isEmpty)(g))try{const{data:e}=r.b.get();let t=null==y?void 0:y.join(),i={};if(null!=b&&""!==b&&n.dataSourceType===o.a.DataView){const n=await e.dataViews.get(b);t=n.title,i=n.getRuntimeMappings()}const p=(new AbortController).signal,f=await(async({data:e,dataViewTitle:t,query:n,signal:i,runtimeMappings:r})=>{const{rawResponse:o}=await Object(s.firstValueFrom)(e.search.search({params:{index:t,body:{query:n,runtime_mappings:r,size:0}},options:{ignore:[400]}},{strategy:l.EQL_SEARCH_STRATEGY,abortSignal:i}));if((e=>u(e)&&c(Object(a.get)(e,"error.type")))(o.body))return{valid:!1,errors:d(o.body)};if(u(o.body))throw new Error(JSON.stringify(o.body));return{valid:!0,errors:[]}})({data:e,query:g,signal:p,dataViewTitle:t,runtimeMappings:i});if(!1===(null==f?void 0:f.valid))return{code:m.INVALID_EQL,message:"",messages:f.errors}}catch(e){return{code:m.FAILED_REQUEST,message:p.m,error:e}}},b=e=>{const t=e.errors.length>0,n=!e.isChangingValue&&!t;if(t){const[t]=e.errors,a=t.message;return t.code===m.INVALID_EQL?{isValid:n,message:a,messages:t.messages}:{isValid:n,message:a,error:t.error}}return{isValid:n,message:""}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(104),i=n.n(a),r=(n(2),n(53)),o=n.n(r),s=n(40),l=n(21);const c={iconType:"questionInCircle",color:"gray"},u={binary:{iconType:"tokenBinary"},boolean:{iconType:"tokenBoolean"},conflict:{iconType:"warning",color:"euiColorVis9",shape:"square"},date:{iconType:"tokenDate"},date_range:{iconType:"tokenDate"},dense_vector:{iconType:"tokenDenseVector"},geo_point:{iconType:"tokenGeo"},geo_shape:{iconType:"tokenGeo"},ip:{iconType:"tokenIP"},ip_range:{iconType:"tokenIP"},flattened:{iconType:"tokenFlattened"},match_only_text:{iconType:"tokenString"},murmur3:{iconType:"tokenSearchType"},number:{iconType:"tokenNumber"},number_range:{iconType:"tokenNumber"},rank_feature:{iconType:"tokenRankFeature"},rank_features:{iconType:"tokenRankFeatures"},histogram:{iconType:"tokenHistogram"},_source:{iconType:"editorCodeBlock",color:"gray"},point:{iconType:"tokenShape"},shape:{iconType:"tokenShape"},string:{iconType:"tokenString"},text:{iconType:"tokenString"},keyword:{iconType:"tokenKeyword"},gauge:{iconType:"tokenMetricGauge"},counter:{iconType:"tokenMetricCounter"},nested:{iconType:"tokenNested"},version:{iconType:"tokenTag"}};function d({type:e,label:t,size:n="s",scripted:a,className:r,...d}){const p=u[e]||c;return Object(l.jsx)(s.EuiToken,i()({},p,{className:o()("kbnFieldIcon",r),"aria-label":t||e,title:t||e,size:n,fill:a?"dark":void 0},d))}n(1269);Object.keys({xs:"kbnFieldButton--xs",s:"kbnFieldButton--s"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(181),o=n(333),s=n(102),l=n(470),c=n(265);const u=n(5).i18n.translate("xpack.securitySolution.detectionEngine.rulesSnoozeBadge.error.unableToFetch",{defaultMessage:"Unable to fetch snooze settings"});function d({ruleId:e,showTooltipInline:t=!1}){const n=Object(s.j)().services.triggersActionsUi.getRulesListNotifyBadge,{snoozeSettings:a,error:d}=function(e){var t,n;const{state:{rulesSnoozeSettings:a}}=null!==(t=Object(c.c)())&&void 0!==t?t:{state:{}},{data:i,isFetching:r,isError:o}=Object(l.a)([e],{enabled:!(null!=a&&a.data[e]||null!=a&&a.isFetching)}),s=null!==(n=null==a?void 0:a.data[e])&&void 0!==n?n:null==i?void 0:i[e],d=(null==a?void 0:a.isFetching)||r;return{snoozeSettings:s,error:(null==a?void 0:a.isError)||o||!s&&!d?u:void 0}}(e),[{canUserCRUD:p}]=Object(r.b)(),m=Object(o.c)(p),f=Object(l.b)();return i.a.createElement(n,{ruleId:e,snoozeSettings:a,loading:!a&&!d,disabled:!m||d,showTooltipInline:t,onRuleChanged:f})}},function(e,t,n){"use strict";let a,i;n.d(t,"d",(function(){return a})),n.d(t,"e",(function(){return i})),n.d(t,"l",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"f",(function(){return s})),n.d(t,"j",(function(){return u})),n.d(t,"k",(function(){return d})),n.d(t,"h",(function(){return p})),n.d(t,"i",(function(){return m})),n.d(t,"g",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"c",(function(){return c.c})),function(e){e.timestamp="@timestamp",e.hostName="host.name",e.hostRiskScore="host.risk.calculated_score_norm",e.hostRisk="host.risk.calculated_level",e.userName="user.name",e.userRiskScore="user.risk.calculated_score_norm",e.userRisk="user.risk.calculated_level",e.alertsCount="alertsCount"}(a||(a={})),function(e){e.unknown="Unknown",e.low="Low",e.moderate="Moderate",e.high="High",e.critical="Critical"}(i||(i={}));const r=e=>"user"in e,o={[i.critical]:0,[i.high]:0,[i.low]:0,[i.moderate]:0,[i.unknown]:0},s=[i.unknown,i.low,i.moderate,i.high,i.critical];var l=n(4),c=n(599);const u=(e,t=!0,n)=>n?Object(c.d)(e):`${l.Yb}${t?"latest_":""}${e}`,d=(e,t=!0,n)=>n?Object(c.d)(e):`${l.ac}${t?"latest_":""}${e}`,p=e=>({terms:{"host.name":e}}),m=e=>({terms:{"user.name":e}}),f=(e,t)=>t===c.c.host?{terms:{"host.name":e}}:{terms:{"user.name":e}};let g;!function(e){e.hostsRiskScore="hostsRiskScore",e.usersRiskScore="usersRiskScore",e.kpiRiskScore="kpiRiskScore"}(g||(g={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return a})),n.d(t,"d",(function(){return c})),n.d(t,"b",(function(){return u}));var a={};n.r(a),n.d(a,"selectGlobalUrlParam",(function(){return r}));var i=n(514);const r=e=>e.globalUrlParam;var o=n(130),s=n.n(o),l=n(208);const c={},u=Object(l.reducerWithInitialState)(c).case(i.registerUrlParam,((e,{key:t,initialValue:n})=>void 0!==e[t]?(console.error(`Url param key '${t}' is already being used.`),e):{...e,[t]:n})).case(i.deregisterUrlParam,((e,{key:t})=>{const n={...e};return delete n[t],n})).case(i.updateUrlParam,((e,{key:t,value:n})=>void 0===e[t]||s()(e[t],n)?e:{...e,[t]:n})).build()},function(e,t,n){"use strict";n.d(t,"a",(function(){return v})),n.d(t,"b",(function(){return x}));var a=n(2),i=n.n(a),r=n(5),o=n(40),s=n(141),l=n(290),c=n(829),u=n(107),d=n(732),p=n(794),m=n(102),f=n(368),g=n(827),b=n(126),y=n(487),h=n(381);const v=Object.freeze({flyoutEditTitle:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutEditTitle",{defaultMessage:"Add artifact"}),flyoutCreateTitle:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutCreateTitle",{defaultMessage:"Create artifact"}),flyoutCancelButtonLabel:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutCancelButtonLabel",{defaultMessage:"Cancel"}),flyoutCreateSubmitButtonLabel:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutCreateSubmitButtonLabel",{defaultMessage:"Add"}),flyoutEditSubmitButtonLabel:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutEditSubmitButtonLabel",{defaultMessage:"Save"}),flyoutDowngradedLicenseTitle:r.i18n.translate("xpack.securitySolution.artifactListPage.expiredLicenseTitle",{defaultMessage:"Expired License"}),flyoutDowngradedLicenseInfo:r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutDowngradedLicenseInfo",{defaultMessage:"Your Kibana license has been downgraded. Future policy configurations will now be globally assigned to all policies."}),flyoutDowngradedLicenseDocsInfo:e=>r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutDowngradedLicenseDocsInfo",{defaultMessage:"For more information, see our documentation."}),flyoutEditItemLoadFailure:e=>r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutEditItemLoadFailure",{defaultMessage:"Failed to retrieve item for edit. Reason: {errorMessage}",values:{errorMessage:e}}),flyoutCreateSubmitSuccess:({name:e})=>r.i18n.translate("xpack.securitySolution.some_page.flyoutCreateSubmitSuccess",{defaultMessage:'"{name}" has been added.',values:{name:e}}),flyoutEditSubmitSuccess:({name:e})=>r.i18n.translate("xpack.securitySolution.artifactListPage.flyoutEditSubmitSuccess",{defaultMessage:'"{name}" has been updated.',values:{name:e}})}),E=(e,t)=>({isValid:!1,item:null!=t?t:Object(f.a)(e)}),x=Object(a.memo)((({apiClient:e,item:t,policies:n,policiesIsLoading:r,FormComponent:f,onSuccess:x,onClose:j,submitHandler:O,labels:S={},"data-test-subj":k,size:w="m"})=>{var I,T;const{docLinks:{links:{securitySolution:C}}}=Object(m.j)().services,M=Object(u.a)(k),A=Object(m.n)(),_=Object(c.a)(),F=Object(d.a)(),{urlParams:D}=Object(l.a)(),N=Object(s.b)(),P=Object(a.useMemo)((()=>({...v,...S})),[S]),[R,L]=Object(a.useState)(!1),[q,B]=Object(a.useState)(void 0),z="edit"===D.show,$=z?"edit":"create",{isLoading:V,mutateAsync:U,error:G}=Object(g.a)(e,$),H=Object(a.useMemo)((()=>O?R:V),[R,V,O]),W=Object(a.useMemo)((()=>O?q:G),[q,G,O]),{isRefetching:Q,error:Y,refetch:K}=Object(h.d)(e,null!==(I=D.itemId)&&void 0!==I?I:"",void 0,{enabled:!1}),[X,J]=Object(a.useState)(E.bind(null,e.listId,t)),Z=((e,t)=>{const n=Object(b.a)().endpointPrivileges;return Object(a.useMemo)((()=>"edit"===t&&!n.canCreateArtifactsByPolicy&&Object(y.d)(e)),[n.canCreateArtifactsByPolicy,e,t])})({tags:null!==(T=X.item.tags)&&void 0!==T?T:[]},$),ee=Object(a.useMemo)((()=>!!t||!!X.item.item_id),[X.item.item_id,t]),te=Object(a.useMemo)((()=>z&&!ee),[ee,z]),ne=Object(a.useCallback)((()=>{H||(F({...D,itemId:void 0,show:void 0},!0),j())}),[H,j,F,D]),ae=Object(a.useCallback)((({item:e,isValid:t})=>{N()&&J({item:e,isValid:t})}),[N]),ie=Object(a.useCallback)((e=>{A.addSuccess(z?P.flyoutEditSubmitSuccess(e):P.flyoutCreateSubmitSuccess(e)),N()&&(F({...D,itemId:void 0,show:void 0},!0),x())}),[z,N,P,x,F,A,D]),re=Object(a.useCallback)((()=>{O?(L(!0),O(X.item,$).then(ie).catch((e=>{N()&&B(e)})).finally((()=>{N()&&L(!1)}))):U(X.item).then(ie)}),[$,X.item,ie,N,U,O]);return Object(a.useEffect)((()=>{!z||ee||Y||!te||Q||K().then((({data:t})=>{t&&N()&&J(E(e.listId,t))}))}),[e.listId,Y,K,z,te,Q,ee,N]),Object(a.useEffect)((()=>{var e;z&&Y&&(A.addWarning(P.flyoutEditItemLoadFailure((null==Y||null===(e=Y.body)||void 0===e?void 0:e.message)||Y.message)),F({itemId:void 0,show:void 0}))}),[Y,z,P,F,A,D.itemId]),!_||Y?null:i.a.createElement(o.EuiFlyout,{size:w,onClose:ne,"data-test-subj":k},i.a.createElement(o.EuiFlyoutHeader,{hasBorder:!0},i.a.createElement(o.EuiTitle,{size:"m"},i.a.createElement("h2",null,z?P.flyoutEditTitle:P.flyoutCreateTitle))),!te&&Z&&i.a.createElement(o.EuiCallOut,{title:P.flyoutDowngradedLicenseTitle,color:"warning",iconType:"help","data-test-subj":M("expiredLicenseCallout")},P.flyoutDowngradedLicenseInfo," ",P.flyoutDowngradedLicenseDocsInfo(C)),i.a.createElement(o.EuiFlyoutBody,null,te&&i.a.createElement(p.a,{"data-test-subj":M("loader")}),!te&&i.a.createElement(f,{onChange:ae,disabled:H,item:X.item,error:null!=W?W:void 0,mode:$,policies:n,policiesIsLoading:r})),!te&&i.a.createElement(o.EuiFlyoutFooter,null,i.a.createElement(o.EuiFlexGroup,{justifyContent:"spaceBetween"},i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiButtonEmpty,{"data-test-subj":M("cancelButton"),onClick:ne,disabled:H},P.flyoutCancelButtonLabel)),i.a.createElement(o.EuiFlexItem,{grow:!1},i.a.createElement(o.EuiButton,{"data-test-subj":M("submitButton"),fill:!0,disabled:!X.isValid||H,onClick:re,isLoading:H},z?P.flyoutEditSubmitButtonLabel:P.flyoutCreateSubmitButtonLabel)))))}));x.displayName="ArtifactFlyout"},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(104),i=n.n(a),r=n(40),o=n(42),s=n(2),l=n.n(s),c=n(41),u=n.n(c),d=n(125),p=n(5);const m=[{value:"s",text:p.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.secondsOptionDescription",{defaultMessage:"Seconds"})},{value:"m",text:p.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.minutesOptionDescription",{defaultMessage:"Minutes"})},{value:"h",text:p.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.hoursOptionDescription",{defaultMessage:"Hours"})},{value:"d",text:p.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRuleForm.daysOptionDescription",{defaultMessage:"Days"})}],f=u()(r.EuiFlexItem).withConfig({displayName:"StyledLabelAppend",componentId:"sc-gbwqm5-0"})(["&.euiFlexItem{margin-left:31px;}"]),g=u()(r.EuiFormRow).withConfig({displayName:"StyledEuiFormRow",componentId:"sc-gbwqm5-1"})(["max-width:none;.euiFormControlLayout{max-width:auto;width:auto;}.euiFormControlLayout__childrenWrapper > *:first-child{box-shadow:none;height:38px;width:100%;}.euiFormControlLayout__childrenWrapper > select{background-color:",";color:",";}.euiFormControlLayout--group .euiFormControlLayout{min-width:100px;}.euiFormControlLayoutIcons{color:",";}.euiFormControlLayout:not(:first-child){border-left:1px solid ",";}"],(({theme:e})=>Object(r.transparentize)(e.eui.euiColorPrimary,.1)),(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiColorPrimary),(({theme:e})=>e.eui.euiColorLightShade)),b=u()(r.EuiSelect).withConfig({displayName:"MyEuiSelect",componentId:"sc-gbwqm5-2"})(["width:auto;"]),y=({dataTestSubj:e,field:t,idAria:n,isDisabled:a,minimumValue:c=0,timeTypes:u=["s","m","h"],fullWidth:p=!1})=>{const[y,h]=Object(s.useState)(u[0]),[v,E]=Object(s.useState)(0),{isInvalid:x,errorMessage:j}=Object(d.i)(t),{value:O,setValue:S}=t,k=Object(s.useCallback)((e=>{h(e.target.value),S(`${v}${e.target.value}`)}),[S,v]),w=Object(s.useCallback)((e=>{const t=((e,t=0)=>{const n=parseInt(e,10);return Number.isNaN(n)?t:Math.max(t,Math.min(n,Number.MAX_SAFE_INTEGER))})(e.target.value,c);E(t),S(`${t}${y}`)}),[c,S,y]);Object(s.useEffect)((()=>{if(O!==`${v}${y}`){const e=O.match(/\d+/g),t=O.match(/[a-zA-Z]+/g);Object(o.isEmpty)(e)||null==e||isNaN(Number(e[0]))||Number(e[0])===Number(v)||E(Number(e[0])),!Object(o.isEmpty)(t)&&null!=t&&u.includes(t[0])&&t[0]!==y&&h(t[0])}}),[y,u,v,O]);const I={disabled:a},T=Object(s.useMemo)((()=>l.a.createElement(r.EuiFlexGroup,{gutterSize:"s",justifyContent:"flexStart",alignItems:"center"},l.a.createElement(r.EuiFlexItem,{grow:!1,component:"span"},t.label),l.a.createElement(f,{grow:!1,component:"span"},t.labelAppend))),[t.label,t.labelAppend]);return l.a.createElement(g,{label:T,helpText:t.helpText,error:j,isInvalid:x,fullWidth:p,"data-test-subj":e,describedByIds:n?[n]:void 0},l.a.createElement(r.EuiFormControlLayout,{append:l.a.createElement(b,i()({fullWidth:!1,options:m.filter((e=>u.includes(e.value))),onChange:k,value:y,"aria-label":t.label,"data-test-subj":"timeType"},I))},l.a.createElement(r.EuiFieldNumber,i()({fullWidth:!0,min:c,max:Number.MAX_SAFE_INTEGER,onChange:w,value:v,"data-test-subj":"interval"},I))))}},function(e,t,n){"use strict";n.d(t,"b",(function(){return a.a})),n.d(t,"a",(function(){return y})),n(742),n(566),n(592),n(594);var a=n(593),i=(n(595),n(2)),r=n(244),o=n(214),s=n(8),l=n(226),c=n(181),u=n(4),d=n(102),p=n(605),m=n(900),f=n(198),g=n(353);const b={contentText:"",rulesReferences:[],isLoading:!1,listId:"",listNamespaceType:"single"},y=e=>{const t=Object(d.n)(),{services:n}=Object(d.j)(),{http:a,notifications:y}=n,{navigateToApp:h}=n.application,{exportExceptionList:v,deleteExceptionList:E,duplicateExceptionList:x}=Object(o.c)(a),[{loading:j,canUserCRUD:O,canUserREAD:S}]=Object(c.b)(),[k,w]=Object(i.useState)(),[I,T]=Object(i.useState)(!1),[C,M]=Object(i.useState)(),[A,_]=Object(i.useState)(!1),[F,D]=Object(i.useState)([]),[N,P]=Object(i.useState)([]),[R,L]=Object(i.useState)(!0),[q,B]=Object(i.useState)(""),[z,$]=Object(i.useState)(),[V,U]=Object(i.useState)(!1),[G,H]=Object(i.useState)(b),[W,Q]=Object(i.useState)(!0),[Y,K]=Object(i.useState)(!1),X=Object(g.b)(),J=Object(i.useMemo)((()=>({pageId:u.wc.exceptions,path:"",onNavigate:()=>{h(u.l,{deepLinkId:u.wc.exceptions,path:""})}})),[h]),Z=Object(i.useCallback)(((e,n,a,i)=>{null==t||t.addError(e,{title:null!=a?a:"",toastMessage:null!=i?i:""}),B(null!=n?n:"")}),[t]),ee=Object(i.useCallback)((async e=>{const t=await Object(p.e)(e.list_id);D(t)}),[]),te=Object(i.useCallback)((async()=>{try{if(l.a.includes(e))return _(!0);w(!0);const t=await Object(p.d)({id:e,http:a});if(!t||!Object(m.b)(t))return w(!1),_(!0);if(M(t),await ee(t),w(!1),_(!1),Object(m.a)(t))return L(!1)}catch(e){Z(e,r.i.ERROR,f.q,f.p)}}),[e,a,ee,Z]);Object(i.useEffect)((()=>{te()}),[te]);const[ne,ae]=Object(i.useState)(!1),ie=Object(i.useCallback)((async t=>{try{var n;C&&await Object(p.i)({http:a,list:{id:C.id,list_id:e,type:C.type,name:t.name,description:null!==(n=t.description)&&void 0!==n?n:"",namespace_type:C.namespace_type}})}catch(e){Z(e)}}),[e,Z,a,C]),re=Object(i.useCallback)((async e=>{try{if(!C)return;await v({id:C.id,listId:C.list_id,includeExpiredExceptions:e,namespaceType:C.namespace_type,onError:e=>Z(e),onSuccess:e=>{$(e),null==t||t.addSuccess(f.C(C.name))}})}catch(e){Z(e,void 0,f.r,f.s)}}),[C,v,Z,t]),oe=Object(i.useCallback)((async e=>{try{if(!C)return;await x({listId:C.list_id,includeExpiredExceptions:e,namespaceType:C.namespace_type,onError:e=>Z(e),onSuccess:e=>{null==t||t.addSuccess(f.v(C.name)),h(u.l,{deepLinkId:u.wc.exceptions,path:`/details/${e.list_id}`})}})}catch(e){Z(e,void 0,f.n,f.o)}}),[C,x,Z,t,h]),se=Object(i.useCallback)((()=>{$(void 0)}),[]),le=Object(i.useCallback)((e=>()=>{y.toasts.addSuccess({title:f.nb(null!=e?e:G.listId)})}),[y.toasts,G.listId]),ce=Object(i.useCallback)((e=>{Z(e)}),[Z]),ue=Object(i.useCallback)((async()=>{try{if(!C)return;await E({id:C.id,namespaceType:C.namespace_type,onError:ce,onSuccess:le})}catch(e){Z(e)}finally{H(b),U(!1),h(u.l,{deepLinkId:u.wc.exceptions,path:""})}}),[C,E,ce,le,Z,h]),de=Object(i.useCallback)((()=>{try{if(!C)return;H({contentText:F.length?f.pb(F.length):f.mb(C.name),rulesReferences:F.map((({name:e})=>e)),isLoading:!0,listId:C.list_id,listNamespaceType:C.namespace_type}),U(!0)}catch(e){Z(e)}}),[Z,F,C]),pe=Object(i.useCallback)((()=>{U(!1),H({contentText:"",rulesReferences:[],isLoading:!1,listId:"",listNamespaceType:"single"})}),[]),me=Object(i.useCallback)((async()=>{try{await Object(p.h)({rules:F,listId:e}),ue()}catch(e){Z(e)}}),[e,F,Z,ue]),fe=Object(i.useCallback)((()=>{D(N),P(N),ae(!1),T(!1),Q(!0)}),[N]),ge=Object(i.useCallback)((()=>{ae(!0)}),[]),be=Object(i.useCallback)((()=>N.filter((e=>!F.includes(e)))),[F,N]),ye=Object(i.useCallback)((()=>F.filter((e=>!N.includes(e)))),[F,N]),he=Object(i.useCallback)((e=>{P(e),Q(!1)}),[]),ve=Object(i.useCallback)((async()=>{try{if(!C)return ae(!1);T(!0);const t=be(),n=ye();if(!t.length&&!n.length||Object(s.isEqual)(t,n))return fe();Promise.all([Object(p.h)({rules:n,listId:e}),Object(p.f)({rules:t,listId:e,id:C.id,listType:C.type,listNamespaceType:C.namespace_type})]).then((()=>{K(!0),fe()})).then((()=>K(!1))).then((()=>X())).catch((e=>{Z(e,void 0,f.E,f.F),T(!1)})).finally((()=>{te()}))}catch(e){Z(e)}}),[C,be,ye,fe,e,X,Z,te]),Ee=Object(i.useCallback)((()=>{ae(!1)}),[]);return{isLoading:k||j,invalidListId:A,isReadOnly:!(O||!S),list:C,listName:null==C?void 0:C.name,listDescription:null==C?void 0:C.description,listId:e,canUserEditList:R,linkedRules:F,exportedList:z,handleOnDownload:se,viewerStatus:q,showManageRulesFlyout:ne,headerBackOptions:J,referenceModalState:G,showReferenceErrorModal:V,showManageButtonLoader:I,refreshExceptions:Y,disableManageButton:W,handleDelete:de,onDuplicateList:oe,onEditListDetails:ie,onExportList:re,onDeleteList:ue,onManageRules:ge,onSaveManageRules:ve,onCancelManageRules:Ee,onRuleSelectionChange:he,handleCloseReferenceErrorModal:pe,handleReferenceDelete:me}}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(102),i=n(215);const r=async e=>a.b.get().http.post(i.r,{body:JSON.stringify(e),version:"2023-10-31"}),o=async e=>a.b.get().http.post(i.x,{body:JSON.stringify(e),version:"2023-10-31"})},function(e,t,n){"use strict";(function(e){}).call(this,n(300).Buffer)},function(e,t,n){"use strict";(function(e){}).call(this,n(300).Buffer)},function(e,t,n){"use strict";const a=n(763);e.exports=class extends Error{constructor(e){super(e.filter((e=>""!==e)).map((e=>"string"==typeof e?e:e instanceof Error?e.message:a(e))).join(" ")||"Unknown error"),"function"==typeof Error.captureStackTrace&&Error.captureStackTrace(this,t.assert)}}},function(e,t,n){"use strict";e.exports=function(...e){try{return JSON.stringify.apply(null,e)}catch(e){return"[Cannot display object: "+e.message+"]"}}},function(e,t,n){"use strict";(function(n){const a={};t=e.exports={array:Array.prototype,buffer:n&&n.prototype,date:Date.prototype,error:Error.prototype,generic:Object.prototype,map:Map.prototype,promise:Promise.prototype,regex:RegExp.prototype,set:Set.prototype,weakMap:WeakMap.prototype,weakSet:WeakSet.prototype},a.typeMap=new Map([["[object Error]",t.error],["[object Map]",t.map],["[object Promise]",t.promise],["[object Set]",t.set],["[object WeakMap]",t.weakMap],["[object WeakSet]",t.weakSet]]),t.getInternalProto=function(e){if(Array.isArray(e))return t.array;if(n&&e instanceof n)return t.buffer;if(e instanceof Date)return t.date;if(e instanceof RegExp)return t.regex;if(e instanceof Error)return t.error;const i=Object.prototype.toString.call(e);return a.typeMap.get(i)||t.generic}}).call(this,n(300).Buffer)},function(e,t,n){"use strict";(function(t){const a=n(301),i=n(539),r=n(540),o={};e.exports=o.merge=function(e,n,s){if(a(e&&"object"==typeof e,"Invalid target value: must be an object"),a(null==n||"object"==typeof n,"Invalid source value: must be null, undefined, or an object"),!n)return e;if(s=Object.assign({nullOverride:!0,mergeArrays:!0},s),Array.isArray(n)){a(Array.isArray(e),"Cannot merge array onto an object"),s.mergeArrays||(e.length=0);for(let t=0;t<n.length;++t)e.push(i(n[t],{symbols:s.symbols}));return e}const l=r.keys(n,s);for(let a=0;a<l.length;++a){const r=l[a];if("__proto__"===r||!Object.prototype.propertyIsEnumerable.call(n,r))continue;const c=n[r];if(c&&"object"==typeof c){if(e[r]===c)continue;!e[r]||"object"!=typeof e[r]||Array.isArray(e[r])!==Array.isArray(c)||c instanceof Date||t&&t.isBuffer(c)||c instanceof RegExp?e[r]=i(c,{symbols:s.symbols}):o.merge(e[r],c,s)}else(null!=c||s.nullOverride)&&(e[r]=c)}return e}}).call(this,n(300).Buffer)},function(e,t,n){"use strict";e.exports=function(){}},function(e,t,n){"use strict";(function(t){const a=n(764),i={mismatched:null};e.exports=function(e,t,n){return n=Object.assign({prototype:!0},n),!!i.isDeepEqual(e,t,n,[])},i.isDeepEqual=function(e,n,r,o){if(e===n)return 0!==e||1/e==1/n;const s=typeof e;if(s!==typeof n)return!1;if(null===e||null===n)return!1;if("function"===s){if(!r.deepFunction||e.toString()!==n.toString())return!1}else if("object"!==s)return e!=e&&n!=n;const l=i.getSharedType(e,n,!!r.prototype);switch(l){case a.buffer:return t&&t.prototype.equals.call(e,n);case a.promise:return e===n;case a.regex:return e.toString()===n.toString();case i.mismatched:return!1}for(let t=o.length-1;t>=0;--t)if(o[t].isSame(e,n))return!0;o.push(new i.SeenEntry(e,n));try{return!!i.isDeepEqualObj(l,e,n,r,o)}finally{o.pop()}},i.getSharedType=function(e,t,n){if(n)return Object.getPrototypeOf(e)!==Object.getPrototypeOf(t)?i.mismatched:a.getInternalProto(e);const r=a.getInternalProto(e);return r!==a.getInternalProto(t)?i.mismatched:r},i.valueOf=function(e){const t=e.valueOf;if(void 0===t)return e;try{return t.call(e)}catch(e){return e}},i.hasOwnEnumerableProperty=function(e,t){return Object.prototype.propertyIsEnumerable.call(e,t)},i.isSetSimpleEqual=function(e,t){for(const n of Set.prototype.values.call(e))if(!Set.prototype.has.call(t,n))return!1;return!0},i.isDeepEqualObj=function(e,t,n,r,o){const{isDeepEqual:s,valueOf:l,hasOwnEnumerableProperty:c}=i,{keys:u,getOwnPropertySymbols:d}=Object;if(e===a.array){if(!r.part){if(t.length!==n.length)return!1;for(let e=0;e<t.length;++e)if(!s(t[e],n[e],r,o))return!1;return!0}for(const e of t)for(const t of n)if(s(e,t,r,o))return!0}else if(e===a.set){if(t.size!==n.size)return!1;if(!i.isSetSimpleEqual(t,n)){const e=new Set(Set.prototype.values.call(n));for(const n of Set.prototype.values.call(t)){if(e.delete(n))continue;let t=!1;for(const a of e)if(s(n,a,r,o)){e.delete(a),t=!0;break}if(!t)return!1}}}else if(e===a.map){if(t.size!==n.size)return!1;for(const[e,a]of Map.prototype.entries.call(t)){if(void 0===a&&!Map.prototype.has.call(n,e))return!1;if(!s(a,Map.prototype.get.call(n,e),r,o))return!1}}else if(e===a.error&&(t.name!==n.name||t.message!==n.message))return!1;const p=l(t),m=l(n);if((t!==p||n!==m)&&!s(p,m,r,o))return!1;const f=u(t);if(!r.part&&f.length!==u(n).length&&!r.skip)return!1;let g=0;for(const e of f)if(r.skip&&r.skip.includes(e))void 0===n[e]&&++g;else{if(!c(n,e))return!1;if(!s(t[e],n[e],r,o))return!1}if(!r.part&&f.length-g!==u(n).length)return!1;if(!1!==r.symbols){const e=d(t),a=new Set(d(n));for(const i of e){if(!r.skip||!r.skip.includes(i))if(c(t,i)){if(!c(n,i))return!1;if(!s(t[i],n[i],r,o))return!1}else if(c(n,i))return!1;a.delete(i)}for(const e of a)if(c(n,e))return!1}return!0},i.SeenEntry=class{constructor(e,t){this.obj=e,this.ref=t}isSame(e,t){return this.obj===e&&this.ref===t}}}).call(this,n(300).Buffer)},function(e,t,n){"use strict";e.exports=function(e){return e.replace(/[\^\$\.\*\+\-\?\=\!\:\|\\\/\(\)\[\]\{\}\,]/g,"\\$&")}},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(50),i=n.n(a);const r=e=>{const{from:t,to:n}=e,a=i()(n).diff(i()(t));return{kind:"absolute",fromStr:void 0,toStr:void 0,from:i()(t).subtract(a).toISOString(),to:i()(n).subtract(a).toISOString()}},o=e=>{const{from:t,to:n}=e,a=i()(n).diff(i()(t));return{kind:"absolute",fromStr:void 0,toStr:void 0,from:i()(t).add(a).toISOString(),to:i()(n).add(a).toISOString()}}},function(e,t,n){"use strict";n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(208),i=n(534),r=n(708);const o={},s=Object(a.reducerWithInitialState)(o).case(r.a,((e,{tableId:t,...n})=>({...e,[t]:{activeGroups:[],options:Object(i.c)(t),...e[t]?e[t]:{},...n}})))},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>{const t=Object.values(e);return e=>e&&t.includes(e)?e:null}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.__FOR_TESTING__resetDeprecationsSeen=t.ofType=t.combineEpics=t.StateObservable=t.createEpicMiddleware=void 0;var a=n(1160);Object.defineProperty(t,"createEpicMiddleware",{enumerable:!0,get:function(){return a.createEpicMiddleware}});var i=n(773);Object.defineProperty(t,"StateObservable",{enumerable:!0,get:function(){return i.StateObservable}});var r=n(1161);Object.defineProperty(t,"combineEpics",{enumerable:!0,get:function(){return r.combineEpics}});var o=n(1162);Object.defineProperty(t,"ofType",{enumerable:!0,get:function(){return o.ofType}});var s=n(548);Object.defineProperty(t,"__FOR_TESTING__resetDeprecationsSeen",{enumerable:!0,get:function(){return s.resetDeprecationsSeen}})},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.StateObservable=void 0;var a=n(34),i=n(3),r=function(e){function t(t,n){var a=e.call(this,(function(e){var t=a.__notifier.subscribe(e);return t&&!t.closed&&e.next(a.value),t}))||this;return a.__notifier=new i.Subject,a.value=n,t.subscribe((function(e){e!==a.value&&(a.value=e,a.__notifier.next(e))})),a}return a.__extends(t,e),t}(i.Observable);t.StateObservable=r},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(47);const i=()=>Object(a.v4)(),r=({prevPromptContexts:e,promptContext:t})=>({...e,[t.id]:{...t}})},function(e,t,n){"use strict";n.d(t,"f",(function(){return i})),n.d(t,"g",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"h",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"e",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsAriaLabel",{defaultMessage:"Settings"}),r=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsTooltip",{defaultMessage:"Settings"}),o=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsConversationsMenuItemTitle",{defaultMessage:"Conversations"}),s=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsQuickPromptsMenuItemTitle",{defaultMessage:"Quick Prompts"}),l=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsSystemPromptsMenuItemTitle",{defaultMessage:"System Prompts"}),c=a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsAnonymizationMenuItemTitle",{defaultMessage:"Anonymization"}),u=(a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsFunctionsMenuItemTitle",{defaultMessage:"Functions"}),a.i18n.translate("xpack.elasticAssistant.assistant.settings.settingsAdvancedMenuItemTitle",{defaultMessage:"Advanced"}),a.i18n.translate("xpack.elasticAssistant.assistant.settings.modalTitle",{defaultMessage:"System Prompts"}),a.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.slCancelButtonTitle",{defaultMessage:"Cancel"})),d=a.i18n.translate("xpack.elasticAssistant.assistant.promptEditor.systemPrompt.slSaveButtonTitle",{defaultMessage:"Save"})},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.elasticAssistant.connectors.models.modelSelector.placeholderText",{defaultMessage:"Select or type to create new..."}),r=a.i18n.translate("xpack.elasticAssistant.connectors.models.modelSelector.modelTitle",{defaultMessage:"Model"}),o=a.i18n.translate("xpack.elasticAssistant.connectors.models.modelSelector.helpLabel",{defaultMessage:"Model to use for this connector"}),s=a.i18n.translate("xpack.elasticAssistant.connectors.models.modelSelector.customOptionText",{defaultMessage:"Create new Model named"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return u}));var a=n(2),i=n.n(a),r=n(40),o=n(776),s=n(21);const l="gpt-3.5-turbo",c=[l,"gpt-4"],u=i.a.memo((({models:e=c,onModelSelectionChange:t,selectedModel:n=c[0]})=>{const[i,l]=Object(a.useState)(e.map((e=>({label:e})))),u=Object(a.useMemo)((()=>n?[{label:n}]:[]),[n]),d=Object(a.useCallback)((n=>{var a,i;const r=0===n.length?void 0:null!==(a=e.find((e=>{var t;return e===(null===(t=n[0])||void 0===t?void 0:t.label)})))&&void 0!==a?a:null===(i=n[0])||void 0===i?void 0:i.label;null==t||t(r)}),[t,e]),p=Object(a.useCallback)(((e,t=[])=>{if(!e||!e.trim().toLowerCase())return;const n=e.trim().toLowerCase(),a={value:e,label:e};-1!==t.findIndex((e=>e.label.trim().toLowerCase()===n))||l([...i,a]),d([a])}),[d,i]),m=Object(a.useCallback)((e=>{0===e.length?d([]):-1!==i.findIndex((t=>t.label===(null==e?void 0:e[0].label)))&&d(e)}),[d,i]);return Object(s.jsx)(r.EuiComboBox,{"aria-label":o.b,compressed:!0,isClearable:!1,placeholder:o.d,customOptionText:`${o.a} {searchValue}`,singleSelection:{asPlainText:!0},options:i,selectedOptions:u,onChange:m,onCreateOption:p,fullWidth:!0})}));u.displayName="ModelSelector"},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importStar(n(2)),r=n(2),o=a.__importDefault(n(360)),s=a.__importDefault(n(1169));t.default=function(e){return function(t){var n,l;l=i.isValidElement(t)?(n=t).props:t;var c=o.default({buffered:[],time:0,duration:0,paused:!0,muted:!1,volume:1}),u=c[0],d=c[1],p=r.useRef(null),m=function(e,t){return function(n){try{t&&t(n)}finally{e&&e(n)}}},f=function(){return d({paused:!1})},g=function(){return d({paused:!0})},b=function(){var e=p.current;e&&d({muted:e.muted,volume:e.volume})},y=function(){var e=p.current;if(e){var t=e.duration,n=e.buffered;d({duration:t,buffered:s.default(n)})}},h=function(){var e=p.current;e&&d({time:e.currentTime})},v=function(){var e=p.current;e&&d({buffered:s.default(e.buffered)})};n=n?i.cloneElement(n,a.__assign(a.__assign({controls:!1},l),{ref:p,onPlay:m(l.onPlay,f),onPause:m(l.onPause,g),onVolumeChange:m(l.onVolumeChange,b),onDurationChange:m(l.onDurationChange,y),onTimeUpdate:m(l.onTimeUpdate,h),onProgress:m(l.onProgress,v)})):i.createElement(e,a.__assign(a.__assign({controls:!1},l),{ref:p,onPlay:m(l.onPlay,f),onPause:m(l.onPause,g),onVolumeChange:m(l.onVolumeChange,b),onDurationChange:m(l.onDurationChange,y),onTimeUpdate:m(l.onTimeUpdate,h),onProgress:m(l.onProgress,v)}));var E=!1,x={play:function(){var e=p.current;if(e&&!E){var t=e.play();if("object"==typeof t){E=!0;var n=function(){E=!1};t.then(n,n)}return t}},pause:function(){var e=p.current;if(e&&!E)return e.pause()},seek:function(e){var t=p.current;t&&void 0!==u.duration&&(e=Math.min(u.duration,Math.max(0,e)),t.currentTime=e)},volume:function(e){var t=p.current;t&&(e=Math.min(1,Math.max(0,e)),t.volume=e,d({volume:e}))},mute:function(){var e=p.current;e&&(e.muted=!0)},unmute:function(){var e=p.current;e&&(e.muted=!1)}};return r.useEffect((function(){var e=p.current;e&&(d({volume:e.volume,muted:e.muted,paused:e.paused}),l.autoPlay&&e.paused&&x.play())}),[l.src]),[n,u,x,p]}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=function(e,t){return"boolean"==typeof t?t:!e};t.default=function(e){return a.useReducer(i,e)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(781)),o=n(446);t.default=function(e,t,n){void 0===e&&(e=0),void 0===t&&(t=null),void 0===n&&(n=null);var a=o.resolveHookState(e);"number"!=typeof a&&console.error("initialValue has to be a number, got "+typeof e),"number"==typeof n?a=Math.max(a,n):null!==n&&console.error("min has to be a number, got "+typeof n),"number"==typeof t?a=Math.min(a,t):null!==t&&console.error("max has to be a number, got "+typeof t);var s=r.default(a),l=s[0],c=s[1];return[l(),i.useMemo((function(){var e=function(e){var a=l(),i=o.resolveHookState(e,a);a!==i&&("number"==typeof n&&(i=Math.max(i,n)),"number"==typeof t&&(i=Math.min(i,t)),a!==i&&c(i))};return{get:l,set:e,inc:function(t){void 0===t&&(t=1);var n=o.resolveHookState(t,l());"number"!=typeof n&&console.error("delta has to be a number or function returning a number, got "+typeof n),e((function(e){return e+n}))},dec:function(t){void 0===t&&(t=1);var n=o.resolveHookState(t,l());"number"!=typeof n&&console.error("delta has to be a number or function returning a number, got "+typeof n),e((function(e){return e-n}))},reset:function(t){void 0===t&&(t=a);var n=o.resolveHookState(t,l());"number"!=typeof n&&console.error("value has to be a number or function returning a number, got "+typeof n),a=n,e(n)}}}),[a,n,t])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(308)),o=n(446);t.default=function(e){var t=i.useRef(o.resolveHookState(e)),n=r.default();return i.useMemo((function(){return[function(){return t.current},function(e){t.current=o.resolveHookState(e,t.current),n()}]}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){void 0===t&&(t=!0);var n=a.useState(!1),i=n[0],r=n[1];return a.useEffect((function(){var n=function(){return r(!0)},a=function(){return r(!1)};t&&e&&e.current&&(e.current.addEventListener("mouseover",n),e.current.addEventListener("mouseout",a));var i=e.current;return function(){t&&i&&(i.removeEventListener("mouseover",n),i.removeEventListener("mouseout",a))}}),[t,e]),i}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(447)),o=function(){};t.default=function(e,t,n,a){void 0===t&&(t=o),void 0===n&&(n={}),void 0===a&&(a=[e]);var s=n.event,l=void 0===s?"keydown":s,c=n.target,u=n.options,d=i.useMemo((function(){var n,a="function"==typeof(n=e)?n:"string"==typeof n?function(e){return e.key===n}:n?function(){return!0}:function(){return!1};return function(e){if(a(e))return t(e)}}),a);r.default(l,d,c,u)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(783));t.default=function(e){var t=i.useState([!1,null]),n=t[0],a=t[1];return r.default(e,(function(e){return a([!0,e])}),{event:"keydown"},[n]),r.default(e,(function(e){return a([!1,e])}),{event:"keyup"},[n]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){var t=a.useRef(e);return t.current=e,t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){a.useEffect((function(){return e&&e(),function(){t&&t()}}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(308)),o=n(446);t.default=function(e){void 0===e&&(e=[]);var t=i.useRef(o.resolveHookState(e)),n=r.default(),a=i.useMemo((function(){var i={set:function(e){t.current=o.resolveHookState(e,t.current),n()},push:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];e.length&&a.set((function(t){return t.concat(e)}))},updateAt:function(e,t){a.set((function(n){var a=n.slice();return a[e]=t,a}))},insertAt:function(e,t){a.set((function(n){var a=n.slice();return e>a.length?a[e]=t:a.splice(e,0,t),a}))},update:function(e,t){a.set((function(n){return n.map((function(n){return e(n,t)?t:n}))}))},updateFirst:function(e,n){var i=t.current.findIndex((function(t){return e(t,n)}));i>=0&&a.updateAt(i,n)},upsert:function(e,n){var i=t.current.findIndex((function(t){return e(t,n)}));i>=0?a.updateAt(i,n):a.push(n)},sort:function(e){a.set((function(t){return t.slice().sort(e)}))},filter:function(e,t){a.set((function(n){return n.slice().filter(e,t)}))},removeAt:function(e){a.set((function(t){var n=t.slice();return n.splice(e,1),n}))},clear:function(){a.set([])},reset:function(){a.set(o.resolveHookState(e).slice())}};return i.remove=i.removeAt,i}),[]);return[t.current,a]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2);t.default=function(e){void 0===e&&(e={});var t=i.useState(e),n=t[0],r=t[1],o=i.useMemo((function(){return{set:function(e,t){r((function(n){var i;return a.__assign(a.__assign({},n),((i={})[e]=t,i))}))},setAll:function(e){r(e)},remove:function(e){r((function(t){var n=t,i=e;return n[i],a.__rest(n,["symbol"==typeof i?i:i+""])}))},reset:function(){return r(e)}}}),[r]),s=a.__assign({get:i.useCallback((function(e){return n[e]}),[n])},o);return[n,s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(361));t.default=function(e){a.default((function(){e()}))}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(362));t.default=function(e){var t=r.default({docX:0,docY:0,posX:0,posY:0,elX:0,elY:0,elH:0,elW:0}),n=t[0],a=t[1];return i.useEffect((function(){var t=function(t){if(e&&e.current){var n=e.current.getBoundingClientRect(),i=n.left,r=n.top,o=n.width,s=n.height,l=i+window.pageXOffset,c=r+window.pageYOffset,u=t.pageX-l,d=t.pageY-c;a({docX:t.pageX,docY:t.pageY,posX:l,posY:c,elX:u,elY:d,elH:s,elW:o})}};return document.addEventListener("mousemove",t),function(){document.removeEventListener("mousemove",t)}}),[e]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(35));t.default=function(e,t){void 0===e&&(e=1e12),void 0===t&&(t=0);var n=i.useState(0),a=n[0],o=n[1];return r.default((function(){var n,a,i,r=function(){var t=Math.min(1,(Date.now()-i)/e);o(t),s()},s=function(){n=requestAnimationFrame(r)},l=setTimeout((function(){a=setTimeout((function(){cancelAnimationFrame(n),o(1)}),e),i=Date.now(),s()}),t);return function(){clearTimeout(a),clearTimeout(l),cancelAnimationFrame(n)}}),[e,t]),a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=parseInt(i.version.substr(0,i.version.indexOf(".")))>15,o=function(e){return"function"==typeof e};t.default=function(e,t){for(var n=[],s=2;s<arguments.length;s++)n[s-2]=arguments[s];var l=e.render,c=e.children,u=void 0===c?l:c,d=e.component,p=e.comp,m=void 0===p?d:p;return o(u)?u.apply(void 0,a.__spreadArrays([t],n)):m?i.createElement(m,t):u instanceof Array?r?u:i.createElement.apply(void 0,a.__spreadArrays(["div",null],u)):u&&u instanceof Object?"string"==typeof u.type?u:i.cloneElement(u,Object.assign({},u.props,t)):u||null}},,,function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("securitySolutionPackages.ecsDataQualityDashboard.incompatibleTab.dataQualityDashboardConversationId",{defaultMessage:"Data Quality dashboard"})},function(e,t,n){!function(e){"use strict";var t,n=[],a="ResizeObserver loop completed with undelivered notifications.";!function(e){e.BORDER_BOX="border-box",e.CONTENT_BOX="content-box",e.DEVICE_PIXEL_CONTENT_BOX="device-pixel-content-box"}(t||(t={}));var i,r=function(e){return Object.freeze(e)},o=function(e,t){this.inlineSize=e,this.blockSize=t,r(this)},s=function(){function e(e,t,n,a){return this.x=e,this.y=t,this.width=n,this.height=a,this.top=this.y,this.left=this.x,this.bottom=this.top+this.height,this.right=this.left+this.width,r(this)}return e.prototype.toJSON=function(){var e=this;return{x:e.x,y:e.y,top:e.top,right:e.right,bottom:e.bottom,left:e.left,width:e.width,height:e.height}},e.fromRect=function(t){return new e(t.x,t.y,t.width,t.height)},e}(),l=function(e){return e instanceof SVGElement&&"getBBox"in e},c=function(e){if(l(e)){var t=e.getBBox(),n=t.width,a=t.height;return!n&&!a}var i=e,r=i.offsetWidth,o=i.offsetHeight;return!(r||o||e.getClientRects().length)},u=function(e){var t;if(e instanceof Element)return!0;var n=null===(t=null==e?void 0:e.ownerDocument)||void 0===t?void 0:t.defaultView;return!!(n&&e instanceof n.Element)},d="undefined"!=typeof window?window:{},p=new WeakMap,m=/auto|scroll/,f=/^tb|vertical/,g=/msie|trident/i.test(d.navigator&&d.navigator.userAgent),b=function(e){return parseFloat(e||"0")},y=function(e,t,n){return void 0===e&&(e=0),void 0===t&&(t=0),void 0===n&&(n=!1),new o((n?t:e)||0,(n?e:t)||0)},h=r({devicePixelContentBoxSize:y(),borderBoxSize:y(),contentBoxSize:y(),contentRect:new s(0,0,0,0)}),v=function(e,t){if(void 0===t&&(t=!1),p.has(e)&&!t)return p.get(e);if(c(e))return p.set(e,h),h;var n=getComputedStyle(e),a=l(e)&&e.ownerSVGElement&&e.getBBox(),i=!g&&"border-box"===n.boxSizing,o=f.test(n.writingMode||""),u=!a&&m.test(n.overflowY||""),d=!a&&m.test(n.overflowX||""),v=a?0:b(n.paddingTop),E=a?0:b(n.paddingRight),x=a?0:b(n.paddingBottom),j=a?0:b(n.paddingLeft),O=a?0:b(n.borderTopWidth),S=a?0:b(n.borderRightWidth),k=a?0:b(n.borderBottomWidth),w=j+E,I=v+x,T=(a?0:b(n.borderLeftWidth))+S,C=O+k,M=d?e.offsetHeight-C-e.clientHeight:0,A=u?e.offsetWidth-T-e.clientWidth:0,_=i?w+T:0,F=i?I+C:0,D=a?a.width:b(n.width)-_-A,N=a?a.height:b(n.height)-F-M,P=D+w+A+T,R=N+I+M+C,L=r({devicePixelContentBoxSize:y(Math.round(D*devicePixelRatio),Math.round(N*devicePixelRatio),o),borderBoxSize:y(P,R,o),contentBoxSize:y(D,N,o),contentRect:new s(j,v,D,N)});return p.set(e,L),L},E=function(e,n,a){var i=v(e,a),r=i.borderBoxSize,o=i.contentBoxSize,s=i.devicePixelContentBoxSize;switch(n){case t.DEVICE_PIXEL_CONTENT_BOX:return s;case t.BORDER_BOX:return r;default:return o}},x=function(e){var t=v(e);this.target=e,this.contentRect=t.contentRect,this.borderBoxSize=r([t.borderBoxSize]),this.contentBoxSize=r([t.contentBoxSize]),this.devicePixelContentBoxSize=r([t.devicePixelContentBoxSize])},j=function(e){if(c(e))return 1/0;for(var t=0,n=e.parentNode;n;)t+=1,n=n.parentNode;return t},O=function(){var e=1/0,t=[];n.forEach((function(n){if(0!==n.activeTargets.length){var a=[];n.activeTargets.forEach((function(t){var n=new x(t.target),i=j(t.target);a.push(n),t.lastReportedSize=E(t.target,t.observedBox),i<e&&(e=i)})),t.push((function(){n.callback.call(n.observer,a,n.observer)})),n.activeTargets.splice(0,n.activeTargets.length)}}));for(var a=0,i=t;a<i.length;a++)(0,i[a])();return e},S=function(e){n.forEach((function(t){t.activeTargets.splice(0,t.activeTargets.length),t.skippedTargets.splice(0,t.skippedTargets.length),t.observationTargets.forEach((function(n){n.isActive()&&(j(n.target)>e?t.activeTargets.push(n):t.skippedTargets.push(n))}))}))},k=function(){var e,t=0;for(S(t);n.some((function(e){return e.activeTargets.length>0}));)t=O(),S(t);return n.some((function(e){return e.skippedTargets.length>0}))&&("function"==typeof ErrorEvent?e=new ErrorEvent("error",{message:a}):((e=document.createEvent("Event")).initEvent("error",!1,!1),e.message=a),window.dispatchEvent(e)),t>0},w=[],I=function(e){if(!i){var t=0,n=document.createTextNode("");new MutationObserver((function(){return w.splice(0).forEach((function(e){return e()}))})).observe(n,{characterData:!0}),i=function(){n.textContent="".concat(t?t--:t++)}}w.push(e),i()},T=0,C={attributes:!0,characterData:!0,childList:!0,subtree:!0},M=["resize","load","transitionend","animationend","animationstart","animationiteration","keyup","keydown","mouseup","mousedown","mouseover","mouseout","blur","focus"],A=function(e){return void 0===e&&(e=0),Date.now()+e},_=!1,F=new(function(){function e(){var e=this;this.stopped=!0,this.listener=function(){return e.schedule()}}return e.prototype.run=function(e){var t,n=this;if(void 0===e&&(e=250),!_){_=!0;var a=A(e);t=function(){var t=!1;try{t=k()}finally{if(_=!1,e=a-A(),!T)return;t?n.run(1e3):e>0?n.run(e):n.start()}},I((function(){requestAnimationFrame(t)}))}},e.prototype.schedule=function(){this.stop(),this.run()},e.prototype.observe=function(){var e=this,t=function(){return e.observer&&e.observer.observe(document.body,C)};document.body?t():d.addEventListener("DOMContentLoaded",t)},e.prototype.start=function(){var e=this;this.stopped&&(this.stopped=!1,this.observer=new MutationObserver(this.listener),this.observe(),M.forEach((function(t){return d.addEventListener(t,e.listener,!0)})))},e.prototype.stop=function(){var e=this;this.stopped||(this.observer&&this.observer.disconnect(),M.forEach((function(t){return d.removeEventListener(t,e.listener,!0)})),this.stopped=!0)},e}()),D=function(e){!T&&e>0&&F.start(),!(T+=e)&&F.stop()},N=function(){function e(e,n){this.target=e,this.observedBox=n||t.CONTENT_BOX,this.lastReportedSize={inlineSize:0,blockSize:0}}return e.prototype.isActive=function(){var e,t=E(this.target,this.observedBox,!0);return e=this.target,!l(e)&&!function(e){switch(e.tagName){case"INPUT":if("image"!==e.type)break;case"VIDEO":case"AUDIO":case"EMBED":case"OBJECT":case"CANVAS":case"IFRAME":case"IMG":return!0}return!1}(e)&&"inline"===getComputedStyle(e).display&&(this.lastReportedSize=t),this.lastReportedSize.inlineSize!==t.inlineSize||this.lastReportedSize.blockSize!==t.blockSize},e}(),P=function(e,t){this.activeTargets=[],this.skippedTargets=[],this.observationTargets=[],this.observer=e,this.callback=t},R=new WeakMap,L=function(e,t){for(var n=0;n<e.length;n+=1)if(e[n].target===t)return n;return-1},q=function(){function e(){}return e.connect=function(e,t){var n=new P(e,t);R.set(e,n)},e.observe=function(e,t,a){var i=R.get(e),r=0===i.observationTargets.length;L(i.observationTargets,t)<0&&(r&&n.push(i),i.observationTargets.push(new N(t,a&&a.box)),D(1),F.schedule())},e.unobserve=function(e,t){var a=R.get(e),i=L(a.observationTargets,t),r=1===a.observationTargets.length;i>=0&&(r&&n.splice(n.indexOf(a),1),a.observationTargets.splice(i,1),D(-1))},e.disconnect=function(e){var t=this,n=R.get(e);n.observationTargets.slice().forEach((function(n){return t.unobserve(e,n.target)})),n.activeTargets.splice(0,n.activeTargets.length)},e}(),B=function(){function e(e){if(0===arguments.length)throw new TypeError("Failed to construct 'ResizeObserver': 1 argument required, but only 0 present.");if("function"!=typeof e)throw new TypeError("Failed to construct 'ResizeObserver': The callback provided as parameter 1 is not a function.");q.connect(this,e)}return e.prototype.observe=function(e,t){if(0===arguments.length)throw new TypeError("Failed to execute 'observe' on 'ResizeObserver': 1 argument required, but only 0 present.");if(!u(e))throw new TypeError("Failed to execute 'observe' on 'ResizeObserver': parameter 1 is not of type 'Element");q.observe(this,e,t)},e.prototype.unobserve=function(e){if(0===arguments.length)throw new TypeError("Failed to execute 'unobserve' on 'ResizeObserver': 1 argument required, but only 0 present.");if(!u(e))throw new TypeError("Failed to execute 'unobserve' on 'ResizeObserver': parameter 1 is not of type 'Element");q.unobserve(this,e)},e.prototype.disconnect=function(){q.disconnect(this)},e.toString=function(){return"function ResizeObserver () { [polyfill code] }"},e}();e.ResizeObserver=B,e.ResizeObserverEntry=x,e.ResizeObserverSize=o,Object.defineProperty(e,"__esModule",{value:!0})}(t)},function(e,t,n){"use strict";n.d(t,"a",(function(){return M}));var a=n(40),i=n(48),r=n(42),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(134),d=n(113),p=n(4),m=n(102),f=n(117),g=n(224),b=n(393),y=n(149),h=n(274),v=n(123),E=n(231),x=n(162),j=n(473),O=n(168),S=n(925),k=n(330),w=n(284),I=n(212),T=n(492);const C=c()(a.EuiFlexGroup).withConfig({displayName:"UserRiskOverviewWrapper",componentId:"sc-1f042fn-0"})(["padding-top:",";width:",";"],(({theme:e})=>e.eui.euiSizeM),(({$width:e})=>e)),M=s.a.memo((({anomaliesData:e,contextID:t,sourcererScopeId:n,data:l,id:c,isDraggable:M=!1,isInDetailsSidePanel:A=!1,isLoadingAnomaliesData:_,loading:F,narrowDateRange:D,startDate:N,endDate:P,userName:R,indexPatterns:L,jobNameById:q})=>{const B=Object(x.a)(),z=Object(E.a)(B),[$]=Object(m.p)(p.B),V=Object(o.useMemo)((()=>R?Object(d.E)([R]):void 0),[R]),{from:U,to:G}=Object(u.a)(),H=Object(o.useMemo)((()=>({from:U,to:G})),[U,G]),{data:W,isAuthorized:Q}=Object(w.c)({filterQuery:V,skip:null==R,timerange:H,riskEntity:d.w.user}),Y=Object(o.useCallback)(((e,a)=>s.a.createElement(g.a,{rowItems:Object(r.getOr)([],e,a),attrName:e,idPrefix:t?`user-overview-${t}`:"user-overview",isDraggable:M,sourcererScopeId:n})),[t,M,n]),[K,X]=Object(o.useMemo)((()=>{const e=W&&W.length>0?W[0]:void 0;return[{title:s.a.createElement(T.a,{title:S.k,riskScoreEntity:d.w.user}),description:s.a.createElement(s.a.Fragment,null,e?Math.round(e.user.risk.calculated_score_norm):Object(f.d)())},{title:s.a.createElement(T.a,{title:S.j,riskScoreEntity:d.w.host}),description:s.a.createElement(s.a.Fragment,null,e?s.a.createElement(I.b,{severity:e.user.risk.calculated_level,hideBackgroundColor:!0}):Object(f.d)())}]}),[W]),J=Object(o.useMemo)((()=>[{title:S.i,description:l&&l.user?Y("user.id",l):Object(f.d)()},{title:S.h,description:l&&l.user?Y("user.domain",l):Object(f.d)()}]),[l,Y]),Z=Object(o.useMemo)((()=>z?[...J,{title:S.g,description:s.a.createElement(j.a,{anomalies:e,startDate:N,endDate:P,isLoading:_,narrowDateRange:D,jobNameById:q})}]:J),[e,J,P,_,D,N,z,q]),ee=Object(o.useMemo)((()=>[Z,[{title:S.a,description:s.a.createElement(b.a,{indexPatterns:L,field:"user.name",value:R,type:b.b.FIRST_SEEN})},{title:S.f,description:s.a.createElement(b.a,{indexPatterns:L,field:"user.name",value:R,type:b.b.LAST_SEEN})}],[{title:S.d,description:Y("host.os.name",l)},{title:S.b,description:Y("host.os.family",l)},{title:S.c,description:s.a.createElement(g.a,{rowItems:Object(r.getOr)([],"host.ip",l),attrName:"host.ip",idPrefix:t?`user-overview-${t}`:"user-overview",sourcererScopeId:n,isDraggable:M,render:e=>null!=e?s.a.createElement(v.h,{ip:e}):Object(f.d)()})}]]),[l,L,Y,t,n,M,R,Z]);return s.a.createElement(s.a.Fragment,null,s.a.createElement(y.c,null,s.a.createElement(O.g,{direction:A?"column":"row","data-test-subj":"user-overview"},!A&&s.a.createElement(y.b,{queryId:c,title:S.e,inspectIndex:0}),ee.map(((e,t)=>s.a.createElement(k.a,{descriptionList:e,key:t}))),F&&s.a.createElement(h.a,{overlay:!0,overlayBackground:$?i.euiDarkVars.euiPageBackgroundColor:i.euiLightVars.euiPageBackgroundColor,size:"xl"}))),Q&&s.a.createElement(C,{gutterSize:A?"m":"none",direction:A?"column":"row","data-test-subj":"user-risk-overview",$width:A?"100%":"66.6%"},s.a.createElement(a.EuiFlexItem,null,s.a.createElement(O.d,{listItems:[K]})),s.a.createElement(a.EuiFlexItem,null,s.a.createElement(O.d,{listItems:[X]}))))}));M.displayName="UserOverview"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n.n(a),r=n(40);const o=e=>String(Math.ceil(e));i.a.memo((({score:e})=>{const t=o(e),n=s(e);return i.a.createElement(r.EuiHealth,{color:n},t)})).displayName="ScoreHealth";const s=e=>e>=75?"#fe5050":e>=50?"#fba740":e>=25?"#fdec25":e>=3?"#8bc8fb":e>=0?"#d2e9f7":"#ffffff"},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>{const t=Object.entries(e);if(Array.isArray(t[0])){const[[e,n]]=t;return[e,n]}return[null,null]}},function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"f",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"c",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.entityAnalytics.totalLabel",{defaultMessage:"Total"}),r=a.i18n.translate("xpack.securitySolution.entityAnalytics.hostsRiskDashboard.title",{defaultMessage:"Host Risk Scores"}),o=a.i18n.translate("xpack.securitySolution.entityAnalytics.usersRiskDashboard.title",{defaultMessage:"User Risk Scores"}),s=a.i18n.translate("xpack.securitySolution.entityAnalytics.hostsRiskDashboard.hostsTableTooltip",{defaultMessage:"The host risk table is not affected by the time range. This table shows the latest recorded risk score for each host."}),l=a.i18n.translate("xpack.securitySolution.entityAnalytics.usersRiskDashboard.usersTableTooltip",{defaultMessage:"The user risk table is not affected by the time range. This table shows the latest recorded risk score for each user."}),c=a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.tableTooltipTitle",{defaultMessage:"In Technical Preview"})},function(e,t,n){"use strict";(function(e,t){n(1264);var a=n(1265),i=n.n(a);n(82),n(8),n(1266),i.a.resolve(i.a.join(e,"..")),"\n/*\n * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one\n * or more contributor license agreements. Licensed under the Elastic License\n * 2.0 and the Server Side Public License, v 1; you may not use this file except\n * in compliance with, at your election, the Elastic License 2.0 or the Server\n * Side Public License, v 1.\n */\n// ---------------------------------- WARNING ----------------------------------\n// this file was generated, and should not be edited by hand\n// ---------------------------------- WARNING ----------------------------------\nimport * as rt from 'io-ts';\nimport { Either } from 'fp-ts/lib/Either';\n%%IMPORTS%%\nconst ISO_DATE_PATTERN = /^d{4}-d{2}-d{2}Td{2}:d{2}:d{2}.d{3}Z$/;\nexport const IsoDateString = new rt.Type<string, string, unknown>(\n  'IsoDateString',\n  rt.string.is,\n  (input, context): Either<rt.Errors, string> => {\n    if (typeof input === 'string' && ISO_DATE_PATTERN.test(input)) {\n      return rt.success(input);\n    } else {\n      return rt.failure(input, context);\n    }\n  },\n  rt.identity\n);\nexport type IsoDateStringC = typeof IsoDateString;\nexport const schemaDate = IsoDateString;\nexport const schemaDateArray = rt.array(IsoDateString);\nexport const schemaDateRange = rt.partial({\n  gte: schemaDate,\n  lte: schemaDate,\n});\nexport const schemaDateRangeArray = rt.array(schemaDateRange);\nexport const schemaUnknown = rt.unknown;\nexport const schemaUnknownArray = rt.array(rt.unknown);\nexport const schemaString = rt.string;\nexport const schemaStringArray = rt.array(schemaString);\nexport const schemaNumber = rt.number;\nexport const schemaNumberArray = rt.array(schemaNumber);\nexport const schemaStringOrNumber = rt.union([schemaString, schemaNumber]);\nexport const schemaStringOrNumberArray = rt.array(schemaStringOrNumber);\nexport const schemaBoolean = rt.boolean;\nexport const schemaBooleanArray = rt.array(schemaBoolean);\nconst schemaGeoPointCoords = rt.type({\n  type: schemaString,\n  coordinates: schemaNumberArray,\n});\nconst schemaGeoPointString = schemaString;\nconst schemaGeoPointLatLon = rt.type({\n  lat: schemaNumber,\n  lon: schemaNumber,\n});\nconst schemaGeoPointLocation = rt.type({\n  location: schemaNumberArray,\n});\nconst schemaGeoPointLocationString = rt.type({\n  location: schemaString,\n});\nexport const schemaGeoPoint = rt.union([\n  schemaGeoPointCoords,\n  schemaGeoPointString,\n  schemaGeoPointLatLon,\n  schemaGeoPointLocation,\n  schemaGeoPointLocationString,\n]);\nexport const schemaGeoPointArray = rt.array(schemaGeoPoint);\n// prettier-ignore\nconst %%schemaPrefix%%Required = %%REQUIRED_FIELDS%%;\nconst %%schemaPrefix%%Optional = %%OPTIONAL_FIELDS%%;\n\n// prettier-ignore\nexport const %%schemaPrefix%%Schema = rt.intersection([%%schemaPrefix%%Required, %%schemaPrefix%%Optional%%INCLUDED_SCHEMAS%%]);\n// prettier-ignore\nexport type %%schemaPrefix%% = rt.TypeOf<typeof %%schemaPrefix%%Schema>;\n\n".trim()}).call(this,"/",n(404))},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=e=>e?e[0]:void 0},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(170),s=n(422);const l=({width:e=s.b,dataTestSubj:t,content:n,ariaLabel:a,iconType:l="",isDisabled:c=!1,onClick:u,children:d,buttonType:p="icon"})=>i.a.createElement(i.a.Fragment,null,"icon"===p&&i.a.createElement("div",null,i.a.createElement(o.l,{textAlign:"center",width:e},null!=d?d:i.a.createElement(r.EuiToolTip,{"data-test-subj":`${t}-tool-tip`,content:n},i.a.createElement(r.EuiButtonIcon,{"aria-label":a,"data-test-subj":`${t}-button`,iconType:l,isDisabled:c,onClick:u,size:"s"})))),"text"===p&&i.a.createElement(r.EuiContextMenuItem,{"aria-label":a,"data-test-subj":`${t}-button-menu-item`,disabled:c,onClick:u,color:"text",size:"s"},i.a.createElement(r.EuiText,{"data-test-subj":`${t}-button`,size:"m"},n)),"emptyButton"===p&&i.a.createElement(r.EuiButtonEmpty,{onClick:u,iconType:"timeline",flush:"right",size:"xs","data-test-subj":t},n));l.displayName="ActionIconItemComponent";const c=i.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(106),l=n(389);const c=e=>e?"pinFilled":"pin",u=o.a.memo((({ariaLabel:e,allowUnpinning:t,isAlert:n,isDisabled:r,onClick:u=i.noop,pinned:d,timelineType:p})=>{const m=p===s.l.template,f=(({isAlert:e,isTemplate:t,isPinned:n})=>t?l.b(e):n?l.c(e):l.g(e))({isAlert:n,isTemplate:m,isPinned:d}),g=null!=e?e:f;return o.a.createElement(a.EuiButtonIcon,{"aria-label":g,"data-test-subj":"pin",iconType:c(d),onClick:u,isDisabled:r||m||!t,size:"s"})}));u.displayName="Pin"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(677);const i=({handleClick:e})=>({key:"osquery-action-item","data-test-subj":"osquery-action-item",onClick:e,size:"s",name:a.a})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n(108),r=n(102),o=n(183),s=n(513),l=n(881);const c=e=>{const{data:t,spaces:n}=Object(r.j)().services,{addWarning:c}=Object(i.a)(),[u,d]=Object(a.useState)(!1),[p,m]=Object(a.useState)(""),f=Object(a.useMemo)((()=>null!=e&&1===e.length),[e]),g=Object(a.useMemo)((()=>null!=e&&f&&"machine_learning"===e[0].type),[f,e]);Object(a.useEffect)((()=>{(async()=>{if(n){const e=await n.getActiveSpace();m(e.id)}})()}),[n]);const b=Object(a.useMemo)((()=>null!=e&&f?e[0].data_view_id||null:`security-solution-${p}`),[f,e,p]),y=Object(a.useMemo)((()=>!b&&null!=e&&f&&null!=e[0].index?e[0].index:[]),[b,f,e]),h=Object(a.useMemo)((()=>{var t;return g&&f&&null!=e&&null!==(t=e[0].machine_learning_job_id)&&void 0!==t?t:[]}),[g,f,e]),{mlJobLoading:v,ruleIndices:E}=Object(l.a)(h),x=Object(a.useMemo)((()=>g&&E.length>0?E:null!=b?[]:y),[g,b,y,E]),[j,{indexPatterns:O,dataView:S}]=Object(o.b)(x,!1,"indexFields"),[k,w]=Object(a.useState)(null),[I,T]=Object(a.useState)(null);Object(a.useEffect)((()=>{(async()=>{if(""!==p&&b){d(!0);const e=await t.dataViews.get(b);d(!1),w(e),T(e.toSpec())}})()}),[b,t.dataViews,w,p]);const C=Object(a.useCallback)((async e=>{let n=[];const a=null!=I?I:S;if(!a)return n;try{n=await t.dataViews.getFieldsForIndexPattern(a,{pattern:"",includeUnmapped:!0,fields:e})}catch(e){c(e,{title:s.b})}return n}),[c,t.dataViews,I,S]);return{isLoading:j||v||u,indexPatterns:Object(a.useMemo)((()=>b&&null!=k?k:O),[b,k,O]),getExtendedFields:C}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(143),r=n(102),o=n(458);const s=()=>{const e=Object(r.n)(),[t,n]=Object(a.useState)(!0),[s,l]=Object(a.useState)(!1),[c,u]=Object(a.useState)(null),d=Object(a.useRef)(null);return Object(a.useEffect)((()=>{let t=!0;const a=new AbortController;return d.current=async r=>{try{n(!0);const{references:e}=await Object(i.l)({lists:r,signal:a.signal}),o=e.reduce(((e,t)=>{const[[n,a]]=Object.entries(t);return e[n]=a,e}),{});t&&(n(!1),l(!1),u(o))}catch(a){t&&(l(!0),n(!1),e.addError(a,{title:o.c}))}},()=>{t=!1,a.abort()}}),[e]),[t,s,c,d.current]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(214),r=n(281),o=n(102);const s=()=>{const{services:{http:e}}=Object(o.j)(),[t,n]=Object(a.useState)(!1),s=Object(a.useRef)(null),{addExceptionListItem:l,updateExceptionListItem:c}=Object(i.c)(e);return Object(a.useEffect)((()=>{const e=new AbortController;return s.current=async e=>{n(!0);const t=await Promise.all(e.map((e=>{if("id"in e&&null!=e.id){const t=Object(r.i)(e);return c({listItem:t})}return l({listItem:e})})));return n(!1),t},()=>{n(!1),e.abort()}}),[c,e,l]),[t,s.current]}},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.osquery.action.shortEmptyTitle",{defaultMessage:"Osquery is not available"}),r=a.i18n.translate("xpack.securitySolution.osquery.action.permissionDenied",{defaultMessage:"Permission denied"}),o=a.i18n.translate("xpack.securitySolution.osquery.action.unavailable",{defaultMessage:"The Osquery Manager integration is not added to the agent policy. To run queries on the host, add the Osquery Manager integration to the agent policy in Fleet."})},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"g",(function(){return o})),n.d(t,"h",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"f",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.severityTitle",{defaultMessage:"Default severity"}),r=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.defaultSeverityTitle",{defaultMessage:"Severity"}),o=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.sourceFieldTitle",{defaultMessage:"Source field"}),s=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.sourceValueTitle",{defaultMessage:"Source value"}),l=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.severityMappingTitle",{defaultMessage:"Severity override"}),c=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.defaultDescriptionLabel",{defaultMessage:"Select a severity level for all alerts generated by this rule."}),u=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.mappingDescriptionLabel",{defaultMessage:"Use source event values to override the default severity."}),d=a.i18n.translate("xpack.securitySolution.alerts.severityMapping.mappingDetailsLabel",{defaultMessage:"For multiple matches the highest severity match will apply. If no match is found, the default severity will be used."})},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"h",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"g",(function(){return d}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.riskScoreTitle",{defaultMessage:"Risk score"}),r=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.defaultRiskScoreTitle",{defaultMessage:"Default risk score"}),o=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.riskScoreFieldTitle",{defaultMessage:"kibana.alert.risk_score"}),s=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.sourceFieldTitle",{defaultMessage:"Source field"}),l=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.riskScoreMappingTitle",{defaultMessage:"Risk score override"}),c=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.defaultDescriptionLabel",{defaultMessage:"Select a risk score for all alerts generated by this rule."}),u=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.mappingDescriptionLabel",{defaultMessage:"Use a source event value to override the default risk score."}),d=a.i18n.translate("xpack.securitySolution.alerts.riskScoreMapping.mappingDetailsLabel",{defaultMessage:"If value is out of bounds, or field is not present, the default risk score will be used."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(331),s=n(337),l=n(188);const c=i.a.memo((({contextId:e,data:t,eventId:n,fieldFromBrowserField:a,getLinkValue:c,isDraggable:u=!1,linkValue:d,style:p,values:m})=>i.a.createElement(r.EuiFlexGroup,{alignItems:"flexStart","data-test-subj":`event-field-${t.field}`,direction:"column",gutterSize:"none",style:p},null!=m&&m.map(((p,m)=>{var f;return null==a?i.a.createElement(r.EuiFlexItem,{grow:!1,key:`${m}-${p}`},i.a.createElement(r.EuiText,{size:"xs",key:`${m}-${p}`},p)):i.a.createElement(r.EuiFlexItem,{className:"eventFieldsTable__fieldValue",grow:!1,key:`${m}-${p}`},t.field===l.i?i.a.createElement(o.a,{value:p}):i.a.createElement(s.a,{contextId:`${e}-${n}-${t.field}-${m}-${p}`,eventId:n,fieldFormat:t.format,fieldName:t.field,fieldType:t.type,isAggregatable:a.aggregatable,isDraggable:u,isObjectArray:t.isObjectArray,value:p,linkValue:null!==(f=c&&c(t.field))&&void 0!==f?f:d,truncate:!1}))})))));c.displayName="FieldValueCell"},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(40),i=n(2),r=n.n(i),o=n(113),s=n(4),l=n(814);const c=({riskScoreEntity:e,title:t})=>{const n=e===o.w.user?s.Zb:s.Xb;return r.a.createElement(a.EuiLink,{target:"_blank",rel:"noopener nofollow noreferrer",href:n},t||l.f)},u=r.a.memo(c);u.displayName="RiskScoreDocLink"},function(e,t,n){"use strict";n.d(t,"d",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"i",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"h",(function(){return u}));var a=n(5),i=n(225);n.d(t,"a",(function(){return i.a})),n.d(t,"c",(function(){return i.b})),n.d(t,"g",(function(){return i.c})),n.d(t,"j",(function(){return i.d}));const r=e=>a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.riskToolTip",{defaultMessage:"{riskEntity} risk classification is determined by {riskEntityLowercase} risk score. {riskEntity}s classified as Critical or High are indicated as risky.",values:{riskEntity:Object(i.d)(e),riskEntityLowercase:Object(i.d)(e,!0)}}),o=e=>a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.nameTitle",{defaultMessage:"{riskEntity} Name",values:{riskEntity:Object(i.d)(e)}}),s=a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.viewAllLabel",{defaultMessage:"View all"}),l=a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.learnMore",{defaultMessage:"Learn more"}),c=a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.hostsTableTooltip",{defaultMessage:"The Host Risk Score panel displays the list of risky hosts and their latest risk score. You may filter this list using global filters in the KQL search bar. The time-range picker filter will display Alerts within the selected time range only and does not filter the list of risky hosts."}),u=a.i18n.translate("xpack.securitySolution.entityAnalytics.riskDashboard.usersTableTooltip",{defaultMessage:"The User Risk Score panel displays the list of risky users and their latest risk score. You may filter this list using global filters in the KQL search bar. The time-range picker filter will display Alerts within the selected time range only and does not filter the list of risky users."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("xpack.securitySolution.source.destination.packetsLabel",{defaultMessage:"pkts"})},function(e,t,n){!function(e){"use strict";function t(e,t){return e<t?-1:e>t?1:e>=t?0:NaN}function n(e){let n=e,a=e;function i(e,t,n,i){for(null==n&&(n=0),null==i&&(i=e.length);n<i;){const r=n+i>>>1;a(e[r],t)<0?n=r+1:i=r}return n}return 1===e.length&&(n=(t,n)=>e(t)-n,a=function(e){return(n,a)=>t(e(n),a)}(e)),{left:i,center:function(e,t,a,r){null==a&&(a=0),null==r&&(r=e.length);const o=i(e,t,a,r-1);return o>a&&n(e[o-1],t)>-n(e[o],t)?o-1:o},right:function(e,t,n,i){for(null==n&&(n=0),null==i&&(i=e.length);n<i;){const r=n+i>>>1;a(e[r],t)>0?i=r:n=r+1}return n}}}function a(e){return null===e?NaN:+e}const i=n(t),r=i.right,o=i.left,s=n(a).center;function l(e,t){let n=0;if(void 0===t)for(let t of e)null!=t&&(t=+t)>=t&&++n;else{let a=-1;for(let i of e)null!=(i=t(i,++a,e))&&(i=+i)>=i&&++n}return n}function c(e){return 0|e.length}function u(e){return!(e>0)}function d(e){return"object"!=typeof e||"length"in e?e:Array.from(e)}function p(e,t){let n,a=0,i=0,r=0;if(void 0===t)for(let t of e)null!=t&&(t=+t)>=t&&(n=t-i,i+=n/++a,r+=n*(t-i));else{let o=-1;for(let s of e)null!=(s=t(s,++o,e))&&(s=+s)>=s&&(n=s-i,i+=n/++a,r+=n*(s-i))}if(a>1)return r/(a-1)}function m(e,t){const n=p(e,t);return n?Math.sqrt(n):n}function f(e,t){let n,a;if(void 0===t)for(const t of e)null!=t&&(void 0===n?t>=t&&(n=a=t):(n>t&&(n=t),a<t&&(a=t)));else{let i=-1;for(let r of e)null!=(r=t(r,++i,e))&&(void 0===n?r>=r&&(n=a=r):(n>r&&(n=r),a<r&&(a=r)))}return[n,a]}class Adder{constructor(){this._partials=new Float64Array(32),this._n=0}add(e){const t=this._partials;let n=0;for(let a=0;a<this._n&&a<32;a++){const i=t[a],r=e+i,o=Math.abs(e)<Math.abs(i)?e-(r-i):i-(r-e);o&&(t[n++]=o),e=r}return t[n]=e,this._n=n+1,this}valueOf(){const e=this._partials;let t,n,a,i=this._n,r=0;if(i>0){for(r=e[--i];i>0&&(t=r,n=e[--i],r=t+n,a=n-(r-t),!a););i>0&&(a<0&&e[i-1]<0||a>0&&e[i-1]>0)&&(n=2*a,t=r+n,n==t-r&&(r=t))}return r}}class InternMap extends Map{constructor(e,t=h){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:t}}),null!=e)for(const[t,n]of e)this.set(t,n)}get(e){return super.get(g(this,e))}has(e){return super.has(g(this,e))}set(e,t){return super.set(b(this,e),t)}delete(e){return super.delete(y(this,e))}}class InternSet extends Set{constructor(e,t=h){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:t}}),null!=e)for(const t of e)this.add(t)}has(e){return super.has(g(this,e))}add(e){return super.add(b(this,e))}delete(e){return super.delete(y(this,e))}}function g({_intern:e,_key:t},n){const a=t(n);return e.has(a)?e.get(a):n}function b({_intern:e,_key:t},n){const a=t(n);return e.has(a)?e.get(a):(e.set(a,n),n)}function y({_intern:e,_key:t},n){const a=t(n);return e.has(a)&&(n=e.get(n),e.delete(a)),n}function h(e){return null!==e&&"object"==typeof e?e.valueOf():e}function v(e){return e}function E(e,...t){return O(e,v,v,t)}function x(e,t,...n){return O(e,v,t,n)}function j(e){if(1!==e.length)throw new Error("duplicate key");return e[0]}function O(e,t,n,a){return function e(i,r){if(r>=a.length)return n(i);const o=new InternMap,s=a[r++];let l=-1;for(const e of i){const t=s(e,++l,i),n=o.get(t);n?n.push(e):o.set(t,[e])}for(const[t,n]of o)o.set(t,e(n,r));return t(o)}(e,0)}function S(e,t){return Array.from(t,(t=>e[t]))}function k(e,...n){if("function"!=typeof e[Symbol.iterator])throw new TypeError("values is not iterable");e=Array.from(e);let[a=t]=n;if(1===a.length||n.length>1){const i=Uint32Array.from(e,((e,t)=>t));return n.length>1?(n=n.map((t=>e.map(t))),i.sort(((e,a)=>{for(const i of n){const n=t(i[e],i[a]);if(n)return n}}))):(a=e.map(a),i.sort(((e,n)=>t(a[e],a[n])))),S(e,i)}return e.sort(a)}var w=Array.prototype.slice;function I(e){return function(){return e}}var T=Math.sqrt(50),C=Math.sqrt(10),M=Math.sqrt(2);function A(e,t,n){var a,i,r,o,s=-1;if(n=+n,(e=+e)==(t=+t)&&n>0)return[e];if((a=t<e)&&(i=e,e=t,t=i),0===(o=_(e,t,n))||!isFinite(o))return[];if(o>0){let n=Math.round(e/o),a=Math.round(t/o);for(n*o<e&&++n,a*o>t&&--a,r=new Array(i=a-n+1);++s<i;)r[s]=(n+s)*o}else{o=-o;let n=Math.round(e*o),a=Math.round(t*o);for(n/o<e&&++n,a/o>t&&--a,r=new Array(i=a-n+1);++s<i;)r[s]=(n+s)/o}return a&&r.reverse(),r}function _(e,t,n){var a=(t-e)/Math.max(0,n),i=Math.floor(Math.log(a)/Math.LN10),r=a/Math.pow(10,i);return i>=0?(r>=T?10:r>=C?5:r>=M?2:1)*Math.pow(10,i):-Math.pow(10,-i)/(r>=T?10:r>=C?5:r>=M?2:1)}function F(e,t,n){let a;for(;;){const i=_(e,t,n);if(i===a||0===i||!isFinite(i))return[e,t];i>0?(e=Math.floor(e/i)*i,t=Math.ceil(t/i)*i):i<0&&(e=Math.ceil(e*i)/i,t=Math.floor(t*i)/i),a=i}}function D(e){return Math.ceil(Math.log(l(e))/Math.LN2)+1}function N(){var e=v,t=f,n=D;function a(a){Array.isArray(a)||(a=Array.from(a));var i,o,s=a.length,l=new Array(s);for(i=0;i<s;++i)l[i]=e(a[i],i,a);var c=t(l),u=c[0],d=c[1],p=n(l,u,d);if(!Array.isArray(p)){const e=d,n=+p;if(t===f&&([u,d]=F(u,d,n)),(p=A(u,d,n))[p.length-1]>=d)if(e>=d&&t===f){const e=_(u,d,n);isFinite(e)&&(e>0?d=(Math.floor(d/e)+1)*e:e<0&&(d=(Math.ceil(d*-e)+1)/-e))}else p.pop()}for(var m=p.length;p[0]<=u;)p.shift(),--m;for(;p[m-1]>d;)p.pop(),--m;var g,b=new Array(m+1);for(i=0;i<=m;++i)(g=b[i]=[]).x0=i>0?p[i-1]:u,g.x1=i<m?p[i]:d;for(i=0;i<s;++i)u<=(o=l[i])&&o<=d&&b[r(p,o,0,m)].push(a[i]);return b}return a.value=function(t){return arguments.length?(e="function"==typeof t?t:I(t),a):e},a.domain=function(e){return arguments.length?(t="function"==typeof e?e:I([e[0],e[1]]),a):t},a.thresholds=function(e){return arguments.length?(n="function"==typeof e?e:Array.isArray(e)?I(w.call(e)):I(e),a):n},a}function P(e,t){let n;if(void 0===t)for(const t of e)null!=t&&(n<t||void 0===n&&t>=t)&&(n=t);else{let a=-1;for(let i of e)null!=(i=t(i,++a,e))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function R(e,t){let n;if(void 0===t)for(const t of e)null!=t&&(n>t||void 0===n&&t>=t)&&(n=t);else{let a=-1;for(let i of e)null!=(i=t(i,++a,e))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function L(e,n,a=0,i=e.length-1,r=t){for(;i>a;){if(i-a>600){const t=i-a+1,o=n-a+1,s=Math.log(t),l=.5*Math.exp(2*s/3),c=.5*Math.sqrt(s*l*(t-l)/t)*(o-t/2<0?-1:1);L(e,n,Math.max(a,Math.floor(n-o*l/t+c)),Math.min(i,Math.floor(n+(t-o)*l/t+c)),r)}const t=e[n];let o=a,s=i;for(q(e,a,n),r(e[i],t)>0&&q(e,a,i);o<s;){for(q(e,o,s),++o,--s;r(e[o],t)<0;)++o;for(;r(e[s],t)>0;)--s}0===r(e[a],t)?q(e,a,s):(++s,q(e,s,i)),s<=n&&(a=s+1),n<=s&&(i=s-1)}return e}function q(e,t,n){const a=e[t];e[t]=e[n],e[n]=a}function B(e,t,n){if(a=(e=Float64Array.from(function*(e,t){if(void 0===t)for(let t of e)null!=t&&(t=+t)>=t&&(yield t);else{let n=-1;for(let a of e)null!=(a=t(a,++n,e))&&(a=+a)>=a&&(yield a)}}(e,n))).length){if((t=+t)<=0||a<2)return R(e);if(t>=1)return P(e);var a,i=(a-1)*t,r=Math.floor(i),o=P(L(e,r).subarray(0,r+1));return o+(R(e.subarray(r+1))-o)*(i-r)}}function z(e,t){let n,a=-1,i=-1;if(void 0===t)for(const t of e)++i,null!=t&&(n<t||void 0===n&&t>=t)&&(n=t,a=i);else for(let r of e)null!=(r=t(r,++i,e))&&(n<r||void 0===n&&r>=r)&&(n=r,a=i);return a}function $(e,t){let n,a=-1,i=-1;if(void 0===t)for(const t of e)++i,null!=t&&(n>t||void 0===n&&t>=t)&&(n=t,a=i);else for(let r of e)null!=(r=t(r,++i,e))&&(n>r||void 0===n&&r>=r)&&(n=r,a=i);return a}function V(e,t){return[e,t]}function U(e,n=t){if(1===n.length)return $(e,n);let a,i=-1,r=-1;for(const t of e)++r,(i<0?0===n(t,t):n(t,a)<0)&&(a=t,i=r);return i}var G=H(Math.random);function H(e){return function(t,n=0,a=t.length){let i=a-(n=+n);for(;i;){const a=e()*i--|0,r=t[i+n];t[i+n]=t[a+n],t[a+n]=r}return t}}function W(e){if(!(i=e.length))return[];for(var t=-1,n=R(e,Q),a=new Array(n);++t<n;)for(var i,r=-1,o=a[t]=new Array(i);++r<i;)o[r]=e[r][t];return a}function Q(e){return e.length}function Y(e){return e instanceof Set?e:new Set(e)}function K(e,t){const n=e[Symbol.iterator](),a=new Set;for(const e of t){if(a.has(e))continue;let t,i;for(;({value:t,done:i}=n.next());){if(i)return!1;if(a.add(t),Object.is(e,t))break}}return!0}e.Adder=Adder,e.InternMap=InternMap,e.InternSet=InternSet,e.ascending=t,e.bin=N,e.bisect=r,e.bisectCenter=s,e.bisectLeft=o,e.bisectRight=r,e.bisector=n,e.count=l,e.cross=function(...e){const t="function"==typeof e[e.length-1]&&function(e){return t=>e(...t)}(e.pop()),n=(e=e.map(d)).map(c),a=e.length-1,i=new Array(a+1).fill(0),r=[];if(a<0||n.some(u))return r;for(;;){r.push(i.map(((t,n)=>e[n][t])));let o=a;for(;++i[o]===n[o];){if(0===o)return t?r.map(t):r;i[o--]=0}}},e.cumsum=function(e,t){var n=0,a=0;return Float64Array.from(e,void 0===t?e=>n+=+e||0:i=>n+=+t(i,a++,e)||0)},e.descending=function(e,t){return t<e?-1:t>e?1:t>=e?0:NaN},e.deviation=m,e.difference=function(e,...t){e=new Set(e);for(const n of t)for(const t of n)e.delete(t);return e},e.disjoint=function(e,t){const n=t[Symbol.iterator](),a=new Set;for(const t of e){if(a.has(t))return!1;let e,i;for(;({value:e,done:i}=n.next())&&!i;){if(Object.is(t,e))return!1;a.add(e)}}return!0},e.every=function(e,t){if("function"!=typeof t)throw new TypeError("test is not a function");let n=-1;for(const a of e)if(!t(a,++n,e))return!1;return!0},e.extent=f,e.fcumsum=function(e,t){const n=new Adder;let a=-1;return Float64Array.from(e,void 0===t?e=>n.add(+e||0):i=>n.add(+t(i,++a,e)||0))},e.filter=function(e,t){if("function"!=typeof t)throw new TypeError("test is not a function");const n=[];let a=-1;for(const i of e)t(i,++a,e)&&n.push(i);return n},e.fsum=function(e,t){const n=new Adder;if(void 0===t)for(let t of e)(t=+t)&&n.add(t);else{let a=-1;for(let i of e)(i=+t(i,++a,e))&&n.add(i)}return+n},e.greatest=function(e,n=t){let a,i=!1;if(1===n.length){let r;for(const o of e){const e=n(o);(i?t(e,r)>0:0===t(e,e))&&(a=o,r=e,i=!0)}}else for(const t of e)(i?n(t,a)>0:0===n(t,t))&&(a=t,i=!0);return a},e.greatestIndex=function(e,n=t){if(1===n.length)return z(e,n);let a,i=-1,r=-1;for(const t of e)++r,(i<0?0===n(t,t):n(t,a)>0)&&(a=t,i=r);return i},e.group=E,e.groupSort=function(e,n,a){return(1===n.length?k(x(e,n,a),(([e,n],[a,i])=>t(n,i)||t(e,a))):k(E(e,a),(([e,a],[i,r])=>n(a,r)||t(e,i)))).map((([e])=>e))},e.groups=function(e,...t){return O(e,Array.from,v,t)},e.histogram=N,e.index=function(e,...t){return O(e,v,j,t)},e.indexes=function(e,...t){return O(e,Array.from,j,t)},e.intersection=function(e,...t){e=new Set(e),t=t.map(Y);e:for(const n of e)for(const a of t)if(!a.has(n)){e.delete(n);continue e}return e},e.least=function(e,n=t){let a,i=!1;if(1===n.length){let r;for(const o of e){const e=n(o);(i?t(e,r)<0:0===t(e,e))&&(a=o,r=e,i=!0)}}else for(const t of e)(i?n(t,a)<0:0===n(t,t))&&(a=t,i=!0);return a},e.leastIndex=U,e.map=function(e,t){if("function"!=typeof e[Symbol.iterator])throw new TypeError("values is not iterable");if("function"!=typeof t)throw new TypeError("mapper is not a function");return Array.from(e,((n,a)=>t(n,a,e)))},e.max=P,e.maxIndex=z,e.mean=function(e,t){let n=0,a=0;if(void 0===t)for(let t of e)null!=t&&(t=+t)>=t&&(++n,a+=t);else{let i=-1;for(let r of e)null!=(r=t(r,++i,e))&&(r=+r)>=r&&(++n,a+=r)}if(n)return a/n},e.median=function(e,t){return B(e,.5,t)},e.merge=function(e){return Array.from(function*(e){for(const t of e)yield*t}(e))},e.min=R,e.minIndex=$,e.nice=F,e.pairs=function(e,t=V){const n=[];let a,i=!1;for(const r of e)i&&n.push(t(a,r)),a=r,i=!0;return n},e.permute=S,e.quantile=B,e.quantileSorted=function(e,t,n=a){if(i=e.length){if((t=+t)<=0||i<2)return+n(e[0],0,e);if(t>=1)return+n(e[i-1],i-1,e);var i,r=(i-1)*t,o=Math.floor(r),s=+n(e[o],o,e);return s+(+n(e[o+1],o+1,e)-s)*(r-o)}},e.quickselect=L,e.range=function(e,t,n){e=+e,t=+t,n=(i=arguments.length)<2?(t=e,e=0,1):i<3?1:+n;for(var a=-1,i=0|Math.max(0,Math.ceil((t-e)/n)),r=new Array(i);++a<i;)r[a]=e+a*n;return r},e.reduce=function(e,t,n){if("function"!=typeof t)throw new TypeError("reducer is not a function");const a=e[Symbol.iterator]();let i,r,o=-1;if(arguments.length<3){if(({done:i,value:n}=a.next()),i)return;++o}for(;({done:i,value:r}=a.next()),!i;)n=t(n,r,++o,e);return n},e.reverse=function(e){if("function"!=typeof e[Symbol.iterator])throw new TypeError("values is not iterable");return Array.from(e).reverse()},e.rollup=x,e.rollups=function(e,t,...n){return O(e,Array.from,t,n)},e.scan=function(e,t){const n=U(e,t);return n<0?void 0:n},e.shuffle=G,e.shuffler=H,e.some=function(e,t){if("function"!=typeof t)throw new TypeError("test is not a function");let n=-1;for(const a of e)if(t(a,++n,e))return!0;return!1},e.sort=k,e.subset=function(e,t){return K(t,e)},e.sum=function(e,t){let n=0;if(void 0===t)for(let t of e)(t=+t)&&(n+=t);else{let a=-1;for(let i of e)(i=+t(i,++a,e))&&(n+=i)}return n},e.superset=K,e.thresholdFreedmanDiaconis=function(e,t,n){return Math.ceil((n-t)/(2*(B(e,.75)-B(e,.25))*Math.pow(l(e),-1/3)))},e.thresholdScott=function(e,t,n){return Math.ceil((n-t)/(3.5*m(e)*Math.pow(l(e),-1/3)))},e.thresholdSturges=D,e.tickIncrement=_,e.tickStep=function(e,t,n){var a=Math.abs(t-e)/Math.max(0,n),i=Math.pow(10,Math.floor(Math.log(a)/Math.LN10)),r=a/i;return r>=T?i*=10:r>=C?i*=5:r>=M&&(i*=2),t<e?-i:i},e.ticks=A,e.transpose=W,e.union=function(...e){const t=new Set;for(const n of e)for(const e of n)t.add(e);return t},e.variance=p,e.zip=function(){return W(arguments)},Object.defineProperty(e,"__esModule",{value:!0})}(t)},function(e,t,n){!function(e,t){"use strict";var n=new Date,a=new Date;function i(e,t,r,o){function s(t){return e(t=0===arguments.length?new Date:new Date(+t)),t}return s.floor=function(t){return e(t=new Date(+t)),t},s.ceil=function(n){return e(n=new Date(n-1)),t(n,1),e(n),n},s.round=function(e){var t=s(e),n=s.ceil(e);return e-t<n-e?t:n},s.offset=function(e,n){return t(e=new Date(+e),null==n?1:Math.floor(n)),e},s.range=function(n,a,i){var r,o=[];if(n=s.ceil(n),i=null==i?1:Math.floor(i),!(n<a&&i>0))return o;do{o.push(r=new Date(+n)),t(n,i),e(n)}while(r<n&&n<a);return o},s.filter=function(n){return i((function(t){if(t>=t)for(;e(t),!n(t);)t.setTime(t-1)}),(function(e,a){if(e>=e)if(a<0)for(;++a<=0;)for(;t(e,-1),!n(e););else for(;--a>=0;)for(;t(e,1),!n(e););}))},r&&(s.count=function(t,i){return n.setTime(+t),a.setTime(+i),e(n),e(a),Math.floor(r(n,a))},s.every=function(e){return e=Math.floor(e),isFinite(e)&&e>0?e>1?s.filter(o?function(t){return o(t)%e==0}:function(t){return s.count(0,t)%e==0}):s:null}),s}var r=i((function(){}),(function(e,t){e.setTime(+e+t)}),(function(e,t){return t-e}));r.every=function(e){return e=Math.floor(e),isFinite(e)&&e>0?e>1?i((function(t){t.setTime(Math.floor(t/e)*e)}),(function(t,n){t.setTime(+t+n*e)}),(function(t,n){return(n-t)/e})):r:null};var o=r.range;const s=1e3,l=60*s,c=60*l,u=24*c,d=7*u,p=30*u,m=365*u;var f=i((function(e){e.setTime(e-e.getMilliseconds())}),(function(e,t){e.setTime(+e+t*s)}),(function(e,t){return(t-e)/s}),(function(e){return e.getUTCSeconds()})),g=f.range,b=i((function(e){e.setTime(e-e.getMilliseconds()-e.getSeconds()*s)}),(function(e,t){e.setTime(+e+t*l)}),(function(e,t){return(t-e)/l}),(function(e){return e.getMinutes()})),y=b.range,h=i((function(e){e.setTime(e-e.getMilliseconds()-e.getSeconds()*s-e.getMinutes()*l)}),(function(e,t){e.setTime(+e+t*c)}),(function(e,t){return(t-e)/c}),(function(e){return e.getHours()})),v=h.range,E=i((e=>e.setHours(0,0,0,0)),((e,t)=>e.setDate(e.getDate()+t)),((e,t)=>(t-e-(t.getTimezoneOffset()-e.getTimezoneOffset())*l)/u),(e=>e.getDate()-1)),x=E.range;function j(e){return i((function(t){t.setDate(t.getDate()-(t.getDay()+7-e)%7),t.setHours(0,0,0,0)}),(function(e,t){e.setDate(e.getDate()+7*t)}),(function(e,t){return(t-e-(t.getTimezoneOffset()-e.getTimezoneOffset())*l)/d}))}var O=j(0),S=j(1),k=j(2),w=j(3),I=j(4),T=j(5),C=j(6),M=O.range,A=S.range,_=k.range,F=w.range,D=I.range,N=T.range,P=C.range,R=i((function(e){e.setDate(1),e.setHours(0,0,0,0)}),(function(e,t){e.setMonth(e.getMonth()+t)}),(function(e,t){return t.getMonth()-e.getMonth()+12*(t.getFullYear()-e.getFullYear())}),(function(e){return e.getMonth()})),L=R.range,q=i((function(e){e.setMonth(0,1),e.setHours(0,0,0,0)}),(function(e,t){e.setFullYear(e.getFullYear()+t)}),(function(e,t){return t.getFullYear()-e.getFullYear()}),(function(e){return e.getFullYear()}));q.every=function(e){return isFinite(e=Math.floor(e))&&e>0?i((function(t){t.setFullYear(Math.floor(t.getFullYear()/e)*e),t.setMonth(0,1),t.setHours(0,0,0,0)}),(function(t,n){t.setFullYear(t.getFullYear()+n*e)})):null};var B=q.range,z=i((function(e){e.setUTCSeconds(0,0)}),(function(e,t){e.setTime(+e+t*l)}),(function(e,t){return(t-e)/l}),(function(e){return e.getUTCMinutes()})),$=z.range,V=i((function(e){e.setUTCMinutes(0,0,0)}),(function(e,t){e.setTime(+e+t*c)}),(function(e,t){return(t-e)/c}),(function(e){return e.getUTCHours()})),U=V.range,G=i((function(e){e.setUTCHours(0,0,0,0)}),(function(e,t){e.setUTCDate(e.getUTCDate()+t)}),(function(e,t){return(t-e)/u}),(function(e){return e.getUTCDate()-1})),H=G.range;function W(e){return i((function(t){t.setUTCDate(t.getUTCDate()-(t.getUTCDay()+7-e)%7),t.setUTCHours(0,0,0,0)}),(function(e,t){e.setUTCDate(e.getUTCDate()+7*t)}),(function(e,t){return(t-e)/d}))}var Q=W(0),Y=W(1),K=W(2),X=W(3),J=W(4),Z=W(5),ee=W(6),te=Q.range,ne=Y.range,ae=K.range,ie=X.range,re=J.range,oe=Z.range,se=ee.range,le=i((function(e){e.setUTCDate(1),e.setUTCHours(0,0,0,0)}),(function(e,t){e.setUTCMonth(e.getUTCMonth()+t)}),(function(e,t){return t.getUTCMonth()-e.getUTCMonth()+12*(t.getUTCFullYear()-e.getUTCFullYear())}),(function(e){return e.getUTCMonth()})),ce=le.range,ue=i((function(e){e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),(function(e,t){e.setUTCFullYear(e.getUTCFullYear()+t)}),(function(e,t){return t.getUTCFullYear()-e.getUTCFullYear()}),(function(e){return e.getUTCFullYear()}));ue.every=function(e){return isFinite(e=Math.floor(e))&&e>0?i((function(t){t.setUTCFullYear(Math.floor(t.getUTCFullYear()/e)*e),t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),(function(t,n){t.setUTCFullYear(t.getUTCFullYear()+n*e)})):null};var de=ue.range;function pe(e,n,a,i,o,g){const b=[[f,1,s],[f,5,5*s],[f,15,15*s],[f,30,30*s],[g,1,l],[g,5,5*l],[g,15,15*l],[g,30,30*l],[o,1,c],[o,3,3*c],[o,6,6*c],[o,12,12*c],[i,1,u],[i,2,2*u],[a,1,d],[n,1,p],[n,3,3*p],[e,1,m]];function y(n,a,i){const o=Math.abs(a-n)/i,s=t.bisector((([,,e])=>e)).right(b,o);if(s===b.length)return e.every(t.tickStep(n/m,a/m,i));if(0===s)return r.every(Math.max(t.tickStep(n,a,i),1));const[l,c]=b[o/b[s-1][2]<b[s][2]/o?s-1:s];return l.every(c)}return[function(e,t,n){const a=t<e;a&&([e,t]=[t,e]);const i=n&&"function"==typeof n.range?n:y(e,t,n),r=i?i.range(e,+t+1):[];return a?r.reverse():r},y]}const[me,fe]=pe(ue,le,Q,G,V,z),[ge,be]=pe(q,R,O,E,h,b);e.timeDay=E,e.timeDays=x,e.timeFriday=T,e.timeFridays=N,e.timeHour=h,e.timeHours=v,e.timeInterval=i,e.timeMillisecond=r,e.timeMilliseconds=o,e.timeMinute=b,e.timeMinutes=y,e.timeMonday=S,e.timeMondays=A,e.timeMonth=R,e.timeMonths=L,e.timeSaturday=C,e.timeSaturdays=P,e.timeSecond=f,e.timeSeconds=g,e.timeSunday=O,e.timeSundays=M,e.timeThursday=I,e.timeThursdays=D,e.timeTickInterval=be,e.timeTicks=ge,e.timeTuesday=k,e.timeTuesdays=_,e.timeWednesday=w,e.timeWednesdays=F,e.timeWeek=O,e.timeWeeks=M,e.timeYear=q,e.timeYears=B,e.utcDay=G,e.utcDays=H,e.utcFriday=Z,e.utcFridays=oe,e.utcHour=V,e.utcHours=U,e.utcMillisecond=r,e.utcMilliseconds=o,e.utcMinute=z,e.utcMinutes=$,e.utcMonday=Y,e.utcMondays=ne,e.utcMonth=le,e.utcMonths=ce,e.utcSaturday=ee,e.utcSaturdays=se,e.utcSecond=f,e.utcSeconds=g,e.utcSunday=Q,e.utcSundays=te,e.utcThursday=J,e.utcThursdays=re,e.utcTickInterval=fe,e.utcTicks=me,e.utcTuesday=K,e.utcTuesdays=ae,e.utcWednesday=X,e.utcWednesdays=ie,e.utcWeek=Q,e.utcWeeks=te,e.utcYear=ue,e.utcYears=de,Object.defineProperty(e,"__esModule",{value:!0})}(t,n(816))},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return u}));var a=n(40),i=n(42),r=n(2),o=n.n(r),s=n(121);const l="process.name",c="user.name",u=o.a.memo((({contextId:e,eventId:t,isDraggable:n,processName:r,userName:u})=>o.a.createElement(a.EuiFlexGroup,{alignItems:"flexStart","data-test-subj":"user-process",direction:"column",justifyContent:"center",gutterSize:"none"},null!=u?Object(i.uniq)(u).map((i=>o.a.createElement(a.EuiFlexItem,{grow:!1,key:i},o.a.createElement(s.c,{contextId:e,"data-test-subj":"user-name",eventId:t,field:c,isDraggable:n,value:i,iconType:"user",isAggregatable:!0,fieldType:"keyword"})))):null,null!=r?Object(i.uniq)(r).map((i=>o.a.createElement(a.EuiFlexItem,{grow:!1,key:i},o.a.createElement(s.c,{contextId:e,eventId:t,field:l,isDraggable:n,value:i,iconType:"console",isAggregatable:!0,fieldType:"keyword"})))):null)));u.displayName="UserProcess"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(121),o=n(392),s=n(127);const l=i.a.memo((({contextId:e,eventId:t,hostName:n,workingDirectory:a,isDraggable:l})=>i.a.createElement(i.a.Fragment,null,i.a.createElement(s.c,{grow:!1,component:"span"},i.a.createElement(r.c,{contextId:e,eventId:t,field:"host.name",value:n,isDraggable:l,fieldType:"keyword",isAggregatable:!0})),null!=a&&i.a.createElement(s.c,{grow:!1,component:"span"},o.e),i.a.createElement(s.c,{grow:!1,component:"span"},i.a.createElement(r.c,{contextId:e,eventId:t,field:"process.working_directory",value:a,iconType:"folderOpen",isDraggable:l,fieldType:"keyword",isAggregatable:!0})))));l.displayName="HostWorkingDir"},function(e,t,n){"use strict";n.d(t,"a",(function(){return S}));var a=n(42),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(106),c=n(449),u=n(607),d=n(485),p=n(569),m=n(395),f=n(608),g=n(868),b=n(571),y=n(818),h=n(380),v=n(460),E=n(570),x=n(532),j=n(275);const O=s.a.div.withConfig({displayName:"Details",componentId:"sc-1voakd9-0"})(["margin:5px 0;"]);O.displayName="Details";const S={id:l.d.netflow,isInstance:e=>"network_traffic"===`${Object(a.get)("event.category",e)}`.toLowerCase()||(e=>{const t=`${e}`.toLowerCase();return"network_flow"===t||"netflow_flow"===t})(Object(a.get)("event.action",e)),renderRow:({data:e,isDraggable:t,scopeId:n})=>r.a.createElement(j.a,null,r.a.createElement(O,null,r.a.createElement(g.a,{contextId:`netflow-row-renderer-render-row-${n}-${e._id}`,destinationBytes:Object(c.a)(Object(a.get)(x.a,e)),destinationGeoContinentName:Object(c.a)(Object(a.get)(E.b,e)),destinationGeoCountryName:Object(c.a)(Object(a.get)(E.d,e)),destinationGeoCountryIsoCode:Object(c.a)(Object(a.get)(E.c,e)),destinationGeoRegionName:Object(c.a)(Object(a.get)(E.e,e)),destinationGeoCityName:Object(c.a)(Object(a.get)(E.a,e)),destinationIp:Object(c.a)(Object(a.get)(m.a,e)),destinationPackets:Object(c.a)(Object(a.get)(x.b,e)),destinationPort:Object(c.a)(Object(a.get)(h.a,e)),eventDuration:Object(c.a)(Object(a.get)(d.b,e)),eventId:Object(a.get)(p.a,e),eventEnd:Object(c.a)(Object(a.get)(b.b,e)),eventStart:Object(c.a)(Object(a.get)(b.c,e)),isDraggable:t,networkBytes:Object(c.a)(Object(a.get)(v.a,e)),networkCommunityId:Object(c.a)(Object(a.get)(v.b,e)),networkDirection:Object(c.a)(Object(a.get)(v.c,e)),networkPackets:Object(c.a)(Object(a.get)(v.d,e)),networkProtocol:Object(c.a)(Object(a.get)(v.e,e)),processName:Object(c.a)(Object(a.get)(y.a,e)),sourceBytes:Object(c.a)(Object(a.get)(x.c,e)),sourceGeoContinentName:Object(c.a)(Object(a.get)(E.h,e)),sourceGeoCountryName:Object(c.a)(Object(a.get)(E.j,e)),sourceGeoCountryIsoCode:Object(c.a)(Object(a.get)(E.i,e)),sourceGeoRegionName:Object(c.a)(Object(a.get)(E.k,e)),sourceGeoCityName:Object(c.a)(Object(a.get)(E.g,e)),sourceIp:Object(c.a)(Object(a.get)(m.d,e)),sourcePackets:Object(c.a)(Object(a.get)(x.d,e)),sourcePort:Object(c.a)(Object(a.get)(h.c,e)),tlsClientCertificateFingerprintSha1:Object(c.a)(Object(a.get)(u.b,e)),tlsFingerprintsJa3Hash:Object(c.a)(Object(a.get)(f.a,e)),tlsServerCertificateFingerprintSha1:Object(c.a)(Object(a.get)(u.c,e)),transport:Object(c.a)(Object(a.get)(v.f,e)),userName:Object(c.a)(Object(a.get)(y.b,e))})))}},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"f",(function(){return c}));var a=n(5);a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.messageTitle",{defaultMessage:"Message"});const i=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.openAlertDetails",{defaultMessage:"Open alert details page"}),r=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.closeEventDetailsLabel",{defaultMessage:"close"}),o=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.placeholder",{defaultMessage:"Select an event to show event details"}),s=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.eventTitleLabel",{defaultMessage:"Event details"}),l=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.alertTitleLabel",{defaultMessage:"Alert details"}),c=a.i18n.translate("xpack.securitySolution.timeline.expandableEvent.shareAlert",{defaultMessage:"Share alert"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(8),i=n(2),r=n(4),o=n(108),s=n(239),l=n(375);const c=({alertId:e})=>{const[t,n]=Object(i.useState)(!1),[c,u]=Object(i.useState)([]),{addError:d}=Object(o.a)();return Object(i.useEffect)((()=>{let t=!0;return n(!0),Object(a.isEmpty)(e)||(async()=>{try{const n=await Object(s.f)({alertId:e,owner:[r.i]});t&&u(n)}catch(e){d(e.message,{title:l.a})}t&&n(!1)})(),()=>{t=!1}}),[e,d]),{loading:t,casesInfo:c}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(120),r=n(181),o=n(135);const s=({isEndpointAlert:e,onAddExceptionTypeClick:t})=>{const[{canUserCRUD:n,hasIndexWrite:s}]=Object(r.b)(),l=Object(a.useCallback)((()=>{t()}),[t]),c=Object(a.useCallback)((()=>{t(i.b.ENDPOINT)}),[t]),u=!n||!s||!e,d=!n||!s;return{exceptionActionItems:Object(a.useMemo)((()=>d?[]:[{key:"add-endpoint-exception-menu-item","data-test-subj":"add-endpoint-exception-menu-item",disabled:u,onClick:c,name:o.d},{key:"add-exception-menu-item","data-test-subj":"add-exception-menu-item",disabled:d,onClick:l,name:o.g}]),[u,d,l,c])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(135);const r=({onAddEventFilterClick:e,disabled:t=!1,tooltipMessage:n})=>({eventFilterActionItems:Object(a.useMemo)((()=>[{key:"add-event-filter-menu-item","data-test-subj":"add-event-filter-menu-item",onClick:e,disabled:t,toolTipContent:n,name:i.e}]),[e,t,n])})},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(129),r=n(1123),o=n(285);const s=({closePopover:e,ecsRowData:t,refetch:n})=>{var s;const{hasIndexWrite:l}=Object(o.a)(),c=t._id,u=Object(a.useMemo)((()=>{var e,n,a,r;return[{_id:c,_index:null!==(e=t._index)&&void 0!==e?e:"",data:[{field:i.kb,value:null!==(n=null==t||null===(a=t.kibana)||void 0===a?void 0:a.alert.workflow_tags)&&void 0!==n?n:[]}],ecs:{_id:c,_index:null!==(r=t._index)&&void 0!==r?r:""}}]}),[c,t._index,null==t||null===(s=t.kibana)||void 0===s?void 0:s.alert.workflow_tags]),{alertTagsItems:d,alertTagsPanels:p}=Object(r.a)({refetch:n}),m=Object(a.useMemo)((()=>d.map((e=>({name:e.name,panel:e.panel,"data-test-subj":e["data-test-subj"],key:e.key})))),[d]);return{alertTagsItems:l?m:[],alertTagsPanels:Object(a.useMemo)((()=>p.map((t=>{const n=t.renderContent({closePopoverMenu:e,setIsBulkActionsLoading:()=>{},alertItems:u});return{title:t.title,content:n,id:t.id}}))),[u,p,e])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(2);const i=({refetch:e,onRuleChange:t,isActiveTimelines:n})=>{const[i,r]=Object(a.useState)(!1),[o,s]=Object(a.useState)(null);return{exceptionFlyoutType:o,openAddExceptionFlyout:i,onAddExceptionTypeClick:Object(a.useCallback)((e=>{s(null!=e?e:null),r(!0)}),[]),onAddExceptionCancel:Object(a.useCallback)((()=>{s(null),r(!1)}),[]),onAddExceptionConfirm:Object(a.useCallback)(((a,i,o)=>{e&&(!1===n||o)&&e(),null!=t&&a&&t(),r(!1)}),[t,e,n])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(381);const i=(e,t)=>{const n=Object(a.g)(e),i=Object(a.b)(e);return"create"===t?i:n}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n.n(a),r=n(40),o=n(107);const s=Object(a.memo)((({title:e,subtitle:t,actions:n,children:s,restrictWidth:l=!1,hasBottomBorder:c=!0,hideHeader:u=!1,headerBackComponent:d,...p})=>{const m=Object(a.useMemo)((()=>i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",alignItems:"flexStart"},i.a.createElement(r.EuiFlexItem,{grow:!1},d&&i.a.createElement(i.a.Fragment,null,d)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiTitle,{size:"l"},i.a.createElement("span",{"data-test-subj":"header-page-title"},e))))),[d,e]),f=Object(a.useMemo)((()=>t?i.a.createElement("span",{"data-test-subj":"header-panel-subtitle"},t):void 0),[t]),g=Object(o.a)(p["data-test-subj"]);return i.a.createElement("div",p,!u&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiPageHeader,{pageTitle:m,description:f,bottomBorder:c,rightSideItems:n?[n]:void 0,restrictWidth:l,"data-test-subj":g("header")}),i.a.createElement(r.EuiSpacer,{size:"l"})),i.a.createElement(r.EuiPageContent_Deprecated,{hasBorder:!1,hasShadow:!1,paddingSize:"none",color:"transparent",borderRadius:"none"},i.a.createElement(r.EuiPageContentBody_Deprecated,{restrictWidth:l},s)))}));s.displayName="AdministrationListPage"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(290);const r=["create","edit"],o=(e=!0,t=!0)=>{var n;const o=null!==(n=Object(i.a)().urlParams.show)&&void 0!==n?n:"";return Object(a.useMemo)((()=>!!r.includes(o)&&("create"===o&&t||"edit"===o&&e)),[t,e,o])}},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"a",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s}));var a=n(226);function i(e){return(null==e?void 0:e.filter((e=>!e.startsWith("policy:"))))||[]}function r(e,t=[]){return e.isGlobal?[a.d,...t]:e.selected.map((e=>`policy:${e.id}`)).concat(t)}function o(e,t){return e.find((e=>e===a.d))?{isGlobal:!0,selected:[]}:{isGlobal:!1,selected:e.reduce(((e,n)=>{const a=n.split(":")[1],i=t.find((e=>e.id===a));return void 0!==i&&e.push(i),e}),[])}}function s(e){return void 0!==e&&void 0!==e.find((e=>e===a.d))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(2);const i=()=>{const[e,t]=Object(a.useState)(!1),n=Object(a.useCallback)((()=>{t(!0)}),[]);return{closeAddEventFilterModal:Object(a.useCallback)((()=>{t(!1)}),[]),isAddEventFilterModalOpen:e,onAddEventFilterClick:n}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(119),i=n(139),r=n(542);const o=Object(i.createSelector)(Object(r.globalFiltersQuerySelector)(),Object(r.getTimelineSelector)(),Object(r.globalQuerySelector)(),Object(r.globalQuery)(),Object(r.timelineQueryByIdSelector)(),Object(a.o)(),((e,t,n,a,i,r)=>({filters:e,input:t,query:n,globalQueries:a,timelineQuery:i,dataTable:r})))},function(e,t,n){e.exports=n.p+"2d015490d219c87a014c81f9555e556a.svg"},function(e,t,n){e.exports=n.p+"432a17d27c37a1b4467753dcc2332f12.svg"},function(e,t,n){"use strict";n.d(t,"c",(function(){return o})),n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return l}));var a=n(113),i=n(314),r=n(200);const o=e=>({...e.page.queries,[r.HostsTableType.authentications]:{...e.page.queries[r.HostsTableType.authentications],activePage:i.a},[r.HostsTableType.hosts]:{...e.page.queries[r.HostsTableType.hosts],activePage:i.a},[r.HostsTableType.events]:{...e.page.queries[r.HostsTableType.events],activePage:i.a},[r.HostsTableType.uncommonProcesses]:{...e.page.queries[r.HostsTableType.uncommonProcesses],activePage:i.a}}),s=e=>({...e.details.queries,[r.HostsTableType.authentications]:{...e.details.queries[r.HostsTableType.authentications],activePage:i.a},[r.HostsTableType.hosts]:{...e.details.queries[r.HostsTableType.hosts],activePage:i.a},[r.HostsTableType.events]:{...e.details.queries[r.HostsTableType.events],activePage:i.a},[r.HostsTableType.uncommonProcesses]:{...e.details.queries[r.HostsTableType.uncommonProcesses],activePage:i.a}}),l=(e,t)=>e.length>0?[{query:{bool:{should:e.map((e=>({match_phrase:{[t===a.w.user?a.x.userRisk:a.x.hostRisk]:{query:e}}})))}},meta:{alias:null,disabled:!1,negate:!1}}]:[]},function(e,t,n){const a=n(192);e.exports=(e,t,n)=>0===a(e,t,n)},function(e,t,n){const a=n(192);e.exports=(e,t,n)=>0!==a(e,t,n)},function(e,t,n){const a=n(836),i=n(837),r=n(462),o=n(489),s=n(578),l=n(396);e.exports=(e,t,n,c)=>{switch(t){case"===":return"object"==typeof e&&(e=e.version),"object"==typeof n&&(n=n.version),e===n;case"!==":return"object"==typeof e&&(e=e.version),"object"==typeof n&&(n=n.version),e!==n;case"":case"=":case"==":return a(e,n,c);case"!=":return i(e,n,c);case">":return r(e,n,c);case">=":return o(e,n,c);case"<":return s(e,n,c);case"<=":return l(e,n,c);default:throw new TypeError(`Invalid operator: ${t}`)}}},function(e,t,n){"use strict";const a=n(2),i=n(1310),r=n(496),o=n(1311),s=n(1358),l=n(1399),c=n(1359),u=n(1360),d=n(1362),p=n(1363).hastChildrenToReact;e.exports=b;const m={}.hasOwnProperty,f="https://github.com/remarkjs/react-markdown/blob/main/changelog.md",g={renderers:{to:"components",id:"change-renderers-to-components"},astPlugins:{id:"remove-buggy-html-in-markdown-parser"},allowDangerousHtml:{id:"remove-buggy-html-in-markdown-parser"},escapeHtml:{id:"remove-buggy-html-in-markdown-parser"},source:{to:"children",id:"change-source-to-children"},allowNode:{to:"allowElement",id:"replace-allownode-allowedtypes-and-disallowedtypes"},allowedTypes:{to:"allowedElements",id:"replace-allownode-allowedtypes-and-disallowedtypes"},disallowedTypes:{to:"disallowedElements",id:"replace-allownode-allowedtypes-and-disallowedtypes"},includeNodeIndex:{to:"includeElementIndex",id:"change-includenodeindex-to-includeelementindex"}};function b(e){for(const t in g)if(m.call(g,t)&&m.call(e,t)){const e=g[t];console.warn(`[react-markdown] Warning: please ${e.to?`use \`${e.to}\` instead of`:"remove"} \`${t}\` (see <${f}#${e.id}> for more info)`),delete g[t]}const t=r().use(o).use(e.remarkPlugins||e.plugins||[]).use(s,{allowDangerousHtml:!0}).use(e.rehypePlugins||[]).use(u,e);let n;"string"==typeof e.children?n=i(e.children):(void 0!==e.children&&null!==e.children&&console.warn(`[react-markdown] Warning: please pass a string as \`children\` (not: \`${e.children}\`)`),n=i());const l=t.runSync(t.parse(n),n);if("root"!==l.type)throw new TypeError("Expected a `root` node");let d=a.createElement(a.Fragment,{},p({options:e,schema:c,listDepth:0},l));return e.className&&(d=a.createElement("div",{className:e.className},d)),d}b.defaultProps={transformLinkUri:d},b.propTypes={children:l.string,className:l.string,allowElement:l.func,allowedElements:l.arrayOf(l.string),disallowedElements:l.arrayOf(l.string),unwrapDisallowed:l.bool,remarkPlugins:l.arrayOf(l.oneOfType([l.object,l.func,l.arrayOf(l.oneOfType([l.object,l.func]))])),rehypePlugins:l.arrayOf(l.oneOfType([l.object,l.func,l.arrayOf(l.oneOfType([l.object,l.func]))])),sourcePos:l.bool,rawSourcePos:l.bool,skipHtml:l.bool,includeElementIndex:l.bool,transformLinkUri:l.oneOfType([l.func,l.bool]),linkTarget:l.oneOfType([l.func,l.string]),transformImageUri:l.func,components:l.object},b.uriTransformer=d},function(e,t,n){"use strict";var a={}.hasOwnProperty;e.exports=a},function(e,t,n){"use strict";e.exports=function(e){for(var t=-1,n=0;++t<e.length;)n+="string"==typeof e[t]?e[t].length:1;return n}},function(e,t,n){"use strict";var a=n(369),i=n(251),r=n(315);function o(e,t){for(var n,a,r,o,s,l,c=e[t][1],u=e[t][2],d=t-1,p=[],m=c._tokenizer||u.parser[c.contentType](c.start),f=m.events,g=[],b={};c;){for(;e[++d][1]!==c;);p.push(d),c._tokenizer||(n=u.sliceStream(c),c.next||n.push(null),a&&m.defineSkip(c.start),c.isInFirstContentOfListItem&&(m._gfmTasklistFirstContentOfListItem=!0),m.write(n),c.isInFirstContentOfListItem&&(m._gfmTasklistFirstContentOfListItem=void 0)),a=c,c=c.next}for(c=a,r=f.length;r--;)"enter"===f[r][0]?o=!0:o&&f[r][1].type===f[r-1][1].type&&f[r][1].start.line!==f[r][1].end.line&&(y(f.slice(r+1,s)),c._tokenizer=c.next=void 0,c=c.previous,s=r+1);for(m.events=c._tokenizer=c.next=void 0,y(f.slice(0,s)),r=-1,l=0;++r<g.length;)b[l+g[r][0]]=l+g[r][1],l+=g[r][1]-g[r][0]-1;return b;function y(t){var n=p.pop();g.unshift([n,n+t.length-1]),i(e,n,2,t)}}e.exports=function(e){for(var t,n,s,l,c,u,d,p={},m=-1;++m<e.length;){for(;m in p;)m=p[m];if(t=e[m],m&&"chunkFlow"===t[1].type&&"listItemPrefix"===e[m-1][1].type&&((s=0)<(u=t[1]._tokenizer.events).length&&"lineEndingBlank"===u[s][1].type&&(s+=2),s<u.length&&"content"===u[s][1].type))for(;++s<u.length&&"content"!==u[s][1].type;)"chunkText"===u[s][1].type&&(u[s][1].isInFirstContentOfListItem=!0,s++);if("enter"===t[0])t[1].contentType&&(a(p,o(e,m)),m=p[m],d=!0);else if(t[1]._container||t[1]._movePreviousLineEndings){for(s=m,n=void 0;s--&&("lineEnding"===(l=e[s])[1].type||"lineEndingBlank"===l[1].type);)"enter"===l[0]&&(n&&(e[n][1].type="lineEndingBlank"),l[1].type="lineEnding",n=s);n&&(t[1].end=r(e[n][1].start),(c=e.slice(n,m)).unshift(t),i(e,n,m-n+1,c))}}return!d}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(369),i=n(315),r=l("text"),o=l("string"),s={resolveAll:c()};function l(e){return{tokenize:function(t){var n=this,a=this.parser.constructs[e],i=t.attempt(a,r,o);return r;function r(e){return l(e)?i(e):o(e)}function o(e){if(null!==e)return t.enter("data"),t.consume(e),s;t.consume(e)}function s(e){return l(e)?(t.exit("data"),i(e)):(t.consume(e),s)}function l(e){var t=a[e],i=-1;if(null===e)return!0;if(t)for(;++i<t.length;)if(!t[i].previous||t[i].previous.call(n,n.previous))return!0}},resolveAll:c("text"===e?u:void 0)}}function c(e){return function(t,n){for(var a,i=-1;++i<=t.length;)void 0===a?t[i]&&"data"===t[i][1].type&&(a=i,i++):t[i]&&"data"===t[i][1].type||(i!==a+2&&(t[a][1].end=t[i-1][1].end,t.splice(a+2,i-a-2),i=a+2),a=void 0);return e?e(t,n):t}}function u(e,t){for(var n,r,o,s,l,c,u,d,p=-1;++p<=e.length;)if((p===e.length||"lineEnding"===e[p][1].type)&&"data"===e[p-1][1].type){for(r=e[p-1][1],s=(n=t.sliceStream(r)).length,l=-1,c=0,u=void 0;s--;)if("string"==typeof(o=n[s])){for(l=o.length;32===o.charCodeAt(l-1);)c++,l--;if(l)break;l=-1}else if(-2===o)u=!0,c++;else if(-1!==o){s++;break}c&&(d={type:p===e.length||u||c<2?"lineSuffix":"hardBreakTrailing",start:{line:r.end.line,column:r.end.column-c,offset:r.end.offset-c,_index:r.start._index+s,_bufferIndex:s?l:r.start._bufferIndex+l},end:i(r.end)},r.end=i(d.start),r.start.offset===r.end.offset?a(r,d):(e.splice(p,0,["enter",d,t],["exit",d,t]),p+=2)),p++}return e}t.resolver=s,t.string=o,t.text=r},function(e,t,n){"use strict";e.exports=function(e){return e<32||127===e}},function(e,t,n){e.exports=n(33)(3364)},function(e,t,n){"use strict";var a=n(253)(/\d/);e.exports=a},function(e,t,n){"use strict";var a=n(844),i=n(252),r=n(147);e.exports=function(e,t,n,o,s,l,c,u,d){var p=d||1/0,m=0;return function(t){return 60===t?(e.enter(o),e.enter(s),e.enter(l),e.consume(t),e.exit(l),f):a(t)||41===t?n(t):(e.enter(o),e.enter(c),e.enter(u),e.enter("chunkString",{contentType:"string"}),y(t))};function f(n){return 62===n?(e.enter(l),e.consume(n),e.exit(l),e.exit(s),e.exit(o),t):(e.enter(u),e.enter("chunkString",{contentType:"string"}),g(n))}function g(t){return 62===t?(e.exit("chunkString"),e.exit(u),f(t)):null===t||60===t||r(t)?n(t):(e.consume(t),92===t?b:g)}function b(t){return 60===t||62===t||92===t?(e.consume(t),g):g(t)}function y(r){return 40===r?++m>p?n(r):(e.consume(r),y):41===r?m--?(e.consume(r),y):(e.exit("chunkString"),e.exit(u),e.exit(c),e.exit(o),t(r)):null===r||i(r)?m?n(r):(e.exit("chunkString"),e.exit(u),e.exit(c),e.exit(o),t(r)):a(r)?n(r):(e.consume(r),92===r?h:y)}function h(t){return 40===t||41===t||92===t?(e.consume(t),y):y(t)}}},function(e,t,n){"use strict";var a=n(147),i=n(237);e.exports=function(e,t,n,r,o,s){var l,c=this,u=0;return function(t){return e.enter(r),e.enter(o),e.consume(t),e.exit(o),e.enter(s),d};function d(i){return null===i||91===i||93===i&&!l||94===i&&!u&&"_hiddenFootnoteSupport"in c.parser.constructs||u>999?n(i):93===i?(e.exit(s),e.enter(o),e.consume(i),e.exit(o),e.exit(r),t):a(i)?(e.enter("lineEnding"),e.consume(i),e.exit("lineEnding"),d):(e.enter("chunkString",{contentType:"string"}),p(i))}function p(t){return null===t||91===t||93===t||a(t)||u++>999?(e.exit("chunkString"),d(t)):(e.consume(t),l=l||!i(t),92===t?m:p)}function m(t){return 91===t||92===t||93===t?(e.consume(t),u++,p):p(t)}}},function(e,t,n){"use strict";var a=n(147),i=n(237),r=n(154);e.exports=function(e,t){var n;return function o(s){return a(s)?(e.enter("lineEnding"),e.consume(s),e.exit("lineEnding"),n=!0,o):i(s)?r(e,o,n?"linePrefix":"lineSuffix")(s):t(s)}}},function(e,t,n){"use strict";var a=n(147),i=n(154);e.exports=function(e,t,n,r,o,s){var l;return function(t){return e.enter(r),e.enter(o),e.consume(t),e.exit(o),l=40===t?41:t,c};function c(n){return n===l?(e.enter(o),e.consume(n),e.exit(o),e.exit(r),t):(e.enter(s),u(n))}function u(t){return t===l?(e.exit(s),c(l)):null===t?n(t):a(t)?(e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),i(e,u,"linePrefix")):(e.enter("chunkString",{contentType:"string"}),d(t))}function d(t){return t===l||null===t||a(t)?(e.exit("chunkString"),u(t)):(e.consume(t),92===t?p:d)}function p(t){return t===l||92===t?(e.consume(t),d):d(t)}}},function(e,t,n){"use strict";var a=n(147),i=n(237),r=n(154),o={name:"thematicBreak",tokenize:function(e,t,n){var o,s=0;return function(t){return e.enter("thematicBreak"),o=t,l(t)};function l(u){return u===o?(e.enter("thematicBreakSequence"),c(u)):i(u)?r(e,l,"whitespace")(u):s<3||null!==u&&!a(u)?n(u):(e.exit("thematicBreak"),t(u))}function c(t){return t===o?(e.consume(t),s++,c):(e.exit("thematicBreakSequence"),l(t))}}};e.exports=o},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"a",(function(){return o})),n.d(t,"e",(function(){return s})),n.d(t,"c",(function(){return l}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.ruleActionsField.ruleActionsFormErrorsTitle",{defaultMessage:"Please fix issues listed below"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleNotifyWhen.onActiveAlert.display",{defaultMessage:"Per rule run"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleNotifyWhen.onThrottleInterval.display",{defaultMessage:"Custom frequency"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.body.summary.message",{defaultMessage:"Rule {ruleName} generated {signalsCount} alerts",values:{ruleName:"{{context.rule.name}}",signalsCount:"{{state.signals_count}}"}}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.body.forEachAlert.message",{defaultMessage:"Rule {ruleName} generated alert {alertId}",values:{ruleName:"{{context.rule.name}}",alertId:"{{alert.id}}"}})},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(108),i=n(332),r=n(304);const o=(e,t)=>{const{addError:n}=Object(a.a)();return Object(i.a)(e,{onError:e=>n(e,{title:r.b}),...t})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"h",(function(){return r})),n.d(t,"i",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"c",(function(){return p}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.documentationLinks.ariaLabelEnding",{defaultMessage:"click to open documentation in a new tab"}),r="sec-requirements.html",o=a.i18n.translate("xpack.securitySolution.documentationLinks.solutionRequirements.text",{defaultMessage:"Elastic Security system requirements"}),s="detections-permissions-section.html",l=a.i18n.translate("xpack.securitySolution.documentationLinks.detectionsRequirements.text",{defaultMessage:"Detections prerequisites and requirements"}),c="alerts-ui-monitor.html#ml-job-compatibility",u=a.i18n.translate("xpack.securitySolution.documentationLinks.mlJobCompatibility.text",{defaultMessage:"ML job compatibility"}),d="rules-coverage.html",p=a.i18n.translate("xpack.securitySolution.documentationLinks.coverageOverview.text",{defaultMessage:"Learn more."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(5);const i={interval:{label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRule.fieldIntervalLabel",{defaultMessage:"Runs every"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRule.fieldIntervalHelpText",{defaultMessage:"Rules run periodically and detect alerts within the specified time frame."})},from:{label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRule.fieldAdditionalLookBackLabel",{defaultMessage:"Additional look-back time"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepScheduleRule.fieldAdditionalLookBackHelpText",{defaultMessage:"Adds time to the look-back period to prevent missed alerts."})}}},,,function(e,t,n){"use strict";n.d(t,"e",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(172),i=n(137);function r(e){switch(e){case a.b.export:return i.Dc;case a.b.duplicate:return i.pc;case a.b.delete:return i.hc;case a.b.enable:return i.yc;case a.b.disable:return i.lc;case a.b.edit:return i.tc}}function o(e,t){switch(e){case a.b.export:return u(t.succeeded,t.total);case a.b.duplicate:return i.qc(t.succeeded);case a.b.delete:return i.ic(t.succeeded);case a.b.enable:return i.zc(t.succeeded);case a.b.disable:return i.mc(t.succeeded)}}function s(e,t){const n=t.skipped>0?` ${i.uc}`:null;return e.some((e=>e.type===a.a.add_index_patterns||e.type===a.a.set_index_patterns||e.type===a.a.delete_index_patterns))?`${i.vc(t.succeeded,t.skipped)}${n}`:i.vc(t.succeeded,t.skipped)}function l(e){switch(e){case a.b.export:return i.Ac;case a.b.duplicate:return i.nc;case a.b.delete:return i.fc;case a.b.enable:return i.wc;case a.b.disable:return i.jc;case a.b.edit:return i.rc}}function c(e,t){var n,r;const o=null===(n=t.body)||void 0===n||null===(r=n.attributes)||void 0===r?void 0:r.summary;if(!o)return"";switch(e){case a.b.export:return i.Bc(o.failed);case a.b.duplicate:return i.oc(o.failed);case a.b.delete:return i.gc(o.failed);case a.b.enable:return i.xc(o.failed);case a.b.disable:return i.kc(o.failed);case a.b.edit:return i.sc(o.failed,o.skipped)}}const u=(e,t)=>{const n=[i.Ec(e,t)];return t>e&&n.push(i.Cc),n.join(" ")}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(108),r=n(172),o=n(858);function s(){const e=Object(i.a)();return Object(a.useCallback)((({actionType:t,summary:n,editPayload:a})=>{const i=t===r.b.edit?Object(o.a)(null!=a?a:[],n):Object(o.c)(t,n);e.addSuccess({title:Object(o.e)(t),text:i})}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(172),r=n(265);function o(){const e=Object(r.c)();return Object(a.useCallback)((t=>{const n=null!=e&&e.state.isAllSelected?e.state.rules:[];return(t===i.b.enable?n.filter((e=>!e.enabled)):t===i.b.disable?n.filter((e=>e.enabled)):n).map((e=>e.id))}),[e])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(41);const i=n.n(a).a.div.withConfig({displayName:"Display",componentId:"sc-1f84jld-0"})(["",";"],(({show:e})=>e?"":"display: none;"));i.displayName="Display"},function(e,t,n){"use strict";n.d(t,"c",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(5);a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.pageTitle",{defaultMessage:"Rule details"}),a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.backToRulesButton",{defaultMessage:"Rules"});const i=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.enableRuleLabel",{defaultMessage:"Enable"}),r=(a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.unknownDescription",{defaultMessage:"Unknown"}),a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExceptionsTab",{defaultMessage:"Rule exceptions"})),o=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.endpointExceptionsTab",{defaultMessage:"Endpoint exceptions"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionResultsTab",{defaultMessage:"Execution results"}),l=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionEventsTab",{defaultMessage:"Execution events"}),c=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.deletedRule",{defaultMessage:"Deleted rule"}),u=a.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.deleteRuleConfirmationBody",{defaultMessage:'This action will delete the rule. Click "Delete" to continue.'})},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(2);const i=({onInit:e,onFinish:t})=>{const n=Object(a.useRef)(),i=Object(a.useCallback)((()=>{var e;null===(e=n.current)||void 0===e||e.call(n,!0)}),[]),r=Object(a.useCallback)((()=>{var e;null===(e=n.current)||void 0===e||e.call(n,!1)}),[]);return[Object(a.useCallback)((()=>(e(),new Promise((e=>{n.current=e})).finally((()=>{t()})))),[e,t]),i,r]}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return ft}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(102);const c="commandInputHistory";var u=n(295),d=n(0),p=n.n(d);class parsed_command_input_ParsedCommand{constructor(e){p()(this,"name",void 0),p()(this,"args",void 0),p()(this,"hasArgs",void 0),this.input=e;const t=(e=>{const t=e.trim(),n={name:f(t),args:{}};if(!t)return n;const a=t.indexOf(" "),i=-1===a?[]:t.substring(a).trim().split(/--/);for(const e of i){const t=e.trim();if(t){const e=/[ =]/.exec(t),a=(e?t.substring(0,e.index).trim():t).trim();if(a)if(n.args[a]||(n.args[a]=[]),a!==t&&e){let i=t.substring(e.index+1).trim().replace(/\\-\\-/g,"--");'"'===i.charAt(0)&&(i=i.substring(1)),'"'===i.charAt(i.length-1)&&(i=i.substring(0,i.length-1)),n.args[a].push(i)}else n.args[a].push(!0)}}return n})(e);this.name=t.name,this.args=t.args,this.hasArgs=Object.keys(this.args).length>0}hasArg(e){return e in this.args}}const m=e=>new parsed_command_input_ParsedCommand(e),f=e=>{const t=e.trimStart();if(!t)return"";const n=e.indexOf(" ");return-1===n?t:t.substring(0,n)},g=e=>{let t="",n="";const a=[];if(e.args)for(const[i,r]of Object.entries(e.args))r.required?(t.length&&(t+=" "),t+=`--${i}`):r.exclusiveOr?a.push(`--${i}`):(n.length&&(n+=" "),n+=`--${i}`);const i=({required:e,exclusive:t,optional:n})=>`${e||""}${t?` ${t}`:""} ${n&&n.length>0?`[${n}]`:""}`.trim();return a.length>0?a.map((e=>i({required:t,exclusive:e,optional:n}))):t||n?[i({required:t,optional:n})]:[]};var b=n(5),y=n(47);const h=b.i18n.translate("xpack.securitySolution.handleInputAreaState.inputPlaceholderText",{defaultMessage:"Submit response action"}),v=(e,t)=>{if(t&&t.argsWithValueSelectors)for(const a of Object.keys(t.argsWithValueSelectors))if(e.hasArg(a)){var n;const i=null!==(n=t.argState[a])&&void 0!==n?n:[];e.args[a]=i.map((e=>e.value))}},E=(e,{type:t,payload:n})=>{var a;switch(t){case"updateInputPopoverState":if(e.input.showPopover!==n.show)return{...e,input:{...e.input,showPopover:n.show}};break;case"updateInputHistoryState":return{...e,input:{...e.input,history:[{id:Object(y.v4)(),input:n.command,display:null!==(a=n.display)&&void 0!==a?a:n.command},...e.input.history.slice(0,99)]}};case"clearInputHistoryState":return{...e,input:{...e.input,history:[]}};case"updateInputTextEnteredState":const{leftOfCursorText:t,rightOfCursorText:s="",argState:l}="function"==typeof n?n(e.input):n;if(e.input.leftOfCursorText!==t||e.input.rightOfCursorText!==s){var i;const n=m(t+s);let a=e.input.enteredCommand;if(a&&l&&(null===(i=a)||void 0===i?void 0:i.argState)!==l&&(a={...a,argState:l}),n.name&&(!a||n.name!==a.commandDefinition.name)||!n.name&&a){a=void 0;const t=e.commands.find((e=>e.name===n.name));if(t){let e;for(const[n,a]of Object.entries(null!==(r=t.args)&&void 0!==r?r:{})){var r;a.SelectorComponent&&(e||(e={}),e[n]=a)}a={argState:{},commandDefinition:t,argsWithValueSelectors:e}}}return v(n,a),{...e,input:{...e.input,leftOfCursorText:t,rightOfCursorText:s,parsedInput:n,enteredCommand:a}}}break;case"updateInputPlaceholderState":if(e.input.placeholder!==n.placeholder)return{...e,input:{...e.input,placeholder:n.placeholder||h}};break;case"setInputState":if(e.input.visibleState!==n.value)return{...e,input:{...e.input,visibleState:n.value}};break;case"updateInputCommandArgState":if(e.input.enteredCommand){var o;const{name:t,instance:a,state:i}=n,r=[...null!==(o=e.input.enteredCommand.argState[t])&&void 0!==o?o:[]];r[a]=i;const s={...e.input.enteredCommand,argState:{...e.input.enteredCommand.argState,[t]:r}},l=m(e.input.leftOfCursorText+e.input.rightOfCursorText);return v(l,s),{...e,input:{...e.input,parsedInput:l,enteredCommand:s}}}}return e};var x=n(44),j=n(229);const O=Object.freeze({mustHaveValue:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.mustHaveValue",{defaultMessage:"Argument --{argName} must have a value",values:{argName:e}}),mustBeNumber:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.mustBeNumber",{defaultMessage:"Argument --${argName} value must be a number",values:{argName:e}}),mustBeGreaterThanZero:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.mustBeGreaterThanZero",{defaultMessage:"Argument --{argName} value must be greater than zero",values:{argName:e}}),NO_ARGUMENTS_SUPPORTED:b.i18n.translate("xpack.securitySolution.console.commandValidation.noArgumentsSupported",{defaultMessage:"Command does not support any arguments"}),missingRequiredArg:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.missingRequiredArg",{defaultMessage:"Missing required argument: --{argName}",values:{argName:e}}),unsupportedArg:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.unsupportedArg",{defaultMessage:"Unsupported argument: --{argName}",values:{argName:e}}),noMultiplesAllowed:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.argSupportedOnlyOnce",{defaultMessage:"Argument can only be used once: --{argName}",values:{argName:e}}),argValueValidatorError:(e,t)=>b.i18n.translate("xpack.securitySolution.console.commandValidation.invalidArgValue",{defaultMessage:"Invalid argument value: --{argName}. {error}",values:{argName:e,error:t}}),missingArguments:e=>b.i18n.translate("xpack.securitySolution.console.commandValidation.mustHaveArgs",{defaultMessage:"Missing required arguments: {missingArgs}",values:{missingArgs:e}}),MUST_HAVE_AT_LEAST_ONE_ARG:b.i18n.translate("xpack.securitySolution.console.commandValidation.oneArgIsRequired",{defaultMessage:"At least one argument must be used"}),onlyOneFromExclusiveOr:e=>i.a.createElement(j.a,null,i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandValidation.exclusiveOr",defaultMessage:"This command supports only one of the following arguments: {argNames}",values:{argNames:i.a.createElement(j.a,{bold:!0,inline:!0},e)}})),unknownArgument:(e,t,n)=>i.a.createElement(j.a,null,i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandValidation.unknownArgument",defaultMessage:"The following {command} {countOfInvalidArgs, plural, =1 {argument is} other {arguments are}} not supported by this command: {unknownArgs}",values:{countOfInvalidArgs:e,command:i.a.createElement(j.a,{bold:!0,inline:!0},t),unknownArgs:i.a.createElement(j.a,{bold:!0,inline:!0},n)}}))});var S=n(107);const k=(e="")=>{const t=se().state.dataTestSubj;return t?t+(e?`-${e}`:""):""},w=b.i18n.translate("xpack.securitySolution.console.unsupportedMessageCallout.title",{defaultMessage:"Unsupported"}),I=Object(a.memo)((({children:e,header:t=w,"data-test-subj":n})=>i.a.createElement("div",{"data-test-subj":n},i.a.createElement(r.EuiText,{size:"s"},i.a.createElement(r.EuiTextColor,{color:"danger"},t)),i.a.createElement(r.EuiSpacer,{size:"s"}),e)));I.displayName="UnsupportedMessageCallout";const T={className:"euiTruncateText"},C=Object(a.memo)((({commandDef:e})=>{const t=Object(a.useMemo)((()=>g(e).map(((t,n)=>i.a.createElement(i.a.Fragment,{key:`helpUsage-${n}`},n>0&&i.a.createElement(r.EuiSpacer,{size:"xs"}),i.a.createElement(j.a,null,`${e.name} ${t}`))))),[e]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiDescriptionList,{compressed:!0,type:"column",className:"descriptionList-20_80",listItems:[{title:i.a.createElement(j.a,null,b.i18n.translate("xpack.securitySolution.console.commandUsage.inputUsage",{defaultMessage:"Usage"})),description:t&&t.length>0?t:e.name}],descriptionProps:T,titleProps:T}),i.a.createElement(r.EuiSpacer,{size:"s"}),e.exampleUsage&&i.a.createElement(r.EuiDescriptionList,{compressed:!0,type:"column",className:"descriptionList-20_80",listItems:[{title:i.a.createElement(j.a,null,b.i18n.translate("xpack.securitySolution.console.commandUsage.exampleUsage",{defaultMessage:"Example"})),description:i.a.createElement(j.a,null,e.exampleUsage)}],descriptionProps:T,titleProps:T}))}));C.displayName="CommandInputUsage";const M=Object(a.memo)((({commandDef:e,errorMessage:t})=>{const n=Object(S.a)(k()),o=Object(a.useMemo)((()=>{var t;return Object.keys(null!==(t=e.args)&&void 0!==t?t:[]).length>0}),[e.args]),s=Object(a.useMemo)((()=>o&&e.args?Object.entries(e.args).reduce(((e,t)=>{const n={title:`--${t[0]}`,description:t[1].about};return t[1].required?e.required.push(n):t[1].exclusiveOr?e.exclusiveOr.push(n):e.optional.push(n),e}),{required:[],exclusiveOr:[],optional:[]}):{required:[],exclusiveOr:[],optional:[]}),[e.args,o]),l=(t,a)=>{const o=a.map((e=>i.a.createElement("div",null,i.a.createElement(j.a,{bold:!0,inline:!0},e.title),i.a.createElement(j.a,{inline:!0}," - ",e.description))));return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"s"}),e.args&&i.a.createElement(r.EuiDescriptionList,{compressed:!0,type:"column",className:"descriptionList-20_80",listItems:[{title:i.a.createElement(j.a,null,t),description:o}],descriptionProps:T,titleProps:T,"data-test-subj":n("commandUsage-options")}))},c=Object(a.useCallback)((()=>t?i.a.createElement(I,{header:i.a.createElement(j.a,{textColor:"danger"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.validationError.title",defaultMessage:"Unsupported action"})),"data-test-subj":n("validationError")},i.a.createElement("div",{"data-test-subj":n("badArgument-message")},t),i.a.createElement(r.EuiSpacer,{size:"s"})):null),[t,n]);return i.a.createElement(r.EuiPanel,{paddingSize:"none",color:"transparent","data-test-subj":n("commandUsage")},c(),i.a.createElement(r.EuiDescriptionList,{compressed:!0,type:"column",className:"descriptionList-20_80",listItems:[{title:i.a.createElement(j.a,null,b.i18n.translate("xpack.securitySolution.console.commandUsage.about",{defaultMessage:"About"})),description:i.a.createElement(j.a,null,e.about)}],descriptionProps:T,titleProps:T,"data-test-subj":n("commandUsage-options")}),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(C,{commandDef:e}),s.required&&s.required.length>0&&l(b.i18n.translate("xpack.securitySolution.console.commandUsage.requiredLabel",{defaultMessage:"Required parameters"}),s.required),s.exclusiveOr&&s.exclusiveOr.length>0&&l(b.i18n.translate("xpack.securitySolution.console.commandUsage.exclusiveOr",{defaultMessage:"Include only one parameter"}),s.exclusiveOr),s.optional&&s.optional.length>0&&l(b.i18n.translate("xpack.securitySolution.console.commandUsage.optional",{defaultMessage:"Optional parameters"}),s.optional))}));M.displayName="CommandUsage";const A=Object(a.memo)((({title:e,children:t})=>{const n=Object(S.a)(k());return i.a.createElement(r.EuiPanel,{hasShadow:!1,color:"transparent",paddingSize:"none","data-test-subj":n("helpOutput")},t)}));A.displayName="HelpOutput";const _=Object(a.memo)((e=>{const t=e.command.commandDefinition.HelpComponent;return Object(a.useEffect)((()=>{t||e.setStatus("success")}),[t,e]),t?i.a.createElement(t,e):i.a.createElement(A,{command:e.command,title:b.i18n.translate("xpack.securitySolution.console.buildInCommand.helpArgument.helpTitle",{defaultMessage:"{cmdName} command",values:{cmdName:e.command.args.name}})},i.a.createElement(M,{commandDef:e.command.commandDefinition,errorMessage:e.store.errorMessage}))}));_.displayName="HelpCommandArgument";const F=Object(a.memo)((({command:e,setStatus:t})=>{const n=Object(S.a)(k()),o=Object(a.useMemo)((()=>i.a.createElement(j.a,null,i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.unknownCommand.helpMessage",defaultMessage:"The text you entered {userInput} is unsupported! Click {helpIcon} {boldHelp} or type {helpCmd} for assistance.",values:{userInput:i.a.createElement(j.a,{bold:!0,inline:!0},e.input),helpIcon:i.a.createElement(r.EuiIcon,{type:"help"}),helpCmd:i.a.createElement(j.a,{bold:!0,inline:!0},"help"),boldHelp:i.a.createElement("strong",null,i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.unknownCommand.helpMessage.help",defaultMessage:"Help"}))}}))),[e.input]);return Object(a.useEffect)((()=>{t("success")}),[t]),i.a.createElement(I,{header:i.a.createElement(j.a,{textColor:"danger"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.unknownCommand.title",defaultMessage:"Unsupported text/command"})),"data-test-subj":n("unknownCommandError")},o)}));F.displayName="UnknownCommand";const D=Object(a.memo)((({command:e,setStatus:t,store:n})=>{const o=Object(S.a)(k());return Object(a.useEffect)((()=>{t("success")}),[t]),i.a.createElement(I,{header:i.a.createElement(j.a,{textColor:"danger"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.badArgument.title",defaultMessage:"Unsupported argument"})),"data-test-subj":o("badArgument")},i.a.createElement("div",{"data-test-subj":o("badArgument-message")},n.errorMessage),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(C,{commandDef:e.commandDefinition}),i.a.createElement(j.a,null,i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.badArgument.helpMessage",defaultMessage:"Enter {helpCmd} for further assistance.",values:{helpCmd:i.a.createElement(j.a,{bold:!0,inline:!0},`${e.commandDefinition.name} --help`)}})))}));D.displayName="BadArgument";const N=Object(a.memo)((({command:e,setStatus:t,store:n})=>{const o=Object(S.a)(k());return Object(a.useEffect)((()=>{t("success")}),[t]),i.a.createElement(I,{header:i.a.createElement(j.a,{textColor:"error"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.validationError.title",defaultMessage:"Unsupported action"})),"data-test-subj":o("validationError")},i.a.createElement("div",{"data-test-subj":o("validationError-message")},n.errorMessage),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(C,{commandDef:e.commandDefinition}),i.a.createElement(j.a,null,i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.validationError.helpMessage",defaultMessage:"Enter {helpCmd} for further assistance.",values:{helpCmd:i.a.createElement(j.a,{bold:!0,inline:!0},`${e.commandDefinition.name} --help`)}})))}));N.displayName="ValidationError";const P=e=>`--${e}`,R=(e,t)=>{const n=E(e,{type:"updateInputHistoryState",payload:{command:t.command.input,display:t.command.inputDisplay}});return n.commandHistory=[...e.commandHistory,t],n},L={name:"unknown-command",about:"unknown command",RenderComponent:()=>null},q=(e={})=>({status:"pending",store:e}),B=(e,t)=>({...e,commandDefinition:{...e.commandDefinition,RenderComponent:t}}),z=(e,t=q(),n=!0)=>({id:Object(y.v4)(),isValid:n,enteredAt:(new Date).toISOString(),command:e,state:t}),$=()=>se().dispatch,V=Object(a.memo)((({status:e,setStatus:t})=>{const n=$();return Object(a.useEffect)((()=>{"pending"===e&&n({type:"clear"}),t("success")}),[e,t,n]),null}));V.displayName="ClearCommand";var U=n(8);const G=e=>{if(!e.mustHaveArgs||!e.args)return e.name;let t=!1;const n=Object.entries(e.args).reduce(((e,[n,a])=>a.required?(e[n]=a,e):a.exclusiveOr&&!t?(t=!0,e[n]=a,e):e),{});return`${e.name} --${Object.keys(n).join(" --")}`},H=b.i18n.translate("xpack.securitySolution.console.commandList.otherCommandsGroup.label",{defaultMessage:"Other commands"}),W=e=>e.replace(/[^A-Za-z0-9]/g,""),Q=s()(r.EuiBasicTable).withConfig({displayName:"StyledEuiBasicTable",componentId:"sc-10x4uz4-0"})(["margin-top:",";.euiTableHeaderCell{.euiTableCellContent__text{color:",";font-size:",";padding-bottom:",";padding-left:",";}}"],(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiTextColor),(({theme:{eui:e}})=>e.euiFontSize),(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiSizeS)),Y=s()(r.EuiCallOut).withConfig({displayName:"StyledEuiCallOut",componentId:"sc-10x4uz4-1"})(["margin:",";padding:",";border-radius:",";"],(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSizeXS)),K=s()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-10x4uz4-2"})(["padding-left:",";"],(({theme:{eui:e}})=>e.euiSizeS)),X=s()(r.EuiFlexGrid).withConfig({displayName:"StyledEuiFlexGrid",componentId:"sc-10x4uz4-3"})(["@media only screen and (min-width:","){max-width:75%;}@media only screen and (min-width:","){max-width:50%;}"],(e=>e.theme.eui.euiBreakpoints.l),(e=>e.theme.eui.euiBreakpoints.xl)),J=s()(r.EuiBadge).withConfig({displayName:"StyledEuiBadge",componentId:"sc-10x4uz4-4"})(["font-size:10px !important;span{color:"," !important;}"],(({theme:{eui:e}})=>e.euiShadowColor)),Z=Object(a.memo)((({commands:e,display:t="default"})=>{const n=Object(S.a)(k("commandList")),o=$(),{docLinks:s}=Object(l.j)().services,c=Object(a.useMemo)((()=>{var e;return i.a.createElement(r.EuiDescriptionList,{compressed:!0,listItems:[{title:i.a.createElement(J,null,i.a.createElement(j.a,{inline:!0,bold:!0},null===(e=ae.find((e=>"--help"===e.name)))||void 0===e?void 0:e.name)),description:i.a.createElement(r.EuiText,{color:"subdued",size:"xs"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.footerText",defaultMessage:"For more help with the individual commands use the --help argument. Ex: processes --help"}))}]})}),[]),u=Object(a.useCallback)((e=>()=>{o({type:"updateInputTextEnteredState",payload:()=>({leftOfCursorText:e,rightOfCursorText:""})}),o({type:"addFocusToKeyCapture"})}),[o]),d=Object(a.useMemo)((()=>{const t=new Map,n=e.filter((e=>!0!==e.helpHidden));for(const e of n){const{helpGroupLabel:n=H,helpGroupPosition:a=1/0}=e,i=t.get(n);i?(i.list.push(e),i.position===1/0&&void 0!==a&&a!==i.position&&(i.position=a)):t.set(e.helpGroupLabel,{label:n,position:a,list:[e]})}return Object(U.sortBy)(Array.from(t.values()),"position").map((e=>{const t=e.list.map((e=>void 0===e.helpCommandPosition?{...e,helpCommandPosition:1/0}:e));return Object(U.sortBy)(t,"helpCommandPosition")}))}),[e]),p=Object(a.useCallback)((e=>e[0].helpGroupLabel===ne.supporting.label?[...ae,...e].map((t=>{var n,a;return{[null!==(n=null===(a=e[0])||void 0===a?void 0:a.helpGroupLabel)&&void 0!==n?n:H]:t}})):e.map((t=>{var n,a;return{[null!==(n=null===(a=e[0])||void 0===a?void 0:a.helpGroupLabel)&&void 0!==n?n:H]:t}}))),[]),m=Object(a.useCallback)((e=>{var t,a;const o=null!==(t=null===(a=e[0])||void 0===a?void 0:a.helpGroupLabel)&&void 0!==t?t:H,s=W(o);return[{field:o,name:i.a.createElement("div",{"data-test-subj":n("group")},o),render:e=>{const t=G(e);return i.a.createElement(K,{alignItems:"center","data-test-subj":n(`${s}-${e.name}`)},i.a.createElement(r.EuiFlexItem,{grow:1},i.a.createElement(r.EuiDescriptionList,{"data-test-subj":n("command"),listItems:[{title:i.a.createElement(r.EuiBadge,{"data-test-subj":n("commandName")},t),description:i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"xs"}),i.a.createElement(r.EuiText,{color:"subdued",size:"xs"},e.about))}]})),e.helpGroupLabel!==ne.supporting.label&&!0!==e.helpHidden&&e.RenderComponent&&i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiToolTip,{content:!0===e.helpDisabled?b.i18n.translate("xpack.securitySolution.console.commandList.disabledButtonTooltip",{defaultMessage:"Unsupported command"}):b.i18n.translate("xpack.securitySolution.console.commandList.addButtonTooltip",{defaultMessage:"Add to text bar"})},i.a.createElement(r.EuiButtonIcon,{iconType:"plusInCircle","aria-label":`updateTextInputCommand-${e.name}`,onClick:u(`${t} `),isDisabled:!0===e.helpDisabled,"data-test-subj":n(`${s}-${e.name}-addToInput`)}))))}}]}),[n,u]),f=Object(a.useCallback)((e=>e.filter((e=>"help"!==e.name&&"clear"!==e.name))),[]);if("table"===t){const e=[i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.callout.multipleResponses",defaultMessage:"You can enter consecutive response actions — no need to wait for previous actions to complete."}),i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.callout.leavingResponder",defaultMessage:"Leaving the response console does not terminate any actions that have been submitted."}),i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.callout.visitSupportSections",defaultMessage:"{learnMore} about response actions and using the console.",values:{learnMore:i.a.createElement(r.EuiLink,{href:s.links.securitySolution.responseActions,target:"_blank","data-test-subj":n("helpfulHintDocLink")},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.callout.readMoreLink",defaultMessage:"Learn more"}))}})],t=i.a.createElement(Y,{title:i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.commandList.callout.title",defaultMessage:"Helpful tips:"}),"data-test-subj":n("helpfulTips")},i.a.createElement("ul",null,e.map(((e,t)=>i.a.createElement("li",{key:t},i.a.createElement(r.EuiText,{size:"s"},e))))));return i.a.createElement("div",{"data-test-subj":n()},d.map(((e,t)=>{var a;return i.a.createElement(Q,{"data-test-subj":n(W(null!==(a=e[0].helpGroupLabel)&&void 0!==a?a:H)),key:`styledEuiBasicTable-${t}`,items:p(e),columns:m(e)})})),t)}return i.a.createElement("div",{"data-test-subj":n()},i.a.createElement(r.EuiSpacer,{size:"s"}),d.map((e=>{const t=e[0].helpGroupLabel,a=f(e);return 0===a.length?null:i.a.createElement(X,{columns:3,responsive:!1,gutterSize:"l",key:t,direction:"column"},a.map((e=>{const t=G(e);return i.a.createElement(r.EuiFlexItem,{key:e.name},i.a.createElement(r.EuiDescriptionList,{compressed:!0,listItems:[{title:i.a.createElement(r.EuiToolTip,{content:t},i.a.createElement(J,null,i.a.createElement(j.a,{inline:!0,bold:!0},t))),description:i.a.createElement(r.EuiText,{color:"subdued",size:"xs"},e.about)}],"data-test-subj":n("command")}))})))})),i.a.createElement(r.EuiSpacer,{size:"xl"}),c)}));Z.displayName="CommandList";const ee=()=>se().state.commands,te=Object(a.memo)((e=>{const t=ee(),n=se().state.HelpComponent;return Object(a.useEffect)((()=>{n||e.setStatus("success")}),[n,e]),n?i.a.createElement(n,e):i.a.createElement(A,{command:e.command,title:b.i18n.translate("xpack.securitySolution.console.builtInCommands.help.helpTitle",{defaultMessage:"Available commands"})},i.a.createElement(Z,{commands:t}))}));te.displayName="HelpCommand";const ne=Object.freeze({supporting:{label:b.i18n.translate("xpack.securitySolution.console.builtInCommands.groups.supporting",{defaultMessage:"Supporting commands & parameters"})}}),ae=Object.freeze([{name:"--comment",about:b.i18n.translate("xpack.securitySolution.console.commandList.commonArgs.comment",{defaultMessage:"Add comment to any action Ex: isolate --comment your comment"})},{name:"--help",about:b.i18n.translate("xpack.securitySolution.console.commandList.commonArgs.help",{defaultMessage:"Command assistance Ex: isolate --help"})}]),ie=(e,t)=>{var n,a,r,o;let s=e;switch(t.type){case"scrollDown":e.scrollToBottom();break;case"addFocusToKeyCapture":null===(n=e.keyCapture)||void 0===n||null===(a=n.current)||void 0===a||a.focus();break;case"removeFocusFromKeyCapture":null===(r=e.keyCapture)||void 0===r||null===(o=r.current)||void 0===o||o.blur();break;case"updateFooterContent":e.footerContent!==t.payload.value&&(s={...e,footerContent:t.payload.value});break;case"executeCommand":s=((e,t)=>{const{parsedInput:n,enteredCommand:a,input:r}=t.payload;if(""===n.name)return e;const o=null==a?void 0:a.commandDefinition;if(!o)return R(e,z({input:n.input,inputDisplay:r,args:n,commandDefinition:{...L,RenderComponent:F}},void 0,!1));const s={input:n.input,inputDisplay:r,args:n,commandDefinition:o},l=(c=o.args)?Object.entries(c).filter((([e,t])=>t.required)).map((([e])=>e)):[];var c;const u=(e=>e?Object.entries(e).reduce(((e,[t,n])=>(n.exclusiveOr&&e.push(t),e)),[]):[])(o.args),d=O.onlyOneFromExclusiveOr(u.map(P).join(", "));if(n.hasArgs){if(n.hasArg("help")){if(Object.keys(n.args).length>1||n.args.help.length>1||!0!==n.args.help[0])return R(e,z(B(s,D),void 0,!1));if(null!=o&&o.validate){const t=o.validate(s);if(!0!==t)return R(e,z(B(s,_),q({errorMessage:t}),!1))}return R(e,z(B(s,_),void 0,!1))}if(!o.args||0===Object.keys(o.args).length)return R(e,z(B(s,D),q({errorMessage:O.NO_ARGUMENTS_SUPPORTED}),!1));const t=((e,t)=>{const n=[];return Object.keys(e).forEach((e=>{"help"===e||t&&t[e]||n.push(e)})),n})(n.args,o.args);if(t.length)return R(e,z(B(s,D),q({errorMessage:O.unknownArgument(t.length,n.name,t.map(P).join(", "))}),!1));for(const t of l)if(!n.args[t])return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.missingRequiredArg(t))}),!1));if(u.filter((e=>n.args[e])).length>1)return R(e,z(B(s,D),q({errorMessage:d}),!1));for(const t of Object.keys(n.args)){var p;const a=null===(p=o.args)||void 0===p?void 0:p[t],r=n.args[t];if(!a)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.unsupportedArg(t))}),!1));if(!a.allowMultiples&&Array.isArray(r)&&r.length>1)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.noMultiplesAllowed(t))}),!1));if(void 0!==a.mustHaveValue&&!1!==a.mustHaveValue){let n="";if(0===r.length?n=O.mustHaveValue(t):r.some(((e,i)=>{switch(a.mustHaveValue){case!0:case"non-empty-string":("boolean"==typeof e||"non-empty-string"===a.mustHaveValue&&0===e.trim().length)&&(n=O.mustHaveValue(t));break;case"truthy":e||(n=O.mustHaveValue(t));break;case"number":case"number-greater-than-zero":{const o=Number(e);Number.isSafeInteger(o)?"number-greater-than-zero"===a.mustHaveValue&&o<=0&&(n=O.mustBeGreaterThanZero(t)):n=O.mustBeNumber(t),n||(r[i]=o)}}return!!n})),n)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,n)}),!1))}if(a.validate){const n=a.validate(r);if(!0!==n)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.argValueValidatorError(t,n))}),!1))}}}else{if(l.length>0)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.missingArguments(l.map((e=>P(e))).join(", ")))}),!1));if(u.length>0)return R(e,z(B(s,D),q({errorMessage:d}),!1));if(o.mustHaveArgs)return R(e,z(B(s,D),q({errorMessage:i.a.createElement(j.a,null,O.MUST_HAVE_AT_LEAST_ONE_ARG)}),!1))}if(o.validate){const t=o.validate(s);if(!0!==t)return R(e,z(B(s,N),q({errorMessage:t}),!1))}return R(e,z(s))})(e,t);break;case"updateCommandStatusState":case"updateCommandStoreState":s=((e,{type:t,payload:{id:n,value:a}})=>{let i=!1;const r=e.commandHistory.map((e=>{if(i||e.id!==n)return e;i=!0;const r={...e,state:{...e.state}};switch(t){case"updateCommandStoreState":r.state.store=a(r.state.store);break;case"updateCommandStatusState":if(r.state.status===a)return i=!1,e;r.state.status=a}return r}));return i?{...e,commandHistory:r}:e})(e,t);break;case"showSidePanel":s=((e,t)=>"showSidePanel"===t.type&&e.sidePanel.show!==t.payload.show?{...e,sidePanel:{...e.sidePanel,show:t.payload.show}}:e)(e,t);break;case"updateInputPopoverState":case"updateInputHistoryState":case"clearInputHistoryState":case"updateInputTextEnteredState":case"updateInputPlaceholderState":case"setInputState":case"updateInputCommandArgState":s=E(e,t);break;case"clear":s={...e,commandHistory:[]}}return s},re=Object(a.createContext)(null),oe=Object(a.memo)((({commands:e,scrollToBottom:t,keyCapture:n,HelpComponent:r,dataTestSubj:o,storagePrefix:s,managedKey:d,children:p})=>{const[f,g]=Object(u.d)(d),y=(e=>{const{storage:t}=Object(l.j)().services;return Object(a.useMemo)((()=>{if(e){var n;const a=null!==(n=t.get(`${e}.${c}`))&&void 0!==n?n:{version:2,data:[]};return 2!==a.version&&(e=>{const{data:t,version:n}=e;for(const e of t)n<2&&(e.display=e.input);e.version=2})(a),a.data}return[]}),[t,e])})(s),v=(e=>{const{storage:t}=Object(l.j)().services;return Object(a.useCallback)((n=>{if(e){const a={version:2,data:n};t.set(`${e}.${c}`,a)}}),[t,e])})(s),E=Object(a.useCallback)((e=>{const t=(({commands:e,...t},n)=>{const a=[{name:"help",about:b.i18n.translate("xpack.securitySolution.console.builtInCommands.helpAbout",{defaultMessage:"List all available commands"}),RenderComponent:te,helpGroupLabel:ne.supporting.label,helpCommandPosition:1},{name:"clear",about:b.i18n.translate("xpack.securitySolution.console.builtInCommands.clearAbout",{defaultMessage:"Clear console screen"}),RenderComponent:V,helpGroupLabel:ne.supporting.label,helpCommandPosition:0}].concat(e),i=null!=n?n:{commands:a,...t,commandHistory:[],sidePanel:{show:null},footerContent:"",input:{leftOfCursorText:"",rightOfCursorText:"",parsedInput:m(""),enteredCommand:void 0,placeholder:h,showPopover:void 0,history:[],visibleState:void 0}};return n&&Object.assign(i,{commands:a,...t}),i})(e,f?f():void 0);return t.input.history=y,t}),[f,y]),[x,j]=Object(a.useReducer)(ie,{commands:e,scrollToBottom:t,keyCapture:n,HelpComponent:r,dataTestSubj:o,storagePrefix:s},E);return Object(a.useEffect)((()=>{g&&g(x)}),[x,g]),Object(a.useEffect)((()=>{s&&x.input.history&&v(x.input.history)}),[v,x.input.history,s]),i.a.createElement(re.Provider,{value:{state:x,dispatch:j}},p)}));oe.displayName="ConsoleStateProvider";const se=()=>{const e=Object(a.useContext)(re);if(!e)throw new Error("ConsoleStateContext not defined");return e},le=()=>se().state.input.visibleState,ce=Object(a.memo)((()=>{const e=se().state.footerContent,t=Object(S.a)(k()),n=le(),o=Object(a.useMemo)((()=>"error"===n?"danger":"subdued"),[n]);return i.a.createElement(r.EuiPanel,{hasShadow:!1,paddingSize:"none",color:"transparent","data-test-subj":t("footer")},i.a.createElement(r.EuiText,{size:"xs",color:o,className:"font-style-italic"},e||i.a.createElement(i.a.Fragment,null," ")))}));ce.displayName="ConsoleFooter";const ue=()=>se().state.sidePanel,de=(b.i18n.translate("xpack.securitySolution.console.layoutHeader.helpButtonTitle",{defaultMessage:"Help"}),b.i18n.translate("xpack.securitySolution.console.layoutHeader.helpButtonLabel",{defaultMessage:"Show help"})),pe=s()(r.EuiButtonEmpty).withConfig({displayName:"StyledEuiButtonEmpty",componentId:"sc-lvlnbi-0"})(["margin-left:auto;height:inherit;"]),me=Object(a.memo)((({TitleComponent:e})=>{const t=$(),n=ue().show,o=Object(S.a)(k("header")),s="help"===n,l=Object(a.useCallback)((()=>{t({type:"showSidePanel",payload:{show:s?null:"help"}})}),[t,s]);return i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",alignItems:"center",justifyContent:"spaceBetween",responsive:!1},i.a.createElement(r.EuiFlexItem,{grow:1,className:"eui-textTruncate noThemeOverrides","data-test-subj":o("titleComponentContainer")},e?i.a.createElement(e,null):""),!s&&i.a.createElement(r.EuiFlexItem,{grow:1},i.a.createElement(pe,{style:{marginLeft:"auto"},onClick:l,iconType:"help",title:de,"aria-label":de,isSelected:s,"data-test-subj":o("helpButton")},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.layoutHeader.helpButtonTitle",defaultMessage:"Help"}))))}));me.displayName="ConsoleHeader";var fe=n(104),ge=n.n(fe),be=n(53),ye=n.n(be);const he=()=>{const{leftOfCursorText:e,rightOfCursorText:t,parsedInput:n,enteredCommand:i}=se().state.input;return Object(a.useMemo)((()=>({leftOfCursorText:e,rightOfCursorText:t,parsedInput:n,enteredCommand:i,fullTextEntered:e+t})),[i,e,n,t])},ve=s.a.div.withConfig({displayName:"InputDisplayContainer",componentId:"sc-cduvts-0"})(["overflow:hidden !important;.inputDisplay{& > *{flex-direction:row;align-items:center;}}.cursor{display:inline-block;width:1px;height:","em;background-color:",";}"],(({theme:{eui:e}})=>e.euiLineHeight),(({theme:e})=>e.eui.euiTextSubduedColor)),Ee=Object(a.memo)((({leftOfCursor:e,rightOfCursor:t})=>{const n=Object(S.a)(k()),o=$(),{leftOfCursorText:s,fullTextEntered:l}=he(),c=Object(a.useRef)(null),u=Object(a.useRef)(null),d=Object(a.useRef)(null),p=s.length,m=Object(a.useCallback)((e=>{const t=e.target;if(l.length&&t.classList&&t.classList.contains("chr")){const n=Array.from(e.currentTarget.querySelectorAll("span.chr")).indexOf(t),a=l.substring(0,n+1),i=l.substring(n+1);o({type:"updateInputTextEnteredState",payload:{leftOfCursorText:a,rightOfCursorText:i}})}}),[o,l]);return Object(a.useEffect)((()=>{if(u.current){const e=e=>{if(u.current){const t=e[0];if(t&&t.rootBounds){const e=u.current.scrollLeft,n=t.rootBounds.right,a=t.rootBounds.left,i=t.boundingClientRect.right;if(i>n-20){const n=e+(i-t.rootBounds.width)+20;u.current.scrollLeft=n}else if(i<a+20){const t=i-20<0?0:e-20;u.current.scrollLeft=t}}}};return c.current=new IntersectionObserver(e,{root:u.current,rootMargin:"0px -10px",threshold:0}),()=>{var e;null===(e=c.current)||void 0===e||e.disconnect(),c.current=null}}}),[]),Object(a.useEffect)((()=>{if(c.current&&d.current){const e=c.current,t=d.current;return e.observe(t),()=>{e.unobserve(t)}}}),[p]),i.a.createElement(ve,{ref:u},i.a.createElement(r.EuiFlexGroup,{responsive:!1,alignItems:"center",gutterSize:"none",className:"inputDisplay",onClick:m},i.a.createElement(r.EuiFlexItem,{grow:!1,"data-test-subj":n("cmdInput-leftOfCursor"),className:"noMinWidth"},e),i.a.createElement(r.EuiFlexItem,{grow:!1,className:"noMinWidth"},i.a.createElement("span",{className:"cursor essentialAnimation",ref:d})),i.a.createElement(r.EuiFlexItem,{className:"noMinWidth","data-test-subj":n("cmdInput-rightOfCursor")},t)))}));Ee.displayName="InputDisplay";const xe=()=>se().state.input.showPopover,je=s.a.span.withConfig({displayName:"ArgumentSelectorWrapperContainer",componentId:"sc-jnz75k-0"})(["border:",";border-radius:",";overflow:hidden;user-select:none;.flexGroup{align-items:stretch;}.selectorContainer{padding:0 ",";max-width:25vw;display:flex;align-items:center;height:100%;}.argNameContainer{background-color:",";}.argName{padding-left:",";height:100%;display:flex;align-items:center;white-space:nowrap;}"],(({theme:{eui:e}})=>e.euiBorderThin),(({theme:{eui:e}})=>e.euiBorderRadiusSmall),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiFormInputGroupLabelBackground),(({theme:{eui:e}})=>e.euiSizeXS)),Oe=Object(a.memo)((({argName:e,argIndex:t,argDefinition:{SelectorComponent:n}})=>{const o=$(),{valueText:s,value:l,store:c}=((e,t)=>{const n=se().state.input.enteredCommand;return Object(a.useMemo)((()=>{var a;const i=null==n||null===(a=n.argState[e])||void 0===a?void 0:a.at(t);return null!=i?i:{value:void 0,valueText:""}}),[e,n,t])})(e,t),u=Object(a.useCallback)((n=>{o({type:"updateInputCommandArgState",payload:{name:e,instance:t,state:n}})}),[t,e,o]);return i.a.createElement(je,{className:"eui-displayInlineBlock"},i.a.createElement(r.EuiFlexGroup,{className:"flexGroup",responsive:!1,alignItems:"center",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!1,className:"argNameContainer"},i.a.createElement("div",{className:"argName"},i.a.createElement("span",null,`--${e}=`))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement("div",{className:"selectorContainer noThemeOverrides eui-textTruncate"},i.a.createElement(n,{value:l,valueText:null!=s?s:"",argName:e,argIndex:t,store:c,onChange:u})))))}));Oe.displayName="ArgumentSelectorWrapper";const Se=[""," ","="],ke=(e={})=>({value:"",renderValue:null,isArgSelector:!1,argName:"",argIndex:0,argState:void 0,...e}),we=e=>e.split("").map((e=>ke({value:e,renderValue:e}))),Ie=(e,t,n)=>{var a;return i.a.createElement("span",{className:"chr",key:`${e}.${n}.${null!==(a=t.value)&&void 0!==a?a:"$"}`},t.renderValue)},Te=(e,t)=>{let n=t.value;var a,i;return e&&t.isArgSelector&&(n+=`="${null!==(a=null===(i=t.argState)||void 0===i?void 0:i.valueText)&&void 0!==a?a:""}"`),n};class entered_input_EnteredInput{constructor(e,t,n,a){if(p()(this,"leftOfCursorContent",void 0),p()(this,"rightOfCursorContent",void 0),p()(this,"canHaveArgValueSelectors",void 0),p()(this,"argState",void 0),this.leftOfCursorContent=we(e),this.rightOfCursorContent=we(t),this.canHaveArgValueSelectors=Boolean(null==a?void 0:a.argsWithValueSelectors),n.hasArgs&&a&&a.argsWithValueSelectors){this.argState=a.argState;const o=[{input:e,items:this.leftOfCursorContent,side:"left"},{input:t,items:this.rightOfCursorContent,side:"right"}];for(const[e,s]of Object.entries(a.argsWithValueSelectors))if(n.hasArg(e)){let n=0;for(const{input:l,items:c,side:u}of o){const o=`--${e}`;let d=l.indexOf(o);for(;d>-1;){const p=o.length,m=d+p,f=l.charAt(m),g="left"===u&&""===f&&Se.includes(t.charAt(0));if(Se.includes(f)&&(g||"left"===u&&""!==f||"right"===u)){var r;const t=Array.from({length:p},ke),l=null===(r=a.argState[e])||void 0===r?void 0:r.at(n);t[0]=ke({value:o,renderValue:i.a.createElement(Oe,{argName:e,argIndex:n,argDefinition:s}),isArgSelector:!0,argName:e,argIndex:n++,argState:l}),c.splice(d,p,...t)}d=l.indexOf(o,m)}}}this.leftOfCursorContent=this.leftOfCursorContent.filter((({value:e})=>e.length>0)),this.rightOfCursorContent=this.rightOfCursorContent.filter((({value:e})=>e.length>0))}}replaceSelection(e,t){const n=this.getFullText(),a=t?ke({value:t}):void 0;let i=n.indexOf(e);const r=[...this.leftOfCursorContent,...this.rightOfCursorContent];this.canHaveArgValueSelectors&&r.forEach(((e,t)=>{e.isArgSelector&&t<i&&(i-=e.value.length-1)}));const o=r.splice(i,e.length);a&&(r.splice(i,0,a),i++),this.leftOfCursorContent=r.splice(0,i),this.rightOfCursorContent=r,this.removeArgState(o)}removeArgState(e){if(this.argState){let n=!1;const a={...this.argState};for(const{argName:i,argIndex:r,isArgSelector:o}of e){var t;o&&null!==(t=a[i])&&void 0!==t&&t.at(r)&&(a[i]=a[i].filter(((e,t)=>t!==r)),n=!0)}n&&(this.argState=a)}}getLeftOfCursorText(e=!1){return this.leftOfCursorContent.map(Te.bind(null,e)).join("")}getRightOfCursorText(e=!1){return this.rightOfCursorContent.map(Te.bind(null,e)).join("")}getFullText(e=!1){return this.getLeftOfCursorText(e)+this.getRightOfCursorText(e)}getLeftOfCursorRenderingContent(){return i.a.createElement(i.a.Fragment,null,this.leftOfCursorContent.map(Ie.bind(null,"left")))}getRightOfCursorRenderingContent(){return i.a.createElement(i.a.Fragment,null,this.rightOfCursorContent.map(Ie.bind(null,"right")))}getArgState(){return this.argState}moveCursorTo(e){switch(e){case"end":this.leftOfCursorContent.push(...this.rightOfCursorContent.splice(0));break;case"home":this.rightOfCursorContent.unshift(...this.leftOfCursorContent.splice(0));break;case"left":if(this.leftOfCursorContent.length){const e=this.leftOfCursorContent.pop();e&&this.rightOfCursorContent.unshift(e)}break;case"right":if(this.rightOfCursorContent.length){const e=this.rightOfCursorContent.shift();e&&this.leftOfCursorContent.push(e)}}}addValue(e,t=""){t.length&&e.length?this.replaceSelection(t,e):e&&this.leftOfCursorContent.push(ke({value:e}))}deleteChar(e=""){if(e)this.replaceSelection(e,"");else{const e=this.rightOfCursorContent.shift();null!=e&&e.isArgSelector&&this.removeArgState([e])}}backspaceChar(e=""){if(e)this.replaceSelection(e,"");else{const e=this.leftOfCursorContent.pop();null!=e&&e.isArgSelector&&this.removeArgState([e])}}clear(){this.leftOfCursorContent=[],this.rightOfCursorContent=[],this.argState=void 0}}const Ce=b.i18n.translate("xpack.securitySolution.inputCapture.ariaPlaceHolder",{defaultMessage:"Enter a command"}),Me=()=>{const e=getSelection();e&&e.removeAllRanges()},Ae=s.a.div.withConfig({displayName:"InputCaptureContainer",componentId:"sc-19dx6ae-0"})([".focus-container{outline:none !important;}.textSelectionBoundaryHelper{opacity:0;position:absolute;top:-100vh;left:-100vw;}.invisible-input{&,&:focus{border:none;outline:none;background-image:none;background-color:transparent;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;animation:none !important;width:1ch !important;position:absolute;opacity:0;top:-100vh;left:-100vw;}"]),_e=Object(a.memo)((({onCapture:e,focusRef:t,onChangeFocus:n,children:r})=>{const o=Object(S.a)(k()),s=Object(a.useRef)(null),l=Object(a.useRef)(null),c=Object(a.useRef)(null),u=Object(a.useCallback)((()=>{if(s.current){var e,t,n;const a=document.getSelection(),i=(null!==(e=null==a?void 0:a.toString())&&void 0!==e?e:"").replace(/[\r\n]/g,""),r=!(!s.current||!a)&&(null===(t=s.current)||void 0===t?void 0:t.contains(a.focusNode))&&(null===(n=s.current)||void 0===n?void 0:n.contains(a.anchorNode));return a&&0!==i.length&&r?i:""}return""}),[]),d=Object(a.useCallback)((t=>{if(t.metaKey||t.ctrlKey){if("a"===t.key){t.preventDefault();const e=window.getSelection();if(e&&l.current){const t=document.createRange();t.selectNodeContents(l.current),t.toString().length>0&&(e.removeAllRanges(),e.addRange(t))}}return}const n=/^[\w\d]{2}/.test(t.key)?"":t.key,a=u(),i=Object(U.pick)(t,["key","altKey","ctrlKey","keyCode","metaKey","repeat","shiftKey"]);e({value:n,selection:a,eventDetails:i}),a&&Me()}),[u,e]),p=Object(a.useCallback)((t=>{t.preventDefault(),t.stopPropagation();const n=t.clipboardData.getData("text").replace(/[\r\n]/g,""),a=u();e({value:n,selection:a,eventDetails:{altKey:!1,ctrlKey:!1,key:"Meta",keyCode:91,metaKey:!0,repeat:!1,shiftKey:!1}}),a&&Me()}),[u,e]),m=Object(a.useCallback)((()=>{n&&n(!0)}),[n]),f=Object(a.useCallback)((()=>{n&&n(!1)}),[n]),g=Object(a.useMemo)((()=>({focus:(e=!1)=>{var t,n,a;!e&&(null!==(t=null===(n=window.getSelection())||void 0===n?void 0:n.toString())&&void 0!==t?t:"").length>0||document.activeElement===c.current||null===(a=c.current)||void 0===a||a.focus()},blur:()=>{var e;c.current&&document.activeElement===c.current&&(null===(e=c.current)||void 0===e||e.blur())}})),[]);return t&&(t.current=g),i.a.createElement(Ae,{"data-test-subj":o("inputCapture"),onKeyDown:d,onPaste:p},i.a.createElement("div",{role:"textbox","aria-placeholder":Ce,tabIndex:0,ref:s,className:"focus-container","data-test-subj":o("keyCapture-input"),onBlur:f,onFocus:m},i.a.createElement("div",{className:"textSelectionBoundaryHelper"}," "),i.a.createElement("div",{ref:l,className:"text-container"},r),i.a.createElement("div",{className:"textSelectionBoundaryHelper"}," "),i.a.createElement("input",{ref:c,type:"text",value:"",tabIndex:-1,onPaste:p,onChange:()=>{},spellCheck:"false",className:"invisible-input"})))}));_e.displayName="InputCapture";const Fe=b.i18n.translate("xpack.securitySolution.useInputHints.noArguments",{defaultMessage:"Hit enter to execute"}),De=b.i18n.translate("xpack.securitySolution.useInputHints.viewInputHistory",{defaultMessage:"Press the up arrow key to access previously entered commands"}),Ne=s()(r.EuiText).withConfig({displayName:"InputPlaceholderContainer",componentId:"sc-6afwlc-0"})(["position:absolute;pointer-events:none;padding-left:0.5em;width:96%;color:",";user-select:none;"],(({theme:{eui:e}})=>e.euiFormControlPlaceholderText)),Pe=Object(a.memo)((()=>{const{fullTextEntered:e}=he(),t=se().state.input.placeholder,n=Object(S.a)(k());return e.length>0?null:i.a.createElement(Ne,{size:"s",className:"eui-textTruncate","data-test-subj":n("inputPlaceholder")},i.a.createElement("div",{className:"eui-textTruncate"},t))}));Pe.displayName="InputPlaceholder";const Re=s()(r.EuiCode).withConfig({displayName:"StyledEuiCode",componentId:"sc-qp7srp-0"})(["padding-left:0;"]),Le=Object(a.memo)((({input:e,isValid:t=!0})=>{const n=Object(S.a)(k()),o=Object(a.useMemo)((()=>t?e:i.a.createElement(r.EuiTextColor,null,e)),[e,t]);return i.a.createElement(Re,{transparentBackground:!0,"data-test-subj":n("userCommandText")},o)}));Le.displayName="UserCommandInput";const qe=Object(a.memo)((()=>{const[e,t]=Object(a.useState)(!1),n=$(),o=Object(S.a)(k()),s=Object(a.useCallback)((()=>{t(!0)}),[]),l=Object(a.useCallback)((()=>{t(!1)}),[]),c=Object(a.useCallback)((()=>{n({type:"clearInputHistoryState"}),t(!1)}),[n]);return i.a.createElement(i.a.Fragment,null,e&&i.a.createElement(r.EuiConfirmModal,{title:b.i18n.translate("xpack.securitySolution.commandInputClearHistory.confirmTitle",{defaultMessage:"Clear input history"}),cancelButtonText:b.i18n.translate("xpack.securitySolution.commandInputClearHistory.confirmCancelButton",{defaultMessage:"Cancel"}),confirmButtonText:b.i18n.translate("xpack.securitySolution.commandInputClearHistory.confirmSubmitButton",{defaultMessage:"Clear"}),buttonColor:"danger",onCancel:l,onConfirm:c},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.commandInputClearHistory.confirmMessage",defaultMessage:"This action cannot be undone. Are you sure you wish to continue?"})),i.a.createElement(r.EuiFlexGroup,{responsive:!1,justifyContent:"flexEnd",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{size:"xs",tabIndex:-1,onClick:s,disabled:e,"data-test-subj":o("clearInputHistoryButton")},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.commandInputClearHistory.clearHistoryButtonLabel",defaultMessage:"Clear input history"})))))}));qe.displayName="CommandInputClearHistory";const Be=b.i18n.translate("xpack.securitySolution.commandInputHistory.noHistoryEmptyMessage",{defaultMessage:"No commands have been entered"}),ze=b.i18n.translate("xpack.securitySolution.commandInputHistory.filterPlaceholder",{defaultMessage:"Filter previously entered actions"}),$e=b.i18n.translate("xpack.securitySolution.commandInputHistory.noFilteredMatchesFoundMessage",{defaultMessage:"No entries found matching the filter entered"}),Ve=Object(a.memo)((()=>{const e=$(),t=se().state.input.history,[n]=Object(a.useState)(he()),o=Object(a.useRef)(!1),s=Object(S.a)(k()),l=Object(a.useMemo)((()=>t.map(((e,t)=>({label:e.display,key:e.id,data:e})))),[t]),c=Object(a.useMemo)((()=>({showIcons:!1,bordered:!0})),[]),u=Object(a.useMemo)((()=>({placeholder:ze,compressed:!0,fullWidth:!0})),[]),d=Object(a.useCallback)(((e,n)=>i.a.createElement(i.a.Fragment,null,e,i.a.createElement(r.EuiSpacer,{size:"s"}),t.length>0?n:i.a.createElement("div",{tabIndex:-1}))),[t.length]),p=Object(a.useCallback)((t=>{o.current=!0;const n=t.find((e=>"on"===e.checked));e({type:"updateInputPopoverState",payload:{show:void 0}}),e({type:"updateInputPlaceholderState",payload:{placeholder:""}}),n&&e({type:"updateInputTextEnteredState",payload:{leftOfCursorText:n.data.input,rightOfCursorText:""}}),e({type:"addFocusToKeyCapture"})}),[e]),m=Object(a.useCallback)((t=>{t&&e({type:"updateInputPlaceholderState",payload:{placeholder:t.data.input}})}),[e]),f=Object(a.useCallback)((e=>i.a.createElement(Le,{input:e.label})),[]);return Object(a.useEffect)((()=>(e({type:"updateInputTextEnteredState",payload:{leftOfCursorText:"",rightOfCursorText:""}}),()=>{o.current||(e({type:"updateInputTextEnteredState",payload:{leftOfCursorText:n.leftOfCursorText,rightOfCursorText:n.rightOfCursorText}}),e({type:"updateInputPlaceholderState",payload:{placeholder:""}}))})),[e,o,n]),i.a.createElement("div",null,t.length>0&&i.a.createElement(qe,null),i.a.createElement(r.EuiSelectable,{options:l,onChange:p,onActiveOptionChange:m,renderOption:f,listProps:c,singleSelection:!0,searchable:!0,searchProps:u,emptyMessage:Be,noMatchesMessage:$e,"data-test-subj":s("inputHistorySelector"),"data-console-input-history":!0},d))}));Ve.displayName="CommandInputHistory";const Ue=Object(a.memo)((({children:e,width:t="92vw"})=>{const n=Object(S.a)(k()),o=xe(),s=void 0!==o,l=$(),c=Object(a.useMemo)((()=>({width:t,borderBottomLeftRadius:0,borderBottomRightRadius:0})),[t]),u=Object(a.useMemo)((()=>({clickOutsideDisables:!0})),[]),d=Object(a.useCallback)((()=>{l({type:"updateInputPopoverState",payload:{show:void 0}}),l({type:"addFocusToKeyCapture"})}),[l]);return Object(a.useEffect)((()=>{o||l({type:"addFocusToKeyCapture"})}),[l,o]),i.a.createElement(r.EuiPopover,{button:e,closePopover:d,isOpen:s,panelStyle:c,anchorPosition:"upLeft",hasArrow:!1,display:"block",attachToAnchor:!0,focusTrapProps:u,ownFocus:!1,"data-test-subj":n("inputPopover")},o&&i.a.createElement(r.EuiFocusTrap,{clickOutsideDisables:!0},"input-history"===o&&i.a.createElement(Ve,null)))}));Ue.displayName="InputAreaPopover";const Ge=s.a.div.withConfig({displayName:"CommandInputContainer",componentId:"sc-ujnhrt-0"})(["background-color:",";border-radius:",";padding:",";outline:",";&:focus-within{border-bottom:",";border-bottom-color:",";}&.error{border-bottom-color:",";}.textEntered{white-space:break-spaces;}.prompt{padding-right:1ch;}&.withPopover{border-top-left-radius:0;border-top-right-radius:0;}&.hasFocus{.cursor{background-color:",";animation:cursor-blink-animation 1s steps(5,start) infinite;-webkit-animation:cursor-blink-animation 1s steps(5,start) infinite;@keyframes cursor-blink-animation{to{visibility:hidden;}}@-webkit-keyframes cursor-blink-animation{to{visibility:hidden;}}}}"],(({theme:{eui:e}})=>e.euiFormBackgroundColor),(({theme:{eui:e}})=>e.euiBorderRadius),(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiBorderThin),(({theme:{eui:e}})=>e.euiBorderThick),(({theme:{eui:e}})=>e.euiColorPrimary),(({theme:{eui:e}})=>e.euiColorDanger),(({theme:{eui:e}})=>e.euiTextColor)),He=Object(a.memo)((({prompt:e="",focusRef:t,...n})=>{(()=>{const e=$(),t=Boolean(xe()),n=(()=>{const e=se().state.input.parsedInput;return-1!==e.input.trimStart().indexOf(" ")?e.name:""})(),i=ee(),{leftOfCursorText:r}=he(),o=Object(a.useMemo)((()=>{if(n)return i.find((e=>e.name===n))}),[n,i]);Object(a.useEffect)((()=>{if(n&&!t)if(o&&!0!==o.helpHidden){var a,i;const t=null!==(a=null==o?void 0:o.exampleInstruction)&&void 0!==a?a:"",n=null!==(i=null==o?void 0:o.exampleUsage)&&void 0!==i?i:"";let r=null!=t?t:"";if(n&&(r+=t?` ${b.i18n.translate("xpack.securitySolution.useInputHints.exampleInstructions",{defaultMessage:"Ex: [ {exampleUsage} ]",values:{exampleUsage:n}})}`:n),!r||!n){const e=g(o);e.length>0?r+=`${o.name} ${e}`:r+=Fe}e({type:"updateFooterContent",payload:{value:r}}),e({type:"setInputState",payload:{value:void 0}})}else e({type:"updateFooterContent",payload:{value:(s=n,b.i18n.translate("xpack.securitySolution.useInputHints.unknownCommand",{defaultMessage:"Unknown command {commandName}",values:{commandName:s}}))}}),e({type:"setInputState",payload:{value:"error"}});else e({type:"updateFooterContent",payload:{value:r||t?"":De}}),e({type:"setInputState",payload:{value:void 0}});var s}),[n,o,e,t,r])})();const o=Object(S.a)(k()),s=$(),{rightOfCursorText:l,leftOfCursorText:c,fullTextEntered:u,enteredCommand:d,parsedInput:p}=he(),m=le(),f=!!xe(),[y,h]=Object(a.useState)(!1),[v,E]=Object(a.useState)(void 0),[x,j]=Object(a.useState)("94vw"),O=Object(a.useRef)(null),w=t||O,I=Object(a.useMemo)((()=>ye()({cmdInput:!0,hasFocus:y,error:"error"===m,withPopover:f})),[y,f,m]),T=Object(a.useMemo)((()=>0===u.trim().length),[u]),C=Object(a.useMemo)((()=>new entered_input_EnteredInput(c,l,p,d)),[d,c,p,l]),M=Object(a.useCallback)((({width:e})=>{e>0&&j(`${e}px`)}),[]),A=Object(a.useCallback)((()=>{E({input:C.getFullText(!0),enteredCommand:d,parsedInput:p})}),[d,p,C]),_=Object(a.useCallback)((e=>{h(e)}),[]),F=Object(a.useCallback)((e=>{w.current&&w.current.focus(),f&&s({type:"updateInputPopoverState",payload:{show:void 0}})}),[s,f,w]),D=Object(a.useCallback)((({value:e,selection:t,eventDetails:n})=>{const a=n.keyCode;if(38===a)return s({type:"removeFocusFromKeyCapture"}),void s({type:"updateInputPopoverState",payload:{show:"input-history"}});s({type:"updateInputTextEnteredState",payload:({leftOfCursorText:n,rightOfCursorText:i,enteredCommand:r,parsedInput:o})=>{const s=new entered_input_EnteredInput(n,i,o,r);switch(s.addValue(null!=e?e:"",t),a){case 8:s.backspaceChar(t);break;case 46:s.deleteChar(t);break;case 13:E({input:s.getFullText(!0),enteredCommand:r,parsedInput:o}),s.clear();break;case 37:s.moveCursorTo("left");break;case 39:s.moveCursorTo("right");break;case 36:s.moveCursorTo("home");break;case 35:s.moveCursorTo("end")}return{leftOfCursorText:s.getLeftOfCursorText(),rightOfCursorText:s.getRightOfCursorText(),argState:s.getArgState()}}})}),[s]);return Object(a.useEffect)((()=>{v&&(s({type:"executeCommand",payload:v}),E(void 0),s({type:"updateInputTextEnteredState",payload:{leftOfCursorText:"",rightOfCursorText:""}}))}),[v,s]),i.a.createElement(Ue,{width:x},i.a.createElement(r.EuiResizeObserver,{onResize:M},(a=>i.a.createElement(Ge,ge()({},n,{className:I,onClick:F,ref:a,"data-test-subj":o("cmdInput-container")}),i.a.createElement(r.EuiFlexGroup,{responsive:!1,alignItems:"center",gutterSize:"none"},e&&i.a.createElement(r.EuiFlexItem,{grow:!1,"data-test-subj":o("cmdInput-prompt")},i.a.createElement("span",{className:"eui-displayInlineBlock prompt"},e)),i.a.createElement(r.EuiFlexItem,{className:"textEntered"},i.a.createElement(_e,{onCapture:D,onChangeFocus:_,focusRef:t},i.a.createElement(Ee,{leftOfCursor:C.getLeftOfCursorRenderingContent(),rightOfCursor:C.getRightOfCursorRenderingContent()})),i.a.createElement(Pe,null)),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonIcon,{"data-test-subj":o("inputTextSubmitButton"),"aria-label":"submit-command",iconType:"playFilled",color:"primary",isDisabled:T,onClick:A})))))))}));He.displayName="CommandInput";var We=n(50),Qe=n.n(We);const Ye=Object(a.memo)((({size:e="s",color:t,children:n,"data-test-subj":a,className:o})=>{const{euiTheme:s}=Object(r.useEuiTheme)();return i.a.createElement(r.EuiText,{size:e,"data-test-subj":a,className:`font-family-code ${null!=o?o:""}`},i.a.createElement(r.EuiTextColor,{color:null!=t?t:s.colors.text},n))}));Ye.displayName="ConsoleText";const Ke=Object(a.memo)((()=>{const e=Object(S.a)(k());return i.a.createElement(Ye,{"data-test-subj":e("longRunningCommandHint")},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.longRunningCommandHintMessage",defaultMessage:"Hint: We are still working on this task. You may leave the console or place another command while this command is processing."}))}));Ke.displayName="LongRunningCommandHint";const Xe=b.i18n.translate("xpack.securitySolution.commandExecutionResult.successTitle",{defaultMessage:"Action completed."}),Je=b.i18n.translate("xpack.securitySolution.commandExecutionResult.failureTitle",{defaultMessage:"Action failed."}),Ze=b.i18n.translate("xpack.securitySolution.commandExecutionResult.pending",{defaultMessage:"Action pending."}),et=Object(a.memo)((({showAs:e="success",title:t,showTitle:n=!0,"data-test-subj":o,className:s,children:l})=>{const c=k(),u=Object(S.a)(null!=o?o:c),d=Object(a.useMemo)((()=>ye()({"eui-displayInlineBlock":"pending"===e,"font-family-code":!0,[s||"_"]:Boolean(s)})),[s,e]);return i.a.createElement(r.EuiPanel,{hasShadow:!1,paddingSize:"none",borderRadius:"none",color:"transparent",className:d,"data-test-subj":o||u("commandExecutionResult")},"pending"===e?i.a.createElement(Ye,null,null!=l?l:Ze):i.a.createElement(i.a.Fragment,null,n&&i.a.createElement(i.a.Fragment,null,i.a.createElement(Ye,{color:"success"===e?"success":"danger"},t||("success"===e?Xe:Je)),i.a.createElement(r.EuiSpacer,{size:"s"})),l))}));et.displayName="CommandExecutionResult";const tt=s.a.div.withConfig({displayName:"CommandOutputContainer",componentId:"sc-1wmcd6l-0"})(["position:relative;.busy-indicator{margin-left:0.5em;}"]),nt=Object(a.memo)((({item:{command:e,state:t,id:n,enteredAt:o,isValid:s}})=>{const l=$(),c=e.commandDefinition.RenderComponent,[u,d]=Object(a.useState)(!1),p=Object(a.useMemo)((()=>"pending"===t.status),[t.status]),m=Object(a.useCallback)((e=>{l({type:"updateCommandStatusState",payload:{id:n,value:e}})}),[l,n]),f=Object(a.useCallback)((e=>{l({type:"updateCommandStoreState",payload:{id:n,value:e}})}),[l,n]);return Object(a.useEffect)((()=>{let e;if(p&&!u){const t=Qe()().diff(Qe()(o),"seconds");if(t>=15)return void d(!0);e=setTimeout((()=>{d(!0)}),1e3*(15-t))}return()=>{e&&clearTimeout(e)}}),[o,u,p]),i.a.createElement(tt,null,i.a.createElement("div",null,i.a.createElement(Le,{input:e.inputDisplay,isValid:s})),i.a.createElement("div",{className:"noThemeOverrides"},i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiSpacer,{size:"xs"}),i.a.createElement(c,{command:e,store:t.store,status:t.status,setStore:f,setStatus:m,ResultComponent:et}),p&&i.a.createElement(r.EuiLoadingChart,{className:"busy-indicator",mono:!0}),p&&u&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(Ke,null))))}));nt.displayName="CommandExecutionOutput";const at=n(61).css`
  ${({theme:{eui:e}})=>e.euiSizeL}
`,it=s()(r.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItemHistoryItem",componentId:"sc-1249lql-0"})(["border-bottom:"," dashed ",";margin-bottom:",";padding-bottom:",";"],(({theme:{eui:e}})=>e.euiBorderWidthThin),(({theme:{eui:e}})=>e.euiBorderColor),at,at),rt=Object(a.memo)((({children:e})=>{const t=Object(S.a)(k());return i.a.createElement(it,{grow:!0,"data-test-subj":t("historyItem")},e)}));rt.displayName="HistoryItem";const ot=Object(a.memo)((e=>{const t=se().state.commandHistory,n=$(),o=Object(S.a)(k()),s=Object(a.useMemo)((()=>t.map((e=>i.a.createElement(rt,{key:e.id},i.a.createElement(nt,{item:e}))))),[t]);return Object(a.useEffect)((()=>{n({type:"scrollDown"})}),[n,t.length]),i.a.createElement(r.EuiFlexGroup,ge()({"data-test-subj":o("historyOutput")},e,{wrap:!0,direction:"column",alignItems:"stretch",responsive:!1,gutterSize:"none"}),s)}));ot.displayName="HistoryOutput";const st=s()(r.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItemNoPadding",componentId:"sc-ojfnk7-0"})(["padding:0 !important;"]),lt=Object(a.memo)((({headerContent:e,children:t})=>{const n=Object(S.a)(k("sidePanel"));return i.a.createElement(r.EuiFlexGroup,{direction:"column",responsive:!1,className:"eui-fullHeight",gutterSize:"none","data-test-subj":n()},e&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiFlexItem,{grow:!1,className:"layout-container","data-test-subj":n("header")},e),i.a.createElement(r.EuiHorizontalRule,{margin:"none"})),i.a.createElement(st,{className:"eui-scrollBar eui-yScroll layout-container"},i.a.createElement("div",{"data-test-subj":n("body")},t)))}));lt.displayName="SidePanelContentLayout";const ct=s()(r.EuiFlexGroup).withConfig({displayName:"StyledEuiFlexGroup",componentId:"sc-u9ickv-0"})(["padding-top:",";padding-right:",";"],(({theme:{eui:e}})=>e.euiPanelPaddingModifiers.paddingSmall),(({theme:{eui:e}})=>e.euiPanelPaddingModifiers.paddingSmall)),ut=Object(a.memo)((()=>{const e=$(),t=ee(),n=Object(S.a)(k("sidePanel")),o=ue().show,s=Object(a.useCallback)((()=>{e({type:"showSidePanel",payload:{show:null}})}),[e]),l=Object(a.useMemo)((()=>"help"===o?i.a.createElement(i.a.Fragment,null,i.a.createElement(ct,null,i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiTitle,{size:"s","data-test-subj":n("headerTitle")},i.a.createElement("h3",null,i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.sidePanel.helpTitle",defaultMessage:"Help"})))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonIcon,{"aria-label":"closeSidePanelIcon",iconType:"cross",color:"text",onClick:s,"data-test-subj":n("headerCloseButton")}))),i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(r.EuiText,{size:"s"},i.a.createElement(x.FormattedMessage,{id:"xpack.securitySolution.console.sidePanel.helpDescription",defaultMessage:"Use the add ({icon}) button to populate a response action to the text bar. Add additional parameters or comments as necessary.",values:{icon:i.a.createElement(r.EuiIcon,{type:"plusInCircle"})}}))):null),[o,n,s]),c=Object(a.useMemo)((()=>"help"===o?i.a.createElement("div",{"data-test-subj":n("helpContent")},i.a.createElement(Z,{commands:t,display:"table"})):null),[t,n,o]);return o?i.a.createElement(lt,{headerContent:l},c):null}));ut.displayName="RightPanelContentManager";const dt=s()(r.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItemWhite",componentId:"sc-hd3kv7-0"})(["background-color:"," !important;border-radius:",";box-shadow:0 "," "," ",";"],(({theme:{eui:e}})=>e.euiHeaderBackgroundColor),(({theme:{eui:e}})=>`0 ${e.euiSizeXS} ${e.euiSizeXS} 0`),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>Object(r.transparentize)(e.euiShadowColor,.04))),pt=Object(a.memo)((e=>Boolean(ue().show)?i.a.createElement(dt,{grow:!1,className:"layout-rightPanel"},i.a.createElement(ut,null)):null));pt.displayName="SidePanelFlexItem";const mt=s.a.div.withConfig({displayName:"ConsoleWindow",componentId:"sc-d15gh7-0"})(["height:100%;background-color:",";border:",";border-radius:",";.layout{height:100%;width:100%;min-height:300px;min-width:300px;overflow:hidden;&-hideOverflow{overflow:hidden;}&-bottomBorder{border-bottom:"," solid ",";}&-container{padding:",";}&-header{background-color:",";border-bottom:1px solid ",";border-top-left-radius:",";border-top-right-radius:",";padding:"," "," "," ",";}&-commandInput{padding-top:",";padding-bottom:",";}&-footer{padding-top:0;padding-bottom:",";}&-rightPanel{width:35%;background-color:",";border-left:",";}&-historyOutput{overflow:auto;}&-historyViewport{height:100%;overflow-x:hidden;white-space:pre-wrap;}.euiFlexItem:not(.noMinWidth):not(.noThemeOverrides .euiFlexItem){min-width:0;}}.font-family-code{font-family:",";}.font-style-italic{font-style:italic;}.descriptionList-20_80{&.euiDescriptionList{> .euiDescriptionList__title{width:20%;margin-top:",";}> .euiDescriptionList__description{width:80%;margin-top:",";}}}"],(({theme:{eui:e}})=>e.euiPageBackgroundColor),(({theme:{eui:e}})=>e.euiBorderThin),(({theme:{eui:e}})=>e.euiBorderRadiusSmall),(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiPageBackgroundColor),(({theme:{eui:e}})=>e.euiPanelPaddingModifiers.paddingMedium),(({theme:{eui:e}})=>e.euiColorEmptyShade),(({theme:{eui:e}})=>e.euiColorLightShade),(({theme:{eui:e}})=>e.euiBorderRadiusSmall),(({theme:{eui:e}})=>e.euiBorderRadiusSmall),(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSize),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiSizeXS),(({theme:{eui:e}})=>e.euiFormBackgroundColor),(({theme:{eui:e}})=>e.euiBorderThin),(({theme:{eui:e}})=>e.euiCodeFontFamily),(({theme:{eui:e}})=>e.euiSizeS),(({theme:{eui:e}})=>e.euiSizeS)),ft=Object(a.memo)((({prompt:e,commands:t,HelpComponent:n,TitleComponent:o,storagePrefix:s,managedKey:l,...c})=>{const d=Object(a.useRef)(null),p=Object(a.useRef)(null),m=Object(S.a)(c["data-test-subj"]),f=Object(u.c)(l),g=Object(a.useCallback)((()=>{setTimeout((()=>{d.current&&(d.current.scrollTop=d.current.scrollHeight)}),1)}),[]),b=Object(a.useCallback)((()=>{p.current&&p.current.focus()}),[]);return Object(a.useEffect)((()=>{f&&!f.isOpen||setTimeout(b,2)}),[b,f]),i.a.createElement(oe,{commands:t,scrollToBottom:g,keyCapture:p,managedKey:l,HelpComponent:n,dataTestSubj:c["data-test-subj"],storagePrefix:s},i.a.createElement(mt,c,i.a.createElement(r.EuiFlexGroup,{className:"layout",gutterSize:"none",responsive:!1},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFlexGroup,{direction:"column",className:"layout",gutterSize:"none",responsive:!1,"data-test-subj":m("mainPanel")},i.a.createElement(r.EuiFlexItem,{grow:!1,className:"layout-header"},i.a.createElement(me,{TitleComponent:o})),i.a.createElement(r.EuiFlexItem,{grow:!0,className:"layout-hideOverflow"},i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",responsive:!1,className:"layout-hideOverflow"},i.a.createElement(r.EuiFlexItem,{className:"eui-fullHeight layout-hideOverflow"},i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1,className:"layout-hideOverflow"},i.a.createElement(r.EuiFlexItem,{grow:!0,className:"layout-historyOutput"},i.a.createElement("div",{className:"layout-container layout-historyViewport eui-scrollBar eui-yScroll",ref:d},i.a.createElement(ot,null))),i.a.createElement(r.EuiFlexItem,{onClick:b,grow:!1,className:"layout-container layout-commandInput","data-test-subj":m("mainPanel-inputArea")},i.a.createElement(He,{prompt:e,focusRef:p})),i.a.createElement(r.EuiFlexItem,{grow:!1,className:"layout-container layout-footer"},i.a.createElement(ce,null)))))))),i.a.createElement(pt,null))))}));ft.displayName="Console"},function(e,t,n){"use strict";n.d(t,"b",(function(){return ai})),n.d(t,"a",(function(){return ii})),n.d(t,"c",(function(){return si}));var a=n(40),i=n(5),r=n(264),o=n(42),s=n(2),l=n.n(s),c=n(45),u=n(103),d=n(41),p=n.n(d),m=n(120),f=n(59),g=n(119),b=n(1042),y=n(1058),h=n(1048),v=n(204),E=n(661),x=n(114),j=n(105),O=n(102),S=n(384),k=n(201),w=n(423),I=n(222),T=n(695),C=n(219),M=n(8),A=n(180),_=n(166),F=n(383);const D=i.i18n.translate("xpack.securitySolution.detectionEngine.details.stepAboutRule.detailsLabel",{defaultMessage:"Details"}),N=i.i18n.translate("xpack.securitySolution.detectionEngine.details.stepAboutRule.aboutText",{defaultMessage:"About"}),P=i.i18n.translate("xpack.securitySolution.detectionEngine.details.stepAboutRule.investigationGuideLabel",{defaultMessage:"Investigation guide"}),R=i.i18n.translate("xpack.securitySolution.detectionEngine.details.stepAboutRule.setupGuideLabel",{defaultMessage:"Setup guide"}),L=i.i18n.translate("xpack.securitySolution.detectionEngine.details.stepAboutRule.controlLegend",{defaultMessage:"Viewing"});var q=n(746);const B=A.css`
  height: 100%;
`,z={id:"details",label:D,"data-test-subj":"stepAboutDetailsToggle-details"},$={id:"notes",label:P,"data-test-subj":"stepAboutDetailsToggle-notes"},V={id:"setup",label:R,"data-test-subj":"stepAboutDetailsToggle-setup"},U=({stepData:e,stepDataDetails:t,loading:n})=>{const[i,r]=Object(s.useState)("details"),[o,c]=Object(s.useState)(0),u=Object(s.useCallback)((e=>{c(e.height)}),[c]),d=Object(s.useMemo)((()=>{const e=!Object(M.isEmpty)(null==t?void 0:t.note)&&""!==(null==t?void 0:t.note.trim()),n=!Object(M.isEmpty)(null==t?void 0:t.setup)&&""!==(null==t?void 0:t.setup.trim());return[...e||n?[z]:[],...e?[$]:[],...n?[V]:[]]}),[t]);return l.a.createElement(a.EuiPanel,{hasBorder:!0,className:A.css`
        position: relative;
      `},n&&l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiProgress,{size:"xs",color:"accent",position:"absolute"}),l.a.createElement(_.a,{title:N})),null!=e&&null!=t&&l.a.createElement(a.EuiFlexGroup,{gutterSize:"xs",direction:"column",className:B},l.a.createElement(a.EuiFlexItem,{grow:!1,key:"header"},l.a.createElement(_.a,{title:N},d.length>0&&l.a.createElement(a.EuiButtonGroup,{options:d,idSelected:i,onChange:e=>{r(e)},"data-test-subj":"stepAboutDetailsToggle",legend:L}))),l.a.createElement(a.EuiFlexItem,{key:"details"},"details"===i&&l.a.createElement(a.EuiResizeObserver,{"data-test-subj":"stepAboutDetailsContent",onResize:u},(n=>l.a.createElement("div",{ref:n,className:B},l.a.createElement(H,{maxHeight:120},l.a.createElement(W,{maxHeight:120},l.a.createElement(a.EuiText,{size:"s","data-test-subj":"stepAboutRuleDetailsToggleDescriptionText"},t.description))),l.a.createElement(a.EuiSpacer,{size:"m"}),l.a.createElement(q.b,{addPadding:!1,descriptionColumns:"singleSplit",defaultValues:e})))),"notes"===i&&l.a.createElement(H,{"data-test-subj":"stepAboutDetailsNoteContent",maxHeight:o},l.a.createElement(W,{maxHeight:o},l.a.createElement(F.b,null,t.note))),"setup"===i&&l.a.createElement(H,{"data-test-subj":"stepAboutDetailsSetupContent",maxHeight:o},l.a.createElement(W,{maxHeight:o},l.a.createElement(F.b,null,t.setup))))))},G=Object(s.memo)(U);function H({maxHeight:e,"data-test-subj":t,children:n}){return l.a.createElement("div",{className:A.css`
        max-height: ${e}px;
        overflow-y: hidden;
        word-break: break-word;
      `,"data-test-subj":t},n)}function W({maxHeight:e,children:t}){return l.a.createElement("div",{className:`eui-yScroll ${A.css`
        max-height: ${e}px;
      `}`},t)}var Q=n(656),Y=n(181),K=n(745),X=n(740),J=n(528),Z=n(312),ee=n(1107),te=n(1108),ne=n(334),ae=n(954),ie=n(134),re=n(138),oe=n(151),se=n(4),le=n(687),ce=n(172),ue=n(472),de=n(196),pe=n(159),me=n(333),fe=n(1067),ge=n(612),be=n(1050),ye=n(137);const he=i.i18n.translate("xpack.securitySolution.detectionEngine.rules.components.ruleActionsOverflow.allActionsTitle",{defaultMessage:"All actions"}),ve=p()(a.EuiButtonIcon).withConfig({displayName:"MyEuiButtonIcon",componentId:"sc-1ut3lkn-0"})(["&.euiButtonIcon{svg{transform:rotate(90deg);}border:1px solid ",";width:40px;height:40px;}"],(({theme:e})=>e.euiColorPrimary)),Ee=({rule:e,userHasPermissions:t,canDuplicateRuleWithActions:n,showBulkDuplicateExceptionsConfirmation:i,confirmDeletion:r})=>{const[o,,c,u]=Object(ue.a)(),{navigateToApp:d}=Object(O.j)().services.application,{startTransaction:p}=Object(pe.b)(),{executeBulkAction:m}=Object(ge.b)({suppressSuccessToast:!0}),{bulkExport:f}=Object(fe.a)(),g=Object(be.a)(),b=Object(s.useCallback)((()=>{d(se.l,{deepLinkId:se.wc.rules,path:Object(k.e)()})}),[d]),y=Object(s.useMemo)((()=>null!=e?[l.a.createElement(a.EuiContextMenuItem,{key:ye.Ab,icon:"copy",disabled:!n||!t,"data-test-subj":"rules-details-duplicate-rule",onClick:async()=>{p({name:de.e.DUPLICATE}),c();const t=await i();if(null===t)return;const n=await m({type:ce.b.duplicate,ids:[e.id],duplicatePayload:{include_exceptions:t===le.a.withExceptions||t===le.a.withExceptionsExcludeExpiredExceptions,include_expired_exceptions:!(t===le.a.withExceptionsExcludeExpiredExceptions)}}),a=null==n?void 0:n.attributes.results.created;null!=a&&a.length&&Object(ge.a)(a[0].id,d)}},l.a.createElement(a.EuiToolTip,{position:"left",content:Object(me.a)(e,n)?void 0:ye.Qb},l.a.createElement(l.a.Fragment,null,ye.Ab))),l.a.createElement(a.EuiContextMenuItem,{key:ye.Hb,icon:"exportAction",disabled:!t||e.immutable,"data-test-subj":"rules-details-export-rule",onClick:async()=>{p({name:de.e.EXPORT}),c();const t=await f({ids:[e.id]});t&&await g(t)}},ye.Hb),l.a.createElement(a.EuiContextMenuItem,{key:ye.xb,icon:"trash",disabled:!t,"data-test-subj":"rules-details-delete-rule",onClick:async()=>{c(),!1!==await r()&&(p({name:de.e.DELETE}),await m({type:ce.b.delete,ids:[e.id]}),b())}},ye.xb)]:[]),[f,n,c,m,d,b,e,i,p,t,g,r]),h=Object(s.useMemo)((()=>l.a.createElement(a.EuiToolTip,{position:"top",content:he},l.a.createElement(ve,{iconType:"boxesHorizontal","aria-label":he,isDisabled:!t,"data-test-subj":"rules-details-popover-button-icon",onClick:u}))),[u,t]);return l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiPopover,{anchorPosition:"leftCenter",button:h,closePopover:c,id:"ruleActionsOverflow",isOpen:o,"data-test-subj":"rules-details-popover",ownFocus:!0,panelPaddingSize:"none",repositionOnScroll:!0},l.a.createElement(a.EuiContextMenuPanel,{"data-test-subj":"rules-details-menu-panel",items:y})))},xe=l.a.memo(Ee);xe.displayName="RuleActionsOverflow";var je=n(162),Oe=n(648),Se=n(486),ke=n(131),we=n(178),Ie=n(861),Te=n(148),Ce=n(116),Me=n(110),Ae=n(1393),_e=n(505),Fe=n(50),De=n.n(Fe),Ne=n(49);const Pe=1e3;var Re=n(64),Le=n(44),qe=(n(1371),n(21)),Be=n(317),ze=n(108),$e=n(122),Ve=n(541),Ue=n(587);const Ge=Object(s.createContext)(null),He=({children:e})=>{var t;const{storage:n}=Object(O.j)().services,[a,i]=Object(s.useState)([]),[r,o]=Object(s.useState)(1e3),[c,u]=Object(s.useState)(!0),[d,p]=Object(s.useState)("now-24h"),[m,f]=Object(s.useState)("now"),[g,b]=Object(s.useState)(""),[y,h]=Object(s.useState)([]),[v,E]=Object(s.useState)(null!==(t=n.get(se.oc))&&void 0!==t&&t),[x,j]=Object(s.useState)(1),[S,k]=Object(s.useState)(5),[w,I]=Object(s.useState)("timestamp"),[T,C]=Object(s.useState)("desc"),M=Object(s.useMemo)((()=>({[ai.executionResults]:{state:{superDatePicker:{recentlyUsedRanges:a,refreshInterval:r,isPaused:c,start:d,end:m},queryText:g,statusFilters:y,showMetricColumns:v,pagination:{pageIndex:x,pageSize:S},sort:{sortField:w,sortDirection:T}},actions:{setEnd:f,setIsPaused:u,setPageIndex:j,setPageSize:k,setQueryText:b,setRecentlyUsedRanges:i,setRefreshInterval:o,setShowMetricColumns:E,setSortDirection:C,setSortField:I,setStart:p,setStatusFilters:h}}})),[m,c,x,S,g,a,r,v,T,w,d,y]);return l.a.createElement(Ge.Provider,{value:M},e)};var We=n(1418),Qe=n(1417);const Ye=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.tableTitle",{defaultMessage:"Execution log"}),Ke=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.tableSubtitle",{defaultMessage:"A log of rule execution results"}),Xe=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.searchPlaceholder",{defaultMessage:"duration > 100 and gapDuration > 10"}),Je=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.showMetricColumnsSwitchTitle",{defaultMessage:"Show metrics columns"}),Ze=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.statusColumn",{defaultMessage:"Status"}),et=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.statusColumnTooltip",{defaultMessage:"Overall status of execution."}),tt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.timestampColumn",{defaultMessage:"Timestamp"}),nt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.timestampColumnTooltip",{defaultMessage:"Datetime rule execution initiated."}),at=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.durationColumn",{defaultMessage:"Duration"}),it=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.durationColumnTooltip",{defaultMessage:"The length of time it took for the rule to run (hh:mm:ss:SSS)."}),rt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.messageColumn",{defaultMessage:"Message"}),ot=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.messageColumnTooltip",{defaultMessage:"Relevant message from execution outcome."}),st=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.gapDurationColumn",{defaultMessage:"Gap Duration"}),lt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.gapTooltipSeeDocsDescription",{defaultMessage:"see documentation"}),ct=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.indexDurationColumn",{defaultMessage:"Index Duration"}),ut=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.indexDurationColumnTooltip",{defaultMessage:"The length of time it took to index detected alerts (hh:mm:ss:SSS)."}),dt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.searchDurationColumn",{defaultMessage:"Search Duration"}),pt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.searchDurationColumnTooltip",{defaultMessage:"The length of time it took to search for alerts (hh:mm:ss:SSS)."}),mt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.schedulingDelayColumn",{defaultMessage:"Scheduling Delay"}),ft=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.schedulingDelayColumnTooltip",{defaultMessage:"The length of time from rule scheduled till rule executed (hh:mm:ss:SSS)."}),gt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionsColumn",{defaultMessage:"Actions"}),bt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionsColumnTooltip",{defaultMessage:"Filter alerts by rule execution ID."}),yt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionSearchFiltersUpdatedTitle",{defaultMessage:"Global search filters have been updated"}),ht=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionSearchFiltersUpdatedDescription",{defaultMessage:"Search filters have been updated to show alerts from selected rule execution"}),vt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionSearchFiltersUpdatedRestoreButtonTitle",{defaultMessage:"Restore previous filters"}),Et=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionFieldNotFoundErrorTitle",{defaultMessage:"Unable to filter alerts"}),xt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.actionFieldNotFoundErrorDescription",{defaultMessage:"Cannot find field 'kibana.alert.rule.execution.uuid' in alerts index."}),jt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.durationNotAvailableDescription",{defaultMessage:"N/A"}),Ot=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.durationGreaterThanYearDescription",{defaultMessage:"> 1 Year"}),St=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.fullMessage",{defaultMessage:"Full message"}),kt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.expandRow",{defaultMessage:"Expand rows"}),wt=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.expand",{defaultMessage:"Expand"}),It=i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.collapse",{defaultMessage:"Collapse"});var Tt=n(117),Ct=n(132),Mt=n(1109),At=n(1110);const _t=e=>{const{duration:t,isSeconds:n=!1,allowZero:a=!0}=e,i=Object(s.useMemo)((()=>a&&t>=0?(e=>{if(!e)return"00:00:00:000";const t=De.a.duration(e),n=Math.floor(t.asDays()).toString().padStart(3,"0"),a=Math.floor(t.asHours()%24).toString().padStart(2,"0"),i=Math.floor(t.asMinutes()%60).toString().padStart(2,"0"),r=t.seconds().toString().padStart(2,"0"),o=t.milliseconds().toString().padStart(3,"0");return Math.floor(t.asDays())>0?Math.floor(t.asDays())>=365?Ot:`${n}:${a}:${i}:${r}:${o}`:`${a}:${i}:${r}:${o}`})(n?1e3*t:t):jt),[a,t,n]);return l.a.createElement("span",{"data-test-subj":"rule-duration-format-value"},i)},Ft=l.a.memo(_t);Ft.displayName="RuleDurationFormat";const Dt=[{name:l.a.createElement(At.a,{title:Ze,tooltipContent:et}),field:"security_status",render:e=>l.a.createElement(_e.c,{status:e,showTooltip:!0}),sortable:!1,truncateText:!1,width:"10%"},{field:"timestamp",name:l.a.createElement(At.a,{title:tt,tooltipContent:nt}),render:e=>l.a.createElement(Ct.a,{value:e,fieldName:"timestamp"}),sortable:!0,truncateText:!1,width:"15%"},{field:"duration_ms",name:l.a.createElement(At.a,{title:at,tooltipContent:it}),render:e=>l.a.createElement(l.a.Fragment,null,e?l.a.createElement(Ft,{duration:e}):Object(Tt.e)()),sortable:!0,truncateText:!1,width:"10%"}],Nt=e=>({field:"security_message",name:l.a.createElement(At.a,{title:rt,tooltipContent:ot}),render:(e,t)=>"succeeded"===t.security_status?e:l.a.createElement(Pt,null,e),sortable:!1,width:e});var Pt=p()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-okzjc9-0"})(["display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;overflow:hidden;"]),Rt=n(283);const Lt={status:"kibana.alert.rule.execution.status",timestamp:"@timestamp",duration:"event.duration",message:"message",gapDuration:"kibana.alert.rule.execution.metrics.execution_gap_duration_s",indexDuration:"kibana.alert.rule.execution.metrics.total_indexing_duration_ms",searchDuration:"kibana.alert.rule.execution.metrics.total_search_duration_ms",totalActions:"kibana.alert.rule.execution.metrics.number_of_triggered_actions",schedulingDelay:"kibana.task.schedule_delay"},qt=[Rt.f.succeeded,Rt.f.failed,Rt.f["partial failure"]],Bt=l.a.memo((({onlyShowFilters:e,selectedStatuses:t,onStatusFilterChange:n,onSearch:i})=>{const r=Object(s.useCallback)((e=>{i((e=>Object.entries(Lt).reduce(((e,[t,n])=>Object(M.replace)(e,t,n)),e))(e))}),[i]);return l.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},l.a.createElement(a.EuiFlexItem,{grow:!0},!e&&l.a.createElement(a.EuiFieldSearch,{"data-test-subj":"executionLogSearch","aria-label":Xe,placeholder:Xe,onSearch:r,isClearable:!0,fullWidth:!0})),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(_e.b,{items:qt,selectedItems:t,onChange:n})))}));Bt.displayName="ExecutionLogSearchBar";const zt="kibana.alert.rule.execution.uuid",$t=p()(a.EuiSwitch).withConfig({displayName:"UtilitySwitch",componentId:"sc-z5yvfc-0"})(["margin-left:17px;"]),Vt=p()(a.EuiFlexItem).withConfig({displayName:"DatePickerEuiFlexItem",componentId:"sc-z5yvfc-1"})(["max-width:582px;"]),Ut=({ruleId:e,selectAlertsTab:t})=>{var n,r;const{docLinks:o,data:{query:{filterManager:c}},storage:d,timelines:p}=Object(O.j)().services,{[ai.executionResults]:{state:{superDatePicker:{recentlyUsedRanges:m,refreshInterval:f,isPaused:g,start:b,end:y},queryText:h,statusFilters:v,showMetricColumns:E,pagination:{pageIndex:S,pageSize:k},sort:{sortField:w,sortDirection:I}},actions:{setEnd:T,setIsPaused:C,setPageIndex:M,setPageSize:A,setQueryText:F,setRecentlyUsedRanges:D,setRefreshInterval:N,setShowMetricColumns:P,setSortDirection:R,setSortField:L,setStart:q,setStatusFilters:B}}}=(()=>{const e=Object(s.useContext)(Ge);return Object(Ue.a)(e,"useRuleDetailsContext should be used inside RuleDetailsContextProvider"),e})(),{indexPattern:z}=Object(Ce.d)(Me.SourcererScopeName.detections),{addError:$,addSuccess:V,remove:U}=Object(ze.a)(),G=Object(u.useDispatch)(),H=Object(s.useMemo)((()=>$e.d.globalFiltersQuerySelector()),[]),W=Object(s.useMemo)((()=>$e.d.globalQuerySelector()),[]),Q=Object(j.a)($e.d.globalTimeRangeSelector),Y=Object(j.a)(W),K=Object(j.a)(H),X=Object(s.useRef)({filters:K,query:Y,timerange:Q}),J=Object(s.useRef)(""),Z=Object(s.useCallback)((()=>{Object(Ve.a)(X.current.timerange)?G(Object(oe.setAbsoluteRangeDatePicker)({id:x.a.global,from:X.current.timerange.from,to:X.current.timerange.to})):Object(Ve.b)(X.current.timerange)&&G(Object(oe.setRelativeRangeDatePicker)({id:x.a.global,from:X.current.timerange.from,fromStr:X.current.timerange.fromStr,to:X.current.timerange.to,toStr:X.current.timerange.toStr})),G(Object(oe.setFilterQuery)({id:x.a.global,query:X.current.query.query,language:X.current.query.language})),c.removeAll(),c.addFilters(X.current.filters),U(J.current)}),[G,c,U]),{data:ee,dataUpdatedAt:te,isFetching:ne,isLoading:ae,refetch:ie}=Object(_e.d)({ruleId:e,start:b,end:y,queryText:h,statusFilters:v,page:S,perPage:k,sortField:w,sortOrder:I}),re=null!==(n=null==ee?void 0:ee.events)&&void 0!==n?n:[],le=null!==(r=null==ee?void 0:ee.total)&&void 0!==r?r:0,ce=Object(s.useMemo)((()=>z.fields.find((e=>e.name===zt))),[z]),ue=Object(s.useCallback)((({page:e={},sort:t={}})=>{const{index:n,size:a}=e,{field:i,direction:r}=t;M(n+1),A(a),L(i),R(r)}),[M,A,R,L]),de=Object(s.useCallback)((e=>{const t=m.filter((t=>!(t.start===e.start&&t.end===e.end)));t.unshift({start:e.start,end:e.end}),q(e.start),T(e.end),D(t.length>10?t.slice(0,9):t)}),[m,T,D,q]),pe=Object(s.useCallback)((e=>{C(e.isPaused),N(e.refreshInterval>6e4?e.refreshInterval:6e4)}),[C,N]),me=Object(s.useCallback)((e=>{ie()}),[ie]),fe=Object(s.useCallback)((e=>{F(e)}),[F]),ge=Object(s.useCallback)((e=>{B(e)}),[B]),be=Object(s.useCallback)(((e,n)=>{if(null!=ce){X.current={filters:K,query:Y,timerange:Q};const r=Object(Ne.buildFilter)(z,ce,Ne.FILTERS.PHRASE,!1,!1,e,null);G(Object(oe.setAbsoluteRangeDatePicker)({id:x.a.global,from:De()(n).subtract(1,"days").toISOString(),to:De()(n).add(1,"days").toISOString()})),c.removeAll(),c.addFilters(r),G(Object(oe.setFilterQuery)({id:x.a.global,query:"",language:"kuery"})),t(),J.current=V({title:yt,text:(i=l.a.createElement(l.a.Fragment,null,l.a.createElement("p",null,ht),l.a.createElement(a.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"s"},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiButton,{size:"s",onClick:Z},vt)))),e=>(Object(Re.render)(Object(qe.jsx)(Le.I18nProvider,null,i),e),()=>Object(Re.unmountComponentAtNode)(e)))},{toastLifeTimeMs:6e5}).id}else $(xt,{title:Et});var i}),[$,V,G,c,K,z,Y,Z,t,Q,ce]),ye=Object(s.useCallback)((e=>{d.set(se.oc,e),P(e)}),[P,d]),he=Object(s.useMemo)((()=>({pageIndex:S-1,pageSize:k,totalItemCount:le>Pe?Pe:le,pageSizeOptions:[5,10,25,50]})),[le,S,k]),ve=Object(s.useMemo)((()=>({sort:{field:w,direction:I}})),[I,w]),Ee=Object(s.useMemo)((()=>[{field:zt,name:gt,width:"64px",actions:[{name:"Edit",isPrimary:!0,field:"",description:bt,icon:"filter",type:"icon",onClick:e=>{null!=e&&e.execution_uuid&&be(e.execution_uuid,e.timestamp)},"data-test-subj":"action-filter-by-execution-id"}]}]),[be]),xe=Object(s.useCallback)((e=>`${e.execution_uuid}`),[]),je=Object(s.useCallback)((e=>l.a.createElement(a.EuiDescriptionList,{className:"eui-fullWidth",listItems:[{title:St,description:l.a.createElement(Qe.a,{text:e.security_message})}]})),[]),Oe=Object(We.a)({getItemId:xe,renderItem:je}),Se=Object(s.useMemo)((()=>{const e=[...Dt];return E?e.push(Nt("20%"),...(e=>[{field:"gap_duration_s",name:l.a.createElement(At.a,{title:st,customTooltip:l.a.createElement("div",{style:{maxWidth:"20px"}},l.a.createElement(Mt.a,{columnName:st},l.a.createElement(a.EuiText,{size:"s",style:{width:350}},l.a.createElement("p",null,l.a.createElement(Le.FormattedMessage,{defaultMessage:"Duration of gap in Rule execution (hh:mm:ss:SSS). Adjust Rule look-back or {seeDocs} for mitigating gaps.",id:"xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.gapDurationColumnTooltip",values:{seeDocs:l.a.createElement(a.EuiLink,{href:`${e.links.siem.troubleshootGaps}`,target:"_blank"},lt)}})))))}),render:e=>l.a.createElement(l.a.Fragment,null,e?l.a.createElement(Ft,{duration:e,isSeconds:!0}):Object(Tt.e)()),sortable:!0,truncateText:!1,width:"10%"},{field:"indexing_duration_ms",name:l.a.createElement(At.a,{title:ct,tooltipContent:ut}),render:e=>l.a.createElement(l.a.Fragment,null,e?l.a.createElement(Ft,{duration:e}):Object(Tt.e)()),sortable:!0,truncateText:!1,width:"10%"},{field:"search_duration_ms",name:l.a.createElement(At.a,{title:dt,tooltipContent:pt}),render:e=>l.a.createElement(l.a.Fragment,null,e?l.a.createElement(Ft,{duration:e}):Object(Tt.e)()),sortable:!0,truncateText:!1,width:"10%"},{field:"schedule_delay_ms",name:l.a.createElement(At.a,{title:mt,tooltipContent:ft}),render:e=>l.a.createElement(l.a.Fragment,null,e?l.a.createElement(Ft,{duration:e}):Object(Tt.e)()),sortable:!0,truncateText:!1,width:"10%"}])(o)):e.push(Nt("50%")),e.push(...Ee,(({toggleRowExpanded:e,isRowExpanded:t})=>({align:a.RIGHT_ALIGNMENT,width:"40px",isExpander:!0,name:l.a.createElement(a.EuiScreenReaderOnly,null,l.a.createElement("span",null,kt)),render:n=>"succeeded"===n.security_status?null:l.a.createElement(a.EuiButtonIcon,{onClick:()=>e(n),"aria-label":t(n)?It:wt,iconType:t(n)?"arrowUp":"arrowDown"})}))({toggleRowExpanded:Oe.toggleRowExpanded,isRowExpanded:Oe.isRowExpanded})),e}),[Ee,o,E,Oe.toggleRowExpanded,Oe.isRowExpanded]);return l.a.createElement(a.EuiPanel,{hasBorder:!0},l.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},l.a.createElement(a.EuiFlexItem,{grow:!0},l.a.createElement(_.a,{title:Ye,subtitle:Ke})),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(Bt,{onlyShowFilters:!0,selectedStatuses:v,onStatusFilterChange:ge,onSearch:fe})),l.a.createElement(Vt,null,l.a.createElement(a.EuiSuperDatePicker,{start:b,end:y,onTimeChange:de,onRefresh:me,isPaused:g,isLoading:ne,refreshInterval:f,onRefreshChange:pe,recentlyUsedRanges:m,width:"full"}))),l.a.createElement(a.EuiSpacer,{size:"s"}),l.a.createElement(Be.a,null,l.a.createElement(Be.d,null,l.a.createElement(Be.c,null,l.a.createElement(Be.e,{dataTestSubj:"executionsShowing"},(ke=le>Pe?Pe:le,i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.totalExecutionsLabel",{values:{totalItems:ke},defaultMessage:"Showing {totalItems} {totalItems, plural, =1 {rule execution} other {rule executions}}"})))),le>Pe&&l.a.createElement(Be.c,{grow:!0},l.a.createElement(Be.e,{dataTestSubj:"exceptionsShowing",shouldWrap:!0},l.a.createElement(a.EuiTextColor,{color:"danger"},((e,t)=>i.i18n.translate("xpack.securitySolution.detectionEngine.ruleDetails.ruleExecutionLog.searchLimitExceededLabel",{values:{totalItems:e,maxItems:1e3},defaultMessage:"More than {totalItems} rule executions match filters provided. Showing first {maxItems} by most recent '@timestamp'. Constrain filters further to view additional execution events."}))(le))))),l.a.createElement(Be.d,null,l.a.createElement(Be.c,null,l.a.createElement(Be.e,{dataTestSubj:"lastUpdated"},p.getLastUpdated({showUpdating:ae||ne,updatedAt:te})),l.a.createElement($t,{label:Je,checked:E,compressed:!0,onChange:e=>ye(e.target.checked)})))),l.a.createElement(a.EuiBasicTable,{columns:Se,items:re,loading:ne,sorting:ve,pagination:he,onChange:ue,itemId:xe,itemIdToExpandedRowMap:Oe.itemIdToExpandedRowMap,isExpandable:!0}));var ke},Gt=l.a.memo(Ut);Gt.displayName="ExecutionLogTable";var Ht=n(586),Wt=n(741),Qt=n(862),Yt=n(955),Kt=n(696),Xt=n(282),Jt=n(1112),Zt=n(1377),en=n(335),tn=n(214),nn=n(156),an=n(210);const rn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.noSearchResultsPromptTitle",{defaultMessage:"No results match your search criteria"}),on=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.noSearchResultsPromptBody",{defaultMessage:"Try modifying your search."}),sn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.addExceptionsEmptyPromptTitle",{defaultMessage:"Add exceptions to this rule"}),ln=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.emptyPromptBody",{defaultMessage:"There are no exceptions for this rule. Create your first rule exception."}),cn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.endpoint.emptyPromptBody",{defaultMessage:"There are no endpoint exceptions. Create your first endpoint exception."}),un=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.emptyPromptButtonLabel",{defaultMessage:"Add rule exception"}),dn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.endpoint.emptyPromptButtonLabel",{defaultMessage:"Add endpoint exception"}),pn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemsFetchError",{defaultMessage:"Unable to load exception items"}),mn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemsFetchErrorDescription",{defaultMessage:"There was an error loading the exception items. Contact your administrator for help."}),fn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemSearchErrorTitle",{defaultMessage:"Error searching"}),gn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemSearchErrorBody",{defaultMessage:"An error occurred searching for exception items. Please try again."}),bn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionDeleteErrorTitle",{defaultMessage:"Error deleting exception item"}),yn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.paginationAriaLabel",{defaultMessage:"Exception item table pagination"}),hn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemDeleteSuccessTitle",{defaultMessage:"Exception deleted"}),vn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionEndpointDetailsDescription",{defaultMessage:"Endpoint exceptions are added to both the detection rule and the Elastic Endpoint agent on your hosts."}),En=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionDetectionDetailsDescription",{defaultMessage:"Rule exceptions are added to the detection rule."}),xn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.searchPlaceholder",{defaultMessage:'Filter exceptions using simple query syntax, for example, name:"my list"'}),jn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.addToEndpointListLabel",{defaultMessage:"Add endpoint exception"}),On=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.addToDetectionsListLabel",{defaultMessage:"Add rule exception"}),Sn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.activeDetectionsLabel",{defaultMessage:"Active exceptions"}),kn=i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.expiredDetectionsLabel",{defaultMessage:"Expired exceptions"}),wn={strict:!0,fields:{created_by:{type:"string"},description:{type:"string"},id:{type:"string"},item_id:{type:"string"},list_id:{type:"string"},name:{type:"string"},os_types:{type:"string"},tags:{type:"string"}}},In=({canAddException:e,isEndpoint:t,isSearching:n,onSearch:i,onAddExceptionClick:r})=>{const o=Object(s.useCallback)((({queryText:e})=>{i({search:e})}),[i]),c=Object(s.useCallback)((()=>{r()}),[r]),u=Object(s.useMemo)((()=>t?jn:On),[t]);return l.a.createElement(a.EuiFlexGroup,{alignItems:"center"},l.a.createElement(a.EuiFlexItem,{grow:!0},l.a.createElement(a.EuiSearchBar,{box:{placeholder:xn,incremental:!0,schema:wn,"data-test-subj":"exceptionsViewerSearchBar"},filters:[],onChange:o})),!e&&l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiButton,{"data-test-subj":"exceptionsHeaderAddExceptionBtn",onClick:c,isDisabled:n,fill:!0},u)))};In.displayName="ExceptionsViewerSearchBarComponent";const Tn=l.a.memo(In);Tn.displayName="ExceptionsViewerSearchBar";const Cn=({pagination:e,onPaginationChange:t})=>{var n;const i=Object(s.useCallback)((n=>{t({pagination:{page:e.pageIndex,perPage:n}})}),[t,e.pageIndex]),r=Object(s.useCallback)((n=>{t({pagination:{page:n,perPage:e.pageSize}})}),[t,e.pageSize]);return l.a.createElement(a.EuiTablePagination,{"aria-label":yn,pageCount:null!==(n=Math.ceil(e.totalItemCount/e.pageSize))&&void 0!==n?n:0,activePage:e.pageIndex,onChangePage:r,itemsPerPage:e.pageSize,onChangeItemsPerPage:i,itemsPerPageOptions:e.pageSizeOptions,"data-test-subj":"allExceptionItemsPagination"})};Cn.displayName="ExceptionsViewerPaginationComponent";const Mn=l.a.memo(Cn);Mn.displayName="ExceptionsViewerPagination";const An=p.a.span.withConfig({displayName:"StyledText",componentId:"sc-1co6joy-0"})(["font-weight:bold;"]),_n=p.a.div.withConfig({displayName:"MyUtilities",componentId:"sc-1co6joy-1"})(["height:50px;"]),Fn=p()(a.EuiFlexGroup).withConfig({displayName:"StyledBarGroup",componentId:"sc-1co6joy-2"})(["align-items:center;"]),Dn=p()(Be.e).withConfig({displayName:"PaginationUtilityBarText",componentId:"sc-1co6joy-3"})(["align-self:center;"]),Nn=({pagination:e,lastUpdated:t,exceptionsToShow:n,onChangeExceptionsToShow:i,isEndpoint:r})=>l.a.createElement(_n,null,l.a.createElement(Be.a,null,l.a.createElement(Be.d,null,l.a.createElement(Be.c,null,l.a.createElement(Dn,{dataTestSubj:"exceptionsShowing"},l.a.createElement(Le.FormattedMessage,{id:"xpack.securitySolution.exceptions.viewer.paginationDetails",defaultMessage:"Showing {partOne} of {partTwo}",values:{partOne:l.a.createElement(An,null,`${0===e.totalItemCount?"0":"1"}-${Math.min(e.pageSize,e.totalItemCount)}`),partTwo:l.a.createElement(An,null,`${e.totalItemCount}`)}})))),l.a.createElement(Be.d,null,l.a.createElement(Fn,null,l.a.createElement(Be.e,{dataTestSubj:"lastUpdated"},l.a.createElement(a.EuiText,{size:"s","data-test-subj":"exceptionsViewerLastUpdated"},l.a.createElement(Le.FormattedMessage,{id:"xpack.securitySolution.exceptions.viewer.lastUpdated",defaultMessage:"Updated {updated}",values:{updated:l.a.createElement(Ct.b,{value:t})}}))),!r&&l.a.createElement(a.EuiButtonGroup,{legend:"Displayed exceptions button group",options:[{id:"active",label:Sn},{id:"expired",label:kn}],idToSelectedMap:n,onChange:i,type:"multi"})))));Nn.displayName="ExceptionsViewerUtilityComponent";const Pn=l.a.memo(Nn);Pn.displayName="ExceptionsViewerUtility";var Rn=n(281);const Ln=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.editItemButton",{defaultMessage:"Edit rule exception"}),qn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.deleteItemButton",{defaultMessage:"Delete rule exception"}),Bn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.endpoint.editItemButton",{defaultMessage:"Edit endpoint exception"}),zn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.endpoint.deleteItemButton",{defaultMessage:"Delete endpoint exception"}),$n=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.createdLabel",{defaultMessage:"Created"}),Vn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.updatedLabel",{defaultMessage:"Updated"}),Un=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.expiresLabel",{defaultMessage:"Expires at"}),Gn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.expiredLabel",{defaultMessage:"Expired at"}),Hn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.metaDetailsBy",{defaultMessage:"by"}),Wn=e=>i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.showCommentsLabel",{values:{comments:e},defaultMessage:"Show {comments, plural, =1 {comment} other {comments}} ({comments})"}),Qn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.matchOperator",{defaultMessage:"IS"}),Yn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.matchOperator.not",{defaultMessage:"IS NOT"}),Kn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.wildcardMatchesOperator",{defaultMessage:"MATCHES"}),Xn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.wildcardDoesNotMatchOperator",{defaultMessage:"DOES NOT MATCH"}),Jn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.nestedOperator",{defaultMessage:"has"}),Zn=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.matchAnyOperator",{defaultMessage:"is one of"}),ea=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.matchAnyOperator.not",{defaultMessage:"is not one of"}),ta=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.existsOperator",{defaultMessage:"exists"}),na=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.existsOperator.not",{defaultMessage:"does not exist"}),aa=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.listOperator",{defaultMessage:"included in"}),ia=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.listOperator.not",{defaultMessage:"is not included in"}),ra=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.and",{defaultMessage:"AND"}),oa=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.os",{defaultMessage:"OS"}),sa=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.windows",{defaultMessage:"Windows"}),la=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.linux",{defaultMessage:"Linux"}),ca=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.conditions.macos",{defaultMessage:"Mac"}),ua=i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.affectedList",{defaultMessage:"Affects shared list"}),da=Object(s.memo)((({item:e,actions:t,disableActions:n=!1,dataTestSubj:i})=>{const[r,o]=Object(s.useState)(!1),c=()=>o(!1),u=Object(s.useMemo)((()=>t.map((e=>l.a.createElement(a.EuiContextMenuItem,{"data-test-subj":`${i}-actionItem-${e.key}`,key:e.key,icon:e.icon,onClick:()=>{c(),e.onClick()}},e.label)))),[i,t]);return l.a.createElement(a.EuiFlexGroup,{"data-test-subj":i,justifyContent:"spaceBetween"},l.a.createElement(a.EuiFlexItem,{grow:9},l.a.createElement(a.EuiTitle,{size:"xs",textTransform:"uppercase","data-test-subj":`${i}-title`},l.a.createElement("h3",null,e.name))),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiPopover,{button:l.a.createElement(a.EuiButtonIcon,{isDisabled:n,"aria-label":"Exception item actions menu",iconType:"boxesHorizontal",onClick:()=>o((e=>!e)),"data-test-subj":`${i}-actionButton`}),panelPaddingSize:"none",isOpen:r,closePopover:c,"data-test-subj":`${i}-items`},l.a.createElement(a.EuiContextMenuPanel,{size:"s",items:u}))))}));da.displayName="ExceptionItemCardHeader";var pa=n(316);const ma=p.a.div.withConfig({displayName:"Container",componentId:"sc-14md3lb-0"})(["display:inline;margin-left:",";"],(({theme:e})=>`${e.eui.euiSizeXS}`)),fa=({value:e,tooltipIconType:t="iInCircle",tooltipIconText:n})=>{const{showSpaceWarningIcon:i,warningText:r}=(({value:e,tooltipIconText:t})=>({showSpaceWarningIcon:!!(Array.isArray(e)?e.find(pa.d):Object(pa.d)(e)),warningText:t||pa.c.FIELD_SPACE_WARNING}))({value:e,tooltipIconText:n});return i&&e?l.a.createElement(ma,null,l.a.createElement(a.EuiToolTip,{position:"top",content:r},l.a.createElement(a.EuiIcon,{"data-test-subj":"value_with_space_warning_tooltip",type:t,color:"warning"}))):null},ga=Object.freeze({linux:la,mac:ca,macos:ca,windows:sa}),ba=Object.freeze({[m.d.NESTED]:Jn,[m.d.MATCH_ANY]:Zn,[m.d.MATCH]:Qn,[m.d.WILDCARD]:Kn,[m.d.EXISTS]:ta,[m.d.LIST]:aa}),ya=Object.freeze({[m.d.MATCH_ANY]:ea,[m.d.MATCH]:Yn,[m.d.WILDCARD]:Xn,[m.d.EXISTS]:na,[m.d.LIST]:ia}),ha=p()(a.EuiFlexGroup).withConfig({displayName:"EuiFlexGroupNested",componentId:"sc-6hh4xv-0"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeXL)),va=p()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemNested",componentId:"sc-6hh4xv-1"})(["margin-bottom:6px !important;margin-top:6px !important;"]),Ea=p()("span").withConfig({displayName:"StyledCondition",componentId:"sc-6hh4xv-2"})(["margin-right:6px;"]),xa=p()(a.EuiPanel).withConfig({displayName:"StyledConditionContent",componentId:"sc-6hh4xv-3"})(["border:1px;border-color:#d3dae6;border-style:solid;"]),ja=Object(s.memo)((({os:e,entries:t,dataTestSubj:n})=>{const i=Object(s.useMemo)((()=>null!=e&&e.length>0?e.map((e=>{var t;return null!==(t=ga[e])&&void 0!==t?t:e})).join(", "):null),[e]),r=(e,t)=>"match_any"===e&&Array.isArray(t)?t.map((e=>l.a.createElement(a.EuiBadge,{color:"hollow"},e))):null!=t?t:"",o=(e,t)=>{var n,a;return"nested"===e?"":"included"===t?null!==(n=ba[e])&&void 0!==n?n:e:null!==(a=ya[e])&&void 0!==a?a:e},c=Object(s.useCallback)(((e,t)=>{if("nested"===e&&t.length)return t.map((e=>{const{field:t,type:i,operator:s}=e,c="value"in e?e.value:"";return l.a.createElement(ha,{"data-test-subj":`${n}-nestedCondition`,key:t+i+c,direction:"row",alignItems:"center",gutterSize:"m",responsive:!1},l.a.createElement(va,{grow:!1},l.a.createElement(a.EuiToken,{iconType:"tokenNested",size:"s"})),l.a.createElement(va,{grow:!1},l.a.createElement(a.EuiExpression,{description:"",value:t,color:"subdued"})),l.a.createElement(va,{grow:!1},l.a.createElement(a.EuiExpression,{description:o(i,s),value:r(i,c)})),l.a.createElement(fa,{value:c}))}))}),[n]),u=Object(s.useCallback)((e=>"list"===e.type?e.list.id:"value"in e?e.value:""),[]);return l.a.createElement(xa,{color:"subdued",hasBorder:!0,hasShadow:!1,"data-test-subj":n},null!=i&&l.a.createElement("div",{"data-test-subj":`${n}-os`},l.a.createElement("strong",null,l.a.createElement(a.EuiExpression,{description:"",value:oa}),l.a.createElement(a.EuiExpression,{description:Qn,value:i}))),t.map(((e,t)=>{const{field:i,type:s}=e,d=u(e),p="entries"in e?e.entries:[],m="operator"in e?e.operator:"";return l.a.createElement("div",{"data-test-subj":`${n}-condition`,key:i+s+d+t},l.a.createElement("div",{className:"eui-xScroll"},l.a.createElement(a.EuiExpression,{description:0===t?"":l.a.createElement(Ea,null,ra),value:i,color:0===t?"primary":"subdued"}),l.a.createElement(a.EuiExpression,{description:o(s,m),value:r(s,d)}),l.a.createElement(fa,{value:d})),null!=p&&c(s,p))})))}));ja.displayName="ExceptionItemCardConditions";var Oa=n(692);const Sa=p()(a.EuiFlexItem).withConfig({displayName:"StyledFlexItem",componentId:"sc-1vvqq31-0"})(["border-right:1px solid #d3dae6;padding:4px 12px 4px 0;"]),ka=Object(s.memo)((({item:e,listAndReferences:t,dataTestSubj:n})=>{const[r,o]=Object(s.useState)(!1),[c,u]=Object(s.useState)(!1),d=()=>u((e=>!e)),p=()=>o((e=>!e)),f=()=>u(!1),g=()=>o(!1),b=Object(s.useMemo)((()=>!!e.expire_time&&new Date(e.expire_time)<=new Date),[e]),y=Object(s.useMemo)((()=>null==t?[]:t.referenced_rules.map((e=>l.a.createElement(a.EuiContextMenuItem,{"data-test-subj":`${n}-rulesAffected-${e.id}`,key:e.id},l.a.createElement(a.EuiToolTip,{content:e.name,anchorClassName:"eui-textTruncate"},l.a.createElement(Oa.f,{external:!0,referenceId:e.id,referenceName:e.name})))))),[t,n]),h=Object(s.useMemo)((()=>{var e,r;return null==t?l.a.createElement(l.a.Fragment,null):l.a.createElement(Sa,{grow:!1},l.a.createElement(a.EuiPopover,{button:l.a.createElement(a.EuiButtonEmpty,{onClick:d,iconType:"list","data-test-subj":`${n}-affectedRulesButton`},(r=null!==(e=null==t?void 0:t.referenced_rules.length)&&void 0!==e?e:0,i.i18n.translate("xpack.securitySolution.ruleExceptions.exceptionItem.affectedRules",{values:{numRules:r},defaultMessage:"Affects {numRules} {numRules, plural, =1 {rule} other {rules}}"}))),panelPaddingSize:"none",isOpen:c,closePopover:f,"data-test-subj":`${n}-rulesPopover`,id:"rulesPopover"},l.a.createElement(a.EuiContextMenuPanel,{size:"s",items:y})))}),[t,n,c,y]),v=Object(s.useMemo)((()=>null==t?l.a.createElement(l.a.Fragment,null):t.type!==m.b.RULE_DEFAULT?l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiPopover,{button:l.a.createElement(a.EuiButtonEmpty,{onClick:p,iconType:"list","data-test-subj":`${n}-affectedListsButton`},ua),panelPaddingSize:"none",isOpen:r,closePopover:g,"data-test-subj":`${n}-listsPopover`,id:"listsPopover"},l.a.createElement(a.EuiContextMenuPanel,{size:"s",items:[l.a.createElement(a.EuiContextMenuItem,{"data-test-subj":`${n}-listsAffected-${t.id}`,key:t.id},l.a.createElement(a.EuiToolTip,{content:t.name,anchorClassName:"eui-textTruncate"},l.a.createElement(Oa.e,{dataTestSubj:"link-to-exception-list",linkTitle:t.name,listId:null==t?void 0:t.list_id,external:!0})))]}))):l.a.createElement(l.a.Fragment,null)),[t,n,r]);return l.a.createElement(a.EuiFlexGroup,{alignItems:"center",responsive:!1,gutterSize:"s","data-test-subj":n},l.a.createElement(Sa,{grow:!1},l.a.createElement(wa,{fieldName:"created_by",label:$n,value1:l.a.createElement(Ct.a,{fieldName:"created_at",value:e.created_at}),value2:e.created_by,dataTestSubj:`${n}-createdBy`})),l.a.createElement(Sa,{grow:!1},l.a.createElement(wa,{fieldName:"updated_by",label:Vn,value1:l.a.createElement(Ct.a,{fieldName:"updated_at",value:e.updated_at}),value2:e.updated_by,dataTestSubj:`${n}-updatedBy`})),null!=e.expire_time&&l.a.createElement(l.a.Fragment,null,l.a.createElement(Sa,{grow:!1},l.a.createElement(wa,{fieldName:"expire_time",label:b?Gn:Un,value1:l.a.createElement(Ct.a,{fieldName:"expire_time",value:e.expire_time}),dataTestSubj:`${n}-expireTime`}))),null!=t&&l.a.createElement(l.a.Fragment,null,h,v))}));ka.displayName="ExceptionItemCardMetaInfo";const wa=Object(s.memo)((({label:e,value1:t,value2:n,dataTestSubj:i})=>l.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",wrap:!1,responsive:!1},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiText,{size:"xs",style:{fontFamily:"Inter"}},e)),l.a.createElement(a.EuiFlexItem,{grow:!1,"data-test-subj":`${i}-value1`},l.a.createElement(a.EuiBadge,{color:"default",style:{fontFamily:"Inter"}},t)),null!=n&&l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiText,{size:"xs",style:{fontFamily:"Inter"}},Hn)),l.a.createElement(a.EuiFlexItem,{grow:!1,"data-test-subj":`${i}-value2`},l.a.createElement(a.EuiFlexGroup,{responsive:!1,gutterSize:"xs",alignItems:"center",wrap:!1},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiBadge,{color:"hollow",style:{fontFamily:"Inter"}},n))))))));wa.displayName="MetaInfoDetails";const Ia=Object(s.memo)((({comments:e})=>{const{euiTheme:t}=Object(a.useEuiTheme)();return l.a.createElement(a.EuiFlexItem,null,l.a.createElement(a.EuiAccordion,{id:"exceptionItemCardComments",buttonContent:l.a.createElement(a.EuiText,{size:"s",style:{color:t.colors.primary}},Wn(e.length)),arrowDisplay:"none","data-test-subj":"exceptionsViewerCommentAccordion"},l.a.createElement(a.EuiPanel,{hasBorder:!1,hasShadow:!1,paddingSize:"m"},l.a.createElement(a.EuiCommentList,{comments:e}))))}));Ia.displayName="ExceptionItemCardComments";const Ta=({disableActions:e,exceptionItem:t,isEndpoint:n,listAndReferences:i,onDeleteException:r,onEditException:o,dataTestSubj:c})=>{const u=Object(s.useCallback)((()=>{r({id:t.id,name:t.name,namespaceType:t.namespace_type})}),[r,t.id,t.name,t.namespace_type]),d=Object(s.useCallback)((()=>{o(t)}),[o,t]),p=Object(s.useMemo)((()=>Object(Rn.j)(t.comments)),[t.comments]);return l.a.createElement(a.EuiPanel,{paddingSize:"l","data-test-subj":c,hasBorder:!0,hasShadow:!1},l.a.createElement(a.EuiFlexGroup,{gutterSize:"m",direction:"column"},l.a.createElement(a.EuiFlexItem,{"data-test-subj":`${c}-header`},l.a.createElement(da,{item:t,actions:[{key:"edit",icon:"controlsHorizontal",label:n?Bn:Ln,onClick:d},{key:"delete",icon:"trash",label:n?zn:qn,onClick:u}],disableActions:e,dataTestSubj:"exceptionItemCardHeader"})),l.a.createElement(a.EuiFlexItem,{"data-test-subj":`${c}-meta`},l.a.createElement(ka,{item:t,listAndReferences:i,dataTestSubj:"exceptionItemCardMetaInfo"})),l.a.createElement(a.EuiFlexItem,null,l.a.createElement(ja,{os:t.os_types,entries:t.entries,dataTestSubj:"exceptionItemCardConditions"})),p.length>0&&l.a.createElement(Ia,{comments:p})))};Ta.displayName="ExceptionItemCardComponent";const Ca=l.a.memo(Ta);Ca.displayName="ExceptionItemCard";var Ma=n(1378),Aa=n.n(Ma);const _a=({isReadOnly:e,isEndpoint:t,currentState:n,onCreateExceptionListItem:i})=>{const{euiTheme:r}=Object(a.useEuiTheme)(),o=Object(s.useMemo)((()=>{switch(n){case"error":return l.a.createElement(a.EuiEmptyPrompt,{color:"danger",iconType:"error",title:l.a.createElement("h2",null,pn),body:l.a.createElement("p",null,mn),"data-test-subj":"exceptionItemViewerEmptyPrompts-error"});case"empty":return l.a.createElement(a.EuiEmptyPrompt,{color:"subdued",iconType:"plusInCircle",iconColor:r.colors.darkestShade,title:l.a.createElement("h2",{"data-test-subj":"exceptionsEmptyPromptTitle"},sn),body:l.a.createElement("p",{"data-test-subj":"exceptionsEmptyPromptBody"},t?cn:ln),actions:[l.a.createElement(a.EuiButton,{"data-test-subj":"exceptionsEmptyPromptButton",onClick:i,iconType:"plusInCircle",color:"primary",isDisabled:e,fill:!0},t?dn:un)],"data-test-subj":"exceptionItemViewerEmptyPrompts-empty"});case"empty_search":return l.a.createElement(a.EuiEmptyPrompt,{color:"plain",layout:"horizontal",hasBorder:!0,hasShadow:!1,icon:l.a.createElement(a.EuiImage,{size:"fullWidth",alt:"",url:Aa.a}),title:l.a.createElement("h3",null,rn),body:l.a.createElement("p",null,on),"data-test-subj":"exceptionItemViewerEmptyPrompts-emptySearch"});default:return l.a.createElement(a.EuiSkeletonText,{lines:4,"data-test-subj":"exceptionItemViewerEmptyPrompts-loading"})}}),[n,r.colors.darkestShade,e,t,i]);return l.a.createElement(a.EuiPanel,{hasShadow:!1,hasBorder:!1,color:"empty_search"===n?"subdued":"transparent",style:{margin:`${r.size.l} 0`,padding:`${r.size.l} 0`}},o)},Fa=l.a.memo(_a);Fa.displayName="ExeptionItemsViewerEmptyPrompts";const Da=p()(a.EuiFlexItem).withConfig({displayName:"MyFlexItem",componentId:"sc-1rc5djy-0"})(["margin:",";&:first-child{margin:",";}"],(({theme:e})=>`${e.eui.euiSize} 0`),(({theme:e})=>`${e.eui.euiSizeXS} 0 ${e.eui.euiSize}`)),Na=({isReadOnly:e,exceptions:t,isEndpoint:n,disableActions:i,ruleReferences:r,viewerState:o,onCreateExceptionListItem:s,onDeleteException:c,onEditExceptionItem:u})=>l.a.createElement(l.a.Fragment,null,null!=o&&"deleting"!==o?l.a.createElement(Fa,{isReadOnly:e,isEndpoint:n,currentState:o,onCreateExceptionListItem:s}):l.a.createElement(a.EuiFlexGroup,{direction:"column",className:"eui-yScrollWithShadows"},l.a.createElement(a.EuiFlexItem,{grow:!1,className:"eui-yScrollWithShadows"},l.a.createElement(a.EuiFlexGroup,{"data-test-subj":"exceptionsContainer",gutterSize:"none",direction:"column"},t.map((e=>l.a.createElement(Da,{"data-test-subj":"exceptionItemContainer",grow:!1,key:e.id},l.a.createElement(Ca,{disableActions:i,exceptionItem:e,isEndpoint:n,listAndReferences:null!=r?r[e.list_id]:null,onDeleteException:c,onEditException:u,dataTestSubj:"exceptionItemsViewerItem"}))))))));Na.displayName="ExceptionItemsViewerComponent";const Pa=l.a.memo(Na);Pa.displayName="ExceptionsViewerItems";var Ra=n(598),La=n(418),qa=n(807);const Ba=p()(a.EuiText).withConfig({displayName:"StyledText",componentId:"sc-h4xwnx-0"})(["font-style:italic;"]),za=["error"],$a=["loading","empty_search","empty","error","searching"],Va={pagination:{pageIndex:0,pageSize:25,totalItemCount:0,pageSizeOptions:[5,10,25,50,100,200,300]},exceptions:[],exceptionToEdit:null,currenFlyout:null,viewerState:"loading",isReadOnly:!0,lastUpdated:Date.now(),exceptionsToShow:{active:!0}},Ua=({rule:e,listTypes:t,isViewReadOnly:n,onRuleChange:r})=>{const{services:o}=Object(O.j)(),c=Object(O.n)(),[{canUserCRUD:u,hasIndexWrite:d}]=Object(Y.b)(),p=Object(s.useMemo)((()=>null!=e&&null!=e.exceptions_list?e.exceptions_list.filter((({type:e})=>t.includes(e))):[]),[t,e]),f=Object(s.useMemo)((()=>p.map((({id:e,list_id:t,namespace_type:n})=>({id:e,listId:t,namespaceType:n})))),[p]),g=Object(s.useMemo)((()=>1===t.length&&t[0]===m.b.ENDPOINT),[t]),[{exceptions:b,pagination:y,currenFlyout:h,exceptionToEdit:v,viewerState:E,isReadOnly:x,lastUpdated:j,exceptionsToShow:S},k]=Object(s.useReducer)(((e,t)=>{switch(t.type){case"setExceptions":{var n;const{exceptions:a,pagination:i}=t;return{...e,pagination:{...e.pagination,pageIndex:i.page-1,pageSize:i.perPage,totalItemCount:null!==(n=i.total)&&void 0!==n?n:0},exceptions:a}}case"updateExceptionToEdit":{const{exception:n}=t;return{...e,exceptionToEdit:n}}case"updateFlyoutOpen":return{...e,currenFlyout:t.flyoutType};case"setViewerState":return{...e,viewerState:t.state};case"setIsReadOnly":return{...e,isReadOnly:t.readOnly};case"setLastUpdateTime":return{...e,lastUpdated:t.lastUpdate};case"setExceptionsToShow":{const n={...e.exceptionsToShow,[t.optionId]:!e.exceptionsToShow[t.optionId]};return n.active||n.expired?{...e,exceptionsToShow:n}:{...e,exceptionsToShow:{active:!0}}}default:return e}}),{...Va}),w=Object(s.useCallback)((e=>{k({type:"setLastUpdateTime",lastUpdate:e})}),[k]),I=Object(s.useCallback)((({exceptions:e,pagination:t})=>{w(Date.now()),k({type:"setExceptions",exceptions:e,pagination:t})}),[k,w]),T=Object(s.useCallback)((e=>{k({type:"setViewerState",state:e})}),[k]),C=Object(s.useCallback)((e=>{k({type:"updateFlyoutOpen",flyoutType:e})}),[k]),M=Object(s.useCallback)((e=>{k({type:"setIsReadOnly",readOnly:e})}),[k]),A=Object(s.useCallback)((e=>{k({type:"setExceptionsToShow",optionId:e})}),[k]),[_,F,D,N]=Object(qa.a)();Object(s.useEffect)((()=>{null!=N&&f.length&&N(f)}),[f,N]),Object(s.useEffect)((()=>{F?T("error"):null==E&&_?T("loading"):"loading"!==E||_||T(null)}),[_,F,T,E]);const P=Object(s.useMemo)((()=>p.map((e=>e.namespace_type))),[p]),R=Object(s.useMemo)((()=>{if(g||S.active&&S.expired)return;const e=Object(an.m)({namespaceType:P});return S.active?Object(an.d)(e):S.expired?Object(an.e)(e):void 0}),[S,P,g]),L=Object(s.useCallback)((async e=>{var t;const n=new AbortController,a=null!=(null==e?void 0:e.pagination)?{page:(null!==(t=e.pagination.page)&&void 0!==t?t:0)+1,perPage:e.pagination.perPage}:{page:y.pageIndex+1,perPage:y.pageSize};if(0===p.length)return{data:[],pageIndex:y.pageIndex,itemsPerPage:y.pageSize,total:0};const{page:i,per_page:r,total:s,data:l}=await Object(nn.m)({filter:R,http:o.http,listIds:p.map((e=>e.list_id)),namespaceTypes:P,search:null==e?void 0:e.search,pagination:a,signal:n.signal});return{data:l.map((e=>Object(tn.b)(e))),pageIndex:i,itemsPerPage:r,total:s}}),[y.pageIndex,y.pageSize,p,o.http,R,P]),q=Object(s.useCallback)((async()=>{const e=new AbortController;if(0===p.length)return 0;const{total:t}=await Object(nn.m)({filter:void 0,http:o.http,listIds:p.map((e=>e.list_id)),namespaceTypes:P,pagination:{},signal:e.signal});return t}),[p,P,o.http]),B=Object(s.useCallback)((async e=>{try{const{pageIndex:t,itemsPerPage:n,total:a,data:i}=await L(e);T(a>0?null:"empty"),I({exceptions:i,pagination:{page:t,perPage:n,total:a}}),T(a>0?null:await q()>0?"empty_search":"empty")}catch(e){T("error"),c.addError(e,{title:pn,toastMessage:mn})}}),[L,I,T,c,q]),z=Object(s.useCallback)((async e=>{try{T("searching");const{pageIndex:t,itemsPerPage:n,total:a,data:i}=await L(e);T(a>0?null:"empty_search"),I({exceptions:i,pagination:{page:t,perPage:n,total:a}})}catch(e){c.addError(e,{title:fn,toastMessage:gn})}}),[L,I,T,c]),$=Object(s.useCallback)((e=>{A(e)}),[A]),V=Object(s.useCallback)((()=>{C("addException")}),[C]),U=Object(s.useCallback)((e=>{k({type:"updateExceptionToEdit",exception:e}),C("editException")}),[C]),G=Object(s.useCallback)((e=>{C(null),e&&null!=r&&r()}),[r,C]),H=Object(s.useCallback)((e=>{C(null),e&&null!=r&&r(),B()}),[C,B,r]),W=Object(s.useCallback)((async({id:e,name:t,namespaceType:n})=>{const a=new AbortController;try{T("deleting"),await Object(nn.e)({http:o.http,id:e,namespaceType:n,signal:a.signal}),c.addSuccess({title:hn,text:(r=t,i.i18n.translate("xpack.securitySolution.ruleExceptions.allExceptionItems.exceptionItemDeleteSuccessText",{values:{itemName:r},defaultMessage:'"{itemName}" deleted successfully.'}))}),await B()}catch(e){T("error"),c.addError(e,{title:bn})}var r}),[B,o.http,T,c]);Object(s.useEffect)((()=>{M(n||!u||!d)}),[M,n,u,d]),Object(s.useEffect)((()=>{p.length>0?B():T("empty")}),[p.length,B,T]);const Q=Object(s.useMemo)((()=>null!=D&&null!=v?D[v.list_id]:null),[D,v]);return l.a.createElement(l.a.Fragment,null,"editException"===h&&null!=Q&&null!=v&&null!=e&&l.a.createElement(Ra.a,{rule:e,list:Q,itemToEdit:v,showAlertCloseOptions:!0,onCancel:G,onConfirm:H,"data-test-subj":"editExceptionItemFlyout"}),"addException"===h&&null!=e&&l.a.createElement(La.a,{rules:[e],isBulkAction:!1,isEndpointItem:g,onCancel:G,onConfirm:H,"data-test-subj":"addExceptionItemFlyout",showAlertCloseOptions:!0}),l.a.createElement(a.EuiPanel,{hasBorder:!1,hasShadow:!1},l.a.createElement(l.a.Fragment,null,l.a.createElement(Ba,{size:"s"},g?vn:En),l.a.createElement(a.EuiSpacer,{size:"l"}),!za.includes(E)&&l.a.createElement(l.a.Fragment,null,l.a.createElement(Pn,{pagination:y,exceptionsToShow:S,onChangeExceptionsToShow:$,lastUpdated:j,isEndpoint:g}),l.a.createElement(a.EuiSpacer,{size:"m"}),l.a.createElement(Tn,{canAddException:x,isEndpoint:g,isSearching:"searching"===E,onSearch:z,onAddExceptionClick:V})),l.a.createElement(a.EuiSpacer,{size:"l"}),l.a.createElement(Pa,{isReadOnly:x,disableActions:x||"deleting"===E,exceptions:b,isEndpoint:g,ruleReferences:D,viewerState:E,onDeleteException:W,onEditExceptionItem:U,onCreateExceptionListItem:V}),!$a.includes(E)&&l.a.createElement(Mn,{onPaginationChange:B,pagination:y}))))};Ua.displayName="ExceptionsViewerComponent";const Ga=l.a.memo(Ua);Ga.displayName="ExceptionsViewer";var Ha=n(123);function Wa({ruleId:e,disabled:t=!1,disabledReason:n}){const{application:{navigateToApp:i}}=Object(O.j)().services,r=Object(s.useCallback)((t=>{t.preventDefault(),i(se.l,{deepLinkId:ke.a.rules,path:Object(k.b)(e)})}),[i,e]);return l.a.createElement(a.EuiToolTip,{position:"top",content:n},l.a.createElement(Ha.l,{"data-test-subj":"editRuleSettingsLink",onClick:r,iconType:"controlsHorizontal",isDisabled:t,deepLinkId:ke.a.rules,path:Object(k.b)(e)},ye.Cb))}var Qa=n(1052),Ya=n(1113),Ka=n(1114),Xa=n(863),Ja=n(752),Za=n(956),ei=n(213);const ti=p.a.div.withConfig({displayName:"StyledFullHeightContainer",componentId:"sc-fdhtli-0"})(["display:flex;flex-direction:column;flex:1 1 auto;"]),ni=p.a.div.withConfig({displayName:"StyledMinHeightTabContainer",componentId:"sc-fdhtli-1"})(["min-height:800px;"]);let ai;!function(e){e.alerts="alerts",e.exceptions="rule_exceptions",e.endpointExceptions="endpoint_exceptions",e.executionResults="execution_results",e.executionEvents="execution_events"}(ai||(ai={}));const ii={[ai.alerts]:Ht.a,[ai.exceptions]:Qt.e,[ai.endpointExceptions]:Qt.d,[ai.executionResults]:Qt.g,[ai.executionEvents]:Qt.f},ri=({clearEventsDeleted:e,clearEventsLoading:t,clearSelected:n})=>{var d,p,M,A,_,F,D;const{data:N,application:{navigateToApp:P,capabilities:{actions:R}},timelines:L,spaces:q}=Object(O.j)().services,B=Object(u.useDispatch)(),z=Object(s.useRef)(null),$=Object(s.useMemo)((()=>g.j.getTableByIdSelector()),[]),V=Object(j.b)((e=>{var t;return(null!==(t=$(e,g.e.alertsOnRuleDetailsPage))&&void 0!==t?t:g.q).graphEventId})),U=Object(j.b)((e=>{var t;return(null!==(t=$(e,g.e.alertsOnRuleDetailsPage))&&void 0!==t?t:g.q).updated})),H=Object(j.b)((e=>{var t;return(null!==(t=$(e,g.e.alertsOnRuleDetailsPage))&&void 0!==t?t:g.q).isLoading})),W=Object(s.useMemo)((()=>re.d.globalFiltersQuerySelector()),[]),le=Object(s.useMemo)((()=>re.d.globalQuerySelector()),[]),ce=Object(j.a)(le),de=Object(j.a)(W),{to:pe,from:fe}=Object(ie.a)(),[{loading:ge,isSignalIndexExists:be,isAuthenticated:he,hasEncryptionKey:ve,canUserCRUD:Ee,hasIndexRead:Fe,signalIndexName:De,hasIndexWrite:Ne,hasIndexMaintenance:Pe}]=Object(Y.b)(),{loading:Re,needsConfiguration:Le}=Object(T.a)(),{indexPattern:qe,runtimeMappings:Be,loading:ze}=Object(Ce.d)(Me.SourcererScopeName.detections),$e=ge||Re,{detailName:Ve}=Object(c.useParams)(),{rule:Ue,refresh:Ge,loading:We,isExistingRule:Qe}=Object(Xt.a)(Ve),{pollForSignalIndex:Ye}=Object(Zt.a)(),[Ke,Xe]=Object(s.useState)(null),Je=We&&null==Ke,{starting:Ze,startMlJobs:et}=Object(Qa.a)(),tt=Object(s.useCallback)((async()=>{await et(null==Ke?void 0:Ke.machine_learning_job_id)}),[Ke,et]),nt=Object(s.useMemo)((()=>({[ai.alerts]:{id:ai.alerts,name:ii[ai.alerts],disabled:!1,href:`/rules/id/${Ve}/${ai.alerts}`},[ai.exceptions]:{id:ai.exceptions,name:ii[ai.exceptions],disabled:null==Ke,href:`/rules/id/${Ve}/${ai.exceptions}`},[ai.endpointExceptions]:{id:ai.endpointExceptions,name:ii[ai.endpointExceptions],disabled:null==Ke,href:`/rules/id/${Ve}/${ai.endpointExceptions}`},[ai.executionResults]:{id:ai.executionResults,name:ii[ai.executionResults],disabled:!Qe,href:`/rules/id/${Ve}/${ai.executionResults}`},[ai.executionEvents]:{id:ai.executionEvents,name:ii[ai.executionEvents],disabled:!Qe,href:`/rules/id/${Ve}/${ai.executionEvents}`}})),[Qe,Ke,Ve]),[at,it]=Object(s.useState)(nt),[rt,ot,st]=Object(ue.a)(),[lt,ct,ut]=Object(Xa.a)({onInit:ot,onFinish:st}),{aboutRuleData:dt,modifiedAboutRuleDetailsData:pt,defineRuleData:mt,scheduleRuleData:ft,ruleActionsData:gt}=null!=Ke?Object(ne.g)({rule:Ke,detailsView:!0}):{aboutRuleData:null,modifiedAboutRuleDetailsData:null,defineRuleData:null,scheduleRuleData:null,ruleActionsData:null},[bt,yt]=Object(s.useState)();Object(s.useEffect)((()=>{(async()=>{if(null!=(null==mt?void 0:mt.dataViewId)&&""!==(null==mt?void 0:mt.dataViewId)){const e=await N.dataViews.get(null==mt?void 0:mt.dataViewId);yt(e.title)}})()}),[N.dataViews,null==mt?void 0:mt.dataViewId]);const{indexPattern:ht}=Object(Za.b)({dataSourceType:null!==(d=null==mt?void 0:mt.dataSourceType)&&void 0!==d?d:ei.a.IndexPatterns,index:null!==(p=null==mt?void 0:mt.index)&&void 0!==p?p:[],dataViewId:null==mt?void 0:mt.dataViewId}),{showBuildingBlockAlerts:vt,setShowBuildingBlockAlerts:Et,showOnlyThreatIndicatorAlerts:xt}=Object(h.a)(g.e.alertsOnRuleDetailsPage),jt=Object(je.a)(),{globalFullScreen:Ot}=Object(we.a)(),[St,kt]=Object(s.useState)(g.c),{isSavedQueryLoading:wt,savedQueryBar:It}=Object(Wt.a)({savedQueryId:null==Ke?void 0:Ke.saved_id,ruleType:null==Ke?void 0:Ke.type}),Tt=Object(Se.a)(jt)&&Object(Oe.a)(jt),Ct=Object(s.useMemo)((()=>!(null!=(null==Ke?void 0:Ke.actions)&&(null==Ke?void 0:Ke.actions.length)>0&&Object(me.d)(R.show))||R.show),[R,null==Ke?void 0:Ke.actions]),Mt=Object(s.useCallback)((()=>{P(se.l,{deepLinkId:ke.a.rules,path:Object(k.c)(null!=Ve?Ve:"","alerts","")})}),[P,Ve]);Object(s.useEffect)((()=>{null!=Ue&&Xe(Ue)}),[Ue]),Object(s.useEffect)((()=>{if(Ke){const e=Ke.outcome;if(q&&"aliasMatch"===e){const e=`rules/id/${Ke.id}${window.location.search}${window.location.hash}`;q.ui.redirectLegacyUrl({path:e,aliasPurpose:Ke.alias_purpose,objectNoun:i.i18n.translate("xpack.triggersActionsUI.sections.ruleDetails.redirectObjectNoun",{defaultMessage:"rule"})})}}}),[Ke,q]);const At=Object(s.useMemo)((()=>{if(null!=(null==Ke?void 0:Ke.alias_target_id)&&q&&"conflict"===Ke.outcome){const e=Ke.alias_target_id,t=`rules/id/${e}${window.location.search}${window.location.hash}`;return l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiSpacer,null),q.ui.components.getLegacyUrlConflict({objectNoun:i.i18n.translate("xpack.triggersActionsUI.sections.ruleDetails.redirectObjectNoun",{defaultMessage:"rule"}),currentObjectId:Ke.id,otherObjectId:e,otherObjectPath:t}))}return null}),[Ke,q]),_t=Object(_e.e)();Object(s.useEffect)((()=>{const e=[];var t;(Fe||e.push(ai.alerts),_t.extendedLogging.isEnabled||e.push(ai.executionEvents),null!=Ke)&&((null!==(t=Ke.exceptions_list)&&void 0!==t?t:[]).some((e=>e.type===m.b.ENDPOINT))||e.push(ai.endpointExceptions));const n=Object(o.omit)(e,nt);it(n)}),[Fe,Ke,nt,_t]);const Ft=Object(s.useMemo)((()=>ze||H||$e),[ze,H,$e]),Dt=Object(s.useMemo)((()=>l.a.createElement(l.a.Fragment,null,null==Ke?void 0:Ke.name," ",We&&l.a.createElement(a.EuiLoadingSpinner,{size:"m"}))),[Ke,We]),Nt=Object(s.useMemo)((()=>We||Qe?void 0:{text:Qt.a,color:"default"}),[Qe,We]),Pt=Object(s.useMemo)((()=>Ke?[l.a.createElement(ae.a,{createdBy:null==Ke?void 0:Ke.created_by,createdAt:null==Ke?void 0:Ke.created_at}),null!=(null==Ke?void 0:Ke.updated_by)?l.a.createElement(ae.b,{updatedBy:null==Ke?void 0:Ke.updated_by,updatedAt:null==Ke?void 0:Ke.updated_at}):""]:We?l.a.createElement(a.EuiLoadingSpinner,{size:"m"}):null),[Ke,We]),Rt=Object(s.useCallback)((a=>{const i=g.e.alertsOnRuleDetailsPage;t({id:i}),e({id:i}),n({id:i}),kt(a)}),[t,e,n,kt]);Object(s.useEffect)((()=>{Et(null!=(null==Ke?void 0:Ke.building_block_type))}),[Ke,Et]);const Lt=Object(s.useMemo)((()=>{var e;return[...Object(Z.c)(null!==(e=null==Ke?void 0:Ke.rule_id)&&void 0!==e?e:""),...Object(Z.d)(vt),...Object(Z.a)(St),...Object(Z.e)(xt)]}),[Ke,vt,xt,St]),qt=Object(s.useMemo)((()=>[...Lt,...de]),[Lt,de]),Bt=null==Ke||null===(M=Ke.execution_summary)||void 0===M?void 0:M.last_execution,zt=null==Bt?void 0:Bt.status,$t=null!==(A=null==Bt?void 0:Bt.date)&&void 0!==A?A:"",Vt=null!==(_=null==Bt?void 0:Bt.message)&&void 0!==_?_:"",Ut=Object(s.useMemo)((()=>l.a.createElement(l.a.Fragment,null,We?l.a.createElement(a.EuiFlexItem,null,l.a.createElement(a.EuiLoadingSpinner,{size:"m","data-test-subj":"rule-status-loader"})):l.a.createElement(Ae.a,{status:zt,date:$t},l.a.createElement(a.EuiButtonIcon,{"data-test-subj":"ruleLastExecutionStatusRefreshButton",color:"primary",onClick:Ge,iconType:"refresh","aria-label":ye.dc,isDisabled:!Qe})),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(Ja.a,{ruleId:Ve,showTooltipInline:!0})))),[Ve,zt,$t,We,Qe,Ge]),Ht=Object(s.useMemo)((()=>We?l.a.createElement(a.EuiFlexItem,null,l.a.createElement(a.EuiLoadingSpinner,{size:"m","data-test-subj":"rule-status-loader"})):l.a.createElement(Ae.c,{status:zt,date:$t,message:Vt})),[zt,$t,Vt,We]),tn=Object(s.useCallback)((({x:e})=>{if(!e)return;const[t,n]=e;B(Object(oe.setAbsoluteRangeDatePicker)({id:x.a.global,from:new Date(t).toISOString(),to:new Date(n).toISOString()}))}),[B]),nn=Object(s.useCallback)((e=>{Xe((t=>t?{...t,enabled:e}:t))}),[]),an=Object(s.useCallback)((()=>{Object(Te.j)(z.current)}),[z]),rn=Object(s.useCallback)((()=>{Object(Te.m)()}),[]),on=Object(s.useCallback)((e=>{Object(f.isTab)(e)&&Object(Te.l)({containerElement:z.current,keyboardEvent:e,onSkipFocusBeforeEventsTable:an,onSkipFocusAfterEventsTable:rn})}),[z,an,rn]),sn=Object(s.useMemo)((()=>[St]),[St]),ln=Object(s.useMemo)((()=>L.getLastUpdated({updatedAt:U||Date.now(),showUpdating:Ft})),[U,Ft,L]),cn=Object(s.useCallback)((e=>l.a.createElement(b.a,{configId:se.e.RULE_DETAILS,flyoutSize:"m",inputFilters:[...qt,...e],tableId:g.e.alertsOnRuleDetailsPage,onRuleChange:Ge})),[qt,Ge]),{isBulkDuplicateConfirmationVisible:un,showBulkDuplicateConfirmation:dn,cancelRuleDuplication:pn,confirmRuleDuplication:mn}=Object(Ya.a)();if(Object(ne.h)(be,he,ve,Le))return P(se.l,{deepLinkId:ke.a.alerts,path:Object(k.a)()}),null;const fn=null!=gt&&gt.actions.length>0,gn=null!=gt&&(gt.responseActions||[]).length>0,bn=fn||gn;return l.a.createElement(l.a.Fragment,null,l.a.createElement(Yt.a,null),l.a.createElement(Kt.a,null),un&&l.a.createElement(Ka.a,{onCancel:pn,onConfirm:mn,rulesCount:1}),rt&&l.a.createElement(a.EuiConfirmModal,{title:ye.Vc,onCancel:ut,onConfirm:ct,confirmButtonText:ye.wb,cancelButtonText:ye.vb,buttonColor:"danger",defaultFocusedButton:"confirm","data-test-subj":"deleteRulesConfirmationModal"},Qt.b),l.a.createElement(ti,{onKeyDown:on,ref:z},l.a.createElement(a.EuiWindowEvent,{event:"resize",handler:o.noop}),l.a.createElement(S.a,{show:Object(Te.n)({globalFullScreen:Ot,graphEventId:V})},l.a.createElement(w.a,{id:x.a.global,pollForSignalIndex:Ye,indexPattern:qe})),l.a.createElement(He,null,l.a.createElement(I.a,{noPadding:Ot},l.a.createElement(Ie.a,{show:!Ot},l.a.createElement(en.a,{border:!0,subtitle:Pt,subtitle2:l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiFlexGroup,{gutterSize:"xs",alignItems:"center",justifyContent:"flexStart"},l.a.createElement(a.EuiFlexItem,{grow:!1},Ae.d.STATUS,":"),Ut)),title:Dt,badgeOptions:Nt},l.a.createElement(a.EuiFlexGroup,{alignItems:"center"},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiToolTip,{position:"top",content:Object(me.b)(Ke,Tt,Ct,Ee)},l.a.createElement(a.EuiFlexGroup,null,l.a.createElement(ee.a,{id:null!==(F=null==Ke?void 0:Ke.id)&&void 0!==F?F:"-1",isDisabled:!Qe||!Object(me.a)(Ke,Ct)||!Object(me.c)(Ee)||Object(v.d)(null==Ke?void 0:Ke.type)&&!Tt,enabled:Qe&&null!==(D=null==Ke?void 0:Ke.enabled)&&void 0!==D&&D,startMlJobsIfNeeded:tt,onChange:nn}),l.a.createElement(a.EuiFlexItem,null,Qt.c)))),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",responsive:!1},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(Wa,{ruleId:Ve,disabled:!Qe||!Object(me.c)(Ee)||Object(v.d)(null==Ke?void 0:Ke.type)&&!Tt,disabledReason:Object(me.b)(Ke,Tt,Ct,Ee)})),l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(xe,{rule:Ke,userHasPermissions:Qe&&Object(me.c)(Ee),canDuplicateRuleWithActions:Object(me.a)(Ke,Ct),showBulkDuplicateExceptionsConfirmation:dn,confirmDeletion:lt})))))),Ht,At,l.a.createElement(a.EuiSpacer,null),l.a.createElement(a.EuiFlexGroup,null,l.a.createElement(a.EuiFlexItem,{"data-test-subj":"aboutRule",component:"section",grow:1},l.a.createElement(G,{loading:Je,stepData:dt,stepDataDetails:pt})),l.a.createElement(a.EuiFlexItem,{grow:1},l.a.createElement(a.EuiFlexGroup,{direction:"column"},l.a.createElement(a.EuiFlexItem,{component:"section",grow:1,"data-test-subj":"defineRule"},l.a.createElement(te.a,{loading:Je||wt,title:ye.tb},null!=mt&&!wt&&!Ze&&l.a.createElement(K.c,{addPadding:!1,descriptionColumns:"singleSplit",defaultValues:{dataViewTitle:bt,...mt,queryBar:null!=It?It:mt.queryBar},indexPattern:ht}))),l.a.createElement(a.EuiSpacer,null),l.a.createElement(a.EuiFlexItem,{"data-test-subj":"schedule",component:"section",grow:1},l.a.createElement(te.a,{loading:Je,title:ye.Mc},null!=ft&&l.a.createElement(X.b,{addPadding:!1,descriptionColumns:"singleSplit",defaultValues:ft}))),bn&&l.a.createElement(a.EuiFlexItem,{"data-test-subj":"actions",component:"section",grow:1},l.a.createElement(te.a,{loading:Je,title:ye.c},l.a.createElement(J.b,{addPadding:!1,defaultValues:gt})))))),l.a.createElement(a.EuiSpacer,null),l.a.createElement(E.a,{navTabs:at}),l.a.createElement(a.EuiSpacer,null)),l.a.createElement(ni,null,l.a.createElement(r.c,null,l.a.createElement(r.a,{path:`/rules/id/:detailName/:tabName(${ai.alerts})`},l.a.createElement(l.a.Fragment,null,l.a.createElement(a.EuiFlexGroup,{alignItems:"center",justifyContent:"spaceBetween"},l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(Jt.a,{status:St,onFilterGroupChanged:Rt})),l.a.createElement(a.EuiFlexItem,{grow:!1},ln)),l.a.createElement(a.EuiSpacer,{size:"l"}),l.a.createElement(Ie.a,{show:!Ot},l.a.createElement(Q.a,{filters:qt,query:ce,signalIndexName:De,defaultStackByOption:"event.category",updateDateRange:tn,runtimeMappings:Be}),l.a.createElement(a.EuiSpacer,null)),null!=Ve&&l.a.createElement(y.a,{currentAlertStatusFilterValue:sn,defaultFilters:qt,from:fe,globalFilters:de,globalQuery:ce,hasIndexMaintenance:null!=Pe&&Pe,hasIndexWrite:null!=Ne&&Ne,loading:$e,renderChildComponent:cn,runtimeMappings:Be,signalIndexName:De,tableId:g.e.alertsOnRuleDetailsPage,to:pe}))),l.a.createElement(r.a,{path:`/rules/id/:detailName/:tabName(${ai.exceptions})`},l.a.createElement(Ga,{rule:Ke,listTypes:[m.b.DETECTION,m.b.RULE_DEFAULT],onRuleChange:Ge,isViewReadOnly:!Qe,"data-test-subj":"exceptionTab"})),l.a.createElement(r.a,{path:`/rules/id/:detailName/:tabName(${ai.endpointExceptions})`},l.a.createElement(Ga,{rule:Ke,listTypes:[m.b.ENDPOINT],onRuleChange:Ge,isViewReadOnly:!Qe,"data-test-subj":"endpointExceptionsTab"})),l.a.createElement(r.a,{path:`/rules/id/:detailName/:tabName(${ai.executionResults})`},l.a.createElement(Gt,{ruleId:Ve,selectAlertsTab:Mt})),l.a.createElement(r.a,{path:`/rules/id/:detailName/:tabName(${ai.executionEvents})`},l.a.createElement(_e.a,{ruleId:Ve}))))))),l.a.createElement(C.a,{pageName:ke.a.rules,state:{ruleName:null==Ke?void 0:Ke.name,isExistingRule:Qe}}))},oi=Object(u.connect)(null,(e=>({clearSelected:({id:t})=>e(g.h.clearSelected({id:t})),clearEventsLoading:({id:t})=>e(g.h.clearEventsLoading({id:t})),clearEventsDeleted:({id:t})=>e(g.h.clearEventsDeleted({id:t}))})));ri.displayName="RuleDetailsPageComponent";const si=oi(l.a.memo(ri));si.displayName="RuleDetailsPage"},function(e,t,n){"use strict";n.d(t,"a",(function(){return k})),n.d(t,"c",(function(){return h})),n.d(t,"b",(function(){return le})),n.d(t,"d",(function(){return me}));var a=n(54),i=n(42),r=n(2),o=n.n(r),s=n(142),l=n(573),c=n(40),u=n(568),d=n(461),p=n(821);const m=({showAlertDetails:e,isolateAction:t})=>o.a.createElement(o.a.Fragment,null,o.a.createElement(c.EuiButtonEmpty,{iconType:"arrowLeft",iconSide:"left",flush:"left",onClick:e},o.a.createElement(c.EuiText,{size:"xs"},o.a.createElement("p",null,p.a))),o.a.createElement(c.EuiTitle,null,o.a.createElement("h2",null,"isolateHost"===t?d.b:d.d))),f=o.a.memo(m),g=({eventId:e,eventIndex:t,isAlert:n,isHostIsolationPanelOpen:a,isolateAction:i,loading:r,promptContextId:s,ruleName:l,showAlertDetails:c,timestamp:d})=>o.a.createElement(o.a.Fragment,null,a?o.a.createElement(f,{isolateAction:i,showAlertDetails:c}):o.a.createElement(u.b,{eventId:e,eventIndex:t,isAlert:n,loading:r,promptContextId:s,ruleName:l,timestamp:d})),b=o.a.memo(g),y=({eventId:e,eventIndex:t,isAlert:n,isHostIsolationPanelOpen:a,isolateAction:i,loading:r,promptContextId:s,ruleName:l,showAlertDetails:u,timestamp:d})=>o.a.createElement(c.EuiFlyoutHeader,{hasBorder:a},o.a.createElement(g,{eventId:e,eventIndex:t,isAlert:n,isHostIsolationPanelOpen:a,isolateAction:i,loading:r,promptContextId:s,ruleName:l,showAlertDetails:u,timestamp:d})),h=o.a.memo(y);var v=n(41),E=n.n(v),x=n(399),j=n(748);const O=E()(c.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-p7dcu3-0"})([".euiFlyoutBody__overflow{display:flex;flex:1;overflow:hidden;.euiFlyoutBody__overflowContent{flex:1;overflow:hidden;padding:",";}}"],(({theme:e})=>`0 ${e.eui.euiSizeM} ${e.eui.euiSizeM}`)),S=({alertId:e,browserFields:t,detailsData:n,detailsEcsData:a,event:i,handleIsolationActionSuccess:r,handleOnEventClosed:s,hostName:l,isAlert:c,isDraggable:d,isReadOnly:p,isolateAction:m,isHostIsolationPanelOpen:f,isIsolateActionSuccessBannerVisible:g,loading:b,rawEventData:y,showAlertDetails:h,scopeId:v})=>o.a.createElement(O,null,g&&o.a.createElement(x.c,{hostName:l,alertId:e,isolateAction:m}),f?o.a.createElement(j.a,{details:n,cancelCallback:h,successCallback:r,isolateAction:m}):o.a.createElement(u.a,{browserFields:t,detailsData:n,detailsEcsData:a,event:i,isAlert:c,isDraggable:d,loading:b,rawEventData:y,scopeId:v,timelineTabType:"flyout",handleOnEventClosed:s,isReadOnly:p})),k=o.a.memo(S);var w=n(104),I=n.n(w),T=n(103),C=n(115),M=n(119),A=n(291),_=n(199),F=n(44),D=n(126),N=n(319),P=n(350),R=n(1132),L=n(1096),q=n(823),B=n(558),z=n(500),$=n(824),V=n(932),U=n(185),G=n(8),H=n(239),W=n(1384),Q=n(228);var Y=n(124),K=n(887),X=n(102),J=n(805),Z=n(825);const ee=o.a.memo((({detailsData:e,ecsData:t,handleOnEventClosed:n,isHostIsolationPanelOpen:a,loadingEventDetails:i,onAddEventFilterClick:s,onAddExceptionTypeClick:l,onAddIsolationStatusClick:u,refetch:p,refetchFlyoutData:m,onOsqueryClick:f,scopeId:g})=>{var b;const y=Object(Y.a)("tGridEnabled"),{loading:h,canWriteEventFilters:v}=Object(D.a)().endpointPrivileges,E=Object(r.useMemo)((()=>!h&&v),[v,h]),{osquery:x}=Object(X.j)().services,[j,O]=Object(r.useState)(!1),S=Object(r.useMemo)((()=>[{category:"kibana",field:"kibana.alert.rule.uuid",name:"ruleId"},{category:"kibana",field:"kibana.alert.rule.name",name:"ruleName"},{category:"kibana",field:"kibana.alert.workflow_status",name:"alertStatus"},{category:"event",field:"event.kind",name:"eventKind"},{category:"_id",field:"_id",name:"eventId"}].reduce(((t,n)=>({...t,[n.name]:Object(P.a)({category:n.category,field:n.field},e)})),{})),[e]),k="event"===S.eventKind,w=Object(r.useMemo)((()=>{var e,n;return null==t||null===(e=t.agent)||void 0===e||null===(n=e.type)||void 0===n?void 0:n.includes("endpoint")}),[t]),I=Object(r.useMemo)((()=>k&&w),[k,w]),T=Object(r.useMemo)((()=>Object(P.a)({category:"agent",field:"agent.id"},e)),[e]),ee=Object(r.useCallback)((()=>{O(!j)}),[j]),te=Object(r.useCallback)((()=>{O(!1)}),[]),ne=Object(r.useCallback)((()=>{n(),O(!1)}),[n]),ae=Object(r.useCallback)((e=>{u(e),O(!1)}),[u]),ie=(({closePopover:e,detailsData:t,isHostIsolationPanelOpen:n,onAddIsolationStatusClick:a})=>{const{canIsolateHost:i,canUnIsolateHost:o}=Object(D.a)().endpointPrivileges,s=Object(r.useMemo)((()=>Object(N.b)({data:t||[]})),[t]),l=Object(r.useMemo)((()=>Object(P.a)({category:"agent",field:"agent.id"},t)),[t]),c=Object(r.useMemo)((()=>Object(P.a)({category:"host",field:"host.os.name"},t)),[t]),u=Object(r.useMemo)((()=>Object(P.a)({category:"agent",field:"agent.version"},t)),[t]),{loading:p,isIsolated:m,agentStatus:f,capabilities:g}=(({agentId:e})=>{const[t,n]=Object(r.useState)(!1),[a,i]=Object(r.useState)([]),[o,s]=Object(r.useState)(),[l,c]=Object(r.useState)(0),[u,d]=Object(r.useState)(0),[p,m]=Object(r.useState)(!1);return Object(r.useEffect)((()=>{const t=new AbortController;let a,r=!0;return m(!0),Object(G.isEmpty)(e)||(async()=>{try{const o=await Object(H.g)({agentId:e,signal:t.signal});r&&(n(Object(Q.b)(o.metadata)),o.metadata.Endpoint.capabilities&&i([...o.metadata.Endpoint.capabilities]),s(o.host_status),a=o.metadata.elastic.agent.id)}catch(e){if("AbortError"===e.name)return;r&&400===e.body.statusCode&&s(U.c.UNENROLLED)}try{const{data:e}=await Object(W.a)(a);var o,l,u,p;r&&(c(null!==(o=null===(l=e[0].pending_actions)||void 0===l?void 0:l.isolate)&&void 0!==o?o:0),d(null!==(u=null===(p=e[0].pending_actions)||void 0===p?void 0:p.unisolate)&&void 0!==u?u:0))}catch(e){return}r&&m(!1)})(),()=>{r=!1,t.abort()}}),[e]),{loading:p,capabilities:a,isIsolated:t,agentStatus:o,pendingIsolation:l,pendingUnisolation:u}})({agentId:l}),b=Object(r.useMemo)((()=>!!s&&Object(V.a)({osName:c,version:u,capabilities:g})),[u,g,c,s]),y=Object(r.useCallback)((()=>{e(),a(m?"unisolateHost":"isolateHost")}),[e,m,a]);return Object(r.useMemo)((()=>{if(!s||!b||p||n)return[];const e=[{key:"isolate-host-action-item","data-test-subj":"isolate-host-action-item",disabled:f===U.c.UNENROLLED,onClick:y,name:m?d.d:d.b}];return i||m&&o?e:[]}),[s,b,p,n,f,y,i,m,o])})({closePopover:te,detailsData:e,onAddIsolationStatusClick:ae,isHostIsolationPanelOpen:a}),re=((e,t)=>{const{loading:n,canAccessResponseConsole:a}=Object(D.a)().endpointPrivileges,i=Object(r.useMemo)((()=>Object(N.c)(e||[])),[e]),s=Object(r.useMemo)((()=>Object(P.a)({category:"agent",field:"agent.id"},e)),[e]),{handleResponseActionsClick:l,isDisabled:c,tooltip:u}=Object(R.a)({endpointId:s,onClick:t});return Object(r.useMemo)((()=>{const e=[];return!n&&a&&i&&e.push({key:"endpointResponseActions-action-item","data-test-subj":"endpointResponseActions-action-item",disabled:c,toolTipContent:u,size:"s",onClick:l,name:o.a.createElement(F.FormattedMessage,{id:"xpack.securitySolution.endpoint.detections.takeAction.responseActionConsole.buttonLabel",defaultMessage:"Respond"})}),e}),[a,l,i,n,c,u])})(e,te),oe=Object(r.useCallback)((e=>{l(e),O(!1)}),[l]),{exceptionActionItems:se}=Object(q.a)({isEndpointAlert:Object(N.a)({ecsData:t}),onAddExceptionTypeClick:oe}),le=Object(r.useCallback)((()=>{s(),O(!1)}),[s]),{eventFilterActionItems:ce}=Object($.a)({onAddEventFilterClick:le}),ue=Object(r.useCallback)((()=>{te()}),[te]),{actionItems:de}=Object(B.a)({alertStatus:S.alertStatus,closePopover:ne,eventId:S.eventId,refetch:p,scopeId:g}),{alertTagsItems:pe,alertTagsPanels:me}=Object(Z.a)({closePopover:te,ecsRowData:null!=t?t:{_id:S.eventId},refetch:p}),{investigateInTimelineActionItems:fe}=Object(z.a)({ecsRowData:t,onInvestigateInTimelineAlertClick:te}),ge=null==x?void 0:x.isOsqueryAvailable({agentId:T}),be=Object(r.useCallback)((()=>{f(T),O(!1)}),[f,O,T]),ye=Object(r.useMemo)((()=>Object(J.a)({handleClick:be})),[be]),he=Object(r.useMemo)((()=>!k&&S.ruleId?[...de,...pe,...se]:I&&E?ce:[]),[ce,I,E,se,de,k,S.ruleId,pe]),ve=[M.e.alertsOnAlertsPage,M.e.alertsOnRuleDetailsPage].includes(g),{addToCaseActionItems:Ee,handleAddToNewCaseClick:xe}=Object(K.a)({ecsData:t,nonEcsData:null!==(b=null==e?void 0:e.map((e=>({field:e.field,value:e.values}))))&&void 0!==b?b:[],onMenuItemClick:ue,onSuccess:m,isActiveTimelines:Object(C.isActiveTimeline)(g),isInDetections:ve,refetch:p}),je=Object(r.useMemo)((()=>[...y?Ee:[],...he,...ie,...re,...ge?[ye]:[],...fe]),[y,Ee,he,ie,re,ge,ye,fe]),Oe=[{id:0,items:je},...me],Se=Object(r.useMemo)((()=>o.a.createElement(A.a,{onClick:xe,step:_.a.addAlertToCase,tourId:_.b.alertsCases},o.a.createElement(c.EuiButton,{"data-test-subj":"take-action-dropdown-btn",fill:!0,iconSide:"right",iconType:"arrowDown",onClick:ee},L.d))),[xe,ee]);return je.length&&!i&&t?o.a.createElement(c.EuiPopover,{id:"AlertTakeActionPanel",button:Se,isOpen:j,closePopover:te,panelPaddingSize:"none",anchorPosition:"downLeft",repositionOnScroll:!0},o.a.createElement(c.EuiContextMenu,{size:"s",initialPanelId:0,panels:Oe,"data-test-subj":"takeActionPanelMenu"})):null}));var te=n(826),ne=n(875),ae=n(876),ie=n(831),re=n(122),oe=n(511);const se=o.a.memo((({detailsData:e,detailsEcsData:t,handleOnEventClosed:n,isHostIsolationPanelOpen:a,isReadOnly:s,loadingEventDetails:l,onAddIsolationStatusClick:u,scopeId:d,globalQuery:p,timelineQuery:m,refetchFlyoutData:f})=>{var g;const b=null!=t&&null!==(g=t.kibana)&&void 0!==g&&g.alert?null==t?void 0:t._id:null,y=Object(r.useMemo)((()=>{var t,n,a;return null!==(t=null===(n=Object(i.find)({category:"signal",field:"signal.rule.index"},e))||void 0===n?void 0:n.values)&&void 0!==t?t:null===(a=Object(i.find)({category:"kibana",field:"kibana.alert.rule.parameters.index"},e))||void 0===a?void 0:a.values}),[e]),h=Object(r.useMemo)((()=>Array.isArray(y)?y:void 0),[y]),v=Object(r.useMemo)((()=>{var t,n,a;return null!==(t=null===(n=Object(i.find)({category:"signal",field:"signal.rule.data_view_id"},e))||void 0===n?void 0:n.values)&&void 0!==t?t:null===(a=Object(i.find)({category:"kibana",field:"kibana.alert.rule.parameters.data_view_id"},e))||void 0===a?void 0:a.values}),[e]),E=Object(r.useMemo)((()=>Array.isArray(v)?v[0]:void 0),[v]),x=Object(r.useMemo)((()=>[{category:"signal",field:"signal.rule.id",name:"ruleId"},{category:"signal",field:"signal.rule.rule_id",name:"ruleRuleId"},{category:"signal",field:"signal.rule.name",name:"ruleName"},{category:"signal",field:"kibana.alert.workflow_status",name:"alertStatus"},{category:"_id",field:"_id",name:"eventId"}].reduce(((t,n)=>({...t,[n.name]:Object(P.a)({category:n.category,field:n.field},e)})),{})),[e]),j=e=>{e.forEach((e=>e.refetch&&e.refetch()))},O=Object(r.useCallback)((()=>{Object(C.isActiveTimeline)(d)?j([m]):j(p)}),[d,m,p]),{exceptionFlyoutType:S,openAddExceptionFlyout:k,onAddExceptionTypeClick:w,onAddExceptionCancel:T,onAddExceptionConfirm:M}=Object(te.a)({refetch:O,isActiveTimelines:Object(C.isActiveTimeline)(d)}),{closeAddEventFilterModal:A,isAddEventFilterModalOpen:_,onAddEventFilterClick:F}=Object(ie.a)(),[D,N]=Object(r.useState)(null),R=Object(r.useCallback)((()=>{N(null)}),[N]);return s?null:o.a.createElement(o.a.Fragment,null,o.a.createElement(c.EuiFlyoutFooter,{"data-test-subj":"side-panel-flyout-footer"},o.a.createElement(c.EuiFlexGroup,{justifyContent:"flexEnd"},o.a.createElement(c.EuiFlexItem,{grow:!1},t&&o.a.createElement(ee,{detailsData:e,ecsData:t,handleOnEventClosed:n,isHostIsolationPanelOpen:a,loadingEventDetails:l,onAddEventFilterClick:F,onAddExceptionTypeClick:w,onAddIsolationStatusClick:u,refetchFlyoutData:f,refetch:O,scopeId:d,onOsqueryClick:N})))),k&&null!=x.ruleId&&null!=x.ruleRuleId&&null!=x.eventId&&o.a.createElement(ne.a,I()({},x,{ruleIndices:h,ruleDataViewId:E,exceptionListType:S,onCancel:T,onConfirm:M})),_&&null!=t&&o.a.createElement(ae.a,{data:t,onCancel:A}),D&&null!=t&&o.a.createElement(oe.a,{agentId:D,defaultValues:b?{alertIds:[b]}:void 0,onClose:R,ecsData:t}))})),le=Object(T.connect)((()=>{const e=re.d.globalQuery(),t=re.d.timelineQueryByIdSelector();return(n,{scopeId:a})=>({globalQuery:e(n),timelineQuery:t(n,a)})}))(o.a.memo(se));var ce=n(348),ue=n(116),de=n(110),pe=n(186);const me=()=>{var e,t;const{browserFields:n,runtimeMappings:c}=Object(ue.d)(de.SourcererScopeName.detections),[u,d]=Object(r.useState)({id:void 0,indexName:void 0}),[p,m,f,g,y]=Object(ce.a)({entityType:a.EntityType.EVENTS,indexName:null!==(e=u.indexName)&&void 0!==e?e:"",eventId:null!==(t=u.id)&&void 0!==t?t:"",runtimeMappings:c,skip:!u.id}),{alertId:h,isAlert:v,hostName:E,ruleName:x,timestamp:j}=Object(pe.b)(m),{isolateAction:O,isHostIsolationPanelOpen:S,isIsolateActionSuccessBannerVisible:w,handleIsolationActionSuccess:I,showAlertDetails:T,showHostIsolationPanel:C}=Object(l.a)(),M=Object(r.useCallback)((({isLoading:e,alert:t})=>(d((e=>e.id!==t._id?{id:t._id,indexName:t._index}:e)),o.a.createElement(k,{alertId:h,browserFields:n,detailsData:m,detailsEcsData:g,event:{eventId:t._id,indexName:t._index},hostName:null!=E?E:"",handleIsolationActionSuccess:I,handleOnEventClosed:i.noop,isAlert:v,isDraggable:!1,isolateAction:O,isIsolateActionSuccessBannerVisible:w,isHostIsolationPanelOpen:S,loading:e||p,rawEventData:f,showAlertDetails:T,scopeId:s.f.casePage,isReadOnly:!1}))),[h,n,m,g,I,E,v,S,w,O,p,f,T]),A=Object(r.useCallback)((({isLoading:e})=>{var t;return o.a.createElement(b,{isHostIsolationPanelOpen:S,isAlert:v,eventIndex:null!==(t=u.indexName)&&void 0!==t?t:"",eventId:h,isolateAction:O,loading:e||p,ruleName:x,showAlertDetails:T,timestamp:j})}),[u.indexName,v,h,S,O,p,x,T,j]),_=Object(r.useCallback)((({isLoading:e,alert:t})=>o.a.createElement(le,{detailsData:m,detailsEcsData:g,refetchFlyoutData:y,handleOnEventClosed:i.noop,isHostIsolationPanelOpen:S,isReadOnly:!1,loadingEventDetails:e||p,onAddIsolationStatusClick:C,scopeId:s.f.casePage})),[m,g,S,p,y,C]);return Object(r.useMemo)((()=>({body:M,header:A,footer:_})),[M,A,_])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return H}));var a=n(40),i=n(2),r=n.n(i),o=n(42),s=n(607),l=n(608);const c=r.a.memo((({contextId:e,eventId:t,isDraggable:n,tlsClientCertificateFingerprintSha1:i,tlsFingerprintsJa3Hash:c,tlsServerCertificateFingerprintSha1:u})=>r.a.createElement(a.EuiFlexGroup,{alignItems:"center","data-test-subj":"fingerprints-group",direction:"column",justifyContent:"center",gutterSize:"none"},null!=c?Object(o.uniq)(c).map((i=>r.a.createElement(a.EuiFlexItem,{grow:!1,key:i},r.a.createElement(l.b,{eventId:t,fieldName:l.a,contextId:e,isDraggable:n,value:i})))):null,null!=i?Object(o.uniq)(i).map((i=>r.a.createElement(a.EuiFlexItem,{grow:!1,key:i},r.a.createElement(s.a,{eventId:t,certificateType:"client",contextId:e,fieldName:s.b,isDraggable:n,value:i})))):null,null!=u?Object(o.uniq)(u).map((i=>r.a.createElement(a.EuiFlexItem,{grow:!1,key:i},r.a.createElement(s.a,{eventId:t,certificateType:"server",contextId:e,fieldName:s.c,isDraggable:n,value:i})))):null)));c.displayName="Fingerprints";var u=n(41),d=n.n(u),p=n(113),m=n(121),f=n(460);const g="questionInCircle",b=e=>{if(null==e)return g;switch(`${e}`.toLowerCase()){case p.n.outbound:case p.n.outgoing:return"arrowUp";case p.n.inbound:case p.n.incoming:case p.n.listening:return"arrowDown";case p.n.external:return"globe";case p.n.internal:return"bullseye";case p.n.unknown:default:return g}},y=r.a.memo((({contextId:e,eventId:t,direction:n,isDraggable:a})=>r.a.createElement(m.c,{contextId:e,eventId:t,field:f.c,iconType:b(n),isDraggable:a,value:n,isAggregatable:!0,fieldType:"keyword"})));y.displayName="DirectionBadge";var h=n(815),v=n(727);const E=d()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemMarginRight",componentId:"sc-10udnrm-0"})(["margin-right:3px;"]);E.displayName="EuiFlexItemMarginRight";const x=d()(a.EuiText).withConfig({displayName:"Stats",componentId:"sc-10udnrm-1"})(["margin:0 5px;"]);x.displayName="Stats";const j=r.a.memo((({bytes:e,communityId:t,contextId:n,direction:i,eventId:s,isDraggable:l,packets:c,protocol:u,transport:d})=>r.a.createElement(a.EuiFlexGroup,{alignItems:"center",justifyContent:"center",gutterSize:"none"},null!=i?Object(o.uniq)(i).map((e=>r.a.createElement(E,{grow:!1,key:e},r.a.createElement(y,{contextId:n,direction:e,eventId:s,isDraggable:l})))):null,null!=u?Object(o.uniq)(u).map((e=>r.a.createElement(E,{grow:!1,key:e},r.a.createElement(m.c,{contextId:n,eventId:s,field:f.e,isDraggable:l,value:e,isAggregatable:!0,fieldType:"keyword"})))):null,null!=e?Object(o.uniq)(e).map((e=>isNaN(Number(e))?null:r.a.createElement(E,{grow:!1,key:e},r.a.createElement(m.b,{field:f.a,id:`network-default-draggable-${n}-${s}-${f.a}-${e}`,isDraggable:l,value:e},r.a.createElement(x,{size:"xs"},r.a.createElement("span",null,r.a.createElement(v.a,{value:e}))))))):null,null!=c?Object(o.uniq)(c).map((e=>r.a.createElement(E,{grow:!1,key:e},r.a.createElement(m.b,{field:f.d,id:`network-default-draggable-${n}-${s}-${f.d}-${e}`,isDraggable:l,value:e},r.a.createElement(x,{size:"xs"},r.a.createElement("span",null,`${e} ${h.a}`)))))):null,null!=d?Object(o.uniq)(d).map((e=>r.a.createElement(E,{grow:!1,key:e},r.a.createElement(m.c,{contextId:n,"data-test-subj":"network-transport",eventId:s,field:f.f,isDraggable:l,value:e,isAggregatable:!0,fieldType:"keyword"})))):null,null!=t?Object(o.uniq)(t).map((e=>r.a.createElement(a.EuiFlexItem,{grow:!1,key:e},r.a.createElement(m.c,{contextId:n,eventId:s,field:f.b,isDraggable:l,value:e,isAggregatable:!0,fieldType:"keyword"})))):null)));j.displayName="Network";var O=n(532),S=n(130),k=n.n(S),w=n(395),I=n(1039),T=n(380),C=n(392),M=n(570);const A=d.a.span.withConfig({displayName:"IpPortSeparator",componentId:"sc-12b0nt-0"})(["margin:0 3px;"]);A.displayName="IpPortSeparator";const _=r.a.memo((({contextId:e,eventId:t,isDraggable:n,port:i,portFieldName:o})=>null!=i?r.a.createElement(a.EuiFlexGroup,{gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(A,{"data-test-subj":"ip-port-separator"},":")),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(I.a,{contextId:e,"data-test-subj":"port",eventId:t,fieldName:o,isDraggable:n,value:i}))):null));_.displayName="PortWithSeparator";const F=r.a.memo((({contextId:e,eventId:t,ip:n,ipFieldName:i,isDraggable:o,port:s,portFieldName:l})=>r.a.createElement(a.EuiFlexGroup,{gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(w.c,{contextId:e,"data-test-subj":"ip",eventId:t,fieldName:i,isDraggable:o,value:n})),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(_,{contextId:e,eventId:t,isDraggable:o,port:s,portFieldName:l})))));F.displayName="IpWithPort";const D=d.a.div.withConfig({displayName:"Label",componentId:"sc-1ym4dlz-0"})(["font-weight:bold;margin-top:2px;"]),N=({destinationIp:e,sourceIp:t,type:n})=>"source"===n&&null!=t&&t.some((e=>!Object(o.isEmpty)(e)))||"destination"===n&&null!=e&&e.some((e=>!Object(o.isEmpty)(e))),P=({destinationPort:e,sourcePort:t,type:n})=>("source"===n&&null!=t?t:"destination"===n&&null!=e?e:[]).filter((e=>null!=e)).map((e=>`${e}`)).filter((e=>!Object(o.isEmpty)(e))),R=r.a.memo((({contextId:e,destinationIp:t,destinationPort:n,eventId:i,isDraggable:s,sourceIp:l,sourcePort:c,type:u})=>{const d="source"===u?l:t,p="source"===u?w.d:w.a,m="source"===u?c:n,f="source"===u?T.c:T.a;if(null==d)return null;const g=null!=m&&d.length===m.length?d.map(((e,t)=>({ip:e,port:null!=m[t]?`${m[t]}`:null}))):d.map((e=>({ip:e,port:null})));return r.a.createElement(a.EuiFlexGroup,{gutterSize:"none"},Object(o.uniqWith)(k.a,g).map((t=>null!=t.ip&&r.a.createElement(a.EuiFlexItem,{grow:!1,key:t.ip},r.a.createElement(F,{contextId:e,"data-test-subj":`${u}-ip-and-port`,eventId:i,ip:t.ip,ipFieldName:p,isDraggable:s,port:t.port,portFieldName:f})))))}));R.displayName="IpAdressesWithPorts";const L=r.a.memo((({contextId:e,destinationGeoContinentName:t,destinationGeoCountryName:n,destinationGeoCountryIsoCode:i,destinationGeoRegionName:o,destinationGeoCityName:s,destinationIp:l,destinationPort:c,eventId:u,isDraggable:d,sourceGeoContinentName:p,sourceGeoCountryName:m,sourceGeoCountryIsoCode:f,sourceGeoRegionName:g,sourceGeoCityName:b,sourceIp:y,sourcePort:h,type:v})=>{const E="source"===v?C.i:C.c;return N({destinationIp:l,sourceIp:y,type:v})||(({destinationPort:e,sourcePort:t,type:n})=>P({destinationPort:e,sourcePort:t,type:n}).length>0)({destinationPort:c,sourcePort:h,type:v})?r.a.createElement(a.EuiBadge,{"data-test-subj":`${v}-ip-badge`,color:"hollow",title:""},r.a.createElement(a.EuiFlexGroup,{alignItems:"center","data-test-subj":`${v}-ip-group`,direction:"column",gutterSize:"xs"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(D,null,E)),r.a.createElement(a.EuiFlexItem,{grow:!1},N({destinationIp:l,sourceIp:y,type:v})?r.a.createElement(R,{contextId:e,destinationIp:l,destinationPort:c,eventId:u,isDraggable:d,sourceIp:y,sourcePort:h,type:v}):r.a.createElement(a.EuiFlexGroup,{gutterSize:"none"},P({destinationPort:c,sourcePort:h,type:v}).map(((t,n)=>r.a.createElement(a.EuiFlexItem,{key:`port-${t}-${n}`,grow:!1},r.a.createElement(I.a,{contextId:e,"data-test-subj":"port",eventId:u,fieldName:`${v}.port`,isDraggable:d,value:t})))))),r.a.createElement(a.EuiFlexItem,null,r.a.createElement(M.f,{contextId:e,destinationGeoContinentName:t,destinationGeoCountryName:n,destinationGeoCountryIsoCode:i,destinationGeoRegionName:o,destinationGeoCityName:s,eventId:u,isDraggable:d,sourceGeoContinentName:p,sourceGeoCountryName:m,sourceGeoCountryIsoCode:f,sourceGeoRegionName:g,sourceGeoCityName:b,type:v})))):null}));L.displayName="SourceDestinationIp";const q=r.a.memo((({contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPackets:u,destinationPort:d,eventId:p,isDraggable:m,sourceBytes:f,sourceGeoContinentName:g,sourceGeoCountryName:b,sourceGeoCountryIsoCode:y,sourceGeoRegionName:h,sourceGeoCityName:v,sourcePackets:E,sourceIp:x,sourcePort:j})=>r.a.createElement(a.EuiFlexGroup,{justifyContent:"center",gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(L,{contextId:e,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPort:d,eventId:p,isDraggable:m,sourceGeoContinentName:g,sourceGeoCountryName:b,sourceGeoCountryIsoCode:y,sourceGeoRegionName:h,sourceGeoCityName:v,sourceIp:x,sourcePort:j,type:"source"})),r.a.createElement(O.e,{contextId:e,destinationBytes:t,destinationPackets:u,eventId:p,isDraggable:m,sourceBytes:f,sourcePackets:E}),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(L,{contextId:e,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPort:d,eventId:p,isDraggable:m,sourceGeoContinentName:g,sourceGeoCountryName:b,sourceGeoCountryIsoCode:y,sourceGeoRegionName:h,sourceGeoCityName:v,sourceIp:x,sourcePort:j,type:"destination"})))));q.displayName="SourceDestinationWithArrows";const B=d()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemMarginTop",componentId:"sc-ru6rd-0"})(["margin-top:3px;"]);B.displayName="EuiFlexItemMarginTop";const z=r.a.memo((({contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPackets:u,destinationPort:d,eventId:p,isDraggable:m,networkBytes:f,networkCommunityId:g,networkDirection:b,networkPackets:y,networkProtocol:h,sourceBytes:v,sourceGeoContinentName:E,sourceGeoCountryName:x,sourceGeoCountryIsoCode:O,sourceGeoRegionName:S,sourceGeoCityName:k,sourceIp:w,sourcePackets:I,sourcePort:T,transport:C})=>r.a.createElement(a.EuiFlexGroup,{alignItems:"center",direction:"column",justifyContent:"center",gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(j,{bytes:f,packets:y,communityId:g,contextId:e,direction:b,eventId:p,isDraggable:m,protocol:h,transport:C})),r.a.createElement(B,{grow:!1},r.a.createElement(q,{contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPackets:u,destinationPort:d,eventId:p,isDraggable:m,sourceBytes:v,sourceGeoContinentName:E,sourceGeoCountryName:x,sourceGeoCountryIsoCode:O,sourceGeoRegionName:S,sourceGeoCityName:k,sourceIp:w,sourcePackets:I,sourcePort:T})))));z.displayName="SourceDestination";var $=n(571),V=n(818);const U=d()(a.EuiFlexItem).withConfig({displayName:"EuiFlexItemMarginRight",componentId:"sc-ub9rva-0"})(["margin-right:10px;"]);U.displayName="EuiFlexItemMarginRight";const G=r.a.memo((({contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPackets:u,destinationPort:d,eventDuration:p,eventId:m,eventEnd:f,eventStart:g,isDraggable:b,networkBytes:y,networkCommunityId:h,networkDirection:v,networkPackets:E,networkProtocol:x,processName:j,sourceBytes:O,sourceGeoContinentName:S,sourceGeoCountryName:k,sourceGeoCountryIsoCode:w,sourceGeoRegionName:I,sourceGeoCityName:T,sourceIp:C,sourcePackets:M,sourcePort:A,transport:_,userName:F})=>r.a.createElement(a.EuiFlexGroup,{"data-test-subj":"netflow-columns",gutterSize:"none",justifyContent:"center",wrap:!0},r.a.createElement(U,{grow:!1},r.a.createElement(V.c,{contextId:e,eventId:m,isDraggable:b,processName:j,userName:F})),r.a.createElement(U,{grow:!1},r.a.createElement($.a,{contextId:e,eventDuration:p,eventId:m,eventEnd:f,eventStart:g,isDraggable:b})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(z,{contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:c,destinationPackets:u,destinationPort:d,eventId:m,isDraggable:b,networkBytes:y,networkCommunityId:h,networkDirection:v,networkPackets:E,networkProtocol:x,sourceBytes:O,sourceGeoContinentName:S,sourceGeoCountryName:k,sourceGeoCountryIsoCode:w,sourceGeoRegionName:I,sourceGeoCityName:T,sourceIp:C,sourcePackets:M,sourcePort:A,transport:_})))));G.displayName="NetflowColumns";const H=r.a.memo((({contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:u,destinationPackets:d,destinationPort:p,eventDuration:m,eventId:f,eventEnd:g,eventStart:b,isDraggable:y,networkBytes:h,networkCommunityId:v,networkDirection:E,networkPackets:x,networkProtocol:j,processName:O,sourceBytes:S,sourceGeoContinentName:k,sourceGeoCountryName:w,sourceGeoCountryIsoCode:I,sourceGeoRegionName:T,sourceGeoCityName:C,sourcePackets:M,sourceIp:A,sourcePort:_,tlsClientCertificateFingerprintSha1:F,tlsFingerprintsJa3Hash:D,tlsServerCertificateFingerprintSha1:N,transport:P,userName:R})=>r.a.createElement(a.EuiFlexGroup,{alignItems:"center","data-test-subj":"netflow-rows",direction:"column",justifyContent:"center",wrap:!0,gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(G,{contextId:e,destinationBytes:t,destinationGeoContinentName:n,destinationGeoCountryName:i,destinationGeoCountryIsoCode:o,destinationGeoRegionName:s,destinationGeoCityName:l,destinationIp:u,destinationPackets:d,destinationPort:p,eventDuration:m,eventId:f,eventEnd:g,eventStart:b,isDraggable:y,networkBytes:h,networkCommunityId:v,networkDirection:E,networkPackets:x,networkProtocol:j,processName:O,sourceBytes:S,sourceGeoContinentName:k,sourceGeoCountryName:w,sourceGeoCountryIsoCode:I,sourceGeoRegionName:T,sourceGeoCityName:C,sourceIp:A,sourcePackets:M,sourcePort:_,transport:P,userName:R})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(c,{contextId:e,eventId:f,isDraggable:y,tlsClientCertificateFingerprintSha1:F,tlsFingerprintsJa3Hash:D,tlsServerCertificateFingerprintSha1:N})))));H.displayName="Netflow"},function(e,t,n){"use strict";n.d(t,"a",(function(){return $}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(5);const c=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.allActionsTooltip",{defaultMessage:"All actions"}),u=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.allowAction",{defaultMessage:"Allow"}),d=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.allowByDefaultAction",{defaultMessage:"Allow by default"}),p=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.allowedColumnTitle",{defaultMessage:"Allowed"}),m=(l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.alwaysSubmenu",{defaultMessage:"Always"}),l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.anonymizeAction",{defaultMessage:"Anonymize"})),f=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.anonymizeByDefaultAction",{defaultMessage:"Anonymize by default"}),g=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.anonymizedColumnTitle",{defaultMessage:"Anonymized"}),b=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.bulkActions",{defaultMessage:"Bulk actions"}),y=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.defaultsSubmenu",{defaultMessage:"Defaults"}),h=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.denyAction",{defaultMessage:"Deny"}),v=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.denyByDefaultAction",{defaultMessage:"Deny by default"}),E=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.fieldColumnTitle",{defaultMessage:"Field"}),x=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.noButtonLabel",{defaultMessage:"No"}),j=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.resetButton",{defaultMessage:"Reset"}),O=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.unanonymizeAction",{defaultMessage:"Unanonymize"}),S=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.unanonymizeByDefaultAction",{defaultMessage:"Unanonymize by default"}),k=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.valuesColumnTitle",{defaultMessage:"Values"}),w=l.i18n.translate("xpack.elasticAssistant.assistant.dataAnonymizationEditor.contextEditor.yesButtonLabel",{defaultMessage:"Yes"}),I="primary-panel-id",T="secondary-panel-id";var C=n(21);const M=({appliesTo:e,disabled:t,disableAllow:n=!1,disableAnonymize:r=!1,disableDeny:o=!1,disableUnanonymize:s=!1,onListUpdated:l,onlyDefaults:p,selected:g})=>{const[E,x]=Object(i.useState)(!1),j=Object(a.useGeneratedHtmlId)({prefix:"contextEditorBulkActions"}),k=Object(i.useCallback)((()=>x(!1)),[]),w=Object(i.useCallback)((()=>x((e=>!e))),[]),M=Object(i.useMemo)((()=>Object(C.jsx)(a.EuiToolTip,{content:"multipleRows"===e?void 0:c},Object(C.jsx)(a.EuiButtonEmpty,{"data-test-subj":"bulkActionsButton",disabled:t,iconType:"multipleRows"===e?"arrowDown":"boxesVertical",iconSide:"multipleRows"===e?"right":void 0,onClick:w,size:"xs"},"multipleRows"===e?b:null))),[e,t,w]),A=Object(i.useMemo)((()=>(({disableAllow:e,disableAnonymize:t,disableDeny:n,disableUnanonymize:a,closePopover:i,onListUpdated:r,onlyDefaults:o,selected:s})=>{const l=o?I:T,c=o?T:I,p=[o?[]:{icon:"check",name:d,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"add",update:"allow"}))),t=s.map((({field:e})=>({field:e,operation:"add",update:"defaultAllow"})));r([...e,...t])}}].flat(),g=[{id:l,title:y,items:[...p,{icon:"cross",name:v,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"remove",update:"allow"}))),t=s.map((({field:e})=>({field:e,operation:"remove",update:"defaultAllow"})));r([...e,...t])}},{icon:"eyeClosed",name:f,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"add",update:"allowReplacement"}))),t=s.map((({field:e})=>({field:e,operation:"add",update:"defaultAllowReplacement"})));r([...e,...t])}},{icon:"eye",name:S,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"remove",update:"allowReplacement"}))),t=s.map((({field:e})=>({field:e,operation:"remove",update:"defaultAllowReplacement"})));r([...e,...t])}}]}],b=[{id:c,items:[{disabled:e,icon:"check",name:u,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"add",update:"allow"})));r(e)}},{disabled:n,icon:"cross",name:h,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"remove",update:"allow"})));r(e)}},{disabled:t,icon:"eyeClosed",name:m,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"add",update:"allowReplacement"})));r(e)}},{disabled:a,icon:"eye",name:O,onClick:()=>{i();const e=s.map((({field:e})=>({field:e,operation:"remove",update:"allowReplacement"})));r(e)}},{isSeparator:!0,key:"sep"},{name:y,panel:l}]},...g];return o?g:b})({disableAllow:n,disableAnonymize:r,disableDeny:o,disableUnanonymize:s,closePopover:k,onListUpdated:l,onlyDefaults:p,selected:g})),[k,n,r,o,s,l,p,g]);return Object(C.jsx)(a.EuiPopover,{anchorPosition:"downLeft",button:M,closePopover:k,"data-test-subj":"bulkActions",id:j,isOpen:E,panelPaddingSize:"none"},Object(C.jsx)(a.EuiContextMenu,{initialPanelId:I,panels:A,size:"s"}))},A=r.a.memo(M),_="allowed",F="anonymized",D="field",N=s()(a.EuiButtonEmpty)`
  max-height: 24px;
`;var P=n(305);const R=({onListUpdated:e,onlyDefaults:t,onReset:n,onSelectAll:i,selected:r,totalFields:o})=>Object(C.jsx)(a.EuiFlexGroup,{alignItems:"center","data-test-subj":"toolbar",gutterSize:"none"},Object(C.jsx)(a.EuiFlexItem,{grow:!1},Object(C.jsx)(a.EuiText,{color:"subdued","data-test-subj":"selectedFields",size:"xs"},(e=>l.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.contextEditor.selectedFields",{values:{selected:e},defaultMessage:"Selected {selected} fields"}))(r.length))),Object(C.jsx)(a.EuiFlexItem,{grow:!1},Object(C.jsx)(a.EuiButtonEmpty,{"data-test-subj":"selectAllFields",iconType:"pagesSelect",onClick:i,size:"xs"},(e=>l.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.contextEditor.selectAllFields",{values:{totalFields:e},defaultMessage:"Select all {totalFields} fields"}))(o))),Object(C.jsx)(a.EuiFlexItem,{grow:!1},Object(C.jsx)(A,{appliesTo:"multipleRows",disabled:0===r.length,onListUpdated:e,onlyDefaults:t,selected:r})),null!=n&&Object(C.jsx)(a.EuiFlexItem,{grow:!0},Object(C.jsx)(a.EuiFlexGroup,{alignItems:"center","data-test-subj":"toolbarTrailingActions",gutterSize:"none",justifyContent:"flexEnd"},Object(C.jsx)(a.EuiFlexItem,{grow:!1},Object(C.jsx)(a.EuiButtonEmpty,{"data-test-subj":"resetFields",iconType:"eraser",onClick:n,size:"xs"},j)))));R.displayName="ToolbarComponent";const L=r.a.memo(R),q={sort:{direction:"desc",field:_}},B={box:{incremental:!0},filters:[{field:_,type:"is",name:p},{field:F,type:"is",name:g}]},z=({allow:e,allowReplacement:t,onListUpdated:n,onReset:r,rawData:o,pageSize:s=10})=>{const[l,c]=Object(i.useState)([]),u=Object(i.useMemo)((()=>({selectable:()=>!0,onSelectionChange:e=>c(e),initialSelected:[]})),[]),d=Object(i.useRef)(null),m=Object(i.useMemo)((()=>(({onListUpdated:e,rawData:t})=>{const n={field:"actions",name:"",render:(n,a)=>Object(C.jsx)(A,{appliesTo:"singleRow",disabled:!1,disableAllow:a.allowed,disableDeny:!a.allowed,disableAnonymize:!a.allowed||a.allowed&&a.anonymized,disableUnanonymize:!a.allowed||a.allowed&&!a.anonymized,onListUpdated:e,onlyDefaults:null==t,selected:[a]}),sortable:!1,width:"36px"},i={field:"rawValues",name:k,render:e=>Object(C.jsx)(a.EuiCode,{"data-test-subj":"rawValues"},e.join(",")),sortable:!1},r=[{field:_,name:p,render:(n,{allowed:i,field:r})=>Object(C.jsx)(a.EuiSwitch,{"data-test-subj":"allowed",checked:i,label:"",showLabel:!1,onChange:()=>{e([{field:r,operation:i?"remove":"add",update:null==t?"defaultAllow":"allow"}]),null==t&&i&&e([{field:r,operation:"remove",update:"defaultAllowReplacement"}])}}),sortable:!0,width:"75px"},{field:F,name:g,render:(n,{allowed:i,anonymized:r,field:o})=>Object(C.jsx)(N,{"data-test-subj":"anonymized",disabled:!i,color:r?"primary":"text",flush:"both",iconType:r?"eyeClosed":"eye",isSelected:!!r,onClick:()=>e([{field:o,operation:r?"remove":"add",update:null==t?"defaultAllowReplacement":"allowReplacement"}])},Object(C.jsx)(a.EuiText,{size:"xs"},r?w:x)),sortable:!0,width:"102px"},{field:D,name:E,sortable:!0,width:"260px"}];return null==t?[...r,n]:[...r,i,n]})({onListUpdated:n,rawData:o})),[n,o]),f=Object(i.useMemo)((()=>(({allow:e,allowReplacement:t,rawData:n})=>{const a=new Set(t),i=new Set(e);return null!==n&&"object"==typeof n?Object.keys(n).sort().reduce(((e,t)=>[...e,{field:t,allowed:Object(P.b)({allowSet:i,field:t}),anonymized:Object(P.c)({allowReplacementSet:a,field:t}),denied:Object(P.d)({allowSet:i,field:t}),rawValues:n[t]}]),[]):e.sort().reduce(((e,t)=>[...e,{field:t,allowed:!0,anonymized:a.has(t),denied:!1,rawValues:[]}]),[])})({allow:e,allowReplacement:t,rawData:o})),[e,t,o]),b=Object(i.useCallback)((()=>{var e;null===(e=d.current)||void 0===e||e.setSelection(f),setTimeout((()=>c(f)),0)}),[f]),y=Object(i.useMemo)((()=>({initialPageSize:s,pageSizeOptions:[5,10,25,50]})),[s]),h=Object(i.useMemo)((()=>Object(C.jsx)(L,{onListUpdated:n,onlyDefaults:null==o,onReset:r,onSelectAll:b,selected:l,totalFields:f.length})),[n,r,b,o,f.length,l]);return Object(C.jsx)(a.EuiInMemoryTable,{allowNeutralSort:!1,childrenBetween:h,columns:m,compressed:!0,"data-test-subj":"contextEditor",isSelectable:!0,itemId:D,items:f,pagination:y,ref:d,search:B,selection:u,sorting:q})};z.displayName="ContextEditorComponent";const $=r.a.memo(z)},function(e,t,n){"use strict";n.d(t,"a",(function(){return I}));var a=n(106),i=n(8),r=n(41),o=n.n(r),s=n(4),l=n(167);const c=o.a.div.withConfig({displayName:"HorizontalSpacer",componentId:"sc-1o769t7-0"})(["margin:0 ",";"],(({theme:e})=>e.eui.euiSizeXS));var u=n(40),d=n(2),p=n.n(d),m=n(569),f=n(275),g=n(42),b=n(44),y=n(121);const h=({contextId:e,eventId:t,isDraggable:n,sourceField:a,sourceValue:i})=>p.a.createElement(u.EuiFlexGroup,{alignItems:"center","data-test-subj":"threat-match-details",direction:"row",justifyContent:"center",gutterSize:"none",wrap:!0},p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(y.c,{contextId:e,"data-test-subj":"threat-match-details-source-field",eventId:t,field:l.g,isDraggable:n,value:a,isAggregatable:!0,fieldType:"keyword"})),p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(c,null,p.a.createElement(b.FormattedMessage,{defaultMessage:"matched",id:"xpack.securitySolution.alerts.rowRenderers.cti.threatMatch.matchedVerb"}))),p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(y.c,{contextId:e,"data-test-subj":"threat-match-details-source-value",eventId:t,field:a,isDraggable:n,value:i,isAggregatable:!0,fieldType:"keyword"})));var v=n(337);const E=({contextId:e,eventId:t,feedName:n,indicatorReference:a,indicatorType:i,isDraggable:r})=>p.a.createElement(u.EuiFlexGroup,{alignItems:"flexStart","data-test-subj":"threat-match-indicator-details",direction:"row",justifyContent:"center",gutterSize:"none",wrap:!0},i&&p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(y.c,{contextId:e,"data-test-subj":"threat-match-indicator-details-indicator-type",eventId:t,field:l.h,isDraggable:r,value:i,isAggregatable:!0,fieldType:"keyword"})),n&&p.a.createElement(p.a.Fragment,null,p.a.createElement(u.EuiFlexItem,{grow:!1,component:"span"},p.a.createElement(c,null,p.a.createElement(b.FormattedMessage,{defaultMessage:"provided by",id:"xpack.securitySolution.alerts.rowRenderers.cti.threatMatch.providerPreposition"}))),p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(y.c,{contextId:e,"data-test-subj":"threat-match-indicator-details-indicator-feedName",eventId:t,field:l.e,isDraggable:r,value:n,isAggregatable:!0,fieldType:"keyword"}))),a&&p.a.createElement(p.a.Fragment,null,p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(c,null,":")),p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(v.a,{contextId:e,"data-test-subj":"threat-match-indicator-details-indicator-reference",eventId:t,fieldName:l.j,isDraggable:r,value:a,isAggregatable:!0,fieldType:"keyword"})))),x=({contextId:e,data:t,eventId:n,isDraggable:a})=>{const i={contextId:e,eventId:n,indicatorReference:Object(g.getOr)([],l.p,t)[0],feedName:Object(g.getOr)([],l.e,t)[0],indicatorType:Object(g.getOr)([],l.n,t)[0],isDraggable:a,sourceField:Object(g.get)(l.l,t)[0],sourceValue:Object(g.get)(l.k,t)[0]};return p.a.createElement(j,i)},j=({contextId:e,eventId:t,feedName:n,indicatorReference:a,indicatorType:i,isDraggable:r,sourceField:o,sourceValue:s})=>p.a.createElement(u.EuiFlexGroup,{alignItems:"center","data-test-subj":"threat-match-row",gutterSize:"s",justifyContent:"center"},p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(h,{contextId:e,eventId:t,isDraggable:r,sourceField:o,sourceValue:s})),p.a.createElement(u.EuiFlexItem,{grow:!1},p.a.createElement(E,{contextId:e,eventId:t,feedName:n,indicatorReference:a,indicatorType:i,isDraggable:r})));var O=n(392);const S=o.a.div.withConfig({displayName:"SpacedContainer",componentId:"sc-e4rhpb-0"})(["margin:"," 0;"],(({theme:e})=>e.eui.euiSizeS)),k=({data:e,isDraggable:t,scopeId:n})=>{const a=Object(i.get)(e,s.pb),r=Object(i.get)(e,m.a),o=Object(d.useCallback)(((e="max")=>{const i="max"===e?a.slice(0,2):a;return p.a.createElement(f.a,{"data-test-subj":"threat-match-row-renderer"},p.a.createElement(S,null,i.map(((e,i)=>{const o=`threat-match-row-${n}-${r}-${i}`;return p.a.createElement(d.Fragment,{key:o},p.a.createElement(x,{contextId:o,data:e,eventId:r,isDraggable:t}),i<a.length-1&&p.a.createElement(u.EuiHorizontalRule,{margin:"s"}))}))))}),[a,r,t,n]),l=Object(d.useCallback)((()=>o("all")),[o]);return p.a.createElement(u.EuiFlexGroup,{direction:"column",justifyContent:"center",alignItems:"center",gutterSize:"none"},p.a.createElement(u.EuiFlexItem,null,o()),a.length>2&&p.a.createElement(u.EuiFlexItem,null,p.a.createElement(w,{title:Object(O.h)(a.length),renderChildren:l})))},w=({title:e,renderChildren:t})=>{const[n,a]=Object(d.useState)(!1),i=()=>a(!1);let r;return n&&(r=p.a.createElement(u.EuiModal,{onClose:i},p.a.createElement(u.EuiModalHeader,{"data-test-subj":"threat-match-row-modal"},p.a.createElement(u.EuiModalHeaderTitle,null,O.b)),p.a.createElement(u.EuiModalBody,null,t()),p.a.createElement(u.EuiModalFooter,null,p.a.createElement(u.EuiButton,{onClick:i,fill:!0},O.a)))),p.a.createElement("div",null,p.a.createElement(u.EuiButtonEmpty,{"data-test-subj":"threat-match-row-show-all",iconType:"popout",color:"primary",onClick:()=>a(!0)},e),r)},I={id:a.d.threat_match,isInstance:e=>(e=>{const t=Object(i.get)(e,s.pb);return null==t?[]:Array.isArray(t)?t:[t]})(e).some((e=>l.i.some((t=>!Object(i.isEmpty)(Object(i.get)(e,t)))))),renderRow:({data:e,isDraggable:t,scopeId:n})=>p.a.createElement(k,{data:e,isDraggable:t,scopeId:n})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return _}));var a=n(42),i=n(2),r=n.n(i),o=n(106),s=n(275),l=n(40),c=n(41),u=n.n(c),d=n(250),p=n(321),m=n(153),f=n(123),g=n(379),b=n(127);const y=["IPv4","IPv6"];var h=n(121),v=n(150);const E="suricata.eve.alert.signature",x="suricata.eve.alert.signature_id",j=u()(l.EuiFlexItem).withConfig({displayName:"SignatureFlexItem",componentId:"sc-1paeiel-0"})(["min-width:77px;"]);j.displayName="SignatureFlexItem";const O=u()(l.EuiBadge).withConfig({displayName:"Badge",componentId:"sc-1paeiel-1"})(["vertical-align:top;"]);O.displayName="Badge";const S=u()(l.EuiFlexItem).withConfig({displayName:"LinkFlexItem",componentId:"sc-1paeiel-2"})(["margin-left:6px;"]);S.displayName="LinkFlexItem";const k=r.a.memo((({tokens:e})=>r.a.createElement(r.a.Fragment,null,e.map((e=>r.a.createElement(b.c,{key:e,grow:!1},r.a.createElement(l.EuiBadge,{iconType:"tag",color:"hollow",title:""},e)))))));k.displayName="Tokens";const w=r.a.memo((({id:e,isDraggable:t,signatureId:n})=>{const a=Object(i.useMemo)((()=>({and:[],enabled:!0,id:Object(m.i)(`suricata-draggable-signature-id-${e}-sig-${n}`),name:String(n),excluded:!1,kqlQuery:"",queryMatch:{field:x,value:n,operator:v.d}})),[e,n]),o=Object(i.useCallback)(((e,t,a)=>a.isDragging?r.a.createElement(p.a,null,r.a.createElement(g.a,{dataProvider:e})):r.a.createElement(l.EuiToolTip,{"data-test-subj":"signature-id-tooltip",content:x},r.a.createElement(O,{iconType:"number",color:"hollow",title:""},n))),[n]);return r.a.createElement(j,{grow:!1},r.a.createElement(p.b,{dataProvider:a,isDraggable:t,render:o,isAggregatable:!0,fieldType:"keyword"}))}));w.displayName="DraggableSignatureId";const I=r.a.memo((({contextId:e,id:t,isDraggable:n,signature:a,signatureId:i})=>{const o=(e=>e.trim().split(" ").reduce(((e,t,n)=>e.length===n&&t===t.toUpperCase()&&""!==t||y.includes(t)?[...e,t]:e),[]))(a);return r.a.createElement(l.EuiFlexGroup,{justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(w,{id:`draggable-signature-id-${e}-${t}`,isDraggable:n,signatureId:i}),r.a.createElement(k,{tokens:o}),r.a.createElement(S,{grow:!1},r.a.createElement(h.b,{"data-test-subj":"draggable-signature-link",field:E,id:`suricata-signature-default-draggable-${e}-${t}-${E}`,isDraggable:n,value:a,tooltipPosition:"bottom"},r.a.createElement("div",null,r.a.createElement(f.c,{link:a},a.split(" ").splice(o.length).join(" "))))))}));I.displayName="SuricataSignature";const T=u()(l.EuiFlexItem).withConfig({displayName:"LinkEuiFlexItem",componentId:"sc-i69i1c-0"})(["display:inline;"]);T.displayName="LinkEuiFlexItem";const C=r.a.memo((({signatureId:e})=>{const[t,o]=Object(i.useState)(void 0);return Object(i.useEffect)((()=>{let t=!0;return async function(){if(null!=e)try{const i=await(async e=>{const t=(await n.e(20).then(n.t.bind(null,1652,7))).db,i=(r=t,o=e,Object.prototype.hasOwnProperty.call(r,o)?t[e]:null);var r,o;return null!=i?Object(a.uniq)(i):[]})(e);t&&null!=i&&o(i)}catch(e){o(void 0)}else t&&o(void 0)}(),()=>{t=!1}}),[e]),r.a.createElement(l.EuiFlexGroup,{"data-test-subj":"suricataRefs",gutterSize:"none",justifyContent:"center",wrap:!0},t&&t.map((e=>r.a.createElement(T,{key:e,grow:!1},r.a.createElement(l.EuiLink,{href:e,color:"subdued",target:"_blank"},e)))))}));C.displayName="SuricataRefs";const M=u.a.div.withConfig({displayName:"Details",componentId:"sc-1y9aljy-0"})(["margin:5px 0;"]);M.displayName="Details";const A=r.a.memo((({data:e,isDraggable:t,timelineId:n})=>{const i=Object(a.get)("suricata.eve.alert.signature[0]",e),o=Object(a.get)("suricata.eve.alert.signature_id[0]",e);return null!=o&&null!=i?r.a.createElement(M,null,r.a.createElement(I,{contextId:`suricata-signature-${n}-${e._id}`,id:e._id,isDraggable:t,signature:i,signatureId:o}),r.a.createElement(C,{signatureId:o}),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(d.a,{data:e,isDraggable:t,timelineId:n})):null}));A.displayName="SuricataDetails";const _={id:o.d.suricata,isInstance:e=>{const t=Object(a.get)("event.module[0]",e);return null!=t&&"suricata"===t.toLowerCase()},renderRow:({data:e,isDraggable:t,scopeId:n})=>r.a.createElement(s.a,null,r.a.createElement(A,{data:e,isDraggable:t,timelineId:n}))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(46),i=n(602),r=n(102);const o=()=>r.b.get().http,s=({packages:e})=>Object(a.useQuery)(["installedIntegrations",{packages:e}],(async({signal:t})=>{var n;return null!==(n=(await(e=>{var t;const{packages:n,signal:a}=e;return o().fetch(i.a,{method:"GET",query:{packages:null==n||null===(t=n.sort())||void 0===t?void 0:t.join(",")},signal:a})})({packages:e,signal:t})).installed_integrations)&&void 0!==n?n:[]}),{keepPreviousData:!0,staleTime:3e5,onError:e=>{}})},function(e,t,n){"use strict";n.d(t,"a",(function(){return H}));var a=n(42),i=n(2),r=n.n(i),o=n(106),s=n(275),l=n(40),c=n(41),u=n.n(c),d=n(250),p=n(321),m=n(153),f=n(123),g=n(379),b=n(150),y=n(5);const h=y.i18n.translate("xpack.securitySolution.zeek.s0Description",{defaultMessage:"Connection attempt seen, no reply"}),v=y.i18n.translate("xpack.securitySolution.zeek.s1Description",{defaultMessage:"Connection established, not terminated"}),E=y.i18n.translate("xpack.securitySolution.zeek.s2Description",{defaultMessage:"Connection established and close attempt by originator seen (but no reply from responder)"}),x=y.i18n.translate("xpack.securitySolution.zeek.s3Description",{defaultMessage:"Connection established and close attempt by responder seen (but no reply from originator)"}),j=y.i18n.translate("xpack.securitySolution.zeek.sfDescription",{defaultMessage:"Normal SYN/FIN completion"}),O=y.i18n.translate("xpack.securitySolution.zeek.rejDescription",{defaultMessage:"Connection attempt rejected"}),S=y.i18n.translate("xpack.securitySolution.zeek.rstoODescription",{defaultMessage:"Connection established, originator aborted (sent a RST)"}),k=y.i18n.translate("xpack.securitySolution.zeek.rstrDescription",{defaultMessage:"Established, responder aborted"}),w=y.i18n.translate("xpack.securitySolution.zeek.rstosoDescription",{defaultMessage:"Originator sent a SYN followed by a RST, no SYN-ACK from the responder"}),I=y.i18n.translate("xpack.securitySolution.zeek.rstrhDescription",{defaultMessage:"Responder sent a SYN ACK followed by a RST, no SYN from the (purported) originator"}),T=y.i18n.translate("xpack.securitySolution.zeek.shDescription",{defaultMessage:"Originator sent a SYN followed by a FIN, no SYN ACK from the responder"}),C=y.i18n.translate("xpack.securitySolution.zeek.shrDescription",{defaultMessage:"Responder sent a SYN ACK followed by a FIN, no SYN from the originator"}),M=y.i18n.translate("xpack.securitySolution.zeek.othDescription",{defaultMessage:"No SYN seen, just midstream traffic"}),A=u()(l.EuiBadge).withConfig({displayName:"Badge",componentId:"sc-1b5gq3p-0"})(["vertical-align:top;"]);A.displayName="Badge";const _=u()(l.EuiFlexItem).withConfig({displayName:"TokensFlexItem",componentId:"sc-1b5gq3p-1"})(["margin-left:3px;"]);_.displayName="TokensFlexItem";const F=u()(l.EuiFlexItem).withConfig({displayName:"LinkFlexItem",componentId:"sc-1b5gq3p-2"})(["margin-left:6px;"]);F.displayName="LinkFlexItem";const D=e=>e,N=e=>{const t=e.split(".");return t.length>=2&&null!=t[1]?""!==t[1]?t[1]:t[0]:e},P=e=>`Dropped:${e}`,R=e=>`md5: ${e.substr(0,7)}...`,L=e=>`sha1: ${e.substr(0,7)}...`,q=r.a.memo((({id:e,field:t,isDraggable:n,value:a,stringRenderer:o=D})=>{const s=Object(i.useMemo)((()=>({and:[],enabled:!0,id:Object(m.i)(`draggable-zeek-element-draggable-wrapper-${e}-${t}-${a}`),name:String(a),excluded:!1,kqlQuery:"",queryMatch:{field:t,value:String(a),operator:b.d}})),[t,e,a]),c=Object(i.useCallback)(((e,n,i)=>i.isDragging?r.a.createElement(p.a,null,r.a.createElement(g.a,{dataProvider:e})):r.a.createElement(l.EuiToolTip,{"data-test-subj":"badge-tooltip",content:t},r.a.createElement(A,{iconType:"tag",color:"hollow",title:""},o(String(a))))),[t,o,a]);return null!=a?r.a.createElement(_,{grow:!1},r.a.createElement(p.b,{dataProvider:s,isDraggable:n,render:c,isAggregatable:!0,fieldType:"keyword"})):null}));q.displayName="DraggableZeekElement";const B=r.a.memo((({value:e,link:t})=>null!=e?null!=t?r.a.createElement(F,{grow:!1},r.a.createElement("div",null,r.a.createElement(f.c,{link:t},e))):r.a.createElement(F,{grow:!1},r.a.createElement("div",null,r.a.createElement(f.c,{link:e}))):null));B.displayName="Link";const z=r.a.memo((({value:e})=>null!=e?r.a.createElement(F,{grow:!1},r.a.createElement("div",null,r.a.createElement(f.j,{domain:e,overflowIndexStart:1,showDomain:!0,"data-test-subj":"reputationLinkSha"}))):null));z.displayName="TotalVirusLinkSha";const $={S0:h,S1:v,S2:E,S3:x,SF:j,REJ:O,RSTO:S,RSTR:k,RSTOS0:w,RSTRH:I,SH:T,SHR:C,OTH:M},V=r.a.memo((({data:e,isDraggable:t,timelineId:n})=>{const i=`zeek-signature-draggable-zeek-element-${n}-${e._id}`,o=Object(a.get)("zeek.session_id[0]",e),s=Object(a.get)("event.dataset[0]",e),c=Object(a.get)("zeek.ssl.version[0]",e),u=Object(a.get)("zeek.ssl.cipher[0]",e),d=Object(a.get)("zeek.connection.state[0]",e),p=Object(a.get)("zeek.connection.history[0]",e),m=Object(a.get)("zeek.notice.note[0]",e),f=Object(a.get)("zeek.notice.msg[0]",e),g=(e=>null!=e?String(e):null)(Object(a.get)("zeek.notice.dropped[0]",e)),b=Object(a.get)("zeek.dns.query[0]",e),y=Object(a.get)("zeek.dns.qclass_name[0]",e),h=Object(a.get)("http.request.method[0]",e),v=Object(a.get)("http.response.status_code[0]",e),E=Object(a.get)("url.original[0]",e),x=Object(a.get)("zeek.files.sha1[0]",e),j=Object(a.get)("zeek.files.md5[0]",e),O=(e=>{if(null!=e){const t=$[e];return null!=t?`${e} ${t}`:e}return null})(d),S=(e=>null!=e&&null!=$[e]?$[e]:null)(d);return r.a.createElement(r.a.Fragment,null,r.a.createElement(l.EuiFlexGroup,{justifyContent:"center",gutterSize:"none",wrap:!0},r.a.createElement(q,{id:i,field:"zeek.session_id",isDraggable:t,value:o}),r.a.createElement(q,{id:i,field:"event.dataset",isDraggable:t,value:s,stringRenderer:N}),r.a.createElement(q,{id:i,field:"zeek.files.sha1",isDraggable:t,value:x,stringRenderer:L}),r.a.createElement(q,{id:i,field:"zeek.files.md5",isDraggable:t,value:j,stringRenderer:R}),r.a.createElement(q,{id:i,field:"zeek.notice.dropped",isDraggable:t,value:g,stringRenderer:P}),r.a.createElement(q,{id:i,field:"zeek.ssl.version",isDraggable:t,value:c}),r.a.createElement(q,{id:i,field:"zeek.ssl.cipher",isDraggable:t,value:u}),r.a.createElement(q,{id:i,field:"zeek.connection.state",isDraggable:t,value:d}),r.a.createElement(q,{id:i,field:"http.request.method",isDraggable:t,value:h}),r.a.createElement(q,{id:i,field:"zeek.connection.history",isDraggable:t,value:p}),r.a.createElement(q,{id:i,field:"zeek.notice.note",isDraggable:t,value:m}),r.a.createElement(q,{id:i,field:"zeek.dns.query",isDraggable:t,value:b}),r.a.createElement(q,{id:i,field:"zeek.dns.qclass_name",isDraggable:t,value:y}),r.a.createElement(q,{id:i,field:"http.response.status_code",isDraggable:t,value:v})),r.a.createElement(l.EuiFlexGroup,{justifyContent:"center",gutterSize:"none"},r.a.createElement(B,{link:O,value:S}),r.a.createElement(B,{value:u}),r.a.createElement(B,{value:b}),r.a.createElement(B,{value:f}),r.a.createElement(B,{value:E}),r.a.createElement(z,{value:x})))}));V.displayName="ZeekSignature";const U=u.a.div.withConfig({displayName:"Details",componentId:"sc-1ixpiaf-0"})(["margin:5px 0;"]);U.displayName="Details";const G=r.a.memo((({data:e,isDraggable:t,timelineId:n})=>null!=e.zeek?r.a.createElement(U,null,r.a.createElement(V,{data:e,isDraggable:t,timelineId:n}),r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(d.a,{data:e,isDraggable:t,timelineId:n})):null));G.displayName="ZeekDetails";const H={id:o.d.zeek,isInstance:e=>{const t=Object(a.get)("event.module[0]",e);return null!=t&&"zeek"===t.toLowerCase()},renderRow:({data:e,isDraggable:t,scopeId:n})=>r.a.createElement(s.a,null,r.a.createElement(G,{data:e,isDraggable:t,timelineId:n}))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(2),i=n.n(a),r=n(40),o=n(8),s=n(5);const l=s.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.addToRulesTableSelection.addToSelectedRulesDescription",{defaultMessage:"After you create the exception, it is added to the rules you link. "});var c=n(565),u=n(313);const d=Object(a.memo)((({rule:e,linkedRules:t,onRuleLinkChange:n})=>{const o=Object(a.useMemo)((()=>Boolean(t.find((t=>t.id===e.id)))),[t,e.id]),s=Object(a.useCallback)((({target:{checked:a}})=>{const i=a?[...t,e]:null==t?void 0:t.filter((t=>t.id!==e.id));"function"==typeof n&&n(i)}),[t,n,e]);return i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiSwitch,{onChange:s,label:"",checked:o}))}));d.displayName="LinkRuleSwitch";var p=n(853);const m=({initiallySelectedRules:e,onRuleSelectionChange:t})=>{const{isLoading:n,searchOptions:m,pagination:f,sortedRulesByLinkedRulesOnTop:g,rulesTableColumnsWithLinkSwitch:b,onTableChange:y,addToSelectedRulesDescription:h}=(({initiallySelectedRules:e,onRuleSelectionChange:t})=>{const{data:{rules:n}={rules:[],total:0},isFetched:r}=Object(p.a)({filterOptions:{filter:"",showCustomRules:!1,showElasticRules:!1,tags:[]},sortingOptions:void 0,pagination:{page:1,perPage:1e4}}),[m,f]=Object(a.useState)({pageIndex:0,initialPageSize:25,showPerPageOptions:!1}),[g,b]=Object(a.useState)(e||[]);Object(a.useEffect)((()=>{t(g)}),[g,t]);const y=Object(a.useMemo)((()=>Object(o.sortBy)(n,[t=>null==e?void 0:e.find((e=>e.id===t.id))])),[e,n]),h=Object(a.useMemo)((()=>{const e=y.reduce(((e,t)=>{const{tags:n}=t;return n.forEach((t=>e.add(t))),e}),new Set);return Array.from(e).map((e=>({value:e,name:e,field:"tags"})))}),[y]),v=Object(a.useMemo)((()=>({box:{incremental:!0,schema:!0},filters:[{type:"field_value_selection",operator:"exact",name:s.i18n.translate("xpack.securitySolution.exceptions.addToRulesTable.tagsFilterLabel",{defaultMessage:"Tags"}),multiSelect:"or",options:h}]})),[h]),E=Object(a.useMemo)((()=>[{field:"link",name:c.b,align:"left","data-test-subj":"ruleActionLinkRuleSwitch",render:(e,t)=>i.a.createElement(d,{rule:t,linkedRules:g,onRuleLinkChange:b})},...Object(u.c)()]),[g]),x=Object(a.useCallback)((({page:{index:e}})=>f({...m,pageIndex:e})),[m]);return{isLoading:!r,pagination:m,searchOptions:v,sortedRulesByLinkedRulesOnTop:y,rulesTableColumnsWithLinkSwitch:E,addToSelectedRulesDescription:l,onTableChange:x}})({initiallySelectedRules:e,onRuleSelectionChange:t});return i.a.createElement(r.EuiPanel,{color:"subdued",borderRadius:"none",hasShadow:!1},i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiText,{size:"s"},h),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiInMemoryTable,{tableLayout:"auto",search:m,"data-test-subj":"addExceptionToRulesTable",tableCaption:"Rules table",items:g,loading:n,columns:b,message:n?i.a.createElement(r.EuiSkeletonText,{lines:4,"data-test-subj":"exceptionItemViewerEmptyPromptsLoading"}):void 0,pagination:f,onTableChange:y})))},f=i.a.memo(m);f.displayName="ExceptionsAddToRulesTable"},function(e,t,n){"use strict";n.d(t,"b",(function(){return U})),n.d(t,"a",(function(){return G}));var a=n(2),i=n.n(a),r=n(40),o=n(8),s=n(103),l=n(120),c=n(42),u=n(119),d=n(282),p=n(422),m=n(115),f=n(805),g=n(102),b=n(511),y=n(175),h=n(281),v=n(126),E=n(170),x=n(418),j=n(135),O=n(122),S=n(233),k=n(232),w=n(299),I=n(876),T=n(558),C=n(826),M=n(823),A=n(831),_=n(389),F=n(824),D=n(887),N=n(319),P=n(5),R=n(123),L=n(124),q=n(169),B=n(4);const z=P.i18n.translate("xpack.securitySolution.detectionEngine.alerts.actions.openAlertDetails",{defaultMessage:"Open alert details page"});var $=n(825);const V=({ariaLabel:e=j.E,ariaRowindex:t,columnValues:n,disabled:s,ecsRowData:l,onRuleChange:d,scopeId:h,globalQuery:x,timelineQuery:O,refetch:S})=>{var k,w,P,V,U,H,W,Q,Y,K,X,J,Z,ee,te,ne,ae,ie,re;const[oe,se]=Object(a.useState)(!1),[le,ce]=Object(a.useState)(!1),[ue]=Object(y.a)(),de=Object(a.useCallback)((()=>{se(!1)}),[]),pe=null!=l&&null!==(me=l.kibana)&&void 0!==me&&me.alert?null==l?void 0:l._id:null;var me;const fe=Object(c.get)(0,null==l||null===(k=l.kibana)||void 0===k||null===(w=k.alert)||void 0===w||null===(P=w.rule)||void 0===P?void 0:P.uuid),ge=Object(c.get)(0,null==l||null===(V=l.kibana)||void 0===V||null===(U=V.alert)||void 0===U||null===(H=U.rule)||void 0===H?void 0:H.rule_id),be=Object(c.get)(0,null==l||null===(W=l.kibana)||void 0===W||null===(Q=W.alert)||void 0===Q||null===(Y=Q.rule)||void 0===Y?void 0:Y.name),ye=[u.e.alertsOnAlertsPage,u.e.alertsOnRuleDetailsPage].includes(h),{addToCaseActionItems:he}=Object(D.a)({ecsData:l,onMenuItemClick:de,isActiveTimelines:Object(m.isActiveTimeline)(null!=h?h:""),ariaLabel:Object(_.a)({ariaRowindex:t,columnValues:n}),isInDetections:ye,refetch:S}),{loading:ve,canWriteEventFilters:Ee}=Object(v.a)().endpointPrivileges,xe=Object(a.useMemo)((()=>!ve&&Ee),[Ee,ve]),je=Object(c.get)(0,null==l||null===(K=l.kibana)||void 0===K||null===(X=K.alert)||void 0===X?void 0:X.workflow_status),Oe=Object(a.useMemo)((()=>{var e;return-1!==Object(o.indexOf)(null===(e=l.event)||void 0===e?void 0:e.kind,"event")}),[l]),Se=Object(a.useMemo)((()=>{var e,t;return null===(e=l.agent)||void 0===e||null===(t=e.type)||void 0===t?void 0:t.includes("endpoint")}),[l]),ke=Object(a.useMemo)((()=>Oe&&Se),[Oe,Se]),we=Object(a.useMemo)((()=>h===u.e.hostsPageEvents||h===u.e.usersPageEvents),[h]),Ie=Object(a.useCallback)((()=>{se(!oe)}),[oe]),Te=Object(a.useCallback)((()=>{se(!1)}),[]),Ce=Object(a.useMemo)((()=>i.a.createElement(r.EuiToolTip,{position:"top",content:j.E},i.a.createElement(r.EuiButtonIcon,{"aria-label":e,"data-test-subj":"timeline-context-menu-button",size:"s",iconType:"boxesHorizontal","data-popover-open":oe,onClick:Ie,isDisabled:s}))),[s,Ie,e,oe]),Me=e=>{e.forEach((e=>e.refetch&&e.refetch()))},Ae=Object(a.useCallback)((()=>{Object(m.isActiveTimeline)(null!=h?h:"")?(Me([O]),"alerts"===ue.pageName&&Me(x)):(Me(x),S&&S())}),[h,x,O,ue,S]),_e=null!==(J=null===(Z=l["kibana.alert.rule.parameters"])||void 0===Z?void 0:Z.index)&&void 0!==J?J:null==l||null===(ee=l.signal)||void 0===ee||null===(te=ee.rule)||void 0===te?void 0:te.index,Fe=null!==(ne=null===(ae=l["kibana.alert.rule.parameters"])||void 0===ae?void 0:ae.data_view_id)&&void 0!==ne?ne:null==l||null===(ie=l.signal)||void 0===ie||null===(re=ie.rule)||void 0===re?void 0:re.data_view_id,{exceptionFlyoutType:De,openAddExceptionFlyout:Ne,onAddExceptionCancel:Pe,onAddExceptionConfirm:Re,onAddExceptionTypeClick:Le}=Object(C.a)({refetch:Ae,onRuleChange:d,isActiveTimelines:Object(m.isActiveTimeline)(null!=h?h:"")}),{closeAddEventFilterModal:qe,isAddEventFilterModalOpen:Be,onAddEventFilterClick:ze}=Object(A.a)(),{actionItems:$e}=Object(T.a)({alertStatus:je,eventId:null==l?void 0:l._id,scopeId:h,refetch:Ae,closePopover:Te}),Ve=Object(a.useCallback)((e=>{Le(e),Te()}),[Te,Le]),Ue=Object(a.useCallback)((()=>{ze(),Te()}),[Te,ze]),{exceptionActionItems:Ge}=Object(M.a)({isEndpointAlert:Object(N.a)({ecsData:l}),onAddExceptionTypeClick:Ve}),{eventFilterActionItems:He}=Object(F.a)({onAddEventFilterClick:Ue,disabled:!ke||!we,tooltipMessage:we?void 0:j.f}),We=Object(a.useMemo)((()=>{var e;return Object(c.get)(0,null==l||null===(e=l.agent)||void 0===e?void 0:e.id)}),[l]),Qe=Object(a.useCallback)((()=>{ce((e=>!e)),se(!1)}),[]),{osqueryActionItems:Ye}=(({handleClick:e})=>{const t=Object(a.useMemo)((()=>Object(f.a)({handleClick:e})),[e]),n=Object(g.j)().services.application.capabilities.osquery;return{osqueryActionItems:null!=n&&n.writeLiveQueries||null!=n&&n.runSavedQueries?[t]:[]}})({handleClick:Qe}),{alertDetailsActionItems:Ke}=(({ruleId:e,closePopover:t,alertId:n})=>{const a=Object(L.a)("alertDetailsPageEnabled"),i=[],{onClick:r}=Object(R.o)()({deepLinkId:B.wc.alerts,path:n?Object(q.a)(n):""});return e&&n&&a&&i.push({key:"open-alert-details-item","data-test-subj":"open-alert-details-page-menu-item",onClick:r,name:z}),{alertDetailsActionItems:i}})({alertId:pe,closePopover:Te,ruleId:fe}),{alertTagsItems:Xe,alertTagsPanels:Je}=Object($.a)({closePopover:Te,ecsRowData:l,refetch:Ae}),Ze=Object(a.useMemo)((()=>!Oe&&fe?[...he,...$e,...Xe,...Ge,...We?Ye:[],...Ke]:[...he,...xe?He:[],...We?Ye:[]]),[Oe,fe,he,$e,Ge,We,Ye,Ke,He,xe,Xe]),et=Object(a.useMemo)((()=>[{id:0,items:Ze},...Je]),[Je,Ze]),tt=Object(a.useMemo)((()=>i.a.createElement(b.a,{agentId:We,defaultValues:pe?{alertIds:[pe]}:void 0,onClose:Qe,ecsData:l})),[We,pe,l,Qe]);return i.a.createElement(i.a.Fragment,null,Ze.length>0&&i.a.createElement("div",{key:"actions-context-menu"},i.a.createElement(E.l,{textAlign:"center",width:p.b},i.a.createElement(r.EuiPopover,{id:"singlePanel",button:Ce,isOpen:oe,closePopover:Te,panelPaddingSize:"none",anchorPosition:"downLeft",repositionOnScroll:!0},i.a.createElement(r.EuiContextMenu,{size:"s",initialPanelId:0,panels:et,"data-test-subj":"actions-context-menu"})))),Ne&&fe&&ge&&null!=be&&null!=(null==l?void 0:l._id)&&i.a.createElement(G,{ruleId:fe,ruleRuleId:ge,ruleIndices:_e,ruleDataViewId:Fe,ruleName:be,exceptionListType:De,eventId:null==l?void 0:l._id,onCancel:Pe,onConfirm:Re,alertStatus:je}),Be&&null!=l&&i.a.createElement(I.a,{data:l,onCancel:qe}),le&&We&&null!=l&&tt)},U=Object(s.connect)((()=>{const e=O.d.globalQuery(),t=O.d.timelineQueryByIdSelector();return(n,{scopeId:a})=>({globalQuery:e(n),timelineQuery:t(n,a)})}))(i.a.memo(V)),G=({ruleId:e,ruleRuleId:t,ruleIndices:n,ruleDataViewId:r,ruleName:o,exceptionListType:s,eventId:c,onCancel:u,onConfirm:p,alertStatus:m})=>{const{loading:f,signalIndexName:g}=Object(w.a)(),{rule:b,loading:y}=Object(d.a)(e),{loading:v,data:E}=Object(S.a)({query:Object(h.a)(c),indexName:g,queryName:k.a.ADD_EXCEPTION_FLYOUT}),j=Object(a.useMemo)((()=>{if(!1===v){const e=null==E?void 0:E.hits.hits[0];if(!e)return;const{_id:t,_index:n,_source:a}=e;return{...a,_id:t,_index:n}}}),[null==E?void 0:E.hits.hits,v]),O=Object(a.useMemo)((()=>{var e,t,a;return null!=j&&null!=(null===(e=j["kibana.alert.rule.parameters"])||void 0===e?void 0:e.index)?Array.isArray(j["kibana.alert.rule.parameters"].index)?j["kibana.alert.rule.parameters"].index:[j["kibana.alert.rule.parameters"].index]:null!=j&&null!=(null==j||null===(t=j.signal)||void 0===t||null===(a=t.rule)||void 0===a?void 0:a.index)?Array.isArray(j.signal.rule.index)?j.signal.rule.index:[j.signal.rule.index]:n}),[j,n]),I=Object(a.useMemo)((()=>{var e;return null!=j&&null!=(null===(e=j["kibana.alert.rule.parameters"])||void 0===e?void 0:e.data_view_id)?j["kibana.alert.rule.parameters"].data_view_id:r}),[j,r]),T=Object(a.useMemo)((()=>b?[b]:null),[b]),C=v&&f||null==j||null==O&&null==I;return i.a.createElement(x.a,{rules:T,isEndpointItem:s===l.b.ENDPOINT,alertData:j,isAlertDataLoading:C||y,alertStatus:m,isBulkAction:!1,showAlertCloseOptions:!0,onCancel:u,onConfirm:p})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return x}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(44),l=n(40),c=n(3),u=n(827),d=n(888),p=n(47),m=n(575);const f=e=>{var t,n,a,i,r,o,s;return null!=e&&null!==(t=e.agent)&&void 0!==t&&null!==(n=t.type)&&void 0!==n&&n.includes("endpoint")?((null==e||null===(a=e.host)||void 0===a||null===(i=a.os)||void 0===i?void 0:i.name)||["windows"]).map((e=>e.toLowerCase())):null!==(r=null==e||null===(o=e.host)||void 0===o||null===(s=o.os)||void 0===s?void 0:s.family)&&void 0!==r?r:["windows"]},g=e=>{var t,n;return{comments:[],description:"",entries:e&&e.event&&e.process?[{field:"event.category",operator:"included",type:"match",value:(null!==(t=e.event.category)&&void 0!==t?t:[])[0]},{field:"process.executable",operator:"included",type:"match",value:(null!==(n=e.process.executable)&&void 0!==n?n:[])[0]}]:[{field:"",operator:"included",type:"match",value:""}],item_id:void 0,list_id:m.a,meta:{temporaryUuid:Object(p.v4)()},name:"",namespace_type:"agnostic",tags:["policy:all"],type:"simple",os_types:f(e)}};var b=n(102),y=n(503),h=n(347),v=n(574),E=n(5);const x=Object(r.memo)((({onCancel:e,data:t,...n})=>{var a,p;const m=Object(b.n)(),f=Object(b.i)(),{isLoading:x,mutateAsync:j}=Object(u.a)(v.a.getInstance(f),"create"),[O,S]=Object(r.useState)(),[k,w]=Object(r.useState)(!1),{data:{search:I}}=Object(b.j)().services,T=Object(y.b)({perPage:1e3,onError:e=>{m.addWarning(Object(h.b)(e))}}),[C,M]=Object(r.useState)(g(t)),A=Object(r.useMemo)((()=>T.isLoading||T.isRefetching),[T]);Object(r.useEffect)((()=>(t&&(async()=>{var e;if(!t||!t._index)return;const n=await Object(c.lastValueFrom)(I.search({params:{index:t._index,body:{query:{match:{_id:t._id}}}}}));S({...t,host:{...t.host,os:{...(null==t||null===(e=t.host)||void 0===e?void 0:e.os)||{},name:[n.rawResponse.hits.hits[0]._source.host.os.name]}}})})(),()=>{M(g())})),[]);const _=Object(r.useCallback)((()=>{A||x||e()}),[x,A,e]),F=Object(r.useCallback)((()=>j(C,{onSuccess:t=>{var n;m.addSuccess((n=t,E.i18n.translate("xpack.securitySolution.eventFilter.flyoutForm.creationSuccessToastTitle",{defaultMessage:'"{name}" has been added to the event filters list.',values:{name:null==n?void 0:n.name}}))),e()},onError:e=>{m.addError(e,{title:'There was an error creating the new event filter: "{error}"',message:{error:e.message}})}})),[C,e,j,m]),D=Object(r.useMemo)((()=>o.a.createElement(l.EuiButton,{"data-test-subj":"add-exception-confirm-button",fill:!0,disabled:!k||x||!!t&&!O||A,onClick:F,isLoading:A},t?o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.actions.confirm.update.withData",defaultMessage:"Add endpoint event filter"}):o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.actions.confirm.create",defaultMessage:"Add event filter"}))),[t,O,F,k,x,A]),N=Object(r.useCallback)((e=>{e&&(w(e.isValid),M(e.item))}),[]);return o.a.createElement(l.EuiFlyout,i()({size:"l",onClose:_,"data-test-subj":"eventFiltersCreateFlyout"},n),o.a.createElement(l.EuiFlyoutHeader,{hasBorder:!0},o.a.createElement(l.EuiTitle,{size:"m"},o.a.createElement("h2",null,t?o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.title.create.withData",defaultMessage:"Add endpoint event filter"}):o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.subtitle.create",defaultMessage:"Add event filter"}))),t?o.a.createElement(l.EuiTextColor,{color:"subdued"},o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.subtitle.create.withData",defaultMessage:"Endpoint security"})):null),o.a.createElement(l.EuiFlyoutBody,null,o.a.createElement(d.a,{allowSelectOs:!t,error:void 0,disabled:!1,item:C,mode:"create",onChange:N,policies:null!==(a=null==T||null===(p=T.data)||void 0===p?void 0:p.items)&&void 0!==a?a:[],policiesIsLoading:A})),o.a.createElement(l.EuiFlyoutFooter,null,o.a.createElement(l.EuiFlexGroup,{justifyContent:"spaceBetween"},o.a.createElement(l.EuiFlexItem,{grow:!1},o.a.createElement(l.EuiButtonEmpty,{isDisabled:x,"data-test-subj":"cancelExceptionAddButton",onClick:_},o.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.eventFiltersFlyout.actions.cancel",defaultMessage:"Cancel"}))),o.a.createElement(l.EuiFlexItem,{grow:!1},D))))}));x.displayName="EventFiltersFlyout"},function(e,t,n){"use strict";n.d(t,"a",(function(){return x})),n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return O}));var a=n(40),i=n(2),r=n.n(i),o=n(42),s=n(109),l=n(148),c=n(170),u=n(104),d=n.n(u);const p=({rowIndex:e,colIndex:t,data:n,header:a,eventId:o,linkValues:s,renderCellValue:l,tabType:c,timelineId:u})=>{const[p,m]=Object(i.useState)({});return r.a.createElement("div",d()({"data-test-subj":"statefulCell"},p),l({columnId:a.id,eventId:o,data:n,header:a,isDraggable:!0,isExpandable:!0,isExpanded:!1,isDetails:!1,isTimeline:!0,linkValues:s,rowIndex:e,colIndex:t,setCellProps:m,scopeId:u,key:null!=c?`${u}-${c}`:u}))};p.displayName="StatefulCellComponent";const m=r.a.memo(p);var f=n(5);const g=({column:e,row:t})=>f.i18n.translate("xpack.securitySolution.timeline.youAreInATableCellScreenReaderOnly",{values:{column:e,row:t},defaultMessage:"You are in a table cell. row: {row}, column: {column}"}),b=e=>f.i18n.translate("xpack.securitySolution.timeline.eventHasEventRendererScreenReaderOnly",{values:{row:e},defaultMessage:"The event in row {row} has an event renderer. Press shift + down arrow to focus it."}),y=({notesCount:e,row:t})=>f.i18n.translate("xpack.securitySolution.timeline.eventHasNotesScreenReaderOnly",{values:{notesCount:e,row:t},defaultMessage:"The event in row {row} has {notesCount, plural, =1 {a note} other {{notesCount} notes}}. Press shift + right arrow to focus notes."}),h=e=>{var t;const{altKey:n,ctrlKey:a,key:i,metaKey:r,shiftKey:o,target:l,type:u}=e,d=l;if((e=>{switch(e){case" ":case"Enter":return!0;default:return!1}})(i)&&null!==(t=d.className)&&void 0!==t&&t.includes(c.b)){const t=d.querySelector(`.${s.a}`),l=new KeyboardEvent(u,{altKey:n,bubbles:!0,cancelable:!0,ctrlKey:a,key:i,metaKey:r,shiftKey:o});" "===i&&e.preventDefault(),null==t||t.dispatchEvent(l)}},v=({action:e,width:t,actionsColumnWidth:n,ariaRowindex:i,columnId:o,columnValues:s,data:u,ecsData:d,eventIdToNoteIds:p,index:m,isEventPinned:f,isEventViewer:v,eventId:E,loadingEventIds:x,notesCount:j,onEventDetailsPanelOpened:O,onRowSelected:S,refetch:k,rowIndex:w,hasRowRenderers:I,onRuleChange:T,selectedEventIds:C,showCheckboxes:M,showNotes:A,tabType:_,timelineId:F,toggleShowNotes:D,setEventsLoading:N,setEventsDeleted:P})=>{const R=t||n;return r.a.createElement(c.m,{width:R,"data-test-subj":"event-actions-container",tabIndex:0},r.a.createElement(c.k,{$ariaColumnIndex:m+l.c,key:null!=_?`${E}_${_}`:`${E}`,onKeyDown:h,role:"button",tabIndex:0,width:t},r.a.createElement(c.l,{"data-test-subj":"cell-container"},r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"screenReaderOnly"},r.a.createElement("p",null,g({row:i,column:m+2}))),e&&r.a.createElement(e,{ariaRowindex:i,width:t,checked:Object.keys(C).includes(E),columnId:o,columnValues:s,eventId:E,data:u,ecsData:d,eventIdToNoteIds:p,index:m,isEventPinned:f,isEventViewer:v,loadingEventIds:x,onEventDetailsPanelOpened:O,onRowSelected:S,refetch:k,rowIndex:w,onRuleChange:T,showCheckboxes:M,showNotes:A,timelineId:F,toggleShowNotes:D,setEventsLoading:N,setEventsDeleted:P}))),I?r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"hasRowRendererScreenReaderOnly"},r.a.createElement("p",null,b(i))):null,j?r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"hasNotesScreenReaderOnly"},r.a.createElement("p",null,y({row:i,notesCount:j}))):null))},E=({_id:e,ariaRowindex:t,index:n,header:i,data:s,ecsData:u,hasRowRenderers:d,notesCount:p,renderCellValue:f,tabType:v,timelineId:E})=>{var x;const j=n+l.c;return r.a.createElement(c.k,{$ariaColumnIndex:j,key:null!=v?`${i.id}_${v}`:`${i.id}`,onKeyDown:h,role:"button",tabIndex:0,width:i.initialWidth},r.a.createElement(c.l,{"data-test-subj":"cell-container"},r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"screenReaderOnly"},r.a.createElement("p",null,g({row:t,column:j}))),r.a.createElement(m,{rowIndex:t-1,colIndex:j-1,data:s,header:i,eventId:e,linkValues:Object(o.getOr)([],null!==(x=i.linkField)&&void 0!==x?x:"",u),renderCellValue:f,tabType:v,timelineId:E}))),d?r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"hasRowRendererScreenReaderOnly"},r.a.createElement("p",null,b(t))):null,p?r.a.createElement(a.EuiScreenReaderOnly,{"data-test-subj":"hasNotesScreenReaderOnly"},r.a.createElement("p",null,y({row:t,notesCount:p}))):null)},x=r.a.memo((({ariaRowindex:e,actionsColumnWidth:t,columnHeaders:n,columnValues:a,data:o,ecsData:s,eventIdToNoteIds:l,isEventPinned:u,isEventViewer:d,id:p,loadingEventIds:m,notesCount:f,onEventDetailsPanelOpened:g,onRowSelected:b,refetch:y,hasRowRenderers:h,onRuleChange:x,renderCellValue:j,selectedEventIds:O,showCheckboxes:S,showNotes:k,tabType:w,timelineId:I,toggleShowNotes:T,trailingControlColumns:C,leadingControlColumns:M,setEventsLoading:A,setEventsDeleted:_})=>{const F=Object(i.useMemo)((()=>C?C.map((e=>e.rowCellRender)):[]),[C]),D=Object(i.useMemo)((()=>M.length+n.length),[M,n]),N=Object(i.useMemo)((()=>F.map(((n,i)=>n&&r.a.createElement(v,{action:n,width:C[i].width,actionsColumnWidth:t,ariaRowindex:e,checked:Object.keys(O).includes(p),columnId:C[i].id||"",columnValues:a,onRowSelected:b,"data-test-subj":"actions",eventId:p,data:o,key:i,index:D+i,rowIndex:e,ecsData:s,loadingEventIds:m,onEventDetailsPanelOpened:g,showCheckboxes:S,eventIdToNoteIds:l,isEventPinned:u,isEventViewer:d,notesCount:f,refetch:y,hasRowRenderers:h,onRuleChange:x,selectedEventIds:O,showNotes:k,tabType:w,timelineId:I,toggleShowNotes:T,setEventsLoading:A,setEventsDeleted:_})))),[C,p,o,s,b,u,d,t,e,a,l,h,D,m,f,g,x,y,O,S,k,w,I,T,F,A,_]),P=Object(i.useMemo)((()=>n.map(((t,n)=>r.a.createElement(E,{_id:p,index:n,header:t,key:null!=w?`${t.id}_${w}`:`${t.id}`,ariaRowindex:e,data:o,ecsData:s,hasRowRenderers:h,notesCount:f,renderCellValue:j,tabType:w,timelineId:I})))),[p,e,n,o,s,h,f,j,w,I]);return r.a.createElement(c.n,{"data-test-subj":"data-driven-columns"},P,N)}));x.displayName="DataDrivenColumns";const j=({data:e,fieldName:t})=>{if(!e||0===e.length)return;const n=e.find((e=>e.field===t));return null!=n&&null!=n.value?n.value:void 0},O=({data:e,fieldName:t})=>Object(i.useMemo)((()=>j({data:e,fieldName:t})),[e,t])},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(278);const i={updateActiveGroups:({activeGroups:e,id:t})=>({payload:{activeGroups:e,id:t},type:a.a.updateActiveGroups}),updateGroupOptions:({newOptionList:e,id:t})=>({payload:{newOptionList:e,id:t},type:a.a.updateGroupOptions})};n(576);const r=(e,t)=>(e=>e.groups.groupById)(e)[t]},function(e,t,n){"use strict";n.d(t,"a",(function(){return L}));var a=n(40),i=n(48),r=n(42),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(134),d=n(113),p=n(4),m=n(102),f=n(117),g=n(224),b=n(393),y=n(149),h=n(274),v=n(123),E=n(231),x=n(162),j=n(473),O=n(168),S=n(926),k=n(889),w=n(330),I=n(5);const T=I.i18n.translate("xpack.securitySolution.host.details.endpoint.endpointPolicy",{defaultMessage:"Endpoint integration policy"}),C=I.i18n.translate("xpack.securitySolution.host.details.endpoint.policyStatus",{defaultMessage:"Policy Status"}),M=I.i18n.translate("xpack.securitySolution.host.details.endpoint.sensorversion",{defaultMessage:"Endpoint version"}),A=I.i18n.translate("xpack.securitySolution.host.details.endpoint.fleetAgentStatus",{defaultMessage:"Agent status"});var _=n(419);const F=s.a.memo((({contextID:e,data:t,sourcererScopeId:n})=>{const i=Object(o.useCallback)(((t,a,i)=>s.a.createElement(g.a,{rowItems:[Object(r.getOr)("",t,a)],attrName:i,idPrefix:e?`endpoint-overview-${e}`:"endpoint-overview",sourcererScopeId:n})),[e,n]),l=Object(o.useMemo)((()=>{var e,n,r;const o=null==t||null===(e=t.hostInfo)||void 0===e?void 0:e.metadata.Endpoint.policy.applied;return[[{title:T,description:null!==(n=null==o?void 0:o.name)&&void 0!==n?n:Object(f.d)()}],[{title:C,description:null!=o&&o.status?s.a.createElement(a.EuiHealth,{"aria-label":null==o?void 0:o.status,color:(null==o?void 0:o.status)===_.a.failure?"danger":null==o?void 0:o.status},null==o?void 0:o.status):Object(f.d)()}],[{title:M,description:null!=t&&null!==(r=t.hostInfo)&&void 0!==r&&r.metadata.agent.version?i("hostInfo.metadata.agent.version",t,"agent.version"):Object(f.d)()}],[{title:A,description:null!=t&&t.hostInfo?s.a.createElement(k.a,{endpointHostInfo:t.hostInfo,"data-test-subj":"endpointHostAgentStatus"}):Object(f.d)()}]]}),[t,i]);return s.a.createElement(s.a.Fragment,null,l.map(((e,t)=>s.a.createElement(w.a,{dataTestSubj:"endpoint-overview",descriptionList:e,key:t}))))}));F.displayName="EndpointOverview";var D=n(284),N=n(212),P=n(492);const R=c()(a.EuiFlexGroup).withConfig({displayName:"HostRiskOverviewWrapper",componentId:"sc-p9r0sg-0"})(["padding-top:",";width:",";"],(({theme:e})=>e.eui.euiSizeM),(({$width:e})=>e)),L=s.a.memo((({anomaliesData:e,contextID:t,sourcererScopeId:n,data:l,endDate:c,id:k,isDraggable:I=!1,isInDetailsSidePanel:T=!1,isLoadingAnomaliesData:C,indexNames:M,loading:A,narrowDateRange:_,startDate:L,hostName:q,jobNameById:B})=>{const z=Object(x.a)(),$=Object(E.a)(z),[V]=Object(m.p)(p.B),U=Object(o.useMemo)((()=>q?Object(d.D)([q]):void 0),[q]),{from:G,to:H}=Object(u.a)(),W=Object(o.useMemo)((()=>({from:G,to:H})),[G,H]),{data:Q,isAuthorized:Y}=Object(D.c)({filterQuery:U,riskEntity:d.w.host,skip:null==q,timerange:W}),K=Object(o.useCallback)(((e,a)=>s.a.createElement(g.a,{rowItems:Object(r.getOr)([],e,a),attrName:e,idPrefix:t?`host-overview-${t}`:"host-overview",isDraggable:I,sourcererScopeId:n})),[t,I,n]),[X,J]=Object(o.useMemo)((()=>{const e=Q&&Q.length>0?Q[0]:void 0;return[{title:s.a.createElement(P.a,{title:S.g,riskScoreEntity:d.w.host}),description:s.a.createElement(s.a.Fragment,null,e?Math.round(e.host.risk.calculated_score_norm):Object(f.d)())},{title:s.a.createElement(P.a,{title:S.f,riskScoreEntity:d.w.host}),description:s.a.createElement(s.a.Fragment,null,e?s.a.createElement(N.b,{severity:e.host.risk.calculated_level,hideBackgroundColor:!0}):Object(f.d)())}]}),[Q]),Z=Object(o.useMemo)((()=>[{title:S.e,description:l&&l.host?Object(g.e)({host:l.host,isDraggable:I,noLink:!0}):Object(f.d)()},{title:S.d,description:s.a.createElement(b.a,{indexPatterns:M,field:"host.name",value:q,type:b.b.FIRST_SEEN})},{title:S.k,description:s.a.createElement(b.a,{indexPatterns:M,field:"host.name",value:q,type:b.b.LAST_SEEN})}]),[l,M,q,I]),ee=Object(o.useMemo)((()=>$?[...Z,{title:S.n,description:s.a.createElement(j.a,{anomalies:e,startDate:L,endDate:c,isLoading:C,narrowDateRange:_,jobNameById:B})}]:Z),[e,Z,c,C,_,L,$,B]),te=Object(o.useMemo)((()=>[ee,[{title:S.j,description:s.a.createElement(g.a,{rowItems:Object(r.getOr)([],"host.ip",l),attrName:"host.ip",idPrefix:t?`host-overview-${t}`:"host-overview",sourcererScopeId:n,isDraggable:I,render:e=>null!=e?s.a.createElement(v.h,{ip:e}):Object(f.d)()})},{title:S.m,description:K("host.mac",l)},{title:S.p,description:K("host.os.platform",l)}],[{title:S.o,description:K("host.os.name",l)},{title:S.c,description:K("host.os.family",l)},{title:S.r,description:K("host.os.version",l)},{title:S.a,description:K("host.architecture",l)}],[{title:S.b,description:K("cloud.provider",l)},{title:S.q,description:K("cloud.region",l)},{title:S.i,description:K("cloud.instance.id",l)},{title:S.l,description:K("cloud.machine.type",l)}]]),[t,n,l,ee,K,I]);return s.a.createElement(s.a.Fragment,null,s.a.createElement(y.c,null,s.a.createElement(O.g,{direction:T?"column":"row","data-test-subj":"host-overview"},!T&&s.a.createElement(y.b,{queryId:k,title:S.h,inspectIndex:0}),te.map(((e,t)=>s.a.createElement(w.a,{descriptionList:e,key:t}))),A&&s.a.createElement(h.a,{overlay:!0,overlayBackground:V?i.euiDarkVars.euiPageBackgroundColor:i.euiLightVars.euiPageBackgroundColor,size:"xl"}))),Y&&s.a.createElement(R,{gutterSize:T?"m":"none",direction:T?"column":"row","data-test-subj":"host-risk-overview",$width:T?"100%":"50%"},s.a.createElement(a.EuiFlexItem,null,s.a.createElement(O.d,{listItems:[X]})),s.a.createElement(a.EuiFlexItem,null,s.a.createElement(O.d,{listItems:[J]}))),l&&null!=l.endpoint?s.a.createElement(s.a.Fragment,null,s.a.createElement(a.EuiHorizontalRule,null),s.a.createElement(O.g,{direction:T?"column":"row"},s.a.createElement(F,{contextID:t,data:l.endpoint,sourcererScopeId:n}),A&&s.a.createElement(h.a,{overlay:!0,overlayBackground:V?i.euiDarkVars.euiPageBackgroundColor:i.euiLightVars.euiPageBackgroundColor,size:"xl"}))):null)}));L.displayName="HostOverview"},function(e,t,n){"use strict";n.d(t,"a",(function(){return h}));var a=n(40),i=n(2),r=n.n(i),o=n(699),s=n(670),l=n(53),c=n.n(l),u=n(516),d=n.n(u),p=n(5);p.i18n.translate("xpack.securitySolution.clipboard.copy",{defaultMessage:"Copy"});const m=p.i18n.translate("xpack.securitySolution.clipboard.copied",{defaultMessage:"Copied"}),f=p.i18n.translate("xpack.securitySolution.clipboard.to.the.clipboard",{defaultMessage:"to the clipboard"}),g=p.i18n.translate("xpack.securitySolution.clipboard.copy.to.the.clipboard",{defaultMessage:"Copy to the clipboard"});var b=n(108);const y=({children:e,content:t,isHoverAction:n,onCopy:i,titleSummary:o,toastLifeTimeMs:s})=>{const{addSuccess:l}=Object(b.a)(),u=c()("copy-to-clipboard",{securitySolution__hoverActionButton:n});return r.a.createElement(a.EuiButtonIcon,{"aria-label":g,className:u,"data-test-subj":"clipboard",iconType:"copyClipboard",onClick:e=>{e.preventDefault(),e.stopPropagation();const n=d()(`${t}`,{debug:!0});null!=i&&i({content:t,isSuccess:n}),n&&l(`${m} ${o} ${f}`,{toastLifeTimeMs:s})}},e)},h=r.a.memo((({isHoverAction:e,keyboardShortcut:t="",text:n,titleSummary:i})=>r.a.createElement(a.EuiToolTip,{content:r.a.createElement(o.a,{additionalScreenReaderOnlyContext:n,content:s.a,shortcut:t,showShortcut:""!==t})},r.a.createElement(y,{content:n,isHoverAction:e,titleSummary:i,toastLifeTimeMs:800}))));h.displayName="WithCopyToClipboard"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n(474),r=n(141),o=n(231),s=n(486),l=n(108),c=n(102),u=n(162),d=n(1041);const p=Object(r.d)((async({http:e,jobIds:t,signal:n})=>e.fetch("/internal/ml/jobs/jobs",{method:"POST",version:"1",body:JSON.stringify({jobIds:t}),asSystemRequest:!0,signal:n}))),m=(e,t)=>{const n=Object(a.useMemo)((()=>null!=e?e:[]),[e]),{loading:m,jobs:f}=Object(i.a)(),g=Object(a.useMemo)((()=>f.filter((({id:e})=>n.includes(e)))),[f,n]),b=Object(a.useMemo)((()=>g.filter((({isInstalled:e})=>e)).map((e=>e.id))),[g]),{loading:y,jobs:h}=(e=>{const[t,n]=Object(a.useState)([]),{addError:i}=Object(l.a)(),m=Object(u.a)(),f=Object(c.i)(),{error:g,loading:b,result:y,start:h}=Object(r.a)(p),v=Object(o.a)(m),E=Object(s.a)(m);return Object(a.useEffect)((()=>{v&&E&&e.length>0&&h({http:f,jobIds:e})}),[f,v,E,h,e]),Object(a.useEffect)((()=>{y&&n(y)}),[y]),Object(a.useEffect)((()=>{g&&i(g,{title:d.a})}),[i,g]),{isLicensed:E,isMlUser:v,jobs:t,loading:b}})(b),v=Object(a.useMemo)((()=>{const e=h.map((e=>`.ml-anomalies-${e.results_index_name}`));return[...new Set(e)]}),[h]);return{mlJobLoading:m||y,ruleIndices:Object(a.useMemo)((()=>v.length>0?v:null!=t?t:[]),[t,v])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return x}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(299),c=n(183),u=n(120),d=n(210),p=n(5);const m=p.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.alertsActions.sectionTitle",{defaultMessage:"Alerts actions"}),f=p.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.alertsActions.singleAlertCloseLabel",{defaultMessage:"Close this alert"}),g=p.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.alertsActions.bulkCloseLabel.disabled",{defaultMessage:"Close all alerts that match this exception and were generated by this rule (Lists and non-ECS fields are not supported)"}),b=p.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.alertsActions.bulkCloseLabel",{defaultMessage:"Close all alerts that match this exception and were generated by selected rule/s"}),y=p.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.alertsActions.endpointQuarantineText",{defaultMessage:"On all Endpoint hosts, quarantined files that match the exception are automatically restored to their original locations. This exception applies to all rules using Endpoint exceptions."}),h=o.a.section.withConfig({displayName:"FlyoutCheckboxesSection",componentId:"sc-1ggwgok-0"})(["overflow-y:inherit;height:auto;.euiFlyoutBody__overflowContent{padding-top:0;}"]),v=o()(s.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-1ggwgok-1"})(["",""],(()=>Object(r.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),E=({isAlertDataLoading:e,exceptionListItems:t,exceptionListType:n,shouldCloseSingleAlert:r,shouldBulkCloseAlert:o,disableBulkClose:p,alertData:E,alertStatus:x,onDisableBulkClose:j,onUpdateBulkCloseIndex:O,onBulkCloseCheckboxChange:S,onSingleAlertCloseCheckboxChange:k})=>{const{loading:w,signalIndexName:I}=Object(l.a)(),T=Object(a.useMemo)((()=>null!==I?[I]:[]),[I]),[C,{indexPatterns:M}]=Object(c.b)(T),A=Object(a.useCallback)((e=>{S(e.currentTarget.checked)}),[S]),_=Object(a.useCallback)((e=>{null!=k&&k(e.currentTarget.checked)}),[k]);return Object(a.useEffect)((()=>{O(o&&null!=T?T:void 0)}),[T,O,o]),Object(a.useEffect)((()=>{!0===p&&S(!1)}),[p,S]),Object(a.useEffect)((()=>{!1===C&&!1===w&&j((e=>{for(const{entries:t}of e)for(const e of null!=t?t:[])if(Object(d.l)(e)===u.d.LIST)return!0;return!1})(t)||((e,t)=>{const n=e=>t.fields.some((({name:t})=>t===e.field));if(0===e.length)return!1;for(const{entries:t}of e)for(const e of null!=t?t:[])if("nested"===e.type){for(const t of e.entries)if(!1===n(t))return!0}else if(!1===n(e))return!0;return!1})(t,M)||t.every((e=>0===e.entries.length)))}),[j,t,C,w,M]),i.a.createElement(h,null,i.a.createElement(v,{size:"xs"},i.a.createElement("h3",null,m)),i.a.createElement(s.EuiSpacer,{size:"s"}),null!=E&&"closed"!==x&&i.a.createElement(s.EuiFormRow,{fullWidth:!0},i.a.createElement(s.EuiCheckbox,{"data-test-subj":"closeAlertOnAddExceptionCheckbox",id:"close-alert-on-add-add-exception-checkbox",label:f,checked:r,onChange:_,disabled:w||C||e})),i.a.createElement(s.EuiFormRow,{fullWidth:!0},i.a.createElement(s.EuiCheckbox,{"data-test-subj":"bulkCloseAlertOnAddExceptionCheckbox",id:"bulk-close-alert-on-add-add-exception-checkbox",label:p?g:b,checked:o,onChange:A,disabled:p||w||C||e})),"endpoint"===n&&i.a.createElement(i.a.Fragment,null,i.a.createElement(s.EuiSpacer,{size:"s"}),i.a.createElement(s.EuiText,{"data-test-subj":"addExceptionEndpointText",color:"subdued",size:"s"},y)))},x=i.a.memo(E);x.displayName="ExceptionItemsFlyoutAlertsActions"},function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(2),i=n(312),r=n(156),o=n(49),s=n(102);var l=n(281),c=n(19),u=n(5);const d=u.i18n.translate("xpack.securitySolution.ruleExceptions.logic.closeAlerts.error",{defaultMessage:"Failed to close alerts"});var p=n(108),m=n(410);const f=()=>{const{addSuccess:e,addError:t,addWarning:n}=Object(p.a)(),[f,g]=Object(a.useState)(!1),b=Object(a.useRef)(null);return Object(a.useEffect)((()=>{let a=!0;const p=new AbortController;return b.current=async(f,b,y,h)=>{try{var v,E,x,j,O,S,k,w;let t,d;if(g(!0),null!=y&&(t=await Object(m.a)({signalIds:[y],status:"closed",signal:p.signal})),null!=h){const e=Object(i.b)(["open","acknowledged","in-progress"]),t=await(async(e,t,n,a,i,l=!0)=>{const c={fields:[],title:a.join()},{filter:u}=await Object(r.q)({http:s.b.get().http,exceptions:i,excludeExceptions:l,chunkSize:10}),d={query:e,language:t},p=((e,t)=>null!=t?[...e,t]:[...e])(n,u);return Object(o.buildEsQuery)(c,d,p,{allowLeadingWildcards:!0,queryStringOptions:{analyze_wildcard:!0},ignoreFilterIfFieldNotInIndex:!1,dateFormatTZ:"Zulu"})})("","kuery",[...f.flatMap((e=>Object(i.c)(e))),...e],h,Object(l.m)(b),!1);d=await Object(m.a)({query:t,status:"closed",signal:p.signal})}const T=(null!==(v=null===(E=t)||void 0===E?void 0:E.updated)&&void 0!==v?v:0)+(null!==(x=null===(j=d)||void 0===j?void 0:j.updated)&&void 0!==x?x:0),C=null!==(O=null===(S=t)||void 0===S?void 0:S.version_conflicts)&&void 0!==O?O:0+(null!==(k=null===(w=d)||void 0===w?void 0:w.version_conflicts)&&void 0!==k?k:0);a&&(g(!1),e((I=T,u.i18n.translate("xpack.securitySolution.ruleExceptions.logic.closeAlerts.success",{values:{numAlerts:I},defaultMessage:"Successfully updated {numAlerts} {numAlerts, plural, =1 {alert} other {alerts}}"}))),C>0&&n({title:c.f(C),text:c.g(T,C)}))}catch(e){a&&(g(!1),t(e,{title:d}))}var I},()=>{a=!1,p.abort()}}),[e,t,n]),[f,b.current]}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return f}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(5);const c=l.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.anonymizedStat.anonymizeFieldsdDescription",{defaultMessage:"Anonymized"});var u=n(553),d=n(21);const p=s()(a.EuiFlexItem)`
  margin-right: ${({theme:e})=>e.eui.euiSizeS};
`,m=({anonymized:e,isDataAnonymizable:t,showIcon:n=!1})=>{const r=Object(i.useMemo)((()=>(e=>e?"default":"subdued")(t)),[t]),o=Object(i.useMemo)((()=>(({anonymized:e,isDataAnonymizable:t})=>t&&0!==e?(e=>l.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.anonymizedStat.fieldsWillBeAnonymizedTooltip",{values:{anonymized:e},defaultMessage:"{anonymized} {anonymized, plural, =1 {field} other {fields}} in this context will be replaced with random values. Responses are automatically translated back to the original values."}))(e):(e=>l.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.anonymizedStat.noneOfTheDataWillBeAnonymizedTooltip",{values:{isDataAnonymizable:e},defaultMessage:"{isDataAnonymizable, select, true {Select fields to be replaced with random values. Responses are automatically translated back to the original values.} other {This context cannot be anonymized}}"}))(t))({anonymized:e,isDataAnonymizable:t})),[e,t]),s=Object(i.useMemo)((()=>Object(d.jsx)(a.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},n&&Object(d.jsx)(p,{grow:!1},Object(d.jsx)(a.EuiIcon,{color:r,"data-test-subj":"anonymizationIcon",size:"m",type:"eyeClosed"})),Object(d.jsx)(a.EuiFlexItem,{grow:!1},Object(d.jsx)(a.EuiText,{color:r,"data-test-subj":"description",size:"s"},c)))),[r,n]);return Object(d.jsx)(a.EuiToolTip,{content:o},Object(d.jsx)(a.EuiStat,{"data-test-subj":"anonymizedFieldsStat",description:s,reverse:!0,titleColor:r,title:e,titleSize:u.a}))};m.displayName="AnonymizedStatComponent";const f=r.a.memo(m)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n(5);i.i18n.translate("xpack.securitySolution.firstLastSeenHost.errorSearchDescription",{defaultMessage:"An error has occurred on first last seen host search"});const r=i.i18n.translate("xpack.securitySolution.firstLastSeenHost.failSearchDescription",{defaultMessage:"Failed to run search on first last seen host"});var o=n(194),s=n(113);const l=({field:e,value:t,order:n,defaultIndex:i,filterQuery:l})=>{const{loading:c,result:u,search:d,error:p}=Object(o.a)({factoryQueryType:s.d,initialResult:{firstSeen:null,lastSeen:null},errorMessage:r});return Object(a.useEffect)((()=>{d({defaultIndex:i,factoryQueryType:s.d,field:e,value:t,order:n,filterQuery:l})}),[i,e,t,n,d,l]),[c,Object(a.useMemo)((()=>({firstSeen:u.firstSeen,lastSeen:u.lastSeen,errorMessage:p?p.toString():null})),[u,p])]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n.n(a),r=n(63),o=n(199),s=n(291);const l=()=>document.querySelector('[tour-step="create-case-submit"]'),c=()=>{const[e,t]=Object(a.useState)(o.a.createCase),n=Object(a.useCallback)((()=>{var e;null===(e=l())||void 0===e||e.scrollIntoView()}),[]),r=Object(a.useCallback)((()=>{t(o.a.submitCase),n(),setTimeout((()=>{var e;null===(e=l())||void 0===e||e.focus()}),500)}),[n]);return i.a.createElement(i.a.Fragment,null,e===o.a.createCase&&i.a.createElement(s.a,{onClick:r,step:o.a.createCase,tourId:o.b.alertsCases}),e===o.a.submitCase&&i.a.createElement(s.a,{step:o.a.submitCase,tourId:o.b.alertsCases}))};var u=n(363),d=n(102),p=n(135);const m=({onMenuItemClick:e,ariaLabel:t,ecsData:n,nonEcsData:s,onSuccess:l,isActiveTimelines:m,isInDetections:f,refetch:g})=>{const{cases:b}=Object(d.j)().services,y=Object(d.h)(),h=Object(a.useMemo)((()=>{var e,t;return null==n||null===(e=n.event)||void 0===e||null===(t=e.kind)||void 0===t?void 0:t.includes("signal")}),[n]),v=Object(a.useMemo)((()=>{var e,t;return null!=n&&n._id?[{alertId:null!==(e=null==n?void 0:n._id)&&void 0!==e?e:"",index:null!==(t=null==n?void 0:n._index)&&void 0!==t?t:"",type:r.AttachmentType.alert,rule:b.helpers.getRuleIdFromEvent({ecs:n,data:null!=s?s:[]})}]:[]}),[b.helpers,n,s]),{activeStep:E,incrementStep:x,setStep:j,isTourShown:O}=Object(u.b)(),S=()=>{l&&l(),g&&g()},k=Object(a.useCallback)((async()=>{O(o.b.alertsCases)&&j(o.b.alertsCases,o.a.viewCase)}),[j,O]),w=Object(a.useMemo)((()=>!O(o.b.alertsCases)||E!==o.a.addAlertToCase&&E!==o.a.createCase&&E!==o.a.submitCase?{}:{initialValue:o.d}),[E,O]),I=b.hooks.useCasesAddToNewCaseFlyout({onClose:e,onSuccess:S,afterCaseCreated:k,...w}),T=b.hooks.useCasesAddToExistingCaseModal({onClose:e,onSuccess:S}),C=Object(a.useCallback)((()=>{e(),I.open({attachments:v,...O(o.b.alertsCases)?{headerContent:i.a.createElement(c,null)}:{}}),O(o.b.alertsCases)&&E===o.a.addAlertToCase&&x(o.b.alertsCases)}),[e,I,v,O,E,x]),M=Object(a.useCallback)((()=>{e(),T.open({getAttachments:()=>v})}),[v,e,T]);return{addToCaseActionItems:Object(a.useMemo)((()=>(m||f)&&y.create&&y.read&&h?[{"aria-label":t,"data-test-subj":"add-to-existing-case-action",key:"add-to-existing-case-action",onClick:M,size:"s",name:p.j},{"aria-label":t,"data-test-subj":"add-to-new-case-action",key:"add-to-new-case-action",onClick:C,size:"s",name:p.k}]:[]),[t,M,C,y.create,y.read,f,m,h]),handleAddToNewCaseClick:C}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return I}));var a=n(2),i=n.n(a),r=n(8),o=n(40),s=n(44),l=n(210),c=n(174),u=n(80),d=n(215),p=n(107),m=n(183),f=n(274),g=n(17),b=n(102),y=n(487),h=n(1097),v=n(347),E=n(575),x=n(953),j=n(830),O=n(611),S=n(574);const k=[c.c.MAC,c.c.WINDOWS,c.c.LINUX].map((e=>({value:e,inputDisplay:v.a[e]}))),w=e=>e.entries.map((e=>(delete e.id,e))),I=Object(a.memo)((({allowSelectOs:e=!0,item:t,policies:n,policiesIsLoading:v,onChange:I,mode:T})=>{const C=Object(p.a)("eventFilters-form"),{http:M}=Object(b.j)().services,A=Object(a.useCallback)((({field:e,query:t})=>new S.a(M).getSuggestions({field:e.name,query:t})),[M]),_=(F=A,Object(a.useMemo)((()=>({getQuerySuggestions:()=>{},hasQuerySuggestions:e=>!1,getValueSuggestions:F})),[F]));var F;const[D,N]=Object(a.useState)(!1),[P,R]=Object(a.useState)(!t.name),[L,q]=Object(a.useState)(""),[B,z]=Object(a.useState)(!1),[$,V]=Object(a.useState)([]),U=Object(g.b)().isPlatinumPlus(),G=Object(a.useMemo)((()=>Object(y.e)(t)),[t]),[H,W]=Object(a.useState)(!Object(j.d)(null==t?void 0:t.tags)),[Q,Y]=Object(a.useState)(!1),K=Object(a.useMemo)((()=>[d.z]),[]),[X,{indexPatterns:J}]=Object(m.b)(K,void 0,d.k),[Z,ee]=Object(a.useState)(!!t.entries.length||!1),te=Object(a.useMemo)((()=>null==t?void 0:t.comments),[]),ne=Object(a.useMemo)((()=>U||"edit"===T&&(!G||H&&G&&D)),[T,G,D,U,H]),ae=Object(a.useMemo)((()=>!P&&!!t.entries.length&&t.entries.some((e=>""!==e.value||e.value.length))),[P,t.entries]),ie=Object(a.useCallback)((e=>{const n=e?{...t,...e}:t;w(n),I({item:n,isValid:ae&&Z})}),[Z,t,ae,I]);Object(a.useEffect)((()=>{!D&&t.tags&&W(!Object(j.d)(t.tags))}),[t.tags,D]),Object(a.useEffect)((()=>{if(D)return;const e=t.tags?Object(y.c)({tags:t.tags}):[];if(!e.length)return;const a=n.filter((t=>e.includes(t.id)));V(a)}),[D,t,n]);const re=Object(a.useMemo)((()=>{const e=t;return e.entries=t.entries.length?t.entries:[{field:"",operator:"included",type:"match",value:""}],w(e),ee(!!t.entries.length),e}),[t]),oe=Object(a.useCallback)((e=>{if(!t)return;const n=e.target.value.trim();R(!n),ie({name:n}),D||N(!0)}),[t,D,ie]),se=Object(a.useMemo)((()=>{var e;return i.a.createElement(o.EuiFormRow,{label:h.e,fullWidth:!0,isInvalid:P&&B,error:h.d},i.a.createElement(o.EuiFieldText,{"aria-label":h.e,id:"eventFiltersFormInputName",defaultValue:null!==(e=null==t?void 0:t.name)&&void 0!==e?e:"","data-test-subj":C("name-input"),fullWidth:!0,maxLength:256,required:B,onChange:oe,onBlur:()=>!B&&z(!0)}))}),[C,P,oe,B,null==t?void 0:t.name]),le=Object(a.useCallback)((e=>{t&&(D||N(!0),ie({description:e.target.value.toString().trim()}))}),[t,D,ie]),ce=Object(a.useMemo)((()=>{var e;return i.a.createElement(o.EuiFormRow,{label:h.b,fullWidth:!0},i.a.createElement(o.EuiTextArea,{id:"eventFiltersFormInputDescription",defaultValue:null!==(e=null==t?void 0:t.description)&&void 0!==e?e:"",onChange:le,fullWidth:!0,"data-test-subj":C("description-input"),"aria-label":h.b,maxLength:256}))}),[null==t?void 0:t.description,C,le]),ue=Object(a.useMemo)((()=>{var e;return null!=t&&null!==(e=t.os_types)&&void 0!==e&&e.length?t.os_types[0]:c.c.WINDOWS}),[null==t?void 0:t.os_types]),de=Object(a.useCallback)((e=>{t&&(ie({os_types:[e],entries:t.entries}),D||N(!0))}),[t,D,ie]),pe=Object(a.useMemo)((()=>i.a.createElement(o.EuiFormRow,{label:h.f,fullWidth:!0},i.a.createElement(o.EuiSuperSelect,{name:"os",options:k,fullWidth:!0,valueOfSelected:ue,onChange:de}))),[de,ue]),me=Object(a.useCallback)((e=>{t&&(q(e),ie({comments:[{comment:e}]}),D||N(!0))}),[t,D,ie]),fe=Object(a.useMemo)((()=>i.a.createElement(O.a,{exceptionItemComments:te,newCommentValue:L,newCommentOnChange:me})),[te,me,L]),ge=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiText,{size:"xs"},i.a.createElement("h3",null,i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.commentsSectionTitle",defaultMessage:"Comments"}))),i.a.createElement(o.EuiSpacer,{size:"xs"}),i.a.createElement(o.EuiText,{size:"s"},i.a.createElement("p",null,i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.commentsSectionDescription",defaultMessage:"Add a comment to your event filter."}))),i.a.createElement(o.EuiSpacer,{size:"m"}),fe)),[fe]),be=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiText,{size:"xs"},i.a.createElement("h3",null,i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.detailsSectionTitle",defaultMessage:"Details"}))),i.a.createElement(o.EuiSpacer,{size:"xs"}),i.a.createElement(o.EuiText,{size:"s"},i.a.createElement("p",null,h.a)),i.a.createElement(o.EuiSpacer,{size:"m"}),se,ce)),[se,ce]),ye=Object(a.useCallback)((e=>{var n,a,i,o,s,l,u,d,p;if(!D&&void 0===e.exceptionItems[0]||Object(r.isEqual)(null===(n=e.exceptionItems[0])||void 0===n?void 0:n.entries,null==t?void 0:t.entries)){var m;const t=(null===(m=e.exceptionItems[0])||void 0===m?void 0:m.entries.map((e=>e.field)))||[""];return Y((p=t.reduce(((e,t)=>(t in e?e[t]++:e[t]=1,e)),{}),Object.values(p).some((e=>e>1)))),void(D||N(!0))}const f=void 0!==e.exceptionItems[0]?{...e.exceptionItems[0],name:null!==(a=null==t?void 0:t.name)&&void 0!==a?a:"",description:null!==(i=null==t?void 0:t.description)&&void 0!==i?i:"",comments:null!==(o=null==t?void 0:t.comments)&&void 0!==o?o:[],os_types:null!==(s=null==t?void 0:t.os_types)&&void 0!==s?s:[c.c.WINDOWS],tags:null!==(l=null==t?void 0:t.tags)&&void 0!==l?l:[],meta:t.meta}:t,g=void 0!==e.exceptionItems[0]&&!(e.errorExists&&(null===(u=e.exceptionItems[0])||void 0===u||null===(d=u.entries)||void 0===d||!d.length));ee(g),ie(f),D||N(!0)}),[t,D,ie]),he=Object(a.useMemo)((()=>Object(u.getExceptionBuilderComponentLazy)({allowLargeValueLists:!1,httpService:M,autocompleteService:_,exceptionListItems:[re],listType:E.c,listId:E.a,listNamespaceType:"agnostic",ruleName:h.g,indexPatterns:J,isOrDisabled:!0,isOrHidden:!0,isAndDisabled:!1,isNestedDisabled:!1,dataTestSubj:"alert-exception-builder",idAria:"alert-exception-builder",onChange:ye,operatorsList:l.b,osTypes:t.os_types})),[_,ye,M,J,t,re]),ve=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiText,{size:"xs"},i.a.createElement("h3",null,i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.criteriaSectionTitle",defaultMessage:"Conditions"}))),i.a.createElement(o.EuiSpacer,{size:"xs"}),i.a.createElement(o.EuiText,{size:"s"},i.a.createElement("p",null,e?i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.criteriaSectionDescription.withOs",defaultMessage:"Select an operating system and add conditions."}):i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.criteriaSectionDescription.withoutOs",defaultMessage:"Add conditions."}))),i.a.createElement(o.EuiSpacer,{size:"m"}),e?i.a.createElement(i.a.Fragment,null,pe,i.a.createElement(o.EuiSpacer,null)):null,he)),[e,he,pe]),Ee=Object(a.useCallback)((e=>{const t=e.isGlobal?[y.b]:e.selected.map((e=>`${y.a}${e.id}`));e.isGlobal||V(e.selected),ie({tags:t}),D||N(!0)}),[ie,D,V]),xe=Object(a.useMemo)((()=>i.a.createElement(x.a,{selected:$,options:n,isGlobal:G,isLoading:v,isPlatinumPlus:U,onChange:Ee,"data-test-subj":C("effectedPolicies")})),[$,n,G,v,U,Ee,C]);return Object(a.useEffect)((()=>{ie()}),[ie]),X||!t?i.a.createElement(f.a,{size:"xl"}):i.a.createElement(o.EuiForm,{component:"div"},be,i.a.createElement(o.EuiHorizontalRule,null),ve,Q&&i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiSpacer,{size:"xs"}),i.a.createElement(o.EuiText,{color:"subdued",size:"xs","data-test-subj":"duplicate-fields-warning-message"},i.a.createElement(s.FormattedMessage,{id:"xpack.securitySolution.eventFilters.warningMessage.duplicateFields",defaultMessage:"Using multiples of the same filed values can degrade Endpoint performance and/or create ineffective rules"}))),ne&&i.a.createElement(i.a.Fragment,null,i.a.createElement(o.EuiHorizontalRule,null),xe),i.a.createElement(o.EuiHorizontalRule,null),ge)}));I.displayName="EventFiltersForm"},,function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n.n(a),r=n(40),o=n(5);const s=o.i18n.translate("xpack.securitySolution.rule_exceptions.itemMeta.nameLabel",{defaultMessage:"Exception name"}),l=o.i18n.translate("xpack.securitySolution.rule_exceptions.itemMeta.namePlaceholder",{defaultMessage:"Name your exception"}),c=({exceptionItemName:e,onChange:t})=>{const n=Object(a.useCallback)((e=>{t(["name",e.target.value])}),[t]);return i.a.createElement(r.EuiFormRow,{label:s,"data-test-subj":"exceptionFlyoutName"},i.a.createElement(r.EuiFieldText,{placeholder:l,value:e,onChange:n,"data-test-subj":"exceptionFlyoutNameInput"}))},u=i.a.memo(c);u.displayName="ExceptionsFlyoutMeta"},function(e,t,n){"use strict";n.d(t,"a",(function(){return O}));var a=n(2),i=n.n(a),r=n(40),o=n(80),s=n(120),l=n(41),c=n.n(l),u=n(163),d=n(197),p=n(102),m=n(5);const f=m.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.itemConditions.conditionsTitle",{defaultMessage:"Conditions"}),g=m.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.itemConditions.infoLabel",{defaultMessage:"Alerts are generated when the rule's conditions are met, except when:"}),b=m.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.itemConditions.sequenceWarningAdd",{defaultMessage:"This rule's query contains an EQL sequence statement. The exception created will apply to all events in the sequence."}),y=m.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.itemConditions.sequenceWarningEdit",{defaultMessage:"This rule's query contains an EQL sequence statement. The exception modified will apply to all events in the sequence."}),h=m.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.itemConditions.operatingSystemPlaceHolder",{defaultMessage:"Select an operating system"});var v=n(458);const E=[{label:v.g,value:["windows"]},{label:v.f,value:["macos"]},{label:v.e,value:["linux"]},{label:v.h,value:["windows","macos"]}],x=c()(r.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-x9h592-0"})(["",""],(()=>Object(l.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),j=({exceptionItemName:e,allowLargeValueLists:t,exceptionListItems:n,indexPatterns:l,rules:c,exceptionListType:m,showOsTypeOptions:j,selectedOs:O,isEdit:S,onOsChange:k,onExceptionItemAdd:w,onSetErrorExists:I,getExtendedFields:T})=>{const{http:C,unifiedSearch:M}=Object(p.j)().services,A=Object(a.useMemo)((()=>m===s.b.ENDPOINT),[m]),_=Object(a.useMemo)((()=>null!=c&&c.some((e=>Object(d.b)(e.type)&&Object(d.a)(e.query)))),[c]),F=Object(a.useMemo)((()=>{if(A)return"endpoint_list";const e=A?u.k:void 0;return S?n[0].list_id:e}),[A,S,n]),D=Object(a.useMemo)((()=>{const e=A?"agnostic":void 0;return S?n[0].namespace_type:e}),[n,S,A]),N=Object(a.useCallback)((({exceptionItems:e,errorExists:t})=>{w(e),I(t)}),[I,w]),P=Object(a.useCallback)((e=>{const t=e[0].value;null!=k&&k(t||void 0)}),[k]),R=Object(a.useMemo)((()=>({asPlainText:!0})),[]),L=Object(a.useMemo)((()=>E.filter((e=>O===e.value))),[O]),q=Object(a.useMemo)((()=>j&&void 0===O),[j,O]),B=Object(a.useMemo)((()=>S?y:b),[S]),z=Object(a.useMemo)((()=>{var e;return null!==(e=S?n[0].os_types:O)&&void 0!==e?e:[]}),[n,S,O]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(x,{size:"xs"},i.a.createElement("h3",null,f)),_&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiCallOut,{"data-test-subj":"eqlSequenceCallout",title:B}),i.a.createElement(r.EuiSpacer,null)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiText,{size:"s"},g),i.a.createElement(r.EuiSpacer,{size:"s"}),j&&!S&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiFormRow,{label:v.d},i.a.createElement(r.EuiComboBox,{placeholder:h,singleSelection:R,options:E,selectedOptions:L,onChange:P,isClearable:!1,"data-test-subj":"osSelectionDropdown"})),i.a.createElement(r.EuiSpacer,{size:"l"})),j&&S&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiText,{size:"xs","data-test-subj":"exceptionItemSelectedOs"},i.a.createElement("dl",null,i.a.createElement("dt",null,v.d),i.a.createElement("dd",null,(e=>e.reduce(((e,t)=>`${(e=>"linux"===e?v.e:"macos"===e?v.f:v.g)(t)}, ${e}`),"").slice(0,-2))(z)))),i.a.createElement(r.EuiSpacer,null)),Object(o.getExceptionBuilderComponentLazy)({allowLargeValueLists:t,httpService:C,autocompleteService:M.autocomplete,exceptionListItems:n,listType:m,osTypes:z,listId:F,listNamespaceType:D,exceptionItemName:e,indexPatterns:l,isOrDisabled:q,isAndDisabled:q,isNestedDisabled:q,dataTestSubj:"alertExceptionBuilder",idAria:"alertExceptionBuilder",onChange:N,isDisabled:q,allowCustomFieldOptions:!A,getExtendedFields:T}))},O=i.a.memo(j);O.displayName="ExceptionsConditions"},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(40),i=n(50),r=n.n(i),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(5);const d=u.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.expireTime.expireTimeLabel",{defaultMessage:"Exception will expire at"}),p=u.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.expireTime.exceptionExpireTime",{defaultMessage:"Exception Expiration"}),m=u.i18n.translate("xpack.securitySolution.rule_exceptions.flyoutComponents.expireTime.exceptionExpireTimeError",{defaultMessage:"Selected date and time must be in the future."}),f=c()(a.EuiTitle).withConfig({displayName:"SectionHeader",componentId:"sc-1t4zrw1-0"})(["",""],(()=>Object(l.css)(["font-weight:",";"],(({theme:e})=>e.eui.euiFontWeightSemiBold)))),g=({expireTime:e,setExpireTime:t,setExpireError:n})=>{const[i,l]=Object(o.useState)(e),[c,u]=Object(o.useState)(!1),[g,b]=Object(o.useState)([]),y=Object(o.useCallback)((e=>{l(null!=e?e:void 0),t(null!=e?e:void 0),null!=e&&e.isBefore()?(u(!0),b([m]),n(!0)):(u(!1),b([]),n(!1))}),[l,t,n]);return s.a.createElement("div",null,s.a.createElement(f,{size:"xs"},s.a.createElement("h3",null,p)),s.a.createElement(a.EuiSpacer,{size:"s"}),s.a.createElement(a.EuiFormRow,{error:g,isInvalid:c,label:d},s.a.createElement(a.EuiDatePicker,{showTimeSelect:!0,selected:i,isInvalid:c,onChange:y,onClear:()=>y(null),minDate:r()()})))},b=s.a.memo(g);b.displayName="ExceptionsExpireTime"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return g}));var a=n(5),i=n(125),r=n(40),o=n(2),s=n.n(o),l=n(137);const c=s.a.createElement(r.EuiText,{color:"subdued",size:"xs"},l.Zb);var u=n(228),d=n(589);const{emptyField:p}=i.h,m={author:{type:i.a.COMBO_BOX,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldAuthorLabel",{defaultMessage:"Author"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldAuthorHelpText",{defaultMessage:"Type one or more authors for this rule. Press enter after each author to add a new one."}),labelAppend:c,validations:[{validator:p(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.authorFieldEmptyError",{defaultMessage:"An author must not be empty"})),type:i.g.ARRAY_ITEM,isBlocking:!1}]},name:{type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldNameLabel",{defaultMessage:"Name"}),validations:[{validator:p(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.nameFieldRequiredError",{defaultMessage:"A name is required."}))}]},description:{type:i.a.TEXTAREA,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldDescriptionLabel",{defaultMessage:"Description"}),validations:[{validator:p(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.descriptionFieldRequiredError",{defaultMessage:"A description is required."}))}]},isBuildingBlock:{type:i.a.CHECKBOX,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldBuildingBlockLabel",{defaultMessage:'Mark all generated alerts as "building block" alerts'}),labelAppend:c},isAssociatedToEndpointList:{type:i.a.CHECKBOX,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldAssociatedToEndpointListLabel",{defaultMessage:"Add existing Endpoint exceptions to the rule"}),labelAppend:c},severity:{value:{},mapping:{},isMappingChecked:{}},riskScore:{value:{},mapping:{},isMappingChecked:{}},references:{label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldReferenceUrlsLabel",{defaultMessage:"Reference URLs"}),labelAppend:c,validations:[{validator:(...e)=>{const[{value:t,path:n}]=e;let a=!1;return t.forEach((e=>{Object(u.c)(e)&&(a=!0)})),a?{code:"ERR_FIELD_FORMAT",path:n,message:d.k}:void 0}}]},falsePositives:{label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldFalsePositiveLabel",{defaultMessage:"False positive examples"}),labelAppend:c},investigationFields:{type:i.a.COMBO_BOX,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldCustomHighlightedFieldsLabel",{defaultMessage:"Custom highlighted fields"}),labelAppend:c},license:{type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldLicenseLabel",{defaultMessage:"License"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldLicenseHelpText",{defaultMessage:"Add a license name"}),labelAppend:c},ruleNameOverride:{type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRuleNameOverrideLabel",{defaultMessage:"Rule name override"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldRuleNameOverrideHelpText",{defaultMessage:"Choose a field from the source event to populate the rule name in the alert list."}),labelAppend:c},threat:{label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldMitreThreatLabel",{defaultMessage:"MITRE ATT&CK\\u2122"}),labelAppend:c},threatIndicatorPath:{type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThreatIndicatorPathLabel",{defaultMessage:"Indicator prefix override"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThreatIndicatorPathHelpText",{defaultMessage:"Specify the document prefix containing your indicator fields. Used for enrichment of indicator match alerts."}),labelAppend:c},timestampOverride:{type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTimestampOverrideLabel",{defaultMessage:"Timestamp override"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTimestampOverrideHelpText",{defaultMessage:"Choose timestamp field used when executing rule. Pick field with timestamp closest to ingest time (e.g. event.ingested)."}),labelAppend:c},timestampOverrideFallbackDisabled:{type:i.a.CHECKBOX,defaultValue:!1,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTimestampOverrideFallbackDisabledLabel",{defaultMessage:"Do not use @timestamp as a fallback timestamp field"}),labelAppend:c},tags:{type:i.a.COMBO_BOX,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTagsLabel",{defaultMessage:"Tags"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldTagsHelpText",{defaultMessage:"Type one or more custom identifying tags for this rule. Press enter after each tag to begin a new one."}),labelAppend:c,validations:[{validator:p(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.tagFieldEmptyError",{defaultMessage:"A tag must not be empty"})),type:i.g.ARRAY_ITEM,isBlocking:!1}]},note:{type:i.a.TEXTAREA,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.guideLabel",{defaultMessage:"Investigation guide"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.guideHelpText",{defaultMessage:"Provide helpful information for analysts that are investigating detection alerts. This guide will appear on the rule details page and in timelines (as notes) created from detection alerts generated by this rule."}),labelAppend:c}},f={type:i.a.TEXT,label:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThreatIndicatorPathLabel",{defaultMessage:"Indicator prefix override"}),helpText:a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.fieldThreatIndicatorPathHelpText",{defaultMessage:"Specify the document prefix containing your indicator fields. Used for enrichment of indicator match alerts."}),validations:[{validator:p(a.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepAboutRule.threatIndicatorPathFieldEmptyError",{defaultMessage:"Indicator prefix override must not be empty"})),type:i.g.FIELD}]},g={...m,threatIndicatorPath:f}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(125);const s=n(5).i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepDefineRule.multiSelectFields.placeholderText",{defaultMessage:"Select a field"}),l=({browserFields:e,disabledText:t,isDisabled:n,field:l,fullWidth:c=!1})=>{const u=Object(a.useMemo)((()=>({fullWidth:!0,noSuggestions:!1,options:e.map((e=>({label:e.name}))),placeholder:s,onCreateOption:void 0,...c?{}:{style:{width:"410px"}},isDisabled:n})),[e,n,c]),d=i.a.createElement(o.b,{field:l,idAria:"detectionEngineMultiSelectAutocompleteField",euiFieldProps:u});return n?i.a.createElement(r.EuiToolTip,{position:"right",content:t},d):d},c=i.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n.n(a),r=n(102),o=n(40);const s=({url:e,children:t,ariaLabel:n})=>t?i.a.createElement(o.EuiToolTip,{content:e,position:"top","data-test-subj":"externalLinkTooltip"},i.a.createElement(o.EuiLink,{href:e,"aria-label":n,external:!0,target:"_blank",rel:"noopener","data-test-subj":"externalLink"},t)):null;var l=n(854);const c=({guidePath:e="security",docPath:t,linkText:n})=>{const{services:a}=Object(r.j)(),{ELASTIC_WEBSITE_URL:o,DOC_LINK_VERSION:c}=a.docLinks,u=`${o}guide/en/${e}/${c}/${t}`,d=`${n} - ${l.a}`;return i.a.createElement(s,{url:u,ariaLabel:d},n)},u=Object(a.memo)(c)},function(e,t,n){"use strict";n.d(t,"g",(function(){return T})),n.d(t,"d",(function(){return C})),n.d(t,"m",(function(){return M})),n.d(t,"p",(function(){return A})),n.d(t,"e",(function(){return _})),n.d(t,"l",(function(){return F})),n.d(t,"k",(function(){return P})),n.d(t,"i",(function(){return R})),n.d(t,"q",(function(){return q})),n.d(t,"f",(function(){return B})),n.d(t,"j",(function(){return z})),n.d(t,"o",(function(){return $})),n.d(t,"n",(function(){return V})),n.d(t,"h",(function(){return G})),n.d(t,"a",(function(){return H})),n.d(t,"c",(function(){return W})),n.d(t,"b",(function(){return Q}));var a=n(41),i=n.n(a),r=n(40),o=n(129),s=n(374),l=n(42),c=n(2),u=n.n(c),d=n(751),p=n(72),m=n(522),f=n(145),g=n(810),b=n(811),y=n(415),h=n(329),v=n(213),E=n(117),x=n(1094),j=n(207);const O=({label:e,license:t})=>u.a.createElement(u.a.Fragment,null,e,u.a.createElement(r.EuiBetaBadge,{label:y.e,style:{verticalAlign:"middle",marginLeft:"8px"},size:"s"}),!t.isAtLeast(j.ab)&&u.a.createElement(r.EuiToolTip,{position:"top",content:y.b},u.a.createElement(r.EuiIcon,{type:"warning",size:"l",color:"#BD271E",style:{marginLeft:"8px"}}))),S=i()(r.EuiFlexItem).withConfig({displayName:"NoteDescriptionContainer",componentId:"sc-1i3nngy-0"})(["height:105px;overflow-y:hidden;"]),k=e=>!Object(l.isEmpty)(e.join("")),w=i()(r.EuiBadge).withConfig({displayName:"EuiBadgeWrap",componentId:"sc-1i3nngy-1"})([".euiBadge__text{white-space:pre-wrap !important;}"]),I=i.a.div.withConfig({displayName:"Query",componentId:"sc-1i3nngy-2"})(["white-space:pre-wrap;"]),T=({field:e,filters:t,filterManager:n,query:a,savedId:i,savedQueryName:o,indexPatterns:s,queryLabel:c})=>{let d=[];const m=!Object(l.isEmpty)(i)&&!Object(l.isEmpty)(o);return m&&(d=[...d,{title:u.a.createElement(u.a.Fragment,null,y.s," "),description:u.a.createElement(u.a.Fragment,null,o," ")}]),Object(l.isEmpty)(t)||(n.setFilters(t),d=[...d,{title:u.a.createElement(u.a.Fragment,null,m?y.q:y.l," "),description:u.a.createElement(r.EuiFlexGroup,{wrap:!0,responsive:!1,gutterSize:"xs"},n.getFilters().map(((t,n)=>u.a.createElement(Y,{grow:!1,key:`${e}-filter-${n}`},u.a.createElement(w,{color:"hollow"},null!=s?u.a.createElement(p.FilterBadgeGroup,{filters:[t],dataViews:[s]}):u.a.createElement(r.EuiLoadingSpinner,{size:"m"}))))))}]),Object(l.isEmpty)(a)||(d=[...d,{title:u.a.createElement(u.a.Fragment,null,m?y.r:null!=c?c:y.o),description:u.a.createElement(I,null,a)}]),d},C=e=>{let t=[];return Object(l.isEmpty)(e.eventCategoryField)||(t=[...t,{title:u.a.createElement(u.a.Fragment,null,y.h),description:u.a.createElement(u.a.Fragment,null,e.eventCategoryField)}]),Object(l.isEmpty)(e.tiebreakerField)||(t=[...t,{title:u.a.createElement(u.a.Fragment,null,y.i),description:u.a.createElement(u.a.Fragment,null,e.tiebreakerField)}]),Object(l.isEmpty)(e.timestampField)||(t=[...t,{title:u.a.createElement(u.a.Fragment,null,y.j),description:u.a.createElement(u.a.Fragment,null,e.timestampField)}]),t},M=({label:e,threat:t})=>t.length>0?[{title:e,description:u.a.createElement(x.a,{label:e,threat:t})}]:[],A=(e,t,n)=>k(n)?[{title:e,description:u.a.createElement(r.EuiText,{size:"s"},u.a.createElement("ul",null,n.map((e=>Object(l.isEmpty)(e)?null:u.a.createElement("li",{"data-test-subj":"unorderedListArrayDescriptionItem",key:`${t}-${e}`},e)))))}]:[],_=(e,t)=>{if(Object(l.isEmpty)(t))return[];const n=u.a.createElement(r.EuiFlexGroup,{responsive:!1,gutterSize:"xs",wrap:!0},t.map((t=>Object(l.isEmpty)(t)?null:u.a.createElement(r.EuiFlexItem,{grow:!1,key:`${e}-${t}`},u.a.createElement(w,{"data-test-subj":"customHighlightedFieldsStringArrayDescriptionBadgeItem",color:"hollow"},t)))));return[{title:e,description:n}]},F=(e,t,n)=>k(n)?[{title:e,description:u.a.createElement(r.EuiFlexGroup,{responsive:!1,gutterSize:"xs",wrap:!0},n.map((e=>Object(l.isEmpty)(e)?null:u.a.createElement(r.EuiFlexItem,{grow:!1,key:`${t}-${e}`},u.a.createElement(w,{"data-test-subj":"stringArrayDescriptionBadgeItem",color:"hollow"},e)))))}]:[],D=i()(r.EuiFlexItem).withConfig({displayName:"OverrideColumn",componentId:"sc-1i3nngy-3"})(["width:125px;max-width:125px;overflow:hidden;text-overflow:ellipsis;"]),N=i()(r.EuiFlexItem).withConfig({displayName:"OverrideValueColumn",componentId:"sc-1i3nngy-4"})(["width:30px;max-width:30px;overflow:hidden;text-overflow:ellipsis;"]),P=e=>[{title:g.a,description:u.a.createElement(h.a,{value:e.value})},...e.isMappingChecked?e.mapping.filter((e=>""!==e.field)).map(((e,t)=>({title:0===t?g.d:"",description:u.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},u.a.createElement(D,null,u.a.createElement(r.EuiToolTip,{content:e.field,"data-test-subj":`severityOverrideField${t}`},u.a.createElement(u.a.Fragment,null,`${e.field}:`))),u.a.createElement(N,null,u.a.createElement(r.EuiToolTip,{content:e.value,"data-test-subj":`severityOverrideValue${t}`},Object(E.a)(e.value))),u.a.createElement(r.EuiFlexItem,{grow:!1},u.a.createElement(r.EuiIcon,{type:"sortRight"})),u.a.createElement(r.EuiFlexItem,null,u.a.createElement(h.a,{"data-test-subj":`severityOverrideSeverity${t}`,value:e.severity})))}))):[]],R=e=>[{title:b.b,description:e.value},...e.isMappingChecked?e.mapping.filter((e=>""!==e.field)).map(((e,t)=>({title:0===t?b.e:"",description:u.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},u.a.createElement(D,null,u.a.createElement(r.EuiToolTip,{content:e.field,"data-test-subj":`riskScoreOverrideField${t}`},u.a.createElement(u.a.Fragment,null,e.field))),u.a.createElement(r.EuiFlexItem,{grow:!1},u.a.createElement(r.EuiIcon,{type:"sortRight"})),u.a.createElement(r.EuiFlexItem,null,o.q))}))):[]],L=i()(r.EuiLink).withConfig({displayName:"MyRefUrlLink",componentId:"sc-1i3nngy-5"})(["word-break:break-word;"]),q=(e,t)=>k(t)?[{title:e,description:u.a.createElement(r.EuiText,{size:"s"},u.a.createElement("ul",null,t.filter((e=>!Object(l.isEmpty)(e))).map(((e,t)=>u.a.createElement("li",{"data-test-subj":"urlsDescriptionReferenceLinkItem",key:`${t}-${e}`},u.a.createElement(L,{href:e,external:!0,target:"_blank"},e))))))}]:[],B=(e,t)=>""!==t.trim()?[{title:e,description:u.a.createElement(S,null,u.a.createElement("div",{"data-test-subj":"noteDescriptionItem",className:"eui-yScrollWithShadows"},t))}]:[],z=(e,t)=>{switch(t){case"machine_learning":return[{title:e,description:y.m}];case"query":case"saved_query":return[{title:e,description:y.p}];case"threshold":return[{title:e,description:y.x}];case"eql":return[{title:e,description:y.k}];case"threat_match":return[{title:e,description:y.t}];case"new_terms":return[{title:e,description:y.n}];default:return Object(f.a)(t)}},$=(e,t)=>[{title:e,description:u.a.createElement(u.a.Fragment,null,Object(l.isEmpty)(t.field[0])?`${y.w} >= ${t.value}`:`${y.v} ${Array.isArray(t.field)?t.field.join(","):t.field} >= ${t.value}`)}],V=(e,t)=>[{title:e,description:t.reduce(((e,t,n,{length:a})=>{const i=t.entries.reduce(((e,t,n,{length:a})=>1===a?`${t.field} ${m.d} ${t.value}`:0===n?`(${t.field} ${m.d} ${t.value})`:`${e} ${m.a} (${t.field} ${m.d} ${t.value})`),"");return 1===a?`${i}`:0===n?`(${i})`:`${e} ${m.e} (${i})`}),"")}],U=i()(r.EuiText).withConfig({displayName:"FieldTypeText",componentId:"sc-1i3nngy-6"})(["font-size:",";font-family:",";display:inline;"],(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiCodeFontFamily)),G=(e,t)=>Object(l.isEmpty)(t)?[]:[{title:e,description:u.a.createElement(r.EuiFlexGrid,{gutterSize:"s"},t.map(((e,n)=>u.a.createElement(r.EuiFlexItem,{grow:!1},u.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"xs"},u.a.createElement(r.EuiFlexItem,{grow:!1},u.a.createElement(d.a,{"data-test-subj":"field-type-icon",type:Object(s.c)(e.type),label:e.type})),u.a.createElement(r.EuiFlexItem,{grow:!1},u.a.createElement(U,{grow:!1,size:"s"},` ${e.name}${n+1!==t.length?", ":""}`)))))))}],H=(e,t,n)=>{if(Object(l.isEmpty)(t))return[];const a=u.a.createElement(r.EuiFlexGroup,{responsive:!1,gutterSize:"xs",wrap:!0},t.map((t=>Object(l.isEmpty)(t)?null:u.a.createElement(r.EuiFlexItem,{grow:!1,key:`${e}-${t}`},u.a.createElement(w,{"data-test-subj":"stringArrayDescriptionBadgeItem",color:"hollow"},t)))));return[{title:u.a.createElement(O,{label:e,license:n}),description:a}]},W=(e,t,n,a)=>{const i=a===v.b.PerTimePeriod?`${t.value}${t.unit}`:y.c;return[{title:u.a.createElement(O,{label:e,license:n}),description:i}]},Q=(e,t,n)=>{if(Object(l.isEmpty)(t))return[];const a=t===j.b.Suppress?y.d:y.a;return[{title:u.a.createElement(O,{label:e,license:n}),description:a}]};var Y=i()(r.EuiFlexItem).withConfig({displayName:"_StyledEuiFlexItem",componentId:"sc-1i3nngy-7"})({width:"100%"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(40),i=n(2),r=n.n(i),o=n(553),s=n(5);const l=s.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.allowedStat.allowedDescription",{defaultMessage:"Allowed"});var c=n(21);const u=({allowed:e,total:t})=>{const n=Object(i.useMemo)((()=>(({allowed:e,total:t})=>s.i18n.translate("xpack.elasticAssistant.dataAnonymizationEditor.stats.allowedStat.allowedTooltip",{values:{allowed:e,total:t},defaultMessage:"{allowed} of {total} fields in this context are allowed to be included in the conversation"}))({allowed:e,total:t})),[e,t]);return Object(c.jsx)(a.EuiToolTip,{content:n},Object(c.jsx)(a.EuiStat,{"data-test-subj":"allowedStat",description:l,reverse:!0,title:e,titleSize:o.a}))};u.displayName="AllowedStatComponent";const d=r.a.memo(u)},function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var a=n(21),i=n(40),r=n(2),o=n.n(r),s=n(48),l=n(41),c=n.n(l),u=n(42),d=n(555);const p=c.a.strong`
  margin-right: ${({theme:e})=>e.eui.euiSizeS};
`;var m={name:"16fopk3",styles:"overflow:hidden;&:hover{cursor:pointer;text-decoration:underline;}"};var f=n(136),g=n(306),b=n(372),y=n(357);const h="ADD_NEW_SYSTEM_PROMPT";var v={name:"1bxycju",styles:"min-width:100%"},E={name:"qhxz92",styles:"max-width:100%"};const x=({allSystemPrompts:e,compressed:t=!1,conversation:n,selectedPrompt:l,clearSelectedSystemPrompt:c,isClearable:x=!1,isEditing:j=!1,isDisabled:O=!1,isOpen:S=!1,isSettingsModalVisible:k,onSystemPromptSelectionChange:w,setIsEditing:I,setIsSettingsModalVisible:T,showTitles:C=!1})=>{var M;const{setSelectedSettingsTab:A}=Object(f.b)(),{setApiConfig:_}=Object(g.a)(),[F,D]=Object(r.useState)(S),N=Object(r.useCallback)((()=>D(!1)),[]),P=Object(r.useCallback)((e=>{n&&_({conversationId:n.id,apiConfig:{...n.apiConfig,defaultSystemPromptId:null==e?void 0:e.id}})}),[n,_]),R=Object(r.useMemo)((()=>({value:h,inputDisplay:d.a,dropdownDisplay:Object(a.jsx)(i.EuiFlexGroup,{gutterSize:"none",key:h},Object(a.jsx)(i.EuiFlexItem,{grow:!0},Object(a.jsx)(i.EuiButtonEmpty,{iconType:"plus",size:"xs","data-test-subj":"addSystemPrompt"},d.a)),Object(a.jsx)(i.EuiFlexItem,{grow:!1},Object(a.jsx)("div",{style:{width:"24px"}})))})),[]),L=Object(r.useMemo)((()=>(({prompts:e,showTitles:t=!1})=>{var n;return null!==(n=null==e?void 0:e.map((e=>(({content:e,id:t,name:n,showTitles:r=!1})=>({value:t,inputDisplay:Object(a.jsx)(i.EuiText,{color:"subdued","data-test-subj":"systemPromptText",css:m},r?n:e),dropdownDisplay:Object(a.jsx)(o.a.Fragment,null,Object(a.jsx)(p,{"data-test-subj":"name"},n),Object(a.jsx)(i.EuiToolTip,{content:void 0},Object(a.jsx)(i.EuiText,{color:"subdued","data-test-subj":"content",size:"s"},Object(u.isEmpty)(e)?Object(a.jsx)("p",null,d.d):Object(a.jsx)("p",null,e))))}))({...e,showTitles:t}))))&&void 0!==n?n:[]})({prompts:e,showTitles:C})),[e,C]),q=Object(r.useCallback)((t=>{if(t===h)return T(!0),void A(b.d);null!=w?w(t):P(e.find((e=>e.id===t))),null==I||I(!1)}),[e,w,I,T,A,P]),B=Object(r.useCallback)((()=>{P(void 0),null==I||I(!1),null==c||c()}),[c,I,P]),z=Object(r.useCallback)((()=>{null==I||I(!0),D(!0)}),[I]);return Object(a.jsx)(i.EuiFlexGroup,{"data-test-subj":"selectSystemPrompt",gutterSize:"none"},Object(a.jsx)(i.EuiFlexItem,{css:E},j&&Object(a.jsx)(i.EuiFormRow,{css:v},Object(a.jsx)(i.EuiSuperSelect,{popoverProps:{zIndex:s.euiThemeVars.euiZLevel8},compressed:t,"data-test-subj":y.a.PROMPT_SUPERSELECT,fullWidth:!0,hasDividers:!0,itemLayoutAlign:"top",disabled:O,isOpen:F&&!k,onChange:q,onBlur:N,options:[...L,R],placeholder:d.e,valueOfSelected:null!==(M=null==l?void 0:l.id)&&void 0!==M?M:e[0].id}))),Object(a.jsx)(i.EuiFlexItem,{grow:!1},j&&x&&Object(a.jsx)(i.EuiToolTip,{content:d.c},Object(a.jsx)(i.EuiButtonIcon,{"aria-label":d.c,"data-test-subj":"clearSystemPrompt",iconType:"cross",onClick:B})),!j&&Object(a.jsx)(i.EuiToolTip,{content:d.b},Object(a.jsx)(i.EuiButtonIcon,{"aria-label":d.b,"data-test-subj":"addSystemPrompt",iconType:"plus",onClick:z}))))};x.displayName="SelectSystemPromptComponent";const j=o.a.memo(x)},function(e,t,n){"use strict";n.d(t,"b",(function(){return _})),n.d(t,"a",(function(){return L}));var a=n(42),i=n(40),r=n(44),o=n(2),s=n.n(o),l=n(41),c=n.n(l),u=n(103),d=n(46),p=n(117),m=n(383),f=n(111),g=n(179),b=n(346),y=n(5);const h=y.i18n.translate("xpack.securitySolution.timeline.toggleEventDetailsTitle",{defaultMessage:"Expand event details"}),v=y.i18n.translate("xpack.securitySolution.timeline.addedANoteLabel",{defaultMessage:"added a note"}),E=y.i18n.translate("xpack.securitySolution.timeline.addedADescriptionLabel",{defaultMessage:"added description"}),x=y.i18n.translate("xpack.securitySolution.timeline.anUnknownUserLabel",{defaultMessage:"an unknown user"}),j=y.i18n.translate("xpack.securitySolution.timeline.deleteNoteLabel",{defaultMessage:"Delete Note"}),O=y.i18n.translate("xpack.securitySolution.timeline.cancelDeleteNoteLabel",{defaultMessage:"Keep Note"}),S=y.i18n.translate("xpack.securitySolution.timeline.promptDeleteNoteLabel",{defaultMessage:"Delete timeline note?"});var k=n(118),w=n(105),I=n(657),T=n(110),C=n(116),M=n(102),A=n(108);const _=c.a.section.withConfig({displayName:"NotePreviewsContainer",componentId:"sc-16ieedj-0"})(["padding-top:",";"],(({theme:e})=>`${e.eui.euiSizeS}`));_.displayName="NotePreviewsContainer";const F=({eventId:e,timelineId:t})=>{const n=Object(u.useDispatch)(),{selectedPatterns:a}=Object(C.d)(T.SourcererScopeName.timeline),r=Object(o.useCallback)((()=>{n(f.a.toggleDetailPanel({panelView:"eventDetail",tabType:k.d.notes,id:t,params:{eventId:e,indexName:a.join(",")}}))}),[n,e,a,t]);return s.a.createElement(i.EuiButtonIcon,{title:h,"aria-label":h,color:"text",iconType:"arrowRight",onClick:r})},D=s.a.memo(F),N=s.a.memo((({closeModal:e,confirmModal:t})=>s.a.createElement(i.EuiConfirmModal,{title:S,onCancel:e,onConfirm:t,cancelButtonText:O,confirmButtonText:j,buttonColor:"danger",defaultFocusedButton:"confirm"})));N.displayName="DeleteNoteConfirm";const P=s.a.memo((({noteId:e})=>{const[t,n]=Object(o.useState)(null),{mutate:a,isLoading:r}=function(e){const{services:{http:t}}=Object(M.j)(),n=Object(u.useDispatch)(),{addError:a}=Object(A.a)();return Object(d.useMutation)({mutationFn:e=>t.fetch("/api/note",{method:"DELETE",body:JSON.stringify({noteId:e})}),onSuccess:()=>{e&&n(g.a.deleteNote({id:e}))},onError:e=>{var t;a(e,{title:(t=e,y.i18n.translate("xpack.securitySolution.timeline.deleteNoteError",{defaultMessage:"An error occurred deleting note {error}",values:{error:t}}))})}})}(e),l=Object(o.useCallback)((async()=>{n(e)}),[e]),c=Object(o.useCallback)((()=>{n(null)}),[]),p=Object(o.useCallback)((()=>{a(e),n(null)}),[a,e]),m=Object(o.useMemo)((()=>r||null==e),[r,e]);return s.a.createElement(s.a.Fragment,null,s.a.createElement(i.EuiButtonIcon,{title:j,"aria-label":j,"data-test-subj":"delete-note",color:"text",iconType:"trash",onClick:l,disabled:m}),null!=t&&s.a.createElement(N,{closeModal:c,confirmModal:p}))}));P.displayName="DeleteNoteButton";const R=s.a.memo((({eventId:e,timelineId:t,noteId:n})=>e&&t?s.a.createElement(s.a.Fragment,null,s.a.createElement(D,{eventId:e,timelineId:t}),s.a.createElement(P,{noteId:n})):s.a.createElement(P,{noteId:n})));R.displayName="NoteActions";const L=s.a.memo((({eventIdToNoteIds:e,notes:t,timelineId:n,showTimelineDescription:l})=>{const c=Object(o.useMemo)((()=>f.b.getTimelineByIdSelector()),[]),u=Object(w.a)((e=>n?c(e,n):null)),d=Object(o.useMemo)((()=>l&&n&&null!=u&&u.description?[{username:Object(p.a)(u.updatedBy),event:E,"data-test-subj":"note-preview-description",id:"note-preview-description",timestamp:u.updated?s.a.createElement(r.FormattedRelative,{"data-test-subj":"updated",value:new Date(u.updated)}):Object(p.e)(),children:s.a.createElement(i.EuiText,{size:"s"},u.description),timelineAvatar:s.a.createElement(i.EuiAvatar,{"data-test-subj":"avatar",name:null!=u.updatedBy?u.updatedBy:"?",size:"l"}),actions:s.a.createElement(I.a,{timelineId:n,initialFocus:"description"})}]:[]),[u,n,l]),g=Object(o.useMemo)((()=>Object(a.uniqBy)("savedObjectId",t).map((t=>{var a,o,l;const c=null!=e?Object.entries(e).reduce(((e,[n,a])=>{var i;return a.includes(null!==(i=t.noteId)&&void 0!==i?i:"")?n:e}),null):null!==(a=t.eventId)&&void 0!==a?a:null;return{"data-test-subj":`note-preview-${t.savedObjectId}`,username:Object(p.a)(t.updatedBy),event:v,timestamp:t.updated?s.a.createElement(r.FormattedRelative,{"data-test-subj":"updated",value:new Date(t.updated)}):Object(p.e)(),children:s.a.createElement("div",{className:b.a,tabIndex:0},s.a.createElement(i.EuiScreenReaderOnly,{"data-test-subj":"screenReaderOnlyUserAddedANote"},s.a.createElement("p",null,`${null!==(o=t.updatedBy)&&void 0!==o?o:x} ${v}`)),s.a.createElement(m.b,null,null!==(l=t.note)&&void 0!==l?l:"")),actions:s.a.createElement(R,{eventId:c,timelineId:n,noteId:t.savedObjectId}),timelineAvatar:s.a.createElement(i.EuiAvatar,{"data-test-subj":"avatar",name:null!=t.updatedBy?t.updatedBy:"?",size:"l"})}}))),[e,t,n]);return s.a.createElement(i.EuiCommentList,{"data-test-subj":"note-comment-list",comments:[...d,...g]})}));L.displayName="NotePreviews"},function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return o}));var a=n(120);const i=["endpoint_list"],r=e=>!!i.find((t=>t===e.list_id)),o=e=>a.o.is(e)},function(e,t,n){"use strict";n.d(t,"b",(function(){return r})),n.d(t,"a",(function(){return o}));var a=n(42),i=n(2);const r={pageName:n(131).a.noPage,detailName:void 0,tabName:void 0,search:"",pathName:"/",state:void 0},o=Object(i.createContext)([r,()=>a.noop])},,,function(e,t,n){var a=n(1006),i=n(1010),r=n(614),o=n(258),s=n(1016);e.exports=function(e){return"function"==typeof e?e:null==e?r:"object"==typeof e?o(e)?i(e[0],e[1]):a(e):s(e)}},function(e,t,n){e.exports=n(33)(1215)},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(40),i=n(2),r=n.n(i),o=n(558),s=n(135),l=n(337),c=n(122),u=n(105);const d=r.a.memo((({eventId:e,contextId:t,enrichedFieldInfo:n,scopeId:d,handleOnEventClosed:p})=>{const[m,f]=Object(i.useState)(!1),g=Object(i.useCallback)((()=>f(!m)),[m]),b=Object(i.useCallback)((()=>f(!1)),[]),y=Object(i.useCallback)((()=>{b(),p()}),[b,p]),h=Object(i.useMemo)((()=>c.d.globalQuery()),[]),v=Object(u.a)(h),E=Object(i.useCallback)((()=>{v.forEach((e=>e.refetch&&e.refetch()))}),[v]),{actionItems:x}=Object(o.a)({closePopover:y,eventId:e,scopeId:d,alertStatus:n.values[0],refetch:E}),j=Object(i.useMemo)((()=>[{id:0,items:x}]),[x]),O=Object(i.useMemo)((()=>x.length>0),[x]),S=Object(i.useMemo)((()=>r.a.createElement(l.a,{contextId:t,eventId:e,value:n.values[0],fieldName:n.data.field,linkValue:n.linkValue,fieldType:n.data.type,fieldFormat:n.data.format,isDraggable:!1,truncate:!1,isButton:O,onClick:O?g:void 0,onClickAriaLabel:s.x})),[t,e,n,g,O]);return O?r.a.createElement(a.EuiPopover,{button:S,isOpen:m,closePopover:b,panelPaddingSize:"none","data-test-subj":"alertStatus"},r.a.createElement(a.EuiPopoverTitle,{paddingSize:"m"},s.w),r.a.createElement(a.EuiContextMenu,{panels:j,initialPanelId:0,"data-test-subj":"event-details-alertStatusPopover"})):S}));d.displayName="StatusPopoverButton"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(40),i=n(44),r=n(50),o=n.n(r),s=n(2),l=n.n(s);const c=l.a.memo((({children:e,date:t,fieldName:n,className:r=""})=>l.a.createElement(a.EuiToolTip,{"data-test-subj":"localized-date-tool-tip",anchorClassName:r,content:l.a.createElement(a.EuiFlexGroup,{"data-test-subj":"dates-container",direction:"column",gutterSize:"none"},null!=n?l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement("span",{"data-test-subj":"field-name"},n)):null,l.a.createElement(a.EuiFlexItem,{grow:!1},l.a.createElement(i.FormattedRelative,{"data-test-subj":"humanized-relative-date",value:o.a.utc(t).toDate()})),l.a.createElement(a.EuiFlexItem,{"data-test-subj":"with-day-of-week",grow:!1},o.a.utc(t).local().format("llll")),l.a.createElement(a.EuiFlexItem,{"data-test-subj":"with-time-zone-offset-in-hours",grow:!1},o()(t).format()))},l.a.createElement(l.a.Fragment,null,e))));c.displayName="LocalizedDateTooltip"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(5);const i="siem";a.i18n.translate("xpack.securitySolution.guideConfig.title",{defaultMessage:"Detect threats in my data with SIEM"}),a.i18n.translate("xpack.securitySolution.guideConfig.description",{defaultMessage:"There are many ways to get your SIEM data into Elastic. In this guide, we'll help you get set up quickly using the Elastic Defend integration."}),a.i18n.translate("xpack.securitySolution.guideConfig.documentationLink",{defaultMessage:"Learn more"}),a.i18n.translate("xpack.securitySolution.guideConfig.addDataStep.title",{defaultMessage:"Add data with Elastic Defend"}),a.i18n.translate("xpack.securitySolution.guideConfig.addDataStep.description",{defaultMessage:"Install Elastic Agent and its Elastic Defend integration on one of your computers to get SIEM data flowing."}),a.i18n.translate("xpack.securitySolution.guideConfig.addDataStep.description.linkText",{defaultMessage:"Learn more"}),a.i18n.translate("xpack.securitySolution.guideConfig.rulesStep.title",{defaultMessage:"Turn on rules"}),a.i18n.translate("xpack.securitySolution.guideConfig.rulesStep.description",{defaultMessage:"Load the Elastic prebuilt rules, select the rules you want, and enable them to generate alerts."}),a.i18n.translate("xpack.securitySolution.guideConfig.rulesStep.manualCompletion.title",{defaultMessage:"Continue with the guide"}),a.i18n.translate("xpack.securitySolution.guideConfig.rulesStep.manualCompletion.description",{defaultMessage:"After you've enabled the rules you need, continue."}),a.i18n.translate("xpack.securitySolution.guideConfig.alertsStep.title",{defaultMessage:"Manage alerts and cases"}),a.i18n.translate("xpack.securitySolution.guideConfig.alertsStep.description",{defaultMessage:"Learn how to view and triage alerts with cases."}),a.i18n.translate("xpack.securitySolution.guideConfig.alertsStep.manualCompletion.title",{defaultMessage:"Continue the guide"}),a.i18n.translate("xpack.securitySolution.guideConfig.alertsStep.manualCompletion.description",{defaultMessage:"After you've explored the case, continue."})},function(e,t,n){"use strict";n.d(t,"a",(function(){return x})),n.d(t,"b",(function(){return j}));var a=n(42),i=n(2),r=n.n(i),o=n(103),s=n(3),l=n(130),c=n.n(l),u=n(49),d=n(114),p=n(116),m=n(110),f=n(161),g=n(495),b=n(673),y=n(148),h=n(111);const v="timeline-filter-drop-area",E=(e=[])=>e.filter((e=>e.meta.controlledBy!==v)),x=Object(i.memo)((({dataProviders:e,filters:t,filterManager:n,filterQuery:a,from:l,fromStr:u,kqlMode:x,isRefreshPaused:O,savedQueryId:S,setFilters:k,setSavedQueryId:w,refreshInterval:I,timelineId:T,to:C,toStr:M,updateReduxTime:A})=>{const _=Object(o.useDispatch)(),[F,D]=Object(i.useState)(null!=u?u:new Date(l).toISOString()),[N,P]=Object(i.useState)(null!=M?M:new Date(C).toISOString()),{browserFields:R,indexPattern:L}=Object(p.d)(m.SourcererScopeName.timeline),[q,B]=Object(i.useState)(void 0),[z,$]=Object(i.useState)({query:null!=a?a.expression:"",language:null!=a?a.kind:"kuery"}),[V,U]=Object(i.useState)(E(t)),[G,H]=Object(i.useState)(Object(f.f)(Object(y.g)(e,R),L)),W=Object(g.a)(),Q=Object(i.useCallback)(((e,t)=>_(h.a.applyKqlFilterQuery({id:T,filterQuery:{kuery:{kind:t,expression:e},serializedQuery:Object(f.f)(e,L)}}))),[_,L,T]);Object(i.useEffect)((()=>{let e=!0;const a=new s.Subscription;return n.setFilters(t),a.add(n.getUpdates$().subscribe({next:()=>{if(e){const e=E(n.getFilters());k(e),U(e)}}})),()=>{e=!1,a.unsubscribe()}}),[]),Object(i.useEffect)((()=>{const e=E(n.getFilters());c()(t,e)||n.setFilters(t)}),[t]),Object(i.useEffect)((()=>{$({query:null!=a?a.expression:"",language:null!=a?a.kind:"kuery"})}),[a]),Object(i.useEffect)((()=>{H(Object(f.f)(Object(y.g)(e,R),L))}),[e,R,L]),Object(i.useEffect)((()=>{null!=u&&null!=M?(D(u),P(M)):null!=l&&null!=C&&(D(new Date(l).toISOString()),P(new Date(C).toISOString()))}),[l,u,C,M]),Object(i.useEffect)((()=>{let e=!0;return async function(){if(null!=S&&null!=W)try{const n=await W.getSavedQuery(S);e&&null!=n&&B({...n,attributes:{...n.attributes,filters:E(t)}})}catch(e){B(void 0)}else e&&B(void 0)}(),()=>{e=!1}}),[S]);const Y=Object(i.useCallback)(((e,t)=>{if((null==a||null!=a&&a.expression!==e.query||a.kind!==e.language)&&Q(e.query,e.language),null!=t){const e=t.from.includes("now")||t.to.includes("now");A({id:d.a.timeline,end:t.to,start:t.from,isInvalid:!1,isQuickSelection:e,timelineId:T})}}),[a,T]),K=Object(i.useCallback)((e=>{if(null!=e){if(e.id!==S&&w(e.id),null!=W&&""!==G){const t=null!=e.attributes.filters?e.attributes.filters.findIndex((e=>e.meta.controlledBy===v)):-1;W.updateQuery(e.id,{...e.attributes,filters:null!=e.attributes.filters?t>-1?[...e.attributes.filters.slice(0,t),j(G),...e.attributes.filters.slice(t+1)]:[...e.attributes.filters,j(G)]:[]})}}else w(null)}),[G,S,W]);return r.a.createElement(b.a,{dateRangeFrom:F,dateRangeTo:N,hideSavedQuery:"search"===x,indexPattern:L,isRefreshPaused:O,filterQuery:z,filterManager:n,filters:V,onSubmitQuery:Y,refreshInterval:I,savedQuery:q,onSavedQuery:K,dataTestSubj:"timelineQueryInput",displayStyle:"inPage"})})),j=e=>{const t=JSON.parse(e),n=Object.keys(t);return{...t,meta:{alias:v,controlledBy:v,negate:!1,disabled:!1,type:"custom",key:Object(a.isEmpty)(n)?"bool":n[0],value:e},$state:{store:u.FilterStateStore.APP_STATE}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(5);const i=e=>e?a.i18n.translate("xpack.securitySolution.toggleQuery.on",{defaultMessage:"Open"}):a.i18n.translate("xpack.securitySolution.toggleQuery.off",{defaultMessage:"Closed"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(106),s=n(140),l=n(209);const c=({timelineType:e,elasticTemplateTimelineCount:t,customTemplateTimelineCount:n})=>{const[c,u]=Object(a.useState)(null),d=Object(a.useMemo)((()=>e===o.l.template),[e]),p=Object(a.useMemo)((()=>d?c:null),[c,d]),m=Object(a.useMemo)((()=>null==p?null:p===o.g.elastic?o.k.immutable:o.k.active),[p]),f=Object(a.useMemo)((()=>[{id:o.g.elastic,name:s.s,disabled:!d,withNext:!0,count:null!=t?t:void 0},{id:o.g.custom,name:s.r,disabled:!d,withNext:!1,count:null!=n?n:void 0}]),[n,t,d]),g=Object(a.useCallback)((e=>{u(c===e?null:e)}),[u,c]),b=Object(a.useMemo)((()=>d?f.map((e=>i.a.createElement(r.EuiFilterButton,{hasActiveFilters:e.id===p,key:`template-timeline-filter-${e.id}`,numFilters:e.count,onClick:g.bind(null,e.id),withNext:e.withNext,isDisabled:e.disabled,"data-test-subj":e.name},e.name))):null),[p,f,d,g]),y=Object(a.useCallback)((async()=>{p!==o.g.custom&&await Object(l.f)()}),[p]);return{timelineStatus:m,templateTimelineType:p,templateTimelineFilter:b,installPrepackagedTimelines:y}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(118),o=n(106),s=n(242);const l=({closeGearMenu:e,outline:t,title:n,timelineId:a=r.c.active})=>{const{getButton:i}=Object(s.b)({timelineId:a,timelineType:o.l.template,closeGearMenu:e});return i({outline:t,title:n})},c=i.a.memo(l);c.displayName="NewTemplateTimeline"},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(606),r=n(102);const o=()=>{const{conversations:e}=Object(i.a)(),{services:{telemetry:t}}=Object(r.j)(),n=Object(a.useCallback)((t=>{var n;return(null!==(n=e[t])&&void 0!==n?n:{isDefault:!1}).isDefault?t:"Custom"}),[e]),o=Object(a.useCallback)((({fn:e,params:{conversationId:t,...a}})=>e({...a,conversationId:n(t)})),[n]);return{reportAssistantInvoked:e=>o({fn:t.reportAssistantInvoked,params:e}),reportAssistantMessageSent:e=>o({fn:t.reportAssistantMessageSent,params:e}),reportAssistantQuickPrompt:e=>o({fn:t.reportAssistantQuickPrompt,params:e})}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"f",(function(){return l})),n.d(t,"e",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.assistant.commentActions.addedNoteToTimelineToast",{defaultMessage:"Added note to timeline"}),r=a.i18n.translate("xpack.securitySolution.assistant.commentActions.addMessageContentAsTimelineNoteAriaLabel",{defaultMessage:"Add message content as a timeline note"}),o=a.i18n.translate("xpack.securitySolution.assistant.commentActions.addNoteToTimelineTooltip",{defaultMessage:"Add note to timeline"}),s=a.i18n.translate("xpack.securitySolution.assistant.commentActions.addToCaseExistingCase",{defaultMessage:"Add to existing case"}),l=a.i18n.translate("xpack.securitySolution.assistant.commentActions.elasticAiAssistantTitle",{defaultMessage:"Elastic AI Assistant"}),c=a.i18n.translate("xpack.securitySolution.assistant.commentActions.copyToClipboard",{defaultMessage:"Copy to clipboard"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"c",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"d",(function(){return p})),n.d(t,"f",(function(){return m}));var a=n(139),i=n(118),r=n(515),o=n(376);const s=()=>Object(a.createSelector)(o.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.activeTab)&&void 0!==t?t:i.d.query})),l=()=>Object(a.createSelector)(o.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.show)&&void 0!==t&&t})),c=()=>Object(a.createSelector)(o.selectTimeline,(e=>{var t;return Object.keys(null!==(t=null==e?void 0:e.pinnedEventIds)&&void 0!==t?t:{}).length})),u=()=>Object(a.createSelector)(o.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.noteIds)&&void 0!==t?t:[]})),d=()=>Object(a.createSelector)(o.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.eventIdToNoteIds)&&void 0!==t?t:{}})),p=()=>Object(a.createSelector)(r.selectNotesById,(e=>Object.values(e))),m=()=>Object(a.createSelector)(o.selectTimeline,(e=>null==e?void 0:e.scrollToTop))},function(e,t,n){"use strict";n.d(t,"a",(function(){return C}));var a=n(104),i=n.n(a),r=n(57),o=n(55),s=n.n(o),l=n(2),c=n.n(l),u=n(41),d=n.n(u),p=n(40),m=n(51),f=n(4),g=n(681),b=n(259),y=n(659),h=n(161),v=n(102),E=n(604),x=n(200),j=n(457),O=n(131),S=n(169),k=n(273);const w=e=>({text:e,value:e}),I=d()(p.EuiButton).withConfig({displayName:"StyledLinkButton",componentId:"sc-11itwu1-0"})(["margin-left:0;@media only screen and (min-width:","){margin-left:",";}"],(e=>e.theme.eui.euiBreakpoints.m),(({theme:e})=>e.eui.euiSizeL)),T=({combinedQueries:e,deleteQuery:t,filters:n,from:a,headerChildren:o,indexPattern:u,indexNames:d,runtimeMappings:p,onlyField:T,paddingSize:C,query:M,queryType:A,setAbsoluteRangeDatePickerTarget:_,setQuery:F,showLegend:D,showSpacer:N=!0,scopeId:P,sourcererScopeId:R,to:L,toggleTopN:q,hideQueryToggle:B=!1})=>{const z=Object(l.useMemo)((()=>`eventsByDatasetOverview-${A}`),[A]);Object(l.useEffect)((()=>()=>{t&&t({id:z})}),[t,z]);const $=Object(v.j)(),{formatUrl:V,search:U}=Object(S.m)(O.a.hosts),{navigateToApp:G}=$.services.application,[H]=Object(v.p)(f.O),W=Object(l.useCallback)((e=>{e.preventDefault(),G(f.l,{deepLinkId:O.a.hosts,path:Object(b.c)(x.HostsTableType.events,U)})}),[G,U]),Q=Object(l.useMemo)((()=>c.a.createElement(I,{onClick:W,href:V(Object(b.c)(x.HostsTableType.events))},j.n)),[W,V]),[Y,K]=Object(l.useMemo)((()=>null==e?Object(h.i)({config:Object(m.getEsQueryConfig)($.services.uiSettings),indexPattern:u,queries:[M],filters:n}):[e]),[e,$,u,M,n]);Object(k.a)({id:z,filterQuery:Y,kqlError:K,query:M,startDate:a,endDate:L});const X=Object(l.useMemo)((()=>{var e;return{...E.b,stackByOptions:null!=T?[w(T)]:E.b.stackByOptions,defaultStackByOption:null!=T?w(T):null!==(e=E.c.find((e=>"event.dataset"===e.text)))&&void 0!==e?e:E.c[0],legendPosition:r.Position.Right,subtitle:e=>`${g.c}: ${s()(e).format(H)} ${Object(g.d)(e)}`,titleSize:null==T?"m":"s"}}),[T,H]),J=Object(l.useMemo)((()=>null==T||null!=o?c.a.createElement(c.a.Fragment,null,o,null==T&&Q):null),[T,o,Q]);return c.a.createElement(y.a,i()({endDate:L,filterQuery:Y,headerChildren:J,id:z,indexNames:d,runtimeMappings:p,onError:q,paddingSize:C,setAbsoluteRangeDatePickerTarget:_,setQuery:F,showSpacer:N,showLegend:D,skip:void 0===Y,startDate:a,scopeId:P,sourcererScopeId:R},X,{title:null!=T?j.k(T):X.title,chartHeight:160,hideQueryToggle:B}))};T.displayName="EventsByDatasetComponent";const C=c.a.memo(T)},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(297),c=n(327);const u=s()(r.EuiFlexGroup).withConfig({displayName:"FlexGroup",componentId:"sc-1719m3x-0"})(["height:",";width:",";position:relative;margin:0;"],(({height:e})=>e||"100%"),(({width:e})=>e||"100%"));u.displayName="FlexGroup";const d=({height:e="100%",width:t="100%",data:n})=>i.a.createElement(u,{justifyContent:"center",alignItems:"center",height:e,width:t},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiText,{size:"s",textAlign:"center",color:"subdued","data-test-subj":"chartHolderText"},Object(l.f)(n)?c.a:c.b)))},function(e,t,n){"use strict";n.d(t,"f",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"g",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"b",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"h",(function(){return u})),n.d(t,"d",(function(){return d}));var a=n(5);const i=e=>a.i18n.translate("xpack.securitySolution.eventsTab.externalAlertsUnit",{values:{totalCount:e},defaultMessage:"external {totalCount, plural, =1 {alert} other {alerts}}"}),r=e=>a.i18n.translate("xpack.securitySolution.hosts.navigaton.eventsUnit",{values:{totalCount:e},defaultMessage:"{totalCount, plural, =1 {event} other {events}}"}),o=a.i18n.translate("xpack.securitySolution.eventsTab.showing",{defaultMessage:"Showing"}),s=a.i18n.translate("xpack.securitySolution.eventsTab.alertsGraphTitle",{defaultMessage:"External alert trend"}),l=a.i18n.translate("xpack.securitySolution.eventsTab.errorFetchingAlertsData",{defaultMessage:"Failed to query alerts data"}),c=a.i18n.translate("xpack.securitySolution.eventsTab.errorFetchingEventsData",{defaultMessage:"Failed to query events data"}),u=a.i18n.translate("xpack.securitySolution.eventsTab.showExternalAlerts",{defaultMessage:"Show only external alerts"}),d=a.i18n.translate("xpack.securitySolution.eventsGraphTitle",{defaultMessage:"Events"})},function(e,t,n){"use strict";n.d(t,"c",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"e",(function(){return d})),n.d(t,"a",(function(){return p})),n.d(t,"b",(function(){return m}));var a=n(42),i=n(50),r=n.n(i),o=n(920);const s=[],l=e=>{var t,n,a;return(null!==(t=null==e||null===(n=e.aggregations)||void 0===n||null===(a=n.alertsByGrouping)||void 0===a?void 0:a.buckets)&&void 0!==t?t:[]).reduce(((e,{key_as_string:t,key:n,alerts:a})=>{var i;return[...e,...(null!==(i=a.buckets)&&void 0!==i?i:[]).map((({key:e,doc_count:a})=>({x:e,y:a,g:null!=t?t:n.toString()})))]}),s)},c=(e,t,n,a,i)=>({aggs:{alertsByGrouping:{terms:{field:e,order:{_count:"desc"},size:10},aggs:{alerts:{date_histogram:{field:"@timestamp",fixed_interval:`${Math.floor(r()(n).diff(r()(t))/32)}ms`,min_doc_count:0,extended_bounds:{min:t,max:n}}}}}},query:{bool:{filter:[...a,{range:{"@timestamp":{gte:t,lte:n}}}]}},runtime_mappings:i,_source:!1,size:0}),u=({isInitialLoading:e,isLoadingAlerts:t})=>e&&t,d=e=>{try{return null==e||Object(a.isEmpty)(e)?{}:JSON.parse(e)}catch{return{}}},p=e=>{try{return Object(a.isEmpty)(e)?[]:[d(e)]}catch{return[]}},m=({callback:e,order:t}={})=>({id:"resetGroupByField",getDisplayName:()=>o.b,getIconType:()=>"editorRedo",type:"actionButton",isCompatible:async()=>!0,async execute({embeddable:t}){null==e||e();const n=t.getInput(),{attributes:{state:{visualization:{columns:a}}}}=n;t.updateInput({...n,attributes:{...n.attributes,state:{...n.attributes.state,visualization:{...n.attributes.state.visualization,columns:a.map((e=>({...e,hidden:!1})))}}}})},order:t})},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.components.chartSettingsPopover.contextMenuItems.inspectTitle",{defaultMessage:"Inspect"}),r=a.i18n.translate("xpack.securitySolution.components.chartSettingsPopover.contextMenuItems.resetGroupByFieldsMenuItem",{defaultMessage:"Reset group by fields"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(374);const i=new Set([a.b.STRING,a.b.BOOLEAN,a.b.NUMBER,a.b.IP]),r=e=>!!e&&i.has(e)},function(e,t,n){"use strict";n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return u})),n.d(t,"a",(function(){return p}));var a=n(2),i=n.n(a),r=n(40),o=n(44),s=n(58);const l={tall:490,short:250},c=Object(a.createContext)({tableId:null}),u=({height:e="tall"})=>i.a.createElement(r.EuiPanel,{color:"subdued"},i.a.createElement(r.EuiFlexGroup,{style:{height:l[e]},alignItems:"center",justifyContent:"center","data-test-subj":"loading-alerts-panel"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiLoadingSpinner,{size:"xl"})))),d={maxWidth:500},p=()=>{const{http:e}=Object(s.useKibana)().services;return i.a.createElement(r.EuiPanel,{color:"subdued","data-test-subj":"tGridEmptyState"},i.a.createElement(r.EuiFlexGroup,{alignItems:"center",justifyContent:"center"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiPanel,{hasBorder:!0,style:d},i.a.createElement(r.EuiFlexGroup,null,i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiText,{size:"s"},i.a.createElement(r.EuiTitle,null,i.a.createElement("h3",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.eventsViewer.empty.title",defaultMessage:"No results match your search criteria"}))),i.a.createElement("p",null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.eventsViewer.empty.description",defaultMessage:"Try searching over a longer period of time or modifying your search"})))),i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiImage,{size:"200",alt:"",url:e.basePath.prepend("/plugins/timelines/assets/illustration_product_no_results_magnifying_glass.svg")})))))))}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(103),o=n(1430),s=n(709);const l=i.a.memo((e=>{const t=Object(r.useSelector)((t=>t.analyzer[e.resolverComponentInstanceID])),n=Object(r.useDispatch)();return t||n(Object(s.createResolver)({id:e.resolverComponentInstanceID})),Object(a.useEffect)((()=>{e.shouldUpdate&&n(Object(s.createResolver)({id:e.resolverComponentInstanceID}))}),[n,e.shouldUpdate,e.resolverComponentInstanceID]),i.a.createElement(o.a,e)}))},function(e,t,n){"use strict";n.d(t,"i",(function(){return i})),n.d(t,"h",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"a",(function(){return c})),n.d(t,"f",(function(){return u})),n.d(t,"e",(function(){return d})),n.d(t,"g",(function(){return p})),n.d(t,"k",(function(){return m})),n.d(t,"j",(function(){return f}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.user.details.overview.userIdTitle",{defaultMessage:"User ID"}),r=a.i18n.translate("xpack.securitySolution.user.details.overview.userDomainTitle",{defaultMessage:"Domain"}),o=a.i18n.translate("xpack.securitySolution.user.details.overview.familyTitle",{defaultMessage:"Family"}),s=a.i18n.translate("xpack.securitySolution.user.details.overview.ipAddressesTitle",{defaultMessage:"IP addresses"}),l=a.i18n.translate("xpack.securitySolution.user.details.overview.osTitle",{defaultMessage:"Operating system"}),c=a.i18n.translate("xpack.securitySolution.network.ipDetails.ipOverview.firstSeenTitle",{defaultMessage:"First seen"}),u=a.i18n.translate("xpack.securitySolution.user.ipDetails.ipOverview.lastSeenTitle",{defaultMessage:"Last seen"}),d=a.i18n.translate("xpack.securitySolution.user.details.overview.inspectTitle",{defaultMessage:"User overview"}),p=a.i18n.translate("xpack.securitySolution.user.details.overview.maxAnomalyScoreByJobTitle",{defaultMessage:"Max anomaly score by job"}),m=a.i18n.translate("xpack.securitySolution.user.details.overview.userRiskScoreTitle",{defaultMessage:"User risk score"}),f=a.i18n.translate("xpack.securitySolution.user.details.overview.userRiskClassification",{defaultMessage:"User risk classification"})},function(e,t,n){"use strict";n.d(t,"e",(function(){return i})),n.d(t,"d",(function(){return r})),n.d(t,"k",(function(){return o})),n.d(t,"n",(function(){return s})),n.d(t,"g",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"j",(function(){return u})),n.d(t,"m",(function(){return d})),n.d(t,"p",(function(){return p})),n.d(t,"o",(function(){return m})),n.d(t,"c",(function(){return f})),n.d(t,"r",(function(){return g})),n.d(t,"a",(function(){return b})),n.d(t,"b",(function(){return y})),n.d(t,"q",(function(){return h})),n.d(t,"i",(function(){return v})),n.d(t,"l",(function(){return E})),n.d(t,"h",(function(){return x}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.host.details.overview.hostIdTitle",{defaultMessage:"Host ID"}),r=a.i18n.translate("xpack.securitySolution.host.details.firstSeenTitle",{defaultMessage:"First seen"}),o=a.i18n.translate("xpack.securitySolution.host.details.lastSeenTitle",{defaultMessage:"Last seen"}),s=a.i18n.translate("xpack.securitySolution.host.details.overview.maxAnomalyScoreByJobTitle",{defaultMessage:"Max anomaly score by job"}),l=a.i18n.translate("xpack.securitySolution.host.details.overview.hostRiskScoreTitle",{defaultMessage:"Host risk score"}),c=a.i18n.translate("xpack.securitySolution.host.details.overview.hostRiskClassification",{defaultMessage:"Host risk classification"}),u=a.i18n.translate("xpack.securitySolution.host.details.overview.ipAddressesTitle",{defaultMessage:"IP addresses"}),d=a.i18n.translate("xpack.securitySolution.host.details.overview.macAddressesTitle",{defaultMessage:"MAC addresses"}),p=a.i18n.translate("xpack.securitySolution.host.details.overview.platformTitle",{defaultMessage:"Platform"}),m=a.i18n.translate("xpack.securitySolution.host.details.overview.osTitle",{defaultMessage:"Operating system"}),f=a.i18n.translate("xpack.securitySolution.host.details.overview.familyTitle",{defaultMessage:"Family"}),g=a.i18n.translate("xpack.securitySolution.host.details.versionLabel",{defaultMessage:"Version"}),b=a.i18n.translate("xpack.securitySolution.host.details.architectureLabel",{defaultMessage:"Architecture"}),y=a.i18n.translate("xpack.securitySolution.host.details.overview.cloudProviderTitle",{defaultMessage:"Cloud provider"}),h=a.i18n.translate("xpack.securitySolution.host.details.overview.regionTitle",{defaultMessage:"Region"}),v=a.i18n.translate("xpack.securitySolution.host.details.overview.instanceIdTitle",{defaultMessage:"Instance ID"}),E=a.i18n.translate("xpack.securitySolution.host.details.overview.machineTypeTitle",{defaultMessage:"Machine type"}),x=a.i18n.translate("xpack.securitySolution.host.details.overview.inspectTitle",{defaultMessage:"Host overview"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(50),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(236),c=n(167);const u=({range:e,setRange:t,loading:n})=>{const[a,u]=Object(r.useState)(e.from===c.a?i()().subtract(30,"d"):i()(e.from)),[d,p]=Object(r.useState)(e.to===c.b?i()():i()(e.to)),m=Object(r.useCallback)((()=>{a&&d&&a.isBefore(d)&&t({from:a.toISOString(),to:d.toISOString()})}),[d,t,a]),f=Object(r.useMemo)((()=>null==a?void 0:a.isBefore(d)),[a,d]);return o.a.createElement(s.EuiFlexGroup,null,o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiDatePickerRange,{"data-test-subj":"enrichment-query-range-picker",startDateControl:o.a.createElement(s.EuiDatePicker,{className:"start-picker",selected:a,onChange:u,startDate:a,endDate:d,isInvalid:!f,"aria-label":l.d,showTimeSelect:!0}),endDateControl:o.a.createElement(s.EuiDatePicker,{className:"end-picker",selected:d,onChange:p,startDate:a,endDate:d,isInvalid:!f,"aria-label":l.c,showTimeSelect:!0})})),o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiButton,{iconType:"refresh",onClick:m,isLoading:n,"data-test-subj":"enrichment-button",isDisabled:!f},l.n)))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(803),o=n(135),s=n(500);const l=({ariaLabel:e=o.i,ecsRowData:t,buttonType:n,onInvestigateInTimelineAlertClick:a})=>{const{investigateInTimelineAlertClick:l}=Object(s.a)({ecsRowData:t,onInvestigateInTimelineAlertClick:a});return i.a.createElement(r.a,{ariaLabel:e,content:o.h,dataTestSubj:"send-alert-to-timeline",iconType:"timeline",onClick:l,isDisabled:!1,buttonType:n})},c=i.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(896);const i=e=>{var t;const n=null!=e&&e.fields?null==e?void 0:e.fields["kibana.alert.rule.parameters"]:null,i=n?null===(t=n[0])||void 0===t?void 0:t.threat:null;return i&&i.length>0?Object(a.m)({label:i[0].framework,threat:i}):null}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(346);const c=s.a.div.withConfig({displayName:"EuiCodeEditorContainer",componentId:"sc-a6c5kq-0"})([".euiCodeEditorWrapper{position:absolute;}"]),u=r.a.memo((({rawEventData:e})=>{const t=Object(i.useMemo)((()=>JSON.stringify(e,l.i,2)),[e]);return r.a.createElement(c,null,r.a.createElement(a.EuiCodeBlock,{language:"json",fontSize:"m",paddingSize:"m",isCopyable:!0,"data-test-subj":"jsonView"},t))}));u.displayName="JsonView"},function(e,t,n){"use strict";n.d(t,"a",(function(){return g}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(255),c=n(124),u=n(102),d=n(596),p=n(155),m=n(238);const f=s.a.div.withConfig({displayName:"TabContentWrapper",componentId:"sc-woclj6-0"})(["height:100%;position:relative;"]),g=({rawEventData:e,ecsData:t})=>{var n,i,o,s,g,b,y,h,v;const{services:{osquery:E}}=Object(u.j)(),x=Object(c.a)("responseActionsEnabled"),j=Object(c.a)("endpointResponseActionsEnabled"),O=e?Object(l.a)(e.fields):void 0,S=null==O||null===(n=O.kibana)||void 0===n||null===(i=n.alert)||void 0===i||null===(o=i.rule)||void 0===o||null===(s=o.parameters)||void 0===s?void 0:s[0].response_actions,k=!e||!x||j||!t||!(null!=S&&S.length),w=null!==(g=null==e?void 0:e._id)&&void 0!==g?g:"",{OsqueryResults:I,fetchAllLiveQueries:T}=E,{data:C}=T({filterQuery:{term:{alert_ids:w}},alertId:w,skip:k});if(k)return;const M=S.filter((e=>e.action_type_id===m.a.OSQUERY));if(null==M||!M.length)return;const A=(null==C?void 0:C.data.items)||[],_=null==O||null===(b=O.kibana)||void 0===b||null===(y=b.alert)||void 0===y||null===(h=y.rule)||void 0===h||null===(v=h.name)||void 0===v?void 0:v[0],F=r.a.createElement(f,{"data-test-subj":"osqueryViewWrapper"},r.a.createElement(I,{ruleName:_,actionItems:A,ecsData:t}),r.a.createElement(a.EuiSpacer,{size:"s"}));return{id:d.b.osqueryView,"data-test-subj":"osqueryViewTab",name:p.u,append:r.a.createElement(a.EuiNotificationBadge,{"data-test-subj":"osquery-actions-notification"},A.length),content:F}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(396),i=n.n(a);const r={macos:!0,windows:!0};function o(e){return e.includes("-")?e.substring(0,e.indexOf("-")):e}const s=({osName:e,version:t,capabilities:n})=>!(!t||!(({currentVersion:e,minVersionRequired:t="7.14.0"})=>{try{const n=o(e);return i()(t,n)}catch(n){return window&&window.console&&window.console.warn(`SecuritySolution: isVersionSupported(): Unable to determine if current version [${e}] meets minimum version [${t}]. Error: ${n.message}`),!1}})({currentVersion:t}))&&(function(e){const t=o(e);return i()("7.15.0",t)}(t)?function(e=[]){return e.includes("isolation")}(n):function(e){return(({currentOs:e,supportedOss:t=r})=>!!t[e])({currentOs:e.toLowerCase()})}(e))},,function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(65),i=n(504);const r=(e,t={})=>{var n;return e.get(i.a,{...t,query:{...t.query,kuery:`${null!=t&&null!==(n=t.query)&&void 0!==n&&n.kuery?`${t.query.kuery} and `:""}${a.PACKAGE_POLICY_SAVED_OBJECT_TYPE}.package.name: endpoint`}})}},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"d",(function(){return c})),n.d(t,"c",(function(){return u}));var a=n(2),i=n.n(a),r=n(5),o=n(44);const s={FORM_TITLE:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.formTitle",{defaultMessage:"Apply Timeline template"}),TEMPLATE_SELECTOR_LABEL:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.templateSelectorLabel",{defaultMessage:"Apply Timeline template to selected rules"}),TEMPLATE_SELECTOR_HELP_TEXT:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.templateSelectorHelpText",{defaultMessage:"Select which Timeline to apply to selected rules when investigating generated alerts."}),TEMPLATE_SELECTOR_PLACEHOLDER:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.templateSelectorPlaceholder",{defaultMessage:"Search Timeline template"}),TEMPLATE_SELECTOR_DEFAULT_VALUE:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.templateSelectorDefaultValue",{defaultMessage:"None"}),warningCalloutMessage:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.applyTimelineTemplate.warningCalloutMessage",defaultMessage:"You're about to apply changes to {rulesCount, plural, one {# selected rule} other {# selected rules}}. If you previously applied Timeline templates to these rules, they will be overwritten or (if you select 'None') reset to none.",values:{rulesCount:e}})},l={FORM_TITLE:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.addRuleActions.formTitle",{defaultMessage:"Add rule actions"}),OVERWRITE_LABEL:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.addRuleActions.overwriteCheckboxLabel",{defaultMessage:"Overwrite all selected rules actions"}),RULE_VARIABLES_DETAIL:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.addRuleActions.ruleVariablesDetail",{defaultMessage:"Rule variables may affect only some of the rules you select, based on the rule types (for example, \\u007b\\u007bcontext.rule.threshold\\u007d\\u007d will only display values for threshold rules)."})},c={FORM_TITLE:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.formTitle",{defaultMessage:"Update rule schedules"}),INTERVAL_LABEL:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.intervalLabel",{defaultMessage:"Runs every"}),INTERVAL_HELP_TEXT:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.intervalHelpText",{defaultMessage:"Rules run periodically and detect alerts within the specified time frame."}),LOOKBACK_LABEL:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.lookbackLabel",{defaultMessage:"Additional look-back time"}),LOOKBACK_HELP_TEXT:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.lookbackHelpText",{defaultMessage:"Adds time to the look-back period to prevent missed alerts."}),warningCalloutMessage:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.edit.setSchedule.warningCalloutMessage",defaultMessage:"You're about to apply changes to {rulesCount, plural, one {# selected rule} other {# selected rules}}. The changes you make will overwrite the existing rule schedules and additional look-back time (if any).",values:{rulesCount:e}})},u={MODAL_TITLE:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exception.confirmation.modalTitle",defaultMessage:"Duplicate {rulesCount, plural, one {the rule} other {rules}}?",values:{rulesCount:e}}),MODAL_TEXT:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.modalBody",defaultMessage:"You're duplicating {rulesCount, plural, one {# rule} other {# rules}}. Choose what to duplicate:",values:{rulesCount:e}}),DUPLICATE_EXCEPTIONS_TEXT:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.with",defaultMessage:"The {rulesCount, plural, one {rule} other {rules}} and {rulesCount, plural, one {its} other {their}} active exceptions",values:{rulesCount:e}}),DUPLICATE_EXCEPTIONS_INCLUDE_EXPIRED_EXCEPTIONS_LABEL:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.includeExpiredExceptionsCheckboxLabel",defaultMessage:"The {rulesCount, plural, one {rule} other {rules}} and {rulesCount, plural, one {its} other {their}} exceptions",values:{rulesCount:e}}),DUPLICATE_WITHOUT_EXCEPTIONS_TEXT:e=>i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.without",defaultMessage:"Only the {rulesCount, plural, one {rule} other {rules}}",values:{rulesCount:e}}),CONTINUE_BUTTON:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.continueButton",{defaultMessage:"Duplicate"}),CANCEL_BUTTON:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.cancelButton",{defaultMessage:"Cancel"}),DUPLICATE_TOOLTIP:r.i18n.translate("xpack.securitySolution.detectionEngine.rules.allRules.bulkActions.duplicate.exceptionsConfirmation.tooltip",{defaultMessage:"Exception items associated with individual rules are duplicated. Exception items linked to shared exception lists are not. Instead, duplicated rules will reference the shared exception lists that contain the exception items."})}},,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return ye}));var a=n(2),i=n.n(a),r=n(103),o=n(56),s=n(672),l=n(102),c=n(4),u=n(105),d=n(118),p=n(111),m=n(12),f=n(479),g=n(190),b=n(44),y=n(41),h=n.n(y),v=n(106),E=n(947),x=n(317),j=n(209),O=n(126),S=n(40),k=n(140),w=n(45),I=n(108),T=n(675);const C=({onComplete:e,isEnableDownloader:t,exportedIds:n})=>{const{tabName:i}=Object(w.useParams)(),{addSuccess:r}=Object(I.a)(),o=Object(a.useCallback)((t=>{null!=e&&e(),r({title:i===v.l.template?k.U(t):k.T(t),"data-test-subj":"addObjectToContainerSuccess"})}),[r,e,i]),s=Object(a.useCallback)((()=>{null!=e&&e()}),[e]);return Object(a.useEffect)((()=>{(async()=>{if(null!=n&&n.length&&t){const e=await Object(j.b)({ids:n});e instanceof Blob?(Object(T.a)(e,`${k.n}.ndjson`),o(n.length)):s()}})()}),[n,t]),null};C.displayName="ExportTimeline";const M=i.a.memo(C);var A=n(42);const _=i.a.memo((({title:e,closeModal:t,onDelete:n})=>{const{tabName:r}=Object(w.useParams)(),o=r===v.l.template?k.j:k.k,s=Object(a.useCallback)((()=>{const t=null!=e?e.trim():"",n=Object(A.isEmpty)(t)?k.ab:t;return i.a.createElement(b.FormattedMessage,{id:"xpack.securitySolution.open.timeline.deleteTimelineModalTitle",defaultMessage:'Delete "{title}"?',"data-test-subj":"title",values:{title:n}})}),[e]);return i.a.createElement(S.EuiConfirmModal,{buttonColor:"danger",cancelButtonText:k.b,confirmButtonText:k.h,defaultFocusedButton:S.EUI_MODAL_CONFIRM_BUTTON,onCancel:t,onConfirm:n,title:s()},i.a.createElement("div",{"data-test-subj":"warning"},o))}));_.displayName="DeleteTimelineModal";const F=Object(y.createGlobalStyle)(["div[data-popover-open]{display:none;}"]),D=i.a.memo((({deleteTimelines:e,isModalOpen:t,savedObjectIds:n,title:r,onComplete:o})=>{const{addSuccess:s}=Object(I.a)(),{tabName:l}=Object(w.useParams)(),c=Object(a.useCallback)((()=>{null!=o&&o()}),[o]),u=Object(a.useCallback)((()=>{n.length>0&&(e(n),s({title:l===v.l.template?k.S(n.length):k.R(n.length)})),null!=o&&o()}),[e,n,o,s,l]);return i.a.createElement(i.a.Fragment,null,t&&i.a.createElement(F,{"data-test-subj":"remove-popover"}),t?i.a.createElement(S.EuiModal,{maxWidth:600,onClose:c},i.a.createElement(_,{"data-test-subj":"delete-timeline-modal",onDelete:u,title:r,closeModal:c})):null)}));D.displayName="DeleteTimelineModalOverlay";const N=({deleteTimelines:e,ids:t,isEnableDownloader:n,isDeleteTimelineModalOpen:a,onComplete:r,title:o})=>i.a.createElement(i.a.Fragment,null,i.a.createElement(M,{"data-test-subj":"TimelineDownloader",exportedIds:t,isEnableDownloader:n,onComplete:r}),null!=e&&i.a.createElement(D,{"data-test-subj":"DeleteTimelineModalOverlay",deleteTimelines:e,isModalOpen:a,onComplete:r,savedObjectIds:t,title:o})),P=i.a.memo(N),R=()=>{const[e,t]=Object(a.useState)(null),[n,i]=Object(a.useState)(!1),[r,o]=Object(a.useState)(!1),s=Object(a.useCallback)((()=>{i(!1),t(null)}),[e]),l=Object(a.useCallback)((e=>{i(!0),null!=e&&t(e)}),[]),c=Object(a.useCallback)((e=>{o(!0),null!=e&&t(e)}),[]),u=Object(a.useCallback)((()=>{o(!1),t(null)}),[]);return{actionItem:e,onCompleteEditTimelineAction:Object(a.useCallback)((()=>{i(!1),o(!1),t(null)}),[]),isDeleteTimelineModalOpen:n,onCloseDeleteTimelineModal:s,onOpenDeleteTimelineModal:l,isEnableDownloader:r,enableExportTimelineDownloader:c,disableExportTimelineDownloader:u}},L=h.a.div.withConfig({displayName:"SearchRowContainer",componentId:"sc-1dq1et8-0"})(["&:not(:last-child){margin-bottom:",";}"],(e=>e.theme.eui.euiSizeL));L.displayName="SearchRowContainer";const q=h()(S.EuiFlexGroup).withConfig({displayName:"SearchRowFlexGroup",componentId:"sc-1dq1et8-1"})(["margin-bottom:",";"],(e=>e.theme.eui.euiSizeXS));q.displayName="SearchRowFlexGroup";const B=i.a.memo((({favoriteCount:e,onlyFavorites:t,onQueryChange:n,onToggleOnlyFavorites:r,children:o,timelineType:s})=>{const l=Object(a.useMemo)((()=>({placeholder:s===v.l.default?k.L:k.M,incremental:!1,"data-test-subj":"search-bar"})),[s]);return i.a.createElement(L,null,i.a.createElement(q,{gutterSize:"s"},i.a.createElement(S.EuiFlexItem,null,i.a.createElement(S.EuiSearchBar,{box:l,onChange:n})),i.a.createElement(S.EuiFlexItem,{grow:!1},i.a.createElement(S.EuiFilterGroup,{fullWidth:!0},i.a.createElement(i.a.Fragment,null,i.a.createElement(S.EuiFilterButton,{"data-test-subj":"only-favorites-toggle",hasActiveFilters:t,onClick:r,numFilters:null!=e?e:void 0},k.D),!!o&&o)))))}));B.displayName="SearchRow";var z=n(104),$=n.n(z);const V=({actionTimelineToShow:e,deleteTimelines:t,enableExportTimelineDownloader:n,onOpenDeleteTimelineModal:a,onOpenTimeline:i,onCreateRule:r,onCreateRuleFromEql:o,hasCrudAccess:s})=>[{width:s?"80px":"150px",actions:[{name:k.g,icon:"timeline",onClick:({savedObjectId:e})=>{i({duplicate:!0,timelineType:v.l.default,timelineId:e})},type:"icon",enabled:({savedObjectId:e})=>null!=e,description:k.g,"data-test-subj":"create-from-template",available:t=>t.timelineType===v.l.template&&e.includes("createFrom")},{name:k.f,icon:"visText",onClick:({savedObjectId:e})=>{i({duplicate:!0,timelineType:v.l.template,timelineId:e})},type:"icon",enabled:({savedObjectId:e})=>null!=e,description:k.f,"data-test-subj":"create-template-from-timeline",available:t=>t.timelineType!==v.l.template&&e.includes("createFrom")},{name:k.E,icon:"copy",onClick:({savedObjectId:e})=>{i({duplicate:!0,timelineId:null!=e?e:""})},type:"icon",enabled:({savedObjectId:e})=>null!=e,description:k.E,"data-test-subj":"open-duplicate",available:t=>t.timelineType!==v.l.template&&e.includes("duplicate")},{name:k.F,icon:"copy",onClick:({savedObjectId:e})=>{i({duplicate:!0,timelineId:null!=e?e:""})},type:"icon",enabled:({savedObjectId:e})=>null!=e,description:k.F,"data-test-subj":"open-duplicate-template",available:t=>t.timelineType===v.l.template&&e.includes("duplicate")},{name:k.o,icon:"exportAction",onClick:e=>{null!=n&&n(e)},enabled:e=>null!=e.savedObjectId&&e.status!==v.k.immutable,description:k.o,"data-test-subj":"export-timeline",available:()=>e.includes("export")},{name:k.i,icon:"trash",onClick:e=>{null!=a&&a(e)},enabled:({savedObjectId:e,status:t})=>null!=e&&t!==v.k.immutable,description:k.i,"data-test-subj":"delete-timeline",available:()=>e.includes("delete")&&null!=t},{name:k.d,icon:"indexEdit",onClick:e=>{null!=r&&e.savedObjectId&&r(e.savedObjectId)},enabled:e=>null!=r&&null!=e.savedObjectId&&e.status!==v.k.immutable,description:k.d,"data-test-subj":"create-rule-from-timeline",available:({queryType:t})=>e.includes("createRule")&&null!=r&&null!=t&&t.hasQuery},{name:k.e,icon:"indexEdit",onClick:e=>{null!=o&&e.savedObjectId&&o(e.savedObjectId)},enabled:e=>null!=o&&null!=e.savedObjectId&&e.status!==v.k.immutable,description:k.d,"data-test-subj":"create-rule-from-eql",available:({queryType:t})=>e.includes("createRuleFromEql")&&null!=o&&null!=t&&t.hasEql}]}],U="45px";var G=n(164),H=n(899),W=n(117),Q=n(132);const Y=h.a.span.withConfig({displayName:"LineClampTextContainer",componentId:"sc-4zme7l-0"})(["text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:5;-webkit-box-orient:vertical;overflow:hidden;"]),K=({itemIdToExpandedNotesRowMap:e,onOpenTimeline:t,onToggleShowNotes:n,timelineType:a})=>[{isExpander:!0,render:({notes:t,savedObjectId:a})=>null!=t&&t.length>0&&null!=a?i.a.createElement(S.EuiButtonIcon,{"data-test-subj":"expand-notes",onClick:()=>null!=e[a]?n(Object(A.omit)(a,e)):n({...e,[a]:i.a.createElement(H.a,{notes:t})}),"aria-label":e[a]?k.c:k.m,iconType:e[a]?"arrowDown":"arrowRight"}):null,width:U},{dataType:"string",field:"title",name:a===v.l.default?k.Y:k.Z,render:(e,n)=>null!=n.savedObjectId?i.a.createElement(S.EuiLink,{"data-test-subj":`title-${n.savedObjectId}`,onClick:()=>t({duplicate:!1,timelineId:`${n.savedObjectId}`})},Object(G.f)(n)?k.ab:i.a.createElement(Y,null,e)):i.a.createElement("div",{"data-test-subj":`title-no-saved-object-id-${e||"no-title"}`},Object(G.f)(n)?k.ab:e),sortable:!1},{dataType:"string",field:"description",name:k.l,render:e=>i.a.createElement(Y,{"data-test-subj":"description"},null!=e&&e.trim().length>0?e:Object(W.d)()),sortable:!1},{dataType:"date",field:"updated",name:k.y,render:(e,t)=>i.a.createElement("div",{"data-test-subj":"updated"},null!=t.updated?i.a.createElement(Q.b,{value:e}):Object(W.d)()),sortable:!0}],X=e=>e?[{dataType:"string",field:"updatedBy",name:k.B,render:e=>i.a.createElement("div",{"data-test-subj":"username"},Object(W.a)(e)),sortable:!1}]:[],J=({timelineType:e})=>{const t={note:{align:"center",field:"eventIdToNoteIds",name:i.a.createElement(S.EuiToolTip,{content:k.C},i.a.createElement(S.EuiIcon,{"data-test-subj":"notes-count-header-icon",size:"m",type:"editorComment"})),render:(e,t)=>i.a.createElement("span",{"data-test-subj":"notes-count"},Object(G.d)(t)),sortable:!1,width:U},pinnedEvent:{align:"center",field:"pinnedEventIds",name:i.a.createElement(S.EuiToolTip,{content:k.J},i.a.createElement(S.EuiIcon,{"data-test-subj":"pinned-event-header-icon",size:"m",type:"pin"})),render:(e,t)=>i.a.createElement("span",{"data-test-subj":"pinned-event-count"},`${Object(G.e)(t)}`),sortable:!1,width:U},favorite:{align:"center",field:"favorite",name:i.a.createElement(S.EuiToolTip,{content:k.p},i.a.createElement(S.EuiIcon,{"data-test-subj":"favorites-header-icon",size:"m",type:"starEmpty"})),render:e=>{const t=null!=e&&e.length>0?"starFilled":"starEmpty";return i.a.createElement(S.EuiIcon,{"data-test-subj":`favorite-${t}-star`,type:t,size:"m"})},sortable:!1,width:U}},n=[t.note,t.favorite],a=[t.pinnedEvent,t.note,t.favorite];return e===v.l.template?n:a},Z=S.EuiBasicTable,ee=h()(Z).withConfig({displayName:"BasicTable",componentId:"sc-1yfhyq7-0"})([".euiTableCellContent{animation:none;}.euiTableRow-isExpandedRow .euiTableCellContent__text{width:100%;}"]);ee.displayName="BasicTable";const te=i.a.memo((({actionTimelineToShow:e,deleteTimelines:t,defaultPageSize:n,loading:r,itemIdToExpandedNotesRowMap:o,enableExportTimelineDownloader:s,onCreateRule:l,onCreateRuleFromEql:c,onOpenDeleteTimelineModal:u,onOpenTimeline:d,onSelectionChange:p,onTableChange:m,onToggleShowNotes:f,pageIndex:g,pageSize:b,searchResults:y,showExtendedColumns:h,sortField:E,sortDirection:x,tableRef:j,timelineType:S,totalSearchResultsCount:w})=>{const I={showPerPageOptions:h,pageIndex:g,pageSize:b,pageSizeOptions:[Math.floor(Math.max(n,1)/2),n,2*n],totalItemCount:w},T={sort:{field:E,direction:x}},C={selectable:e=>null!=e.savedObjectId&&e.status!==v.k.immutable,selectableMessage:e=>e?void 0:k.A,onSelectionChange:p},M=null!=j?{ref:j}:{},{kibanaSecuritySolutionsPrivileges:A}=Object(O.a)(),_=Object(a.useMemo)((()=>(({actionTimelineToShow:e,deleteTimelines:t,enableExportTimelineDownloader:n,itemIdToExpandedNotesRowMap:a,onCreateRule:i,onCreateRuleFromEql:r,onOpenDeleteTimelineModal:o,onOpenTimeline:s,onToggleShowNotes:l,showExtendedColumns:c,timelineType:u,hasCrudAccess:d})=>[...K({itemIdToExpandedNotesRowMap:a,onOpenTimeline:s,onToggleShowNotes:l,timelineType:u}),...X(c),...J({timelineType:u}),...e.length?V({onCreateRule:i,onCreateRuleFromEql:r,actionTimelineToShow:e,deleteTimelines:t,enableExportTimelineDownloader:n,onOpenDeleteTimelineModal:o,onOpenTimeline:s,hasCrudAccess:d}):[]])({actionTimelineToShow:e,deleteTimelines:t,itemIdToExpandedNotesRowMap:o,enableExportTimelineDownloader:s,onCreateRule:l,onCreateRuleFromEql:c,onOpenDeleteTimelineModal:u,onOpenTimeline:d,onSelectionChange:p,onToggleShowNotes:f,showExtendedColumns:h,timelineType:S,hasCrudAccess:A.crud})),[e,t,o,s,l,c,u,d,p,f,h,S,A]),F=r||null==y?k.z:S===v.l.template?k.db:k.cb;return i.a.createElement(ee,$()({columns:_,"data-test-subj":"timelines-table",isExpandable:!0,isSelectable:e.includes("selectable"),itemId:"savedObjectId",itemIdToExpandedRowMap:o,items:null!=y?y:[],loading:r,noItemsMessage:F,onChange:m,pagination:I,selection:e.includes("selectable")?C:void 0,sorting:T},M))}));te.displayName="TimelinesTable";const ne=h.a.span.withConfig({displayName:"QueryText",componentId:"sc-1qxahey-0"})(["white-space:normal;word-break:break-word;"]),ae=i.a.memo((({deleteTimelines:e,defaultPageSize:t,favoriteCount:n,isLoading:r,itemIdToExpandedNotesRowMap:o,importDataModalToggle:s,onCreateRule:l,onCreateRuleFromEql:c,onDeleteSelected:u,onlyFavorites:d,onOpenTimeline:p,onQueryChange:m,onSelectionChange:f,onTableChange:g,onToggleOnlyFavorites:y,onToggleShowNotes:h,pageIndex:w,pageSize:I,query:T,refetch:C,searchResults:M,selectedItems:A,sortDirection:_,setImportDataModalToggle:F,sortField:D,timelineType:N=v.l.default,timelineStatus:L,timelineFilter:q,templateTimelineFilter:z,totalSearchResultsCount:$})=>{var V;const U=Object(a.useRef)(),{actionItem:H,enableExportTimelineDownloader:W,isEnableDownloader:Q,isDeleteTimelineModalOpen:Y,onOpenDeleteTimelineModal:K,onCompleteEditTimelineAction:X}=R(),{kibanaSecuritySolutionsPrivileges:J}=Object(O.a)(),{getBatchItemsPopoverContent:Z}=(({deleteTimelines:e,selectedItems:t,tableRef:n,timelineType:r=v.l.default})=>{const{enableExportTimelineDownloader:o,disableExportTimelineDownloader:s,isEnableDownloader:l,isDeleteTimelineModalOpen:c,onOpenDeleteTimelineModal:u,onCloseDeleteTimelineModal:d}=R(),p=Object(a.useCallback)((e=>{null!=e&&e(),null!=n&&null!=n.current&&n.current.changeSelection([]),s(),d()}),[s,d,n]),m=Object(a.useMemo)((()=>{return e=null!=t?t:[],(Array.isArray(e)?e:[e]).reduce(((e,t)=>null!=t.savedObjectId?[...e,t.savedObjectId]:[...e]),[]);var e}),[t]),f=Object(a.useCallback)((()=>o()),[o]),g=Object(a.useCallback)((()=>u()),[u]),b=Object(a.useCallback)((n=>{var a,o,s,u;const d=null==t||0===t.length,b=[];return t&&b.push(i.a.createElement(S.EuiContextMenuItem,{"data-test-subj":"export-timeline-action",disabled:d,icon:"exportAction",key:"ExportItemKey",onClick:f},k.o)),e&&b.push(i.a.createElement(S.EuiContextMenuItem,{"data-test-subj":"delete-timeline-action",disabled:d,icon:"trash",key:"DeleteItemKey",onClick:g},k.i)),i.a.createElement(i.a.Fragment,null,i.a.createElement(P,{deleteTimelines:e,ids:m,isEnableDownloader:l,isDeleteTimelineModalOpen:c,onComplete:p.bind(null,n),title:1!==(null==t?void 0:t.length)?r===v.l.template?k.N(null!==(a=null==t?void 0:t.length)&&void 0!==a?a:0):k.O(null!==(o=null==t?void 0:t.length)&&void 0!==o?o:0):null!==(s=null===(u=t[0])||void 0===u?void 0:u.title)&&void 0!==s?s:""}),i.a.createElement(S.EuiContextMenuPanel,{items:b}))}),[t,e,m,l,c,p,r,f,g]);return{onCompleteBatchActions:p,getBatchItemsPopoverContent:b}})({deleteTimelines:J.crud?e:void 0,selectedItems:A,tableRef:U,timelineType:N}),ee=Object(a.useMemo)((()=>i.a.createElement(b.FormattedMessage,{id:"xpack.securitySolution.open.timeline.showingNTemplatesLabel",defaultMessage:"{totalSearchResultsCount} {totalSearchResultsCount, plural, one {template} other {templates}} {with}",values:{totalSearchResultsCount:$,with:i.a.createElement(ne,{"data-test-subj":"selectable-query-text"},T.trim().length?`${k.bb} "${T.trim()}"`:"")}})),[$,T]),ae=Object(a.useMemo)((()=>i.a.createElement(b.FormattedMessage,{id:"xpack.securitySolution.open.timeline.showingNTimelinesLabel",defaultMessage:"{totalSearchResultsCount} {totalSearchResultsCount, plural, one {timeline} other {timelines}} {with}",values:{totalSearchResultsCount:$,with:i.a.createElement(ne,{"data-test-subj":"selectable-query-text"},T.trim().length?`${k.bb} "${T.trim()}"`:"")}})),[$,T]),ie=Object(a.useMemo)((()=>null!=H&&null!=H.savedObjectId?[H.savedObjectId]:[]),[H]),re=Object(a.useCallback)((()=>{null!=C&&C()}),[C]),oe=Object(a.useCallback)((()=>{null!=F&&F(!1)}),[F]),se=Object(a.useCallback)((()=>{null!=F&&F(!1),null!=C&&C()}),[F,C]),le=Object(a.useMemo)((()=>{if(J.crud){const t=["createFrom","duplicate",...null!=l?["createRule"]:[],...null!=c?["createRuleFromEql"]:[]];return L!==v.k.immutable&&(t.push("export"),t.push("selectable")),null!=u&&null!=e&&L!==v.k.immutable&&t.push("delete"),t}return L!==v.k.immutable?["export","selectable"]:[]}),[l,c,L,u,e,J]),ce=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,z)),[z]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(P,{deleteTimelines:e,ids:ie,isDeleteTimelineModalOpen:Y,isEnableDownloader:Q,onComplete:X,title:null!==(V=null==H?void 0:H.title)&&void 0!==V?V:k.ab}),i.a.createElement(E.a,{checkBoxLabel:k.I,closeModal:oe,description:k.P,errorMessage:k.t,failedDetailed:k.u,importComplete:se,importData:j.e,successMessage:k.V,showCheckBox:!1,showModal:null!=s&&s,submitBtnText:k.w,subtitle:k.x,title:k.v}),i.a.createElement("div",{className:G.a},!!q&&q,i.a.createElement(B,{"data-test-subj":"search-row",favoriteCount:n,onlyFavorites:d,onQueryChange:m,onToggleOnlyFavorites:y,query:T,timelineType:N},ce),i.a.createElement(x.a,{border:!0},i.a.createElement(x.d,null,i.a.createElement(x.c,null,i.a.createElement(x.e,{"data-test-subj":"query-message"},i.a.createElement(i.a.Fragment,null,k.Q," ",N===v.l.template?ee:ae))),i.a.createElement(x.c,null,L!==v.k.immutable&&i.a.createElement(i.a.Fragment,null,i.a.createElement(x.e,{"data-test-subj":"selected-count"},N===v.l.template?k.N(A.length):k.O(A.length)),i.a.createElement(x.b,{dataTestSubj:"batchActions",iconSide:"right",iconType:"arrowDown",popoverContent:Z,"data-test-subj":"utility-bar-action"},i.a.createElement("span",{"data-test-subj":"utility-bar-action-button"},k.a))),i.a.createElement(x.b,{dataTestSubj:"refreshButton",iconSide:"right",iconType:"refresh",onClick:re},k.K)))),i.a.createElement(te,{actionTimelineToShow:le,"data-test-subj":"timelines-table",deleteTimelines:e,defaultPageSize:t,loading:r,itemIdToExpandedNotesRowMap:o,enableExportTimelineDownloader:W,onCreateRule:l,onCreateRuleFromEql:c,onOpenDeleteTimelineModal:K,onOpenTimeline:p,onSelectionChange:f,onTableChange:g,onToggleShowNotes:h,pageIndex:w,pageSize:I,searchResults:M,showExtendedColumns:!0,sortDirection:_,sortField:D,timelineType:N,tableRef:U,totalSearchResultsCount:$})))}));ae.displayName="OpenTimeline";var ie=n(166);const re=i.a.memo((({children:e,onAddTimelinesToFavorites:t,selectedTimelinesCount:n,title:a})=>i.a.createElement(ie.a,{title:a,split:!0,height:40},i.a.createElement(S.EuiFlexGroup,{gutterSize:"s",responsive:!1},t&&i.a.createElement(S.EuiFlexItem,{grow:!1},i.a.createElement(S.EuiButton,{"data-test-subj":"favorite-selected",iconSide:"left",iconType:"starEmptySpace",isDisabled:0===n,onClick:t},k.q)),e&&i.a.createElement(S.EuiFlexItem,null,e)))));re.displayName="TitleRow";const oe=h.a.div.withConfig({displayName:"HeaderContainer",componentId:"sc-98e87t-0"})(["width:100%;"]);oe.displayName="HeaderContainer";const se=Object(a.memo)((({deleteTimelines:e,defaultPageSize:t,favoriteCount:n,hideActions:r=[],isLoading:o,itemIdToExpandedNotesRowMap:s,onAddTimelinesToFavorites:l,onDeleteSelected:c,onlyFavorites:u,onOpenTimeline:d,onQueryChange:p,onSelectionChange:m,onTableChange:f,onToggleOnlyFavorites:g,onToggleShowNotes:b,pageIndex:y,pageSize:h,searchResults:v,selectedItems:E,sortDirection:x,sortField:j,timelineFilter:O,timelineType:k,templateTimelineFilter:w,title:I,totalSearchResultsCount:T})=>{const C=Object(a.useMemo)((()=>{const t=["createFrom","duplicate"];return null!=c&&null!=e&&t.push("delete"),t.filter((e=>!r.includes(e)))}),[c,e,r]),M=Object(a.useMemo)((()=>i.a.createElement(a.Fragment,{key:"search-row-content"},!!w&&w)),[w]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(S.EuiModalHeader,null,i.a.createElement(oe,null,i.a.createElement(re,{"data-test-subj":"title-row",onAddTimelinesToFavorites:l,selectedTimelinesCount:E.length,title:I}))),i.a.createElement(S.EuiModalBody,null,i.a.createElement(i.a.Fragment,null,!!O&&i.a.createElement(i.a.Fragment,null,O,i.a.createElement(S.EuiSpacer,{size:"m"})),i.a.createElement(B,{"data-test-subj":"search-row",onlyFavorites:u,onQueryChange:p,onToggleOnlyFavorites:g,query:"",timelineType:k},M),i.a.createElement(te,{actionTimelineToShow:C,"data-test-subj":"timelines-table",deleteTimelines:e,defaultPageSize:t,loading:o,itemIdToExpandedNotesRowMap:s,onOpenTimeline:d,onSelectionChange:m,onTableChange:f,onToggleShowNotes:b,pageIndex:y,pageSize:h,searchResults:v,showExtendedColumns:!1,sortDirection:x,sortField:j,timelineType:k,totalSearchResultsCount:T}))))}));se.displayName="OpenTimelineModalBody";var le=n(131),ce=n(169);let ue;!function(e){e.tab="tab",e.filter="filter"}(ue||(ue={}));var de=n(911),pe=n(110),me=n(116),fe=n(159),ge=n(196);const be=i.a.memo((({closeModalTimeline:e,defaultPageSize:t,hideActions:n=[],isModal:b=!1,importDataModalToggle:y,onOpenTimeline:h,setImportDataModalToggle:E,title:x})=>{const O=Object(r.useDispatch)(),{startTransaction:I}=Object(fe.b)(),[T,C]=Object(a.useState)({}),[M,_]=Object(a.useState)(!1),[F,D]=Object(a.useState)(0),[N,P]=Object(a.useState)(t),[R,L]=Object(a.useState)(""),[q,B]=Object(a.useState)([]),[z,$]=Object(a.useState)("desc"),[V,U]=Object(a.useState)("updated"),H=Object(a.useMemo)((()=>p.b.getTimelineByIdSelector()),[]),W=Object(u.b)((e=>{var t,n;return null!==(t=null===(n=H(e,d.c.active))||void 0===n?void 0:n.savedObjectId)&&void 0!==t?t:""})),{dataViewId:Q,selectedPatterns:Y}=Object(me.d)(pe.SourcererScopeName.timeline),K=Object(a.useMemo)((()=>Object(G.b)(O)),[O]),X=Object(a.useCallback)((e=>O(Object(m.updateIsLoading)(e))),[O]),{customTemplateTimelineCount:J,defaultTimelineCount:Z,elasticTemplateTimelineCount:ee,favoriteCount:te,fetchAllTimeline:ne,timelines:ie,loading:re,totalCount:oe,templateTimelineCount:be}=Object(f.b)(),{timelineType:ye,timelineTabs:he,timelineFilters:ve}=(({defaultTimelineCount:e,templateTimelineCount:t})=>{const{formatUrl:n,search:r}=Object(ce.m)(le.a.timelines),{navigateToUrl:o}=Object(l.j)().services.application,{tabName:s}=Object(w.useParams)(),[c,u]=Object(a.useState)(s===v.l.default||s===v.l.template?s:v.l.default),d=n(Object(ce.k)(v.l.default,r)),p=n(Object(ce.k)(v.l.template,r)),m=Object(a.useCallback)((e=>{e.preventDefault(),o(d)}),[o,d]),f=Object(a.useCallback)((e=>{e.preventDefault(),o(p)}),[o,p]),g=Object(a.useCallback)((e=>[{id:v.l.default,name:k.X,href:d,disabled:!1,onClick:e===ue.tab?m:A.noop},{id:v.l.template,name:k.W,href:p,disabled:!1,onClick:e===ue.tab?f:A.noop}]),[d,p,m,f]),b=Object(a.useCallback)(((e,t)=>{u((t=>(t!==e&&u(e),t)))}),[u]),y=Object(a.useMemo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(S.EuiTabs,{"data-test-subj":"open-timeline-subtabs"},g(ue.tab).map((e=>i.a.createElement(S.EuiTab,{"data-test-subj":`timeline-${ue.tab}-${e.id}`,isSelected:e.id===s,disabled:e.disabled,key:`timeline-${ue.tab}-${e.id}`,href:e.href,onClick:t=>{e.onClick(t),b(e.id,ue.tab)}},e.name)))),i.a.createElement(S.EuiSpacer,{size:"m"}))),[s]),h=Object(a.useMemo)((()=>i.a.createElement(S.EuiTabs,null,g(ue.filter).map((e=>i.a.createElement(S.EuiTab,{"data-test-subj":`open-timeline-modal-body-${ue.filter}-${e.id}`,isSelected:e.id===c,key:`timeline-${ue.filter}-${e.id}`,onClick:t=>{e.onClick(t),b(e.id,ue.filter)}},e.name))))),[c,g,b]);return{timelineType:c,timelineTabs:y,timelineFilters:h}})({defaultTimelineCount:Z,templateTimelineCount:be}),{timelineStatus:Ee,templateTimelineFilter:xe,installPrepackagedTimelines:je}=Object(de.a)({timelineType:ye,customTemplateTimelineCount:J,elasticTemplateTimelineCount:ee}),Oe=Object(a.useCallback)((()=>{ne({pageInfo:{pageIndex:F+1,pageSize:N},search:R,sort:{sortField:V,sortOrder:z},onlyUserFavorite:M,timelineType:ye,status:Ee})}),[ne,F,N,R,V,z,ye,Ee,M]),Se=Object(a.useCallback)((e=>{L(e.queryText.trim())}),[]),ke=Object(a.useCallback)((async e=>{I({name:e.length>1?ge.f.BULK_DELETE:ge.f.DELETE}),e.includes(W)&&O(Object(m.createTimeline)({id:d.c.active,columns:g.b,dataViewId:Q,indexNames:Y,show:!1})),await Object(j.a)(e),Oe()}),[I,W,Oe,O,Q,Y]),we=Object(a.useCallback)((async e=>{await ke(e)}),[ke]),Ie=Object(a.useCallback)((async()=>{await ke((e=>e.reduce(((e,t)=>null!=t.savedObjectId?[...e,t.savedObjectId]:e),[]))(q)),Ne()}),[q,ke]),Te=Object(a.useCallback)((e=>{B(e)}),[]),Ce=Object(a.useCallback)((({page:e,sort:t})=>{const{index:n,size:a}=e,{field:i,direction:r}=t;D(n),P(a),$(r),U(i)}),[]),Me=Object(a.useCallback)((()=>{_(!M)}),[M]),Ae=Object(a.useCallback)((e=>{C(e)}),[]),{navigateTo:_e}=Object(l.l)(),Fe=Object(a.useCallback)((e=>_e({deepLinkId:c.wc.rulesCreate,path:`?${s.b}=${Object(o.encode)(e)}`})),[_e]),De=Object(a.useCallback)((e=>_e({deepLinkId:c.wc.rulesCreate,path:`?${s.a}=${Object(o.encode)(e)}`})),[_e]),Ne=Object(a.useCallback)((()=>{B([])}),[]),Pe=Object(a.useCallback)((({duplicate:t,timelineId:n,timelineType:a})=>{t&&I({name:ge.f.DUPLICATE}),b&&null!=e&&e(),Object(G.h)({duplicate:t,onOpenTimeline:h,timelineId:n,timelineType:a,updateIsLoading:X,updateTimeline:K})}),[X,K]);return Object(a.useEffect)((()=>{(()=>{const e=document.querySelector(`.${G.a} input`);null!=e&&e.focus()})()}),[]),Object(a.useEffect)((()=>{(async()=>{await je(),Oe()})()}),[Oe,je]),b?i.a.createElement(se,{"data-test-subj":"open-timeline-modal",deleteTimelines:we,defaultPageSize:t,favoriteCount:te,hideActions:n,isLoading:re,itemIdToExpandedNotesRowMap:T,onAddTimelinesToFavorites:void 0,onlyFavorites:M,onOpenTimeline:Pe,onQueryChange:Se,onSelectionChange:Te,onTableChange:Ce,onToggleOnlyFavorites:Me,onToggleShowNotes:Ae,pageIndex:F,pageSize:N,query:R,searchResults:ie,selectedItems:q,sortDirection:z,sortField:V,templateTimelineFilter:xe,timelineType:ye,timelineStatus:Ee,timelineFilter:ve,title:x,totalSearchResultsCount:oe}):i.a.createElement(ae,{"data-test-subj":"open-timeline",deleteTimelines:we,defaultPageSize:t,favoriteCount:te,isLoading:re,itemIdToExpandedNotesRowMap:T,importDataModalToggle:y,onAddTimelinesToFavorites:void 0,onCreateRule:Fe,onCreateRuleFromEql:De,onDeleteSelected:Ie,onlyFavorites:M,onOpenTimeline:Pe,onQueryChange:Se,onSelectionChange:Te,onTableChange:Ce,onToggleOnlyFavorites:Me,onToggleShowNotes:Ae,pageIndex:F,pageSize:N,query:R,refetch:Oe,searchResults:ie,setImportDataModalToggle:E,selectedItems:q,sortDirection:z,sortField:V,templateTimelineFilter:xe,timelineType:ye,timelineStatus:Ee,timelineFilter:he,title:x,totalSearchResultsCount:oe})})),ye=i.a.memo(be)},function(e,t,n){"use strict";n.d(t,"a",(function(){return G}));var a=n(2),i=n.n(a),r=n(40),o=n(45),s=n(141),l=n(828),c=n(1135),u=n(653),d=n(5),p=n(755),m=n(104),f=n.n(m);const g=Object(a.memo)((e=>{const t=Object(a.useRef)(null),n=i.a.createElement(r.EuiButton,f()({buttonRef:t},e));return Object(a.useEffect)((()=>{t.current&&t.current.focus()}),[]),n}));g.displayName="AutoFocusButton";var b=n(107),y=n(487),h=n(102),v=n(381);const E=Object.freeze({deleteActionFailure:(e,t)=>d.i18n.translate("xpack.securitySolution.artifactListPage.deleteActionFailure",{defaultMessage:'Unable to remove "{itemName}". Reason: {errorMessage}',values:{itemName:e,errorMessage:t}}),deleteActionSuccess:e=>d.i18n.translate("xpack.securitySolution.artifactListPage.deleteActionSuccess",{defaultMessage:'"{itemName}" has been removed',values:{itemName:e}})}),x=Object.freeze({deleteModalTitle:e=>d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalTitle",{defaultMessage:"Delete {itemName}",values:{itemName:e}}),deleteModalImpactTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalImpactTitle",{defaultMessage:"Warning"}),deleteModalImpactInfo:e=>d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalImpactInfo",{defaultMessage:"Deleting this entry will remove it from {count} associated {count, plural, one {policy} other {policies}}.",values:{count:Object(y.e)(e)?d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalImpactInfoAll",{defaultMessage:"all"}):Object(y.c)(e).length}}),deleteModalConfirmInfo:d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalConfirmInfo",{defaultMessage:"This action cannot be undone. Are you sure you wish to continue?"}),deleteModalSubmitButtonTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalSubmitButtonTitle",{defaultMessage:"Delete"}),deleteModalCancelButtonTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.deleteModalCancelButtonTitle",{defaultMessage:"Cancel"})}),j=Object(a.memo)((({apiClient:e,item:t,onCancel:n,onSuccess:o,"data-test-subj":s,labels:l})=>{const c=Object(b.a)(s),{deleteArtifactItem:u,isLoading:d}=((e,t,n)=>{const i=Object(h.n)(),r=Object(v.c)(e,{onError:e=>{var a;i.addDanger(n.deleteActionFailure(t.name,(null===(a=e.body)||void 0===a?void 0:a.message)||e.message))},onSuccess:e=>{i.addSuccess(n.deleteActionSuccess(e.name))}});return Object(a.useMemo)((()=>({...r,deleteArtifactItem:r.mutateAsync})),[r])})(e,t,l),p=Object(a.useCallback)((()=>{u(t).then((()=>o()))}),[u,t,o]),m=Object(a.useCallback)((()=>{d||n()}),[d,n]);return i.a.createElement(r.EuiModal,{onClose:m,"data-test-subj":s},i.a.createElement(r.EuiModalHeader,{"data-test-subj":c("header")},i.a.createElement(r.EuiModalHeaderTitle,null,l.deleteModalTitle(t.name))),i.a.createElement(r.EuiModalBody,{"data-test-subj":c("body")},i.a.createElement(r.EuiText,null,i.a.createElement(r.EuiCallOut,{"data-test-subj":c("impactCallout"),title:l.deleteModalImpactTitle,color:"danger",iconType:"warning"},i.a.createElement("p",{"data-test-subj":c("impactCalloutInfo")},l.deleteModalImpactInfo(t))),i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement("p",null,l.deleteModalConfirmInfo))),i.a.createElement(r.EuiModalFooter,null,i.a.createElement(r.EuiButtonEmpty,{onClick:m,isDisabled:d,"data-test-subj":c("cancelButton")},l.deleteModalCancelButtonTitle),i.a.createElement(g,{fill:!0,color:"danger",onClick:p,isLoading:d,isDisabled:d,"data-test-subj":c("submitButton")},l.deleteModalSubmitButtonTitle)))}));j.displayName="ArtifactDeleteModal";const O=Object.freeze({pageTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.pageTitle",{defaultMessage:"Artifact"}),pageAboutInfo:d.i18n.translate("xpack.securitySolution.artifactListPage.aboutInfo",{defaultMessage:"A list of artifacts for endpoint"}),pageAddButtonTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.addButtonTitle",{defaultMessage:"Add artifact"}),emptyStateTitleNoEntries:d.i18n.translate("xpack.securitySolution.artifactListPage.emptyStateTitleNoEntries",{defaultMessage:"There are no entries to display."}),emptyStateTitle:d.i18n.translate("xpack.securitySolution.artifactListPage.emptyStateTitle",{defaultMessage:"Add your first artifact"}),emptyStateInfo:d.i18n.translate("xpack.securitySolution.artifactListPage.emptyStateInfo",{defaultMessage:"Add an artifact"}),emptyStatePrimaryButtonLabel:d.i18n.translate("xpack.securitySolution.artifactListPage.emptyStatePrimaryButtonLabel",{defaultMessage:"Add"}),searchPlaceholderInfo:d.i18n.translate("xpack.securitySolution.artifactListPage.searchPlaceholderInfo",{defaultMessage:"Search on the fields below: name, description, comments, value"}),getShowingCountLabel:e=>d.i18n.translate("xpack.securitySolution.artifactListPage.showingTotal",{defaultMessage:"Showing {total, plural, one {# artifact} other {# artifacts}}",values:{total:e}}),cardActionEditLabel:d.i18n.translate("xpack.securitySolution.artifactListPage.cardActionEditLabel",{defaultMessage:"Edit artifact"}),cardActionDeleteLabel:d.i18n.translate("xpack.securitySolution.artifactListPage.cardActionDeleteLabel",{defaultMessage:"Delete event filter"}),...p.a,...x,...E});var S=n(794),k=n(1062),w=n(503),I=n(347),T=n(41),C=n.n(T),M=n(1036);const A=C()(r.EuiEmptyPrompt).withConfig({displayName:"EmptyPrompt",componentId:"sc-1flznkw-0"})(["",""],(()=>Object(T.css)(["max-width:100%;"]))),_=Object(a.memo)((({onAdd:e,isAddDisabled:t=!1,backComponent:n,"data-test-subj":a,titleLabel:o,titleNoEntriesLabel:s,aboutInfo:l,primaryButtonLabel:c,secondaryAboutInfo:u,canCreateItems:d=!0})=>{const p=Object(b.a)(a);return i.a.createElement(M.a,null,d?i.a.createElement(A,{"data-test-subj":a,iconType:"plusInCircle",title:i.a.createElement("h2",{"data-test-subj":p("title")},o),body:i.a.createElement("div",{"data-test-subj":p("aboutInfo")},l,u?i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"m"}),u):void 0),actions:[i.a.createElement(r.EuiButton,{fill:!0,isDisabled:t,onClick:e,"data-test-subj":p("addButton")},c),...n?[n]:[]]}):i.a.createElement(A,{"data-test-subj":a,iconType:"iInCircle",title:i.a.createElement("h2",{"data-test-subj":p("title-no-entries")},s)}))}));_.displayName="NoDataEmptyState";var F=n(829),D=n(732),N=n(46),P=n(173),R=n(290),L=n(1390),q=n(720);var B=n(226),z=n(44),$=n(488);const V=Object(a.memo)((({backButtonLabel:e,backButtonUrl:t,onBackButtonNavigateTo:n,...a})=>{const o=Object($.a)(...n);return i.a.createElement(r.EuiButtonEmpty,f()({},a,{"data-test-subj":"backToOrigin",size:"s",href:t,onClick:o,textProps:{className:"text"}}),e||i.a.createElement(z.FormattedMessage,{id:"xpack.securitySolution.list.backButton",defaultMessage:"Back"}))}));V.displayName="BackToExternalAppSecondaryButton";var U=n(685);const G=Object(a.memo)((({apiClient:e,ArtifactFormComponent:t,searchableFields:n=B.c,labels:d={},secondaryPageInfo:m,onFormSubmit:f,flyoutSize:g,"data-test-subj":y,allowCardEditAction:E=!0,allowCardCreateAction:x=!0,allowCardDeleteAction:T=!0})=>{var C,M;const{state:A}=Object(o.useLocation)(),z=Object(b.a)(y),$=Object(h.n)(),G=Object(s.b)(),H=Object(F.a)(E,x),W=Object(D.a)(),{urlParams:{filter:Q,includedPolicies:Y}}=Object(R.a)(),{isPageInitializing:K,isFetching:X,data:J,uiPagination:Z,doesDataExist:ee,error:te,refetch:ne}=((e,t)=>{const n=Object(s.b)(),{urlParams:{filter:i,includedPolicies:r}}=Object(R.a)(),{pagination:{page:o,pageSize:l}}=Object(q.b)(),c=((e,t,n)=>Object(a.useMemo)((()=>Object(L.a)({kuery:Object(L.b)(e,t),policies:n?n.split(","):[]})),[t,e,n]))(i,t,r),{data:u,isFetching:d,refetch:p}=Object(N.useQuery)(["does-data-exists",e],(async()=>e.hasData()),{enabled:!0,keepPreviousData:!0,refetchOnWindowFocus:!1}),[m,f]=Object(a.useState)({totalItemCount:0,pageSize:l,pageSizeOptions:[...P.f],pageIndex:o-1}),[g,b]=Object(a.useState)(!0),y=Object(v.e)(e,{page:o,perPage:l,filter:i,policies:r?r.split(","):[]},t),{data:h,isFetching:E,error:x,isSuccess:j}=y;return Object(a.useEffect)((()=>{n()&&g&&!d&&b(!1)}),[d,n,g]),Object(a.useEffect)((()=>{n()&&h&&!E&&j&&f((e=>({...e,pageIndex:h.page-1,pageSize:h.per_page,totalItemCount:h.total})))}),[E,n,j,h]),Object(a.useEffect)((()=>{!n()||E||d||x||"1"!==String(o)||c||!(h&&0===h.total&&u||h&&h.total>0&&!u)||p()}),[p,u,i,r,d,E,n,c,h,x,o]),Object(a.useMemo)((()=>({isPageInitializing:g,doesDataExist:null!=u&&u,uiPagination:m,...y})),[u,g,y,m])})(e,n);Object(a.useEffect)((()=>{var e;!X&&te&&$.addDanger((null==te||null===(e=te.body)||void 0===e?void 0:e.message)||te.message)}),[te,$,X]);const ae=Object(a.useMemo)((()=>{var e;return null!==(e=null==J?void 0:J.data)&&void 0!==e?e:[]}),[null==J?void 0:J.data]),[ie,re]=Object(a.useState)(void 0),[oe,se]=Object(a.useState)(void 0),le=Object(a.useMemo)((()=>({...O,...d})),[d]),ce=(({items:e,onAction:t,cardActionDeleteLabel:n,cardActionEditLabel:i,dataTestSubj:r,allowCardDeleteAction:o=!0,allowCardEditAction:s=!0})=>{const l=Object(b.a)(r),c=Object(h.n)(),{data:d}=Object(w.b)({onError:e=>{c.addDanger(Object(I.b)(e))}}),p=Object(u.f)(null==d?void 0:d.items),m=Object(a.useMemo)((()=>{const a={};for(const c of e){const e=[];s&&e.push({icon:"controlsHorizontal",onClick:()=>{t({type:"edit",item:c})},"data-test-subj":l("cardEditAction"),children:i}),o&&e.push({icon:"trash",onClick:()=>{t({type:"delete",item:c})},"data-test-subj":l("cardDeleteAction"),children:n}),a[c.id]={item:c,policies:p,"data-test-subj":r,actions:e.length>0?e:void 0,hideDescription:!c.description,hideComments:!c.comments.length}}return a}),[e,s,o,p,r,l,i,t,n]);return Object(a.useCallback)((e=>m[e.id]),[m])})({items:ae,onAction:Object(a.useCallback)((({type:e,item:t})=>{switch(e){case"edit":se(t),W({show:"edit",itemId:t.item_id});break;case"delete":re(t)}}),[W]),cardActionDeleteLabel:le.cardActionDeleteLabel,cardActionEditLabel:le.cardActionEditLabel,dataTestSubj:z("card"),allowCardDeleteAction:T,allowCardEditAction:E}),ue=Object(w.b)({onError:e=>{$.addWarning(Object(I.b)(e))}}),de=function(e){const[t,n]=Object(a.useState)();return Object(a.useEffect)((()=>{e&&e.onBackButtonNavigateTo&&n(e)}),[e]),t}(A),pe=Object(a.useMemo)((()=>{if(de&&de.onBackButtonNavigateTo)return i.a.createElement(V,de)}),[de]),me=Object(a.useMemo)((()=>{if(de&&de.onBackButtonNavigateTo)return i.a.createElement(U.a,de)}),[de]),fe=Object(a.useCallback)((()=>{W({show:"create"})}),[W]),ge=Object(a.useCallback)((({pageIndex:e,pageSize:t})=>{W({page:e+1,pageSize:t}),window.scrollTo({top:0,left:0,behavior:"smooth"})}),[W]),be=Object(a.useCallback)(((e,t,n)=>{const a=e!==(null!=Q?Q:"")||t!==(null!=Y?Y:"");W({filter:""===e.trim()?void 0:e,includedPolicies:""===t.trim()?void 0:t}),n&&!a&&ne()}),[Q,Y,ne,W]),ye=Object(a.useCallback)((()=>{G()&&(re(void 0),ne())}),[G,ne]),he=Object(a.useCallback)((()=>{re(void 0)}),[]),ve=Object(a.useCallback)((()=>{se(void 0),ne()}),[ne]),Ee=Object(a.useCallback)((()=>{se(void 0)}),[]),xe=Object(a.useMemo)((()=>{const e=le.pageAboutInfo?i.a.createElement("span",{"data-test-subj":"header-panel-subtitle"},le.pageAboutInfo):void 0,t=m?i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"m"}),m):void 0;return i.a.createElement(i.a.Fragment,null,e,t)}),[le.pageAboutInfo,m]);return K?i.a.createElement(S.a,{"data-test-subj":z("pageLoader")}):i.a.createElement(l.a,{headerBackComponent:me,hideHeader:!ee,title:le.pageTitle,subtitle:xe,actions:x&&i.a.createElement(r.EuiButton,{fill:!0,iconType:"plusInCircle",isDisabled:H,onClick:fe,"data-test-subj":z("pageAddButton")},le.pageAddButtonTitle),"data-test-subj":z("container")},H&&i.a.createElement(p.b,{apiClient:e,item:oe,onSuccess:ve,onClose:Ee,FormComponent:t,labels:le,size:g,submitHandler:f,policies:(null===(C=ue.data)||void 0===C?void 0:C.items)||[],policiesIsLoading:ue.isLoading,"data-test-subj":z("flyout")}),ie&&i.a.createElement(j,{apiClient:e,item:ie,labels:le,"data-test-subj":z("deleteModal"),onSuccess:ye,onCancel:he}),ee?i.a.createElement(i.a.Fragment,null,i.a.createElement(k.a,{defaultValue:Q,onSearch:be,placeholder:le.searchPlaceholderInfo,hasPolicyFilter:!0,policyList:null===(M=ue.data)||void 0===M?void 0:M.items,defaultIncludedPolicies:Y}),i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(r.EuiText,{color:"subdued",size:"xs","data-test-subj":z("showCount")},le.getShowingCountLabel(Z.totalItemCount)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(c.a,{items:ae,ItemComponent:u.a,itemComponentProps:ce,onChange:ge,error:te,loading:X,pagination:Z,contentClassName:"card-container","data-test-subj":z("list")})):i.a.createElement(_,{onAdd:fe,titleNoEntriesLabel:le.emptyStateTitleNoEntries,titleLabel:le.emptyStateTitle,aboutInfo:le.emptyStateInfo,primaryButtonLabel:le.emptyStatePrimaryButtonLabel,backComponent:pe,"data-test-subj":z("emptyState"),secondaryAboutInfo:m,canCreateItems:x}))}));G.displayName="ArtifactListPage"},function(e,t,n){"use strict";n.d(t,"b",(function(){return be})),n.d(t,"a",(function(){return Ae}));var a=n(40),i=n(2),r=n.n(i),o=n(42),s=n(103),l=n(41),c=n.n(l),u=n(44),d=n(51),p=n(114),m=n(105),f=n(118),g=n(106),b=n(111),y=n(133),h=n(412),v=n(4),E=n(12),x=n(102),j=n(169),O=n(131),S=n(248);const k=({timelineId:e})=>{const t=Object(i.useMemo)((()=>b.b.getTimelineByIdSelector()),[]),{cases:n,application:{navigateToApp:l}}=Object(x.j)().services,c=Object(s.useDispatch)(),{graphEventId:u,savedObjectId:d,status:p,title:h,timelineType:k}=Object(m.a)((n=>{var a;return Object(o.pick)(["graphEventId","savedObjectId","status","title","timelineType"],null!==(a=t(n,e))&&void 0!==a?a:y.b)})),[w,I]=Object(i.useState)(!1),[T,C]=Object(i.useState)(!1),M=Object(i.useCallback)((async t=>{C(!1),await l(v.l,{deepLinkId:O.a.case,path:null!=t?Object(j.b)({id:t.id}):Object(j.c)()}),c(Object(E.setInsertTimeline)({graphEventId:u,timelineId:e,timelineSavedObjectId:d,timelineTitle:h}))}),[c,u,l,d,e,h]),A=Object(x.h)(),_=Object(i.useCallback)((()=>{I((e=>!e))}),[]),F=Object(i.useCallback)((()=>I(!1)),[]),D=Object(i.useCallback)((()=>{F(),l(v.l,{deepLinkId:O.a.case,path:Object(j.c)()}).then((()=>{c(Object(E.setInsertTimeline)({graphEventId:u,timelineId:e,timelineSavedObjectId:d,timelineTitle:h.length>0?h:S.l})),c(Object(E.showTimeline)({id:f.c.active,show:!1}))}))}),[c,u,l,F,d,e,h]),N=Object(i.useCallback)((()=>{F(),C(!0)}),[C,F]),P=Object(i.useCallback)((()=>{C(!1)}),[C]),R=Object(i.useCallback)((()=>{I(!1)}),[]),L=Object(i.useMemo)((()=>r.a.createElement(a.EuiButton,{fill:!0,size:"m","data-test-subj":"attach-timeline-case-button",iconType:"arrowDown",iconSide:"right",onClick:_,disabled:p===g.k.draft||k!==g.l.default},S.c)),[_,p,k]),q=Object(i.useMemo)((()=>[r.a.createElement(a.EuiContextMenuItem,{key:"new-case","data-test-subj":"attach-timeline-new-case",onClick:D},S.e),r.a.createElement(a.EuiContextMenuItem,{key:"existing-case","data-test-subj":"attach-timeline-existing-case",onClick:N},S.d)]),[N,D]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiPopover,{id:"singlePanel",button:L,isOpen:w,closePopover:R,panelPaddingSize:"none",anchorPosition:"downLeft"},r.a.createElement(a.EuiContextMenuPanel,{items:q})),T&&n.ui.getAllCasesSelectorModal({onRowClick:M,onClose:P,owner:[v.i],permissions:A}))};k.displayName="AddToCaseButtonComponent";const w=r.a.memo(k);var I=n(701),T=n(657),C=n(149),M=n(130),A=n.n(M),_=n(3),F=n(13),D=n(113),N=n(108),P=n(5);const R=P.i18n.translate("xpack.securitySolution.timeline.kpiFailDescription",{defaultMessage:"An error has occurred"}),L=P.i18n.translate("xpack.securitySolution.timeline.kpiFailSearchDescription",{defaultMessage:"Failed to load KPIs"});var q=n(116),B=n(187),z=n(148),$=n(161),V=n(110),U=n(519);const G=e=>P.i18n.translate("xpack.securitySolution.timeline.flyout.header.closeTimelineButtonLabel",{defaultMessage:"Close {isTimeline, select, true {timeline} false {template}}",values:{isTimeline:e}}),H=P.i18n.translate("xpack.securitySolution.timeline.properties.unsavedLabel",{defaultMessage:"Unsaved"}),W=P.i18n.translate("xpack.securitySolution.timeline.properties.autosavedLabel",{defaultMessage:"Autosaved"}),Q=P.i18n.translate("xpack.securitySolution.timeline.properties.inspectTimelineTitle",{defaultMessage:"Timeline"}),Y=P.i18n.translate("xpack.securitySolution.timeline.kpis.processKpiTitle",{defaultMessage:"Processes"}),K=P.i18n.translate("xpack.securitySolution.timeline.kpis.hostKpiTitle",{defaultMessage:"Hosts"}),X=P.i18n.translate("xpack.securitySolution.timeline.kpis.sourceIpKpiTitle",{defaultMessage:"Source IPs"}),J=P.i18n.translate("xpack.securitySolution.timeline.kpis.destinationKpiTitle",{defaultMessage:"Destination IPs"}),Z=P.i18n.translate("xpack.securitySolution.timeline.kpis.userKpiTitle",{defaultMessage:"Users"}),ee=P.i18n.translate("xpack.securitySolution.timeline.properties.readMore",{defaultMessage:"Read More"}),te=({isOpen:e,title:t})=>P.i18n.translate("xpack.securitySolution.timeline.properties.timelineToggleButtonAriaLabel",{values:{isOpen:e,title:t},defaultMessage:"{isOpen, select, false {Open} true {Close} other {Toggle}} timeline {title}"}),ne=c()(a.EuiHealth).withConfig({displayName:"EuiHealthStyled",componentId:"sc-m1giyi-0"})(["display:block;"]),ae=c()(a.EuiButtonEmpty).withConfig({displayName:"StyledEuiButtonEmpty",componentId:"sc-m1giyi-1"})(["> span{padding:0;}"]),ie=c()(a.EuiFlexItem).withConfig({displayName:"TitleConatiner",componentId:"sc-m1giyi-2"})(["overflow:hidden;display:inline-block;text-overflow:ellipsis;"]),re=({timelineId:e,timelineStatus:t,timelineType:n,timelineTitle:l,updated:c,isOpen:d})=>{const p=Object(s.useDispatch)(),m=Object(i.useCallback)((()=>{p(b.a.showTimeline({id:e,show:!d})),Object(z.i)()}),[p,d,e]),f=Object(o.isEmpty)(l)?n===g.l.template?S.k:S.l:l,y=Object(i.useMemo)((()=>t===g.k.draft?r.a.createElement(r.a.Fragment,null,H):r.a.createElement(r.a.Fragment,null,W," ",r.a.createElement(u.FormattedRelative,{"data-test-subj":"timeline-status",key:"timeline-status-autosaved",value:new Date(c)}))),[t,c]);return r.a.createElement(ae,{"aria-label":te({isOpen:d,title:f}),className:z.b,flush:"both","data-test-subj":"flyoutOverlay",size:"s",isSelected:d,onClick:m},r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",alignItems:"center",justifyContent:"flexStart",responsive:!1},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"top",content:y},r.a.createElement(ne,{color:t===g.k.draft?"warning":"success"}))),r.a.createElement(ie,{grow:!1},f),!d&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(U.b,null))))},oe=r.a.memo(re);var se=n(139),le=n(55),ce=n.n(le),ue=n(117);const de=c()(a.EuiStat).withConfig({displayName:"NoWrapEuiStat",componentId:"sc-iiqy2a-0"})(["& .euiStat__description{white-space:nowrap;}"]),pe=r.a.memo((({kpis:e,isLoading:t})=>{const n="0,0.[000]a",[o]=Object(x.p)(v.O),s=Object(i.useMemo)((()=>({process:null===e?Object(ue.e)():ce()(e.processCount).format(n),user:null===e?Object(ue.e)():ce()(e.userCount).format(n),host:null===e?Object(ue.e)():ce()(e.hostCount).format(n),sourceIp:null===e?Object(ue.e)():ce()(e.sourceIpCount).format(n),destinationIp:null===e?Object(ue.e)():ce()(e.destinationIpCount).format(n)})),[e]),l=Object(i.useMemo)((()=>({process:ce()(null==e?void 0:e.processCount).format(o),user:ce()(null==e?void 0:e.userCount).format(o),host:ce()(null==e?void 0:e.hostCount).format(o),sourceIp:ce()(null==e?void 0:e.sourceIpCount).format(o),destinationIp:ce()(null==e?void 0:e.destinationIpCount).format(o)})),[e,o]);return r.a.createElement(a.EuiFlexGroup,{wrap:!0,"data-test-subj":"siem-timeline-kpis"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"left",content:l.process},r.a.createElement(de,{"data-test-subj":"siem-timeline-process-kpi",title:s.process,description:Y,titleSize:"s",isLoading:t}))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"left",content:l.user},r.a.createElement(de,{"data-test-subj":"siem-timeline-user-kpi",title:s.user,description:Z,titleSize:"s",isLoading:t}))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"left",content:l.host},r.a.createElement(de,{"data-test-subj":"siem-timeline-host-kpi",title:s.host,description:K,titleSize:"s",isLoading:t}))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{position:"left",content:l.sourceIp},r.a.createElement(de,{"data-test-subj":"siem-timeline-source-ip-kpi",title:s.sourceIp,description:X,titleSize:"s",isLoading:t}))),r.a.createElement(a.EuiFlexItem,{grow:!1,style:{minWidth:100}},r.a.createElement(a.EuiToolTip,{position:"left",content:l.destinationIp},r.a.createElement(de,{"data-test-subj":"siem-timeline-destination-ip-kpi",title:s.destinationIp,description:J,titleSize:"s",isLoading:t}))))}));pe.displayName="TimelineKPIs";var me=n(639);const fe=c()(a.EuiFlexItem).withConfig({displayName:"ActiveTimelinesContainer",componentId:"sc-a6ccyo-0"})(["overflow:hidden;"]),ge=({timelineId:e})=>{const t=Object(s.useDispatch)(),{browserFields:n,indexPattern:l}=Object(q.d)(V.SourcererScopeName.timeline),{uiSettings:c}=Object(x.j)().services,u=Object(i.useMemo)((()=>Object(d.getEsQueryConfig)(c)),[c]),g=Object(i.useMemo)((()=>b.b.getTimelineByIdSelector()),[]),{activeTab:h,dataProviders:v,kqlQuery:E,title:j,timelineType:O,status:S,updated:k,show:w,filters:T,kqlMode:M}=Object(m.a)((t=>{var n;return Object(o.pick)(["activeTab","dataProviders","kqlQuery","status","title","timelineType","updated","show","filters","kqlMode"],null!==(n=g(t,e))&&void 0!==n?n:y.b)})),A=Object(i.useMemo)((()=>!Object(o.isEmpty)(v)||!Object(o.isEmpty)(Object(o.get)("filterQuery.kuery.expression",E))),[v,E]),_=Object(i.useMemo)((()=>b.b.getKqlFilterQuerySelector()),[]),F=Object(s.useSelector)((t=>_(t,e))),D=Object(o.isEmpty)(v)&&Object(o.isEmpty)(F)&&"template"===O?" ":F,N=Object(i.useMemo)((()=>({query:D,language:"kuery"})),[D]),P=Object(i.useMemo)((()=>Object($.d)({config:u,dataProviders:v,indexPattern:l,browserFields:n,filters:T||[],kqlQuery:N,kqlMode:M})),[n,v,u,T,l,M,N]),R=Object(i.useCallback)((()=>{t(b.a.showTimeline({id:e,show:!1})),Object(z.i)()}),[t,e]),{euiTheme:L}=Object(a.useEuiTheme)();return r.a.createElement(a.EuiPanel,{borderRadius:"none",grow:!1,paddingSize:"s",hasShadow:!1,"data-test-subj":"timeline-flyout-header-panel",style:{backgroundColor:L.colors.emptyShade,color:L.colors.text}},r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",responsive:!1},r.a.createElement(I.b,{timelineId:e}),r.a.createElement(fe,{grow:!1},r.a.createElement(oe,{timelineId:e,timelineType:O,timelineTitle:j,timelineStatus:S,isOpen:w,updated:k})),w&&r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"s",responsive:!1},(h===f.d.query||h===f.d.eql)&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(C.b,{compact:!0,queryId:`${e}-${h}`,inputId:p.a.timeline,inspectIndex:0,isDisabled:!A||void 0===(null==P?void 0:P.filterQuery),title:Q})),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiToolTip,{content:G("default"===O)},r.a.createElement(a.EuiButtonIcon,{"aria-label":G("default"===O),"data-test-subj":"close-timeline",iconType:"cross",onClick:R})))))))},be=r.a.memo(ge),ye=c.a.div.withConfig({displayName:"StyledDiv",componentId:"sc-a6ccyo-1"})(["display:-webkit-box;-webkit-line-clamp:1;-webkit-box-orient:vertical;overflow:hidden;word-break:break-word;"]),he=({description:e,onclick:t})=>{const[n,i]=Object(me.a)(e);return r.a.createElement(r.a.Fragment,null,r.a.createElement(ye,{ref:i},e),n&&r.a.createElement(a.EuiButtonEmpty,{flush:"left",onClick:t},ee))},ve=c()(a.EuiFlexGroup).withConfig({displayName:"StyledTimelineHeader",componentId:"sc-a6ccyo-2"})([""," flex:0;"],(({theme:e})=>`margin: ${e.eui.euiSizeXS} ${e.eui.euiSizeS} 0 ${e.eui.euiSizeS};`)),Ee=c.a.span.withConfig({displayName:"TimelineStatusInfoContainer",componentId:"sc-a6ccyo-3"})([""," white-space:nowrap;"],(({theme:e})=>`margin-left: ${e.eui.euiSizeS};`)),xe=c.a.div.withConfig({displayName:"KpisContainer",componentId:"sc-a6ccyo-4"})(["",""],(({theme:e})=>`margin-right: ${e.eui.euiSizeM};`)),je=c()(a.EuiFlexItem).withConfig({displayName:"RowFlexItem",componentId:"sc-a6ccyo-5"})(["flex-direction:row;align-items:center;"]),Oe=c.a.h3.withConfig({displayName:"TimelineTitleContainer",componentId:"sc-a6ccyo-6"})(["display:-webkit-box;overflow:hidden;-webkit-line-clamp:1;-webkit-box-orient:vertical;word-break:break-word;"]),Se=({timelineId:e})=>{const t=Object(i.useMemo)((()=>b.b.getTimelineByIdSelector()),[]),{title:n,timelineType:s}=Object(m.a)((n=>{var a;return Object(o.pick)(["title","timelineType"],null!==(a=t(n,e))&&void 0!==a?a:y.b)})),l=Object(i.useMemo)((()=>s===g.l.template?S.k:S.l),[s]),c=Object(i.useMemo)((()=>n||l),[n,l]);return r.a.createElement(a.EuiToolTip,{content:c,position:"bottom"},r.a.createElement(a.EuiText,null,r.a.createElement(Oe,{"data-test-subj":"timeline-title"},c)))},ke=r.a.memo(Se),we=({timelineId:e})=>{const t=Object(i.useMemo)((()=>b.b.getTimelineByIdSelector()),[]),n=Object(m.a)((n=>{var a;return(null!==(a=t(n,e))&&void 0!==a?a:y.b).description})),o=Object(s.useDispatch)(),l=Object(i.useCallback)((t=>{o(Object(E.setActiveTabTimeline)({id:e,activeTab:f.d.notes,scrollToTop:!0}))}),[o,e]);return r.a.createElement(a.EuiText,{size:"s","data-test-subj":"timeline-description"},r.a.createElement(he,{description:n||S.f,onclick:l}))},Ie=r.a.memo(we),Te=({timelineId:e})=>{const t=Object(i.useMemo)((()=>Object(se.createSelector)(b.b.selectTimeline,(e=>{var t,n;return{status:null!==(t=null==e?void 0:e.status)&&void 0!==t?t:g.k.draft,updated:null!==(n=null==e?void 0:e.updated)&&void 0!==n?n:void 0}}))),[]),{status:n,updated:o}=Object(m.a)((n=>t(n,e)));return Object(i.useMemo)((()=>n===g.k.draft),[n])?r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement(a.EuiTextColor,{color:"warning","data-test-subj":"timeline-status"},H)):r.a.createElement(a.EuiText,{size:"xs"},r.a.createElement(a.EuiTextColor,{color:"default"},W," ",r.a.createElement(u.FormattedRelative,{"data-test-subj":"timeline-status",key:"timeline-status-autosaved",value:new Date(o)})))},Ce=r.a.memo(Te),Me=({timelineId:e})=>{var t;const{selectedPatterns:n,indexPattern:l,browserFields:c}=Object(q.d)(V.SourcererScopeName.timeline),u=Object(i.useMemo)((()=>Object(B.i)()),[]),p=Object(i.useMemo)((()=>Object(B.b)()),[]),g=Object(i.useMemo)((()=>e===f.c.active),[e]),v=Object(m.a)((e=>g?{from:u(e.inputs.timeline),to:p(e.inputs.timeline),interval:""}:{from:u(e.inputs.global),to:p(e.inputs.global),interval:""})),{uiSettings:E}=Object(x.j)().services,j=Object(i.useMemo)((()=>Object(d.getEsQueryConfig)(E)),[E]),O=Object(i.useMemo)((()=>b.b.getTimelineByIdSelector()),[]),S=Object(s.useSelector)((t=>{var n;return null!==(n=O(t,e))&&void 0!==n?n:y.b})),{dataProviders:k,filters:I,timelineType:C,kqlMode:M,activeTab:P}=S,z=Object(i.useMemo)((()=>b.b.getKqlFilterQuerySelector()),[]),U=Object(s.useSelector)((t=>z(t,e))),G=Object(o.isEmpty)(k)&&Object(o.isEmpty)(U)&&"template"===C?" ":U,H=Object(i.useMemo)((()=>({query:G,language:"kuery"})),[G]),W=Object(i.useMemo)((()=>Object($.d)({config:j,dataProviders:k,indexPattern:l,browserFields:c,filters:I||[],kqlQuery:H,kqlMode:M})),[c,k,j,I,l,M,H]),Q=Object(i.useMemo)((()=>Object(o.isEmpty)(k)&&Object(o.isEmpty)(I)&&Object(o.isEmpty)(H.query)||void 0===(null==W?void 0:W.filterQuery)),[k,I,H,W]),[Y,K]=(({timerange:e,filterQuery:t,defaultIndex:n,isBlankTimeline:a})=>{const{data:r}=Object(x.j)().services,s=Object(i.useRef)(o.noop),l=Object(i.useRef)(new AbortController),c=Object(i.useRef)(new _.Subscription),[u,d]=Object(i.useState)(!1),[p,m]=Object(i.useState)(null),[f,g]=Object(i.useState)(null),{addError:b,addWarning:y}=Object(N.a)(),h=Object(i.useCallback)((e=>{if(null==e)return;const t=async()=>{l.current=new AbortController,d(!0),c.current=r.search.search(e,{strategy:"timelineSearchStrategy",abortSignal:l.current.signal}).subscribe({next:e=>{Object(F.isCompleteResponse)(e)?(d(!1),g(e),c.current.unsubscribe()):Object(F.isErrorResponse)(e)&&(d(!1),y(R),c.current.unsubscribe())},error:e=>{d(!1),b(e,{title:L}),c.current.unsubscribe()}})};c.current.unsubscribe(),l.current.abort(),t(),s.current=t}),[r.search,b,y]);return Object(i.useEffect)((()=>{m((a=>{const i={...null!=a?a:{},defaultIndex:n,timerange:e,filterQuery:t,factoryQueryType:D.A.kpi};return A()(a,i)?a:i}))}),[n,e,t]),Object(i.useEffect)((()=>(a?(d(!1),g(null)):h(p),()=>{c.current.unsubscribe(),l.current.abort()})),[a,p,h]),[u,f]})({defaultIndex:n,timerange:v,isBlankTimeline:Q,filterQuery:null!==(t=null==W?void 0:W.filterQuery)&&void 0!==t?t:""}),X=Object(x.h)();return r.a.createElement(ve,{alignItems:"center",gutterSize:"s"},r.a.createElement(a.EuiFlexItem,null,r.a.createElement(a.EuiFlexGroup,{"data-test-subj":"properties-left",direction:"column",gutterSize:"none"},r.a.createElement(je,null,r.a.createElement(ke,{timelineId:e}),r.a.createElement(T.a,{timelineId:e,initialFocus:"title"}),r.a.createElement(Ee,null,r.a.createElement(Ce,{timelineId:e}))),r.a.createElement(je,null,r.a.createElement(Ie,{timelineId:e}),r.a.createElement(T.a,{timelineId:e,initialFocus:"description"})))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(xe,null,P===f.d.query?r.a.createElement(pe,{kpis:K,isLoading:Y}):null)),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiFlexGroup,{gutterSize:"s"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(h.a,{timelineId:e})),X.create&&X.read&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(w,{timelineId:e})))))};Me.displayName="FlyoutHeaderComponent";const Ae=r.a.memo(Me)},function(e,t,n){"use strict";n.d(t,"b",(function(){return E})),n.d(t,"a",(function(){return O})),n.d(t,"c",(function(){return C}));var a=n(2),i=n.n(a),r=n(40),o=n(106),s=n(676),l=n(169);const c="timeline";var u=n(5);const d=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.insertTimelineButtonLabel",{defaultMessage:"Insert timeline link"}),p=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.noTimelineNameFoundErrorMsg",{defaultMessage:"No timeline name found"}),m=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.noTimelineIdFoundErrorMsg",{defaultMessage:"No timeline id found"}),f=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.noParenthesesErrorMsg",{defaultMessage:"Expected left parentheses"}),g=e=>u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.failedRetrieveTimelineErrorMsg",{defaultMessage:"Failed to retrieve timeline id: { timelineId }",values:{timelineId:e}}),b=u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.timelineErrorTitle",{defaultMessage:"Timeline Error"});var y=n(131);const h=({onClosePopover:e,onInsert:t})=>{const{formatUrl:n}=Object(l.m)(y.a.timelines),c=Object(a.useCallback)((({timelines:e})=>[...e.map(((e,t)=>({description:e.description,favorite:e.favorite,label:e.title,id:e.savedObjectId,key:`${e.title}-${t}`,title:e.title,checked:void 0})))]),[]),u=Object(a.useCallback)(((e,a,i)=>{const r=n(Object(l.l)(null!=a?a:"",i),{absolute:!0,skipSearch:!0});t(`[${e}](${r})`,{block:!1})}),[n,t]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiModalHeader,null),i.a.createElement(r.EuiModalBody,null,i.a.createElement(s.a,{hideUntitled:!0,getSelectableOptions:c,onTimelineChange:u,onClosePopover:e,timelineType:o.l.default})))},v=Object(a.memo)(h),E={name:c,button:{label:d,iconType:"timeline"},helpText:i.a.createElement(r.EuiCodeBlock,{language:"md",paddingSize:"s",fontSize:"l"},"[title](url)"),editor:function({node:e,onSave:t,onCancel:n}){return i.a.createElement(v,{onClosePopover:n,onInsert:t})}};var x=n(56),j=n(478);const O=function(){const e=this.Parser,t=e.prototype.inlineTokenizers,n=e.prototype.inlineMethods,a=function(e,t,n){let a=0;if("["!==t[a])return!1;if(n)return!0;function i(e,n){if(t[a]!==e)throw new Error(f);a++;let i="",r=0;for(;a<t.length;a++){const o=t[a];if(o===n&&0===r)return a++,i;o===n?r--:o===e&&r++,i+=o}return""}const r=i("[","]"),o=i("(",")"),s=e.now();if(!r)return this.file.info(p,{line:s.line,column:s.column}),!1;try{var l;const t=o.split("?"),n=Object(j.parse)(t[1]),a=Object(x.safeDecode)(null!==(l=n.timeline)&&void 0!==l?l:""),{id:i="",graphEventId:u=""}=null!=a?a:{id:null,graphEventId:""};return i?e(`[${r}](${o})`)({type:c,id:i,title:r,graphEventId:u}):(this.file.info(m,{line:s.line,column:s.column+o.indexOf("id")}),!1)}catch{this.file.info((e=>u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.toolTip.timelineUrlIsNotValidErrorMsg",{defaultMessage:"Timeline URL is not valid => {timelineUrl}",values:{timelineUrl:e}}))(o),{line:s.line,column:s.column})}return!1},i=function(e,t,n){return!(!1===t.startsWith("[")||!0===t.startsWith("[")&&!t.includes("timelines?timeline=(id"))&&a.call(this,e,t,n)};i.locator=(e,t)=>e.indexOf("[",t),t.timeline=i,n.splice(n.indexOf("url"),0,c)};var S=n(103),k=n(164),w=n(12),I=n(108);const T=({id:e,title:t,graphEventId:n})=>{const{addError:o}=Object(I.a)(),s=(()=>{const e=Object(S.useDispatch)();return Object(a.useCallback)(((t,n,a)=>{Object(k.h)({graphEventId:a,timelineId:t,onError:n,updateIsLoading:({id:t,isLoading:n})=>e(Object(w.updateIsLoading)({id:t,isLoading:n})),updateTimeline:Object(k.b)(e)})}),[e])})(),l=Object(a.useCallback)(((e,t)=>{o(e,{title:b,toastMessage:g(t)})}),[o]),c=Object(a.useCallback)((()=>s(null!=e?e:"",l,n)),[e,n,s,l]);return i.a.createElement(r.EuiToolTip,{content:(d=null!=e?e:"",u.i18n.translate("xpack.securitySolution.markdownEditor.plugins.timeline.toolTip.timelineId",{defaultMessage:"Timeline id: { timelineId }",values:{timelineId:d}}))},i.a.createElement(r.EuiLink,{onClick:c,"data-test-subj":`markdown-timeline-link-${e}`},t));var d},C=Object(a.memo)(T)},function(e,t,n){"use strict";n.d(t,"a",(function(){return N}));var a=n(40),i=n(2),r=n.n(i),o=n(8),s=n(167),l=n(236),c=n(336);const u=e=>Object(c.e)(e)?l.k:l.g,d=({type:e})=>r.a.createElement(a.EuiToolTip,{content:u(e)},r.a.createElement(a.EuiIcon,{type:"iInCircle",size:"m"}));var p=n(41),m=n.n(p);const f=m.a.div.withConfig({displayName:"OverflowParent",componentId:"sc-sjnml3-0"})(["display:inline-grid;"]),g=m.a.div.withConfig({displayName:"OverflowContainer",componentId:"sc-sjnml3-1"})(["white-space:nowrap;overflow:hidden;text-overflow:ellipsis;font-weight:bold;"]),b=({field:e="",feedName:t="",value:n=""})=>{const i=`${e} ${n}${t?` ${l.e} ${t}`:""}`;return r.a.createElement(a.EuiToolTip,{content:n},r.a.createElement(f,{"data-test-subj":"enrichment-button-content"},r.a.createElement(g,null,i)))},y=m.a.h5.withConfig({displayName:"StyledH5",componentId:"sc-1i38kio-0"})(["line-height:1.7rem;"]),h=e=>r.a.createElement(a.EuiTitle,{size:"xxxs"},r.a.createElement(y,null,e));h.displayName="ThreatSummaryTitle";var v=n(149),E=n(509);const x=m()(a.EuiInMemoryTable).withConfig({displayName:"ThreatSummaryTable",componentId:"sc-1pwinz3-0"})([".euiTableHeaderCell,.euiTableRowCell{border:none;}.euiTableHeaderCell .euiTableCellContent{padding:0;}"]);var j=n(4),O=n(802);const S=m()(a.EuiAccordion).withConfig({displayName:"StyledEuiAccordion",componentId:"sc-mlcc85-0"})([".euiAccordion__triggerWrapper{background:",";border-radius:",";height:",";margin-bottom:",";padding-left:",";}"],(({theme:e})=>e.eui.euiColorLightestShade),(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiSizeXL),(({theme:e})=>e.eui.euiSizeS),(({theme:e})=>e.eui.euiSizeS)),k=[{field:"title",truncateText:!1,render:h,width:"220px",name:""},{field:"description",truncateText:!1,render:({fieldName:e,value:t})=>{const n=e.match(s.p)?r.a.createElement(a.EuiLink,{href:t,target:"_blank"},t):r.a.createElement("span",null,t);return r.a.createElement(a.EuiToolTip,{"data-test-subj":"message-tool-tip",content:r.a.createElement(a.EuiFlexGroup,{direction:"column",gutterSize:"none"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement("span",null,e)))},n)},name:""}],w=e=>Object.keys(e).sort().map((t=>({title:t.startsWith(j.I)?t.replace(`${j.I}`,"indicator"):t,description:{fieldName:t,value:Object(O.a)(e[t])}}))),I=({enrichment:e,index:t})=>{const{id:n="threat-details-item",field:i,feedName:o,type:s,value:u}=Object(c.c)(e),d=`${n}${i}`;return r.a.createElement(S,{id:d,key:d,initialIsOpen:!0,arrowDisplay:"right",buttonContent:r.a.createElement(b,{field:i,feedName:o,value:u}),extraAction:Object(c.e)(s)&&r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(v.b,{queryId:E.a,title:l.j}))},r.a.createElement(x,{columns:k,compressed:!0,"data-test-subj":`threat-details-view-${t}`,items:w(e)}))},T=({enrichments:e})=>r.a.createElement(r.a.Fragment,null,e.sort(((e,t)=>Object(c.d)(t)-Object(c.d)(e))).map(((t,n)=>r.a.createElement(r.a.Fragment,{key:`${t.id}`},r.a.createElement(I,{enrichment:t,index:n}),n<e.length-1&&r.a.createElement(a.EuiSpacer,{size:"m"})))));var C=n(44);const M=m.a.div.withConfig({displayName:"InlineBlock",componentId:"sc-oksmx3-0"})(["display:inline-block;line-height:1.7em;"]),A=({type:e})=>e?r.a.createElement(M,{"data-test-subj":"no-enrichments-found"},e===s.c.IndicatorMatchRule?l.l:r.a.createElement(C.FormattedMessage,{id:"xpack.securitySolution.enrichment.noInvestigationEnrichment",defaultMessage:"Additional threat intelligence wasn't found within the selected time frame. Try a different time frame, or {link} to collect threat intelligence for threat detection and matching.",values:{link:r.a.createElement(a.EuiLink,{href:"https://www.elastic.co/guide/en/security/current/es-threat-intel-integrations.html",target:"_blank"},r.a.createElement(C.FormattedMessage,{id:"xpack.securitySolution.enrichment.investigationEnrichmentDocumentationLink",defaultMessage:"enable threat intelligence integrations"}))}})):null,_=({type:e})=>e?r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiFlexGroup,{direction:"row",gutterSize:"xs",alignItems:"baseline"},r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiTitle,{size:"xxxs"},r.a.createElement("h5",null,e===s.c.IndicatorMatchRule?l.f:l.i))),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(d,{type:e}))),r.a.createElement(a.EuiSpacer,{size:"s"})):null,F=({enrichments:e,type:t,loading:n,dataTestSubj:i,children:o})=>r.a.createElement("div",{"data-test-subj":i},r.a.createElement(_,{type:t}),o,Array.isArray(e)?r.a.createElement(T,{enrichments:e}):r.a.createElement(r.a.Fragment,null,r.a.createElement(A,{type:t}),n&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSpacer,{size:"m"}),r.a.createElement(a.EuiSkeletonText,{"data-test-subj":"loading-enrichments",lines:4})))),D=({enrichments:e,before:t=null,showInvestigationTimeEnrichments:n,loading:i,children:l})=>{const{[s.c.IndicatorMatchRule]:c,[s.c.InvestigationTime]:u,undefined:d}=Object(o.groupBy)(e,"matched.type");return r.a.createElement(r.a.Fragment,null,t,r.a.createElement(F,{dataTestSubj:"threat-match-detected",enrichments:c,type:s.c.IndicatorMatchRule}),n&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiHorizontalRule,null),r.a.createElement(F,{dataTestSubj:"enriched-with-threat-intel",enrichments:u,type:s.c.InvestigationTime,loading:i},l)),d&&r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiHorizontalRule,null),c&&r.a.createElement(a.EuiSpacer,{size:"l"}),r.a.createElement(F,{enrichments:d,dataTestSubj:"matches-with-no-type"})))},N=r.a.memo(D)},function(e,t,n){"use strict";n.d(t,"a",(function(){return M}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(44),c=n(126),u=n(46),d=n(3),p=n(8),m=n(215),f=n(255);let g,b;!function(e){e.asc="asc",e.desc="desc"}(g||(g={})),function(e){e.actions="responseActions",e.results="responseActionsResults"}(b||(b={}));var y=n(102);var h=n(1406),v=n(155),E=n(809);const x=({type:e})=>{const t=Object(a.useMemo)((()=>{if("endpoint"===e)return{icon:"logoSecurity",name:"Elastic Defend"}}),[e]);return i.a.createElement(s.EuiEmptyPrompt,{iconType:t.icon,title:i.a.createElement("h2",null,E.b),titleSize:"xs",body:i.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.responseActions.results.missingPrivileges",defaultMessage:"To access these results, ask your administrator for {integration} Kibana privileges.",values:{integration:i.a.createElement(s.EuiCode,null,t.name)}})})},j=({action:e,ruleName:t})=>{const{agent:n}=e,{action_id:r,expiration:o}=e.EndpointActions,{endpointPrivileges:{canAccessEndpointActionsLogManagement:p}}=Object(c.a)(),[f,v]=Object(a.useState)(!0),{data:E}=((e,{enabled:t,action:n,isLive:a=!1})=>{const{data:i}=Object(y.j)().services,{expiration:r,actionId:o,agent:s}=e;return Object(u.useQuery)({queryKey:["allResponsesResults",{actionId:o}],queryFn:async()=>{var e,t,n;const a=await Object(d.lastValueFrom)(i.search.search({actionId:o,expiration:r,sort:{order:g.desc,field:"@timestamp"},agents:(Array.isArray(s.id)?s.id:[s.id]).length,factoryQueryType:b.results},{strategy:m.l}));return{action_id:o,completedAt:null===(e=a.edges[0])||void 0===e||null===(t=e.fields)||void 0===t||null===(n=t["EndpointActions.completed_at"])||void 0===n?void 0:n[0],isExpired:a.isExpired,wasSuccessful:a.wasSuccessful,isCompleted:a.isCompleted,status:a.status}},select:e=>((e,t)=>{var n;const{rule:a}=e,{parameters:i,alert_id:r,comment:o,command:s,hosts:l}=e.EndpointActions.data;return{id:e.EndpointActions.action_id,agents:e.agent.id,parameters:i,...null!=r&&r.length?{alertIds:r}:{},...a?{ruleId:a.id,ruleName:a.name}:{},createdBy:(null===(n=e.rule)||void 0===n?void 0:n.name)||"unknown",comment:o,command:s,hosts:l,startedAt:e["@timestamp"],completedAt:null==t?void 0:t.completedAt,isCompleted:!(null==t||!t.isCompleted),isExpired:!(null==t||!t.isExpired),wasSuccessful:!(null==t||!t.isCompleted),status:t.status,agentState:{},errors:e.error?[e.error.message]:void 0}})(n,e),keepPreviousData:!0,enabled:t,refetchInterval:!!a&&5e3})})({actionId:r,expiration:o,agent:n},{enabled:p,action:e,isLive:f});Object(a.useEffect)((()=>{v((()=>{var e;return!E||!(null!==(e=E.errors)&&void 0!==e&&e.length)&&"pending"===E.status}))}),[E]);const j=E?O(E):"",S=Object(a.useMemo)((()=>null!=E&&E.hosts?Object.values(E.hosts)[0].name:""),[null==E?void 0:E.hosts]);return i.a.createElement(s.EuiComment,{username:t,timestamp:i.a.createElement(l.FormattedRelative,{value:e["@timestamp"]}),event:j,"data-test-subj":"endpoint-results-comment"},p?E?i.a.createElement(h.a,{action:E,"data-test-subj":`response-results-${S}`}):i.a.createElement(s.EuiLoadingSpinner,null):i.a.createElement(x,{type:"endpoint"}))},O=e=>{var t;return null!==(t=e.errors)&&void 0!==t&&t.length?v.g.failed(e.command):"pending"===e.status?v.g.pending(e.command):"successful"===e.status?v.g.executed(e.command):v.g.tried(e.command)},S=i.a.memo((({actions:e,ruleName:t,ecsData:n})=>{const{services:{osquery:r}}=Object(y.j)(),{OsqueryResult:o}=r,l=Object(a.useCallback)((e=>{if(k(e)){const a=e.action_id,r=e["@timestamp"];return i.a.createElement(o,{key:a,actionId:a,startDate:r,ruleName:t,ecsData:n})}return w(e)?i.a.createElement(j,{action:e,ruleName:t,key:e.EndpointActions.action_id}):null}),[o,n,t]);return i.a.createElement(i.a.Fragment,null,e.map((e=>i.a.createElement(i.a.Fragment,null,i.a.createElement(s.EuiSpacer,{size:"s"}),l(e),i.a.createElement(s.EuiSpacer,{size:"s"})))))}));S.displayName="ResponseActionsResults";const k=e=>e&&"input_type"in e&&"osquery"===(null==e?void 0:e.input_type),w=e=>e&&"EndpointActions"in e&&"endpoint"===(null==e?void 0:e.EndpointActions.input_type);var I=n(596),T=n(124);const C=o.a.div.withConfig({displayName:"TabContentWrapper",componentId:"sc-1y7ogme-0"})(["height:100%;position:relative;"]),M=({rawEventData:e,ecsData:t})=>{var n,a,r,o,c,h,E,x,j,O,k;const w=Object(T.a)("endpointResponseActionsEnabled"),M=e?Object(f.a)(e.fields):void 0,A=null==M||null===(n=M.kibana)||void 0===n||null===(a=n.alert)||void 0===a||null===(r=a.rule)||void 0===r||null===(o=r.parameters)||void 0===o?void 0:o[0].response_actions,_=!e||!w||!(null!=A&&A.length),F=null!==(c=null==e?void 0:e._id)&&void 0!==c?c:"",{data:D,isFetched:N}=((e,{enabled:t})=>{const{data:n}=Object(y.j)().services,{alertIds:a}=e;return Object(u.useQuery)({queryKey:["actions",{alertId:a[0]}],queryFn:async()=>{const e=await Object(d.lastValueFrom)(n.search.search({alertIds:a,sort:{order:g.desc,field:"@timestamp"},factoryQueryType:b.actions},{strategy:m.l})),t=Object(p.map)(Object(p.filter)(e.edges,"fields"),(e=>Object(f.a)(e.fields,!0)));return{...e,items:Object(p.compact)(t)}},enabled:t,keepPreviousData:!0})})({alertIds:[F]},{enabled:!_});if(_)return;const P=null==M||null===(h=M.kibana)||void 0===h||null===(E=h.alert)||void 0===E||null===(x=E.rule)||void 0===x||null===(j=x.name)||void 0===j?void 0:j[0],R=null!==(O=null==D||null===(k=D.items)||void 0===k?void 0:k.length)&&void 0!==O?O:0,L=i.a.createElement(i.a.Fragment,null,i.a.createElement(s.EuiSpacer,{size:"s"}),i.a.createElement(C,{"data-test-subj":"responseActionsViewWrapper"},N&&R&&null!=D&&D.items.length?i.a.createElement(S,{actions:D.items,ruleName:P,ecsData:t}):i.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.eventDetails.responseActionsViewNoActions",defaultMessage:"There are no response actions defined for this event."})));return{id:I.b.responseActionsView,"data-test-subj":"responseActionsViewTab",name:v.y,append:i.a.createElement(s.EuiNotificationBadge,{"data-test-subj":"response-actions-notification"},R),content:L}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return $}));var a=n(42),i=n(40),r=n(2),o=n.n(r),s=n(41),l=n.n(s),c=n(150),u=n(106),d=n(183),p=n(5);const m=p.i18n.translate("xpack.securitySolution.editDataProvider.doesNotExistLabel",{defaultMessage:"does not exist"}),f=p.i18n.translate("xpack.securitySolution.editDataProvider.existsLabel",{defaultMessage:"exists"}),g=p.i18n.translate("xpack.securitySolution.editDataProvider.fieldLabel",{defaultMessage:"Field"}),b=p.i18n.translate("xpack.securitySolution.editDataProvider.placeholder",{defaultMessage:"Select a field"}),y=p.i18n.translate("xpack.securitySolution.editDataProvider.isLabel",{defaultMessage:"is"}),h=p.i18n.translate("xpack.securitySolution.editDataProvider.isOneOfLabel",{defaultMessage:"is one of"}),v=p.i18n.translate("xpack.securitySolution.editDataProvider.isNotLabel",{defaultMessage:"is not"}),E=p.i18n.translate("xpack.securitySolution.editDataProvider.isNotOneOfLabel",{defaultMessage:"is not one of"}),x=p.i18n.translate("xpack.securitySolution.editDataProvider.includesPlaceholder",{defaultMessage:"enter one or more values"}),j=p.i18n.translate("xpack.securitySolution.editDataProvider.operatorLabel",{defaultMessage:"Operator"}),O=p.i18n.translate("xpack.securitySolution.editDataProvider.saveButton",{defaultMessage:"Save"}),S=p.i18n.translate("xpack.securitySolution.editDataProvider.valuePlaceholder",{defaultMessage:"value"}),k=p.i18n.translate("xpack.securitySolution.editDataProvider.valueLabel",{defaultMessage:"Value"}),w=p.i18n.translate("xpack.securitySolution.editDataProvider.selectAnOperatorPlaceholder",{defaultMessage:"Select an operator"}),I=e=>p.i18n.translate("xpack.securitySolution.editDataProvider.unavailableOperator",{values:{operator:e},defaultMessage:"{operator} operator is unavailable with templates"}),T=[{label:y},{label:v},{label:h},{label:E},{label:f},{label:m}],C=[],M=e=>e?Object.keys(e).sort().map((t=>{return{label:t,options:(n=e[t],null!=n.fields&&Object.keys(n.fields).length>0?Object.keys(n.fields):C).map((e=>({label:e})))};var n})):C,A=({browserFields:e,selectedField:t,selectedOperator:n,type:i})=>{const r=t.length>0?t[0].label:"",o=n.length>0?n[0].label:"",s=e&&null!=Object(d.a)(e)[r],l=-1!==Object(a.findIndex)((e=>e.label===o),T),c=i===u.a.template&&(o===h||o===E);return s&&l&&!c},_=e=>{switch(e.length>0?e[0].label:""){case y:case v:return c.d;case h:case E:return c.c;case f:case m:return c.b;default:return c.d}},F=e=>{switch(e.length>0?e[0].label:""){case v:case E:case m:return!0;default:return!1}},D=e=>Array.isArray(e)?e.length?`${e[0]}`:"":`${e}`;var N=n(148);const P=({value:e,onChangeCallback:t})=>{const[n,a]=Object(r.useState)(R(e));Object(r.useEffect)((()=>{t(L(n))}),[n,t]);const s=Object(r.useCallback)(((e,t=n)=>{const i=e.trim().toLowerCase();i&&-1===t.findIndex((e=>e.label.trim().toLowerCase()===i))&&a([...n,{label:e}])}),[n]),l=Object(r.useCallback)((e=>{a(e)}),[]);return o.a.createElement(i.EuiComboBox,{noSuggestions:!0,isClearable:!0,"data-test-subj":"is-one-of-combobox-input",selectedOptions:n,placeholder:x,onCreateOption:s,onChange:l})},R=e=>Object(N.k)(e)?e.map((e=>({label:String(e)}))):[],L=e=>e.map((e=>e.label)),q=({value:e,onChangeCallback:t})=>{const[n,a]=Object(r.useState)(B(e));Object(r.useEffect)((()=>{t(D(n))}),[n,t]);const s=Object(r.useCallback)((e=>{a(e.target.value)}),[]);return o.a.createElement(i.EuiFieldText,{className:"edit-data-provider-value",onChange:s,placeholder:S,value:D(n)})},B=e=>{var t;return Object(N.k)(e)?null!==(t=e[0])&&void 0!==t?t:"":e},z="edit-data-provider-save";l.a.div.withConfig({displayName:"HeaderContainer",componentId:"sc-1dznxok-0"})(["width:",";"],400).displayName="HeaderContainer";const $=o.a.memo((({andProviderId:e,browserFields:t,field:n,isExcluded:s,onDataProviderEdited:l,operator:u,providerId:d,timelineId:p,value:x,type:S=c.a.default})=>{const[C,D]=Object(r.useState)([{label:n}]),[N,R]=Object(r.useState)(((e,t)=>":"===t?e?[{label:v}]:[{label:y}]:"includes"===t?e?[{label:E}]:[{label:h}]:e?[{label:m}]:[{label:f}])(s,u)),[L,B]=Object(r.useState)(x),$=Object(r.useMemo)((()=>N.length>0&&(N[0].label===h||N[0].label===E)),[N]),V=Object(r.useMemo)((()=>S!==c.a.template&&N.length>0&&N[0].label!==f&&N[0].label!==m&&!$),[$,S,N]),U=Object(r.useMemo)((()=>$&&Array.isArray(L)&&!L.length),[$,L]),G=()=>{const e=document.getElementsByClassName("edit-data-provider-value");if(e.length>0)e[0].focus();else{const e=document.getElementsByClassName(z);e.length>0&&e[0].focus()}},H=Object(r.useCallback)((e=>{D(e),S===c.a.template&&B(`{${e[0].label}}`),G()}),[S]),W=Object(r.useCallback)((e=>{R(e),G()}),[]),Q=Object(r.useCallback)((e=>{B(e)}),[]),Y=Object(r.useCallback)((()=>{l({andProviderId:e,excluded:F(N),field:C.length>0?C[0].label:"",id:p,operator:_(N),providerId:d,value:L,type:S})}),[l,e,N,C,p,d,L,S]);return Object(r.useEffect)((()=>((()=>{const e=void 0!==window.pageXOffset?window.pageXOffset:(document.documentElement||document.body.parentNode||document.body).scrollLeft,t=void 0!==window.pageYOffset?window.pageYOffset:(document.documentElement||document.body.parentNode||document.body).scrollTop;window.onscroll=()=>window.scrollTo(e,t)})(),()=>{window.onscroll=()=>a.noop})),[]),o.a.createElement(i.EuiPanel,{paddingSize:"s"},o.a.createElement(i.EuiFlexGroup,{direction:"column",gutterSize:"none"},o.a.createElement(i.EuiFlexItem,{grow:!0},o.a.createElement(i.EuiFormRow,{label:g},o.a.createElement(i.EuiComboBox,{autoFocus:!0,"data-test-subj":"field",isClearable:!1,onChange:H,options:M(t),placeholder:b,selectedOptions:C,singleSelection:{asPlainText:!0},fullWidth:!0}))),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(i.EuiSpacer,{size:"m"})),o.a.createElement(i.EuiFlexItem,{grow:!0},o.a.createElement(i.EuiFlexGroup,{gutterSize:"s",direction:"row",justifyContent:"spaceBetween"},o.a.createElement(i.EuiFlexItem,{grow:!0},o.a.createElement(i.EuiFormRow,{label:j},o.a.createElement(i.EuiComboBox,{"data-test-subj":"operator",isClearable:!1,onChange:W,options:T,placeholder:w,selectedOptions:N,singleSelection:{asPlainText:!0},style:{minWidth:152}}))))),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(i.EuiSpacer,{size:"m"})),o.a.createElement(i.EuiFlexItem,{grow:!1},V&&o.a.createElement(i.EuiFormRow,{label:k},o.a.createElement(q,{onChangeCallback:Q,value:x})),$&&S!==c.a.template&&o.a.createElement(i.EuiFormRow,{label:k},o.a.createElement(P,{onChangeCallback:Q,value:x}))),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(i.EuiSpacer,{size:"m"})),o.a.createElement(i.EuiFlexItem,{grow:!1},S===c.a.template&&$&&o.a.createElement(o.a.Fragment,null,o.a.createElement(i.EuiCallOut,{color:"warning",iconType:"warning",size:"s",title:I(N[0].label)}),o.a.createElement(i.EuiSpacer,{size:"m"})),o.a.createElement(i.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"none"},o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(i.EuiButton,{className:z,color:"primary","data-test-subj":"save",fill:!0,isDisabled:!A({type:S,browserFields:t,selectedField:C,selectedOperator:N})||U,onClick:Y,size:"m"},O))))))}));$.displayName="StatefulEditDataProvider"},function(e,t,n){"use strict";n.d(t,"a",(function(){return S}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(877),l=n(382);var c=n(5);c.i18n.translate("xpack.securitySolution.expandedValue.showTopN.showTopValues",{defaultMessage:"Show top values"}),c.i18n.translate("xpack.securitySolution.expandedValue.hideTopValues.HideTopValues",{defaultMessage:"Hide top values"});const u=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewHostSummary",{defaultMessage:"View host summary"}),d=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewUserSummary",{defaultMessage:"View user summary"}),p=c.i18n.translate("xpack.securitySolution.expandedValue.links.expandIpDetails",{defaultMessage:"Expand ip details"}),m=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewRuleDetails",{defaultMessage:"View rule details"}),f=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewPortDetails",{defaultMessage:"View port details"}),g=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewRuleReference",{defaultMessage:"View rule reference"}),b=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewEventReference",{defaultMessage:"View event reference"}),y=c.i18n.translate("xpack.securitySolution.expandedValue.links.viewIndicatorReference",{defaultMessage:"View indicator reference"});var h=n(188),v=n(167),E=n(395),x=n(380);n(102);const j=[{columnId:h.g,label:u},{columnId:"source.ip",fieldType:E.b,label:p},{columnId:"destination.ip",fieldType:E.b,label:p},{columnId:"signal.rule.name",label:m,linkField:"signal.rule.id"},...x.b.map((e=>({columnId:e,label:f}))),{columnId:h.m,label:g},{columnId:h.l,label:g},{columnId:h.e,label:b},{columnId:v.j,label:y},{columnId:h.p,label:d}],O=o.a.div.withConfig({displayName:"StyledContent",componentId:"sc-18lfxbd-0"})(["padding:",";width:100%;margin:0 auto;"],(({$isDetails:e})=>e?"0 8px":void 0)),S=({data:e,ecsData:t,eventId:n,header:r,isDetails:o,isDraggable:c,isTimeline:u,linkValues:d,rowRenderers:p,scopeId:m,truncate:f,asPlainText:g})=>{const b=Object(a.useMemo)((()=>{return void 0!==(e=r.id,t=r.type,n=r.linkField,j.find((a=>a.columnId===e||!(!a.fieldType||t!==a.fieldType||void 0===n&&void 0===a.linkField))))&&!u;var e,t,n}),[r.id,r.linkField,r.type,u]),y=Object(s.c)({data:e,fieldName:r.id}),h=o?"eui-textBreakWord":"eui-displayInlineBlock eui-textTruncate";return i.a.createElement(O,{className:h,$isDetails:o},((e,t,n)=>{const a=t.find((t=>t.isInstance(e,n)));return null!=a?a:(()=>{throw new Error("Unhandled Column Renderer")})()})(r.id,l.a,e).renderColumn({asPlainText:null!=g?g:b,columnName:r.id,ecsData:t,eventId:n,field:r,isDetails:o,isDraggable:c,linkValues:d,rowRenderers:p,scopeId:m,truncate:f,values:y}))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return E}));var a=n(2),i=n.n(a),r=n(40),o=n(108),s=n(5);const l=s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.cancelTitle",{defaultMessage:"Cancel"}),c=s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.overwriteExceptionLabel",{defaultMessage:'Overwrite existing exception lists with conflicting "list_id"'}),u=s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.overwriteActionConnectorsLabel",{defaultMessage:'Overwrite existing connectors with conflicting action "id"'}),d=e=>s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.importExceptionsFailedLabel",{values:{totalExceptions:e},defaultMessage:"Failed to import {totalExceptions} {totalExceptions, plural, =1 {exception} other {exceptions}}"}),p=e=>s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.importConnectorsFailedLabel",{values:{totalConnectors:e},defaultMessage:"Failed to import {totalConnectors} {totalConnectors, plural, =1 {connector} other {connectors}}"}),m=s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.actionConnectorsWarningButton",{defaultMessage:"Go to connectors"}),f=s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.actionConnectorsAdditionalPrivilegesError",{defaultMessage:"You need additional privileges to import rules with actions."}),g=(e,t,n)=>{const a=n.map((t=>e(t.error.message))),i=new Error(a.join(". "));return i.stack=void 0,i.name="Network errors",i.raw_network_error=t,i};var b=n(407);const y=({actionConnectorsWarnings:e,importedActionConnectorsCount:t})=>{const{http:n}=Object(b.b)().services;if(!t||!e.length)return null;const{actionPath:a,message:o,buttonLabel:l}=e[0];return i.a.createElement(r.EuiCallOut,{"data-test-subj":"actionConnectorsWarningsCallOut",size:"m",heading:"h2",iconType:"warning",title:i.a.createElement("span",{"data-test-subj":"actionConnectorsWarningsCallOutTitle"},(c=t,s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.actionConnectorsWarningTitle",{values:{totalConnectors:c},defaultMessage:"{totalConnectors} {totalConnectors, plural, =1 {connector} other {connectors}} imported"}))),color:"warning"},i.a.createElement(r.EuiFlexGroup,{direction:"column",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{"data-test-subj":"actionConnectorsWarningsCallOutMessage"},i.a.createElement(r.EuiText,{size:"xs"},o)),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",direction:"columnReverse",alignItems:"flexEnd"},i.a.createElement(r.EuiButton,{"data-test-subj":"actionConnectorsWarningsCallOutButton",color:"warning",href:n.basePath.prepend(a)},l||m)))));var c};y.displayName="ActionConnectorWarningsComponent";const h=i.a.memo(y);h.displayName="ActionConnectorWarnings";const v=({checkBoxLabel:e,closeModal:t,description:n,errorMessage:m,failedDetailed:b,importComplete:y,importData:v,showCheckBox:E=!0,showExceptionsCheckBox:x=!1,showActionConnectorsCheckBox:j=!1,showModal:O,submitBtnText:S,subtitle:k,successMessage:w,title:I})=>{const[T,C]=Object(a.useState)(null),[M,A]=Object(a.useState)(!1),[_,F]=Object(a.useState)(!1),[D,N]=Object(a.useState)(!1),[P,R]=Object(a.useState)(!1),{addError:L,addSuccess:q}=Object(o.a)(),[B,z]=Object(a.useState)([]),[$,V]=Object(a.useState)(0),U=Object(a.useCallback)((()=>{t(),F(!1),N(!1),R(!1),z([])}),[t,F,N]),G=Object(a.useCallback)((e=>{A(!1),C(null),y(),e&&(y(),U())}),[U,y]),H=Object(a.useCallback)((async()=>{if(null!=T){A(!0);const e=new AbortController;try{const{action_connectors_warnings:t,...n}=await v({fileToImport:T[0],overwrite:_,overwriteExceptions:D,overwriteActionConnectors:P,signal:e.signal}),a=n.action_connectors_success_count;z(t),V(a),(({importResponse:e,exceptionsIncluded:t,actionConnectorsIncluded:n,successMessage:a,errorMessage:i,errorMessageDetailed:r,addError:o,addSuccess:l})=>{if(e.success)return e.success_count>0&&l(a(e.success_count)),t&&e.exceptions_success&&null!=e.exceptions_success_count&&e.exceptions_success_count>0&&l((u=e.exceptions_success_count,s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.exceptionsSuccessLabel",{values:{totalExceptions:u},defaultMessage:"Successfully imported {totalExceptions} {totalExceptions, plural, =1 {exception} other {exceptions}}."}))),void(n&&e.action_connectors_success&&null!=e.action_connectors_success_count&&e.action_connectors_success_count>0&&l((c=e.action_connectors_success_count,s.i18n.translate("xpack.securitySolution.detectionEngine.components.importRuleModal.connectorsSuccessLabel",{values:{totalConnectors:c},defaultMessage:"Successfully imported {totalConnectors} {totalConnectors, plural, =1 {connector} other {connectors}}."}))));var c,u;if(e.errors.length>0){if(n&&null!=e.action_connectors_errors&&e.action_connectors_errors.length>0){const{mappedErrors:t,numberOfActions:n}=(e=>{let t="";return{mappedErrors:e.map((e=>{const{id:n,error:a}=e;t=t&&t!==n?`${t},${n}`:n;const{status_code:i,message:r}=a||{};let o;return o=403===i?f:r,{...e,error:{...a,message:o}}})),numberOfActions:new Set(t&&[...t.split(",")]).size}})(e.action_connectors_errors);return o(g(r,e,t),{title:p(n||t.length)})}o(g(r,e,e.errors),{title:i(e.errors.length)}),t&&null!=e.exceptions_errors&&e.exceptions_errors.length>0&&o(g(r,e,e.exceptions_errors),{title:d(e.exceptions_errors.length)})}})({importResponse:n,exceptionsIncluded:x,actionConnectorsIncluded:j,successMessage:w,errorMessage:m,errorMessageDetailed:b,addError:L,addSuccess:q}),G(!(null!=t&&t.length))}catch(e){U(),L(e,{title:m(1)})}}}),[T,v,_,D,P,x,w,m,b,L,q,j,G,U]),W=Object(a.useCallback)((()=>{U()}),[U]),Q=Object(a.useCallback)((()=>{F((e=>!e))}),[]),Y=Object(a.useCallback)((()=>{N((e=>!e))}),[]),K=Object(a.useCallback)((()=>{R((e=>!e))}),[]);return i.a.createElement(i.a.Fragment,null,O&&i.a.createElement(r.EuiModal,{onClose:W,maxWidth:"750px"},i.a.createElement(r.EuiModalHeader,null,i.a.createElement(r.EuiModalHeaderTitle,null,I)),i.a.createElement(r.EuiModalBody,null,i.a.createElement(r.EuiText,{size:"s"},i.a.createElement("h4",null,n)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiFilePicker,{"data-test-subj":"rule-file-picker",accept:".ndjson",id:"rule-file-picker",initialPromptText:k,onChange:e=>{C(e&&e.length>0?e:null)},display:"large",fullWidth:!0,isLoading:M}),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(h,{actionConnectorsWarnings:B,importedActionConnectorsCount:$}),i.a.createElement(r.EuiSpacer,{size:"s"}),E&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiCheckbox,{"data-test-subj":"importDataModalCheckboxLabel",id:"importDataModalCheckboxLabel",label:e,checked:_,onChange:Q}),x&&i.a.createElement(r.EuiCheckbox,{"data-test-subj":"importDataModalExceptionsCheckboxLabel",id:"importDataModalExceptionsCheckboxLabel",label:c,checked:D,onChange:Y}),j&&i.a.createElement(r.EuiCheckbox,{"data-test-subj":"importDataModalActionConnectorsCheckbox",id:"importDataModalActionConnectorsCheckbox",label:u,checked:P,onChange:K}))),i.a.createElement(r.EuiModalFooter,null,i.a.createElement(r.EuiButtonEmpty,{onClick:W},l),i.a.createElement(r.EuiButton,{"data-test-subj":"import-data-modal-button",onClick:H,disabled:null==T||M,fill:!0},S))))};v.displayName="ImportDataModalComponent";const E=i.a.memo(v);E.displayName="ImportDataModal"},function(e,t,n){"use strict";n.d(t,"a",(function(){return F}));var a=n(42),i=n(40),r=n(2),o=n.n(r),s=n(287),l=n(41),c=n.n(l),u=n(59),d=n(119),p=n(115),m=n(701),f=n(111),g=n(183),b=n(730),y=n(133),h=n(8),v=n(240),E=n.n(v),x=n(165),j=n(155),O=n(812),S=n(751),k=n(217),w=n(5);const I=o.a.memo((({data:e,field:t,fieldMapping:n,scripted:a})=>{const r=function(e){switch(e){case"boolean":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.booleanAriaLabel",{defaultMessage:"Boolean field"});case"conflict":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.conflictFieldAriaLabel",{defaultMessage:"Conflicting field"});case"date":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.dateFieldAriaLabel",{defaultMessage:"Date field"});case"geo_point":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.geoPointFieldAriaLabel",{defaultMessage:"Geo point field"});case"geo_shape":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.geoShapeFieldAriaLabel",{defaultMessage:"Geo shape field"});case"ip":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.ipAddressFieldAriaLabel",{defaultMessage:"IP address field"});case"murmur3":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.murmur3FieldAriaLabel",{defaultMessage:"Murmur3 field"});case"number":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.numberFieldAriaLabel",{defaultMessage:"Number field"});case"source":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.sourceFieldAriaLabel",{defaultMessage:"Source field"});case"string":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.stringFieldAriaLabel",{defaultMessage:"String field"});case"nested":return w.i18n.translate("xpack.securitySolution.fieldNameIcons.nestedFieldAriaLabel",{defaultMessage:"Nested field"});default:return w.i18n.translate("xpack.securitySolution.fieldNameIcons.unknownFieldAriaLabel",{defaultMessage:"Unknown field"})}}(e.type),s=n&&n.displayName?n.displayName:t,l=s!==t?`${t} (${s})`:t,c=null==n?void 0:n.isSubtypeMulti();return o.a.createElement(o.a.Fragment,null,o.a.createElement(i.EuiFlexItem,{grow:!1,className:"eventFieldsTable__fieldIcon"},o.a.createElement(S.a,{"data-test-subj":"field-type-icon",type:e.type,label:r,scripted:a})),o.a.createElement(i.EuiFlexGroup,{wrap:!0,gutterSize:"none",responsive:!1,alignItems:"flexStart","data-test-subj":"field-name-cell"},o.a.createElement(i.EuiFlexItem,{className:"eventFieldsTable__fieldName eui-textBreakAll",grow:!1},o.a.createElement(i.EuiToolTip,{position:"top",content:Object(h.isEmpty)(e.description)?l:`${e.description} ${Object(k.c)(e.example)}`,delay:"long",anchorClassName:"eui-textBreakAll"},o.a.createElement(i.EuiText,{size:"xs","data-test-subj":"field-name"},t))),c&&o.a.createElement(i.EuiToolTip,{position:"top",delay:"long",content:j.t},o.a.createElement(i.EuiBadge,{title:"",className:"eventFieldsTable__multiFieldBadge",color:"default","data-test-subj":`eventFieldsTableRow-${t}-multifieldBadge`},j.s))))}));I.displayName="FieldNameCell",c()(i.EuiPanel).withConfig({displayName:"HoverActionsContainer",componentId:"sc-172eod5-0"})(["align-items:center;display:flex;flex-direction:row;height:25px;justify-content:center;left:5px;position:absolute;top:-10px;width:30px;"]).displayName="HoverActionsContainer";const T=E()(((e,t)=>Object(h.get)(t,e)),((e,t)=>e[0].join()===t[0].join()));var C=n(105);const M=c.a.div.withConfig({displayName:"TableWrapper",componentId:"sc-ljv1sr-0"})(["display:flex;flex:1;overflow:hidden;> div{display:flex;flex-direction:column;flex:1;overflow:hidden;> .euiFlexGroup:first-of-type{flex:0;}}"]),A=c()(i.EuiInMemoryTable).withConfig({displayName:"StyledEuiInMemoryTable",componentId:"sc-ljv1sr-1"})(["flex:1;overflow:auto;overflow-x:hidden;&::-webkit-scrollbar{height:",";width:",";}&::-webkit-scrollbar-thumb{background-clip:content-box;background-color:",";border:"," solid transparent;}&::-webkit-scrollbar-corner,&::-webkit-scrollbar-track{background-color:transparent;}.eventFieldsTable__fieldIcon{padding-top:","px;}.eventFieldsTable__fieldName{line-height:",";padding:",";}.inlineActions{opacity:0;}.eventFieldsTable__tableRow{font-size:",";font-family:",";.inlineActions-popoverOpen{opacity:1;}&:hover{.inlineActions{opacity:1;}}}.eventFieldsTable__actionCell,.eventFieldsTable__fieldNameCell{align-items:flex-start;padding:",";}.eventFieldsTable__fieldValue{display:inline-block;word-break:break-all;word-wrap:break-word;white-space:pre-wrap;line-height:",";color:",";vertical-align:top;}"],(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>e.eui.euiScrollBar),(({theme:e})=>Object(s.rgba)(e.eui.euiColorDarkShade,.5)),(({theme:e})=>e.eui.euiScrollBarCorner),(({theme:e})=>1.5*parseFloat(e.eui.euiSizeXS)),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiCodeFontFamily),(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiLineHeight),(({theme:e})=>e.eui.euiColorFullShade)),_=[25,50,100],F=o.a.memo((({browserFields:e,data:t,eventId:n,isDraggable:s,timelineTabType:l,scopeId:c,isReadOnly:h})=>{const v=Object(r.useRef)(null),E=Object(r.useMemo)((()=>Object(p.isTimelineScope)(c)?f.b.getTimelineByIdSelector():Object(p.isInTableScope)(c)?d.j.getTableByIdSelector():void 0),[c]),S=Object(p.isTimelineScope)(c)?y.b:d.q,w=Object(C.a)((t=>{var n;const{columns:a}=null!==(n=E&&E(t,c))&&void 0!==n?n:S;return Object(b.b)(a,e)})),F=Object(r.useMemo)((()=>Object(g.a)(e)),[e]),D=Object(r.useMemo)((()=>Object(a.sortBy)(["field"],t).map(((e,t)=>({...e,...F[e.field],valuesConcatenated:null!=e.values?e.values.join():"",ariaRowindex:Object(u.arrayIndexToAriaIndex)(t)})))),[t,F]),N=Object(r.useCallback)((e=>{var n;const i=(null!==(n=w.find((t=>t.id===e)))&&void 0!==n?n:{}).linkField;if(!i)return null;const r=(null!=t?t:[]).find((e=>e.field===i)),o=Object(a.getOr)(null,"originalValue",r);return Array.isArray(o)?o[0]:o}),[t,w]),P=Object(r.useCallback)((({ariaRowindex:e,field:t})=>({...null!=e?{"data-rowindex":e}:{},className:"eventFieldsTable__tableRow","data-test-subj":`event-fields-table-row-${t}`})),[]),R=Object(r.useMemo)((()=>(({browserFields:e,eventId:t,contextId:n,scopeId:a,getLinkValue:r,isDraggable:s,isReadOnly:l})=>[...l?[]:[{field:"values",name:o.a.createElement(i.EuiText,{size:"xs"},o.a.createElement("strong",null,j.a)),sortable:!1,truncateText:!1,width:"132px",render:(e,t)=>o.a.createElement(x.c,{data:{field:t.field,value:e},triggerId:x.d.DETAILS_FLYOUT,mode:x.a.INLINE,visibleCellActions:3,sourcererScopeId:Object(p.getSourcererScopeId)(a),metadata:{scopeId:a,isObjectArray:t.isObjectArray}})}],{field:"field",className:"eventFieldsTable__fieldNameCell",name:o.a.createElement(i.EuiText,{size:"xs"},o.a.createElement("strong",null,j.k)),sortable:!0,truncateText:!1,render:(e,t)=>o.a.createElement(I,{data:t,field:e,fieldMapping:void 0})},{field:"values",className:"eventFieldsTable__fieldValueCell",name:o.a.createElement(i.EuiText,{size:"xs"},o.a.createElement("strong",null,j.E)),sortable:!0,truncateText:!1,render:(a,i)=>{const l=T([i.category,"fields",i.field],e);return o.a.createElement(O.a,{contextId:n,data:i,eventId:t,fieldFromBrowserField:l,getLinkValue:r,isDraggable:s,values:a})}}])({browserFields:e,eventId:n,contextId:`event-fields-browser-for-${c}-${l}`,scopeId:c,getLinkValue:N,isDraggable:s,isReadOnly:h})),[e,n,c,l,N,s,h]),L=Object(r.useCallback)((()=>{var e,t;null===(e=v.current)||void 0===e||null===(t=e.querySelector('input[type="search"]'))||void 0===t||t.focus()}),[]),q=Object(r.useCallback)((()=>{var e;null===(e=document.querySelector(`.${m.a}`))||void 0===e||e.focus()}),[]),B=Object(r.useCallback)((e=>{Object(u.isTab)(e)?Object(k.f)({containerElement:v.current,keyboardEvent:e,onSkipFocusBeforeEventsTable:L,onSkipFocusAfterEventsTable:q}):Object(u.onKeyDownFocusHandler)({colindexAttribute:u.DATA_COLINDEX_ATTRIBUTE,containerElement:null==v?void 0:v.current,event:e,maxAriaColindex:3,maxAriaRowindex:t.length,onColumnFocused:a.noop,rowindexAttribute:u.DATA_ROWINDEX_ATTRIBUTE})}),[t,q,L]);Object(r.useEffect)((()=>{L()}),[L]);const{onTableChange:z,paginationTableProp:$}=(()=>{const[e,t]=Object(r.useState)({pageIndex:0});return{onTableChange:Object(r.useCallback)((({page:{index:e}})=>{t({pageIndex:e})}),[]),paginationTableProp:Object(r.useMemo)((()=>({...e,pageSizeOptions:_})),[e])}})();return o.a.createElement(M,{onKeyDown:B,ref:v},o.a.createElement(A,{className:k.a,items:D,itemId:"field",columns:R,onTableChange:z,pagination:$,rowProps:P,search:k.g,sorting:!1,"data-test-subj":"event-fields-browser"}))}));F.displayName="EventFieldsBrowser"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n.n(a),r=n(103),o=n(656),s=n(299),l=n(151),c=n(114),u=n(457),d=n(312);const p=({combinedQueries:e,filters:t,headerChildren:n,onlyField:p,paddingSize:m,query:f,showLegend:g,setAbsoluteRangeDatePickerTarget:b=c.a.global,runtimeMappings:y,hideQueryToggle:h=!1})=>{const v=Object(r.useDispatch)(),{signalIndexName:E}=Object(s.a)(),x=(j=t,Object(a.useMemo)((()=>[...j,...Object(d.d)(!1)]),[j]));var j;const O=Object(a.useCallback)((({x:e})=>{if(!e)return;const[t,n]=e;v(Object(l.setAbsoluteRangeDatePicker)({id:b,from:new Date(t).toISOString(),to:new Date(n).toISOString()}))}),[v,b]);return i.a.createElement(o.a,{combinedQueries:e,filters:x,headerChildren:n,legendPosition:"right",onlyField:p,paddingSize:m,query:f,showLegend:g,showLinkToAlerts:null==p,showStackBy:null==p,showTotalAlertsCount:!0,signalIndexName:E,runtimeMappings:y,title:u.b,titleSize:null==p?"m":"s",updateDateRange:O,hideQueryToggle:h})};p.displayName="SignalsByCategoryComponent";const m=i.a.memo(p)},function(e,t,n){"use strict";n.d(t,"a",(function(){return L}));var a=n(42),i=n(2),r=n.n(i),o=n(103),s=n(106),l=n(105),c=n(111),u=n(40),d=n(53),p=n.n(d),m=n(41),f=n.n(m),g=n(117),b=n(638),y=n(150),h=n(484);const v=f()(u.EuiBadge).withConfig({displayName:"ProviderBadgeStyled",componentId:"sc-l32wgy-0"})([".euiToolTipAnchor{&::after{font-style:normal;content:'|';padding:0px 3px;}}&.globalFilterItem{white-space:nowrap;min-width:",";display:flex;&.globalFilterItem-isDisabled{text-decoration:line-through;font-weight:400;font-style:italic;}&.globalFilterItem-isError{box-shadow:0 1px 1px -1px rgba(152,162,179,0.2),0 3px 2px -2px rgba(152,162,179,0.2),inset 0 0 0 1px #bd271e;}}"],(({$timelineType:e})=>e===s.l.template?"140px":"none"));v.displayName="ProviderBadgeStyled";const E=f.a.div.withConfig({displayName:"ProviderFieldBadge",componentId:"sc-l32wgy-1"})(["display:block;color:#fff;padding:6px 8px;font-size:0.6em;"]),x=f()(E).withConfig({displayName:"StyledTemplateFieldBadge",componentId:"sc-l32wgy-2"})(["background:",";text-transform:uppercase;"],(({theme:e})=>e.eui.euiColorVis3_behindText)),j=f()(E).withConfig({displayName:"ConvertFieldBadge",componentId:"sc-l32wgy-3"})(["background:",";cursor:pointer;&:hover{text-decoration:underline;}"],(({theme:e})=>e.eui.euiColorDarkShade)),O=({type:e,toggleType:t})=>e!==y.a.template?r.a.createElement(j,{onClick:t},h.d):r.a.createElement(x,null,h.v),S=r.a.memo(O),k={tabIndex:-1},w=r.a.memo((({deleteProvider:e,field:t,isEnabled:n,isExcluded:o,operator:l,providerId:c,togglePopover:u,toggleType:d,displayValue:m,val:f,type:E,timelineType:x})=>{const j=Object(i.useCallback)((t=>{t.stopPropagation&&t.stopPropagation(),e()}),[e]),O=Object(i.useMemo)((()=>p()("globalFilterItem",{"globalFilterItem-isDisabled":!n,"globalFilterItem-isExcluded":o})),[n,o]),w=Object(i.useMemo)((()=>Object(a.isString)(f)&&""===f?Object(g.b)():f),[f]),I=Object(i.useMemo)((()=>o?r.a.createElement("span",null,h.p," "):null),[o]),T=Object(i.useMemo)((()=>r.a.createElement(r.a.Fragment,null,I,l!==y.b?r.a.createElement("span",{className:"field-value"},`${t}: "${"includes"===l?m:w}"`):r.a.createElement("span",{className:"field-value"},t," ",h.j))),[m,t,w,l,I]),C=Object(i.useMemo)((()=>h.u({field:t,value:`${w}`})),[t,w]);return r.a.createElement(b.a,{id:`${c}-${t}-${f}`},r.a.createElement(r.a.Fragment,null,r.a.createElement(v,{className:O,color:"hollow",title:"",iconOnClick:j,iconOnClickAriaLabel:h.s,iconType:"cross",iconSide:"right",onClick:u,onClickAriaLabel:C,closeButtonProps:k,"data-test-subj":"providerBadge",$timelineType:x},T),x===s.l.template&&l!==y.c&&r.a.createElement(S,{toggleType:d,type:E})))}));w.displayName="ProviderBadge";var I=n(0),T=n.n(I),C=n(945);const M="edit-data-provider",A="exclude-data-provider",_="enable-data-provider",F="filter-for-field-present-data-provider",D="delete-data-provider",N=f()(u.EuiPopover).withConfig({displayName:"MyEuiPopover",componentId:"sc-2zwix7-0"})(["height:100%;user-select:none;"]);N.displayName="MyEuiPopover";class provider_item_actions_ProviderItemActions extends r.a.PureComponent{constructor(...e){super(...e),T()(this,"onDataProviderEdited",(({andProviderId:e,excluded:t,field:n,id:a,operator:i,providerId:r,value:o,type:s})=>{null!=this.props.onDataProviderEdited&&this.props.onDataProviderEdited({andProviderId:e,excluded:t,field:n,id:a,operator:i,providerId:r,value:o,type:s}),this.props.closePopover()})),T()(this,"onFilterForFieldPresent",(()=>{const{andProviderId:e,field:t,timelineId:n,providerId:a,value:i,type:r}=this.props;null!=this.props.onDataProviderEdited&&this.props.onDataProviderEdited({andProviderId:e,excluded:!1,field:t,id:`${n}`,operator:y.b,providerId:a,value:i,type:r}),this.props.closePopover()}))}render(){const{andProviderId:e,browserFields:t,button:n,closePopover:a,deleteProvider:i,field:o,isEnabled:l,isExcluded:c,isLoading:d,isOpen:p,operator:m,providerId:f,timelineId:g,timelineType:b,toggleEnabledProvider:v,toggleExcludedProvider:E,toggleTypeProvider:x,value:j,type:O}=this.props,S=(({andProviderId:e,browserFields:t,deleteItem:n,field:a,isEnabled:i,isExcluded:o,isLoading:l,operator:c,onDataProviderEdited:u,onFilterForFieldPresent:d,providerId:p,timelineId:m,timelineType:f,toggleEnabled:g,toggleExcluded:b,toggleType:v,type:E,value:x})=>[{id:0,items:[{className:M,disabled:l,icon:"pencil",name:h.g,panel:1},{className:A,disabled:l,icon:o?"plusInCircle":"minusInCircle",name:o?h.o:h.i,onClick:b},{className:_,disabled:l,icon:i?"eyeClosed":"eye",name:i?h.w:h.t,onClick:g},{className:F,disabled:l,icon:"logstashFilter",name:h.k,onClick:d},f===s.l.template?{className:"convert-to-field-data-provider",disabled:l||c===y.c,icon:"visText",name:E===y.a.template?h.c:h.d,onClick:v}:{name:null},{className:D,disabled:l,icon:"trash",name:h.e,onClick:n}].filter((e=>null!=e.name))},{content:null!=t&&null!=m&&null!=u?r.a.createElement(C.a,{andProviderId:e,browserFields:t,field:a,isExcluded:o,onDataProviderEdited:u,operator:c,providerId:p,timelineId:m,value:x,type:E}):null,id:1,title:h.h,width:400}])({andProviderId:e,browserFields:t,deleteItem:i,field:o,isEnabled:l,isExcluded:c,isLoading:d,onDataProviderEdited:this.onDataProviderEdited,onFilterForFieldPresent:this.onFilterForFieldPresent,operator:m,providerId:f,timelineId:g,timelineType:b,toggleEnabled:v,toggleExcluded:E,toggleType:x,value:j,type:O});return r.a.createElement(N,{id:`popoverFor_${f}-${o}-${j}`,isOpen:p,closePopover:a,button:n,anchorPosition:"downCenter",panelPaddingSize:"none",ownFocus:!0},r.a.createElement("div",{style:{userSelect:"none"}},r.a.createElement(u.EuiContextMenu,{initialPanelId:0,panels:S,"data-test-subj":"providerActions"})))}}var P=n(227),R=n(133);const L=r.a.memo((({andProviderId:e,browserFields:t,deleteProvider:n,field:u,kqlQuery:d,isEnabled:p,isExcluded:m,isPopoverOpen:f,onDataProviderEdited:g,operator:b,providerId:h,register:v,setIsPopoverOpen:E,timelineId:x,toggleEnabledProvider:j,toggleExcludedProvider:O,toggleTypeProvider:S,displayValue:k,val:I,type:T=y.a.default,wrapperRef:C})=>{const M=Object(i.useMemo)((()=>c.b.getTimelineByIdSelector()),[]),A=Object(l.b)((e=>{var t,n;return x&&null!==(t=null===(n=M(e,x))||void 0===n?void 0:n.timelineType)&&void 0!==t?t:s.l.default})),{isLoading:_}=Object(l.a)((e=>{var t;return null!==(t=M(e,null!=x?x:""))&&void 0!==t?t:R.b})),F=Object(i.useCallback)((()=>{E(!f)}),[f,E]),D=Object(i.useCallback)((()=>{var e;E(!1),null==C||null===(e=C.current)||void 0===e||e.focus()}),[C,E]),N=Object(i.useCallback)((()=>{j(),D()}),[D,j]),L=Object(i.useCallback)((()=>{O(),D()}),[O,D]),q=Object(i.useCallback)((()=>{S(),D()}),[S,D]),[B,z]=Object(i.useState)(!1),$=Object(o.useDispatch)();Object(i.useEffect)((()=>{null!=v&&($(P.a.registerProvider({provider:{...v,and:[]}})),z(!0))}),[B,$,v,z]);const V=Object(i.useCallback)((()=>{B&&null!=v&&$(P.a.unRegisterProvider({id:v.id}))}),[B,$,v]);Object(i.useEffect)((()=>()=>{V()}),[V]);const U=Object(i.useMemo)((()=>r.a.createElement(w,{deleteProvider:_?a.noop:n,field:u,kqlQuery:d,isEnabled:p,isExcluded:m,providerId:h,togglePopover:F,toggleType:q,displayValue:null!=k?k:String(I),val:I,operator:b,type:T,timelineType:A})),[n,k,u,p,m,_,d,q,b,h,A,F,T,I]);return r.a.createElement(provider_item_actions_ProviderItemActions,{andProviderId:e,browserFields:t,button:U,closePopover:D,deleteProvider:n,field:u,kqlQuery:d,isEnabled:p,isExcluded:m,isLoading:_,isOpen:f,onDataProviderEdited:g,operator:b,providerId:h,timelineId:x,timelineType:A,toggleEnabledProvider:N,toggleExcludedProvider:L,toggleTypeProvider:q,value:I,type:T})}));L.displayName="ProviderItemBadge"},function(e,t,n){"use strict";n.d(t,"b",(function(){return F})),n.d(t,"a",(function(){return D}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(103),c=n(119),u=n(115),d=n(102),p=n(5);const m=p.i18n.translate("xpack.securitySolution.timeline.graphOverlay.closeAnalyzerButton",{defaultMessage:"Close analyzer"}),f=p.i18n.translate("xpack.securitySolution.timeline.graphOverlay.closeSessionButton",{defaultMessage:"Close session viewer"});var g=n(118),b=n(111),y=n(116),h=n(302),v=n(133),E=n(105),x=n(690),j=n(110),O=n(529),S=n(4),k=n(459),w=n(497),I=n(178),T=n(518),C=n(126);const M=s()(r.EuiButtonIcon).withConfig({displayName:"FullScreenButtonIcon",componentId:"sc-tyt961-0"})(["margin:4px 0 4px 0;"]),A=({fullScreen:e,globalFullScreen:t,onCloseOverlay:n,isActiveTimelines:a,timelineFullScreen:o,toggleFullScreen:s,graphEventId:l,activeTab:c})=>i.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButtonEmpty,{iconType:"cross",onClick:n,size:"xs","data-test-subj":"close-overlay"},a?c===g.d.graph?m:f:l?m:f)),!1===a&&i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiToolTip,{content:e?w.a:k.d},i.a.createElement(M,{"aria-label":Object(O.b)({globalFullScreen:t,isActiveTimelines:a,timelineFullScreen:o})?w.a:k.d,className:e?S.yb:"",color:e?"ghost":"primary","data-test-subj":"full-screen",iconType:"fullScreen",onClick:s}))));A.displayName="NavigationComponent";const _=i.a.memo(A),F=({scopeId:e})=>{const t=Object(l.useDispatch)(),n=Object(a.useMemo)((()=>Object(u.isTimelineScope)(e)?b.b.getTimelineByIdSelector():Object(u.isInTableScope)(e)?c.j.getTableByIdSelector():void 0),[e]),{globalFullScreen:r,setGlobalFullScreen:o}=Object(I.a)(),{timelineFullScreen:s,setTimelineFullScreen:d}=Object(I.c)(),p=Object(u.isTimelineScope)(e)?v.b:c.q,{graphEventId:m,sessionViewConfig:f,activeTab:y,prevActiveTab:h}=Object(E.a)((t=>{var a;return{activeTab:v.b.activeTab,prevActiveTab:v.b.prevActiveTab,...null!==(a=n&&n(t,e))&&void 0!==a?a:p}})),x=Object(u.getScopedActions)(e),j=Object(a.useCallback)((()=>{null!==document.querySelector(".euiDataGrid--fullScreen")?Object(u.isActiveTimeline)(e)?document.body.classList.add("euiDataGrid__restrictBody"):document.body.classList.add(S.pc,"euiDataGrid__restrictBody"):Object(u.isActiveTimeline)(e)?d(!1):o(!1),!1===Object(u.isActiveTimeline)(e)?x&&(t(x.updateGraphEventId({id:e,graphEventId:""})),t(x.updateSessionViewConfig({id:e,sessionViewConfig:null}))):y===g.d.graph?(x&&t(x.updateGraphEventId({id:e,graphEventId:""})),h!==g.d.session||f||t(b.a.setActiveTabTimeline({id:e,activeTab:g.d.query}))):y===g.d.session&&(Object(u.isTimelineScope)(e)&&(h!==g.d.graph||m?t(b.a.setActiveTabTimeline({id:e,activeTab:h})):t(b.a.setActiveTabTimeline({id:e,activeTab:g.d.query}))),x&&t(x.updateSessionViewConfig({id:e,sessionViewConfig:null})))}),[d,o,x,t,e,y,h,f,m]),k=Object(a.useMemo)((()=>Object(O.b)({globalFullScreen:r,isActiveTimelines:Object(u.isActiveTimeline)(e),timelineFullScreen:s})),[r,e,s]),w=Object(a.useCallback)((()=>{Object(u.isActiveTimeline)(e)?d(!s):o(!r)}),[e,d,s,o,r]),T=Object(a.useMemo)((()=>i.a.createElement(_,{fullScreen:k,globalFullScreen:r,activeTab:y,onCloseOverlay:j,isActiveTimelines:Object(u.isActiveTimeline)(e),timelineFullScreen:s,toggleFullScreen:w,graphEventId:m})),[k,r,y,j,e,s,w,m]);return{onCloseOverlay:j,Navigation:T}},D=({scopeId:e,entityType:t,height:n})=>{const{sessionView:r}=Object(d.j)().services,o=Object(a.useMemo)((()=>Object(u.isTimelineScope)(e)?b.b.getTimelineByIdSelector():Object(u.isInTableScope)(e)?c.j.getTableByIdSelector():void 0),[e]),{globalFullScreen:s}=Object(I.a)(),{timelineFullScreen:p}=Object(I.c)(),{canReadPolicyManagement:m}=Object(C.a)().endpointPrivileges,f=Object(u.isTimelineScope)(e)?v.b:c.q,{sessionViewConfig:S,activeTab:k}=Object(E.a)((t=>{var n;return{activeTab:v.b.activeTab,prevActiveTab:v.b.prevActiveTab,...null!==(n=o&&o(t,e))&&void 0!==n?n:f}})),w=Object(a.useMemo)((()=>Object(O.b)({globalFullScreen:s,isActiveTimelines:Object(u.isActiveTimeline)(e),timelineFullScreen:p})),[s,e,p]),M=Object(a.useMemo)((()=>Object(u.isActiveTimeline)(e)?j.SourcererScopeName.timeline:T.a.includes(e)?j.SourcererScopeName.detections:j.SourcererScopeName.default),[e]),{openEventDetailsPanel:A,shouldShowDetailsPanel:_,DetailsPanel:F}=(({entityType:e,isFlyoutView:t,sourcererScope:n,scopeId:r,tabType:o=g.d.query})=>{const{browserFields:s,selectedPatterns:d,runtimeMappings:p}=Object(y.d)(n),m=Object(l.useDispatch)(),f=Object(a.useMemo)((()=>Object(u.isTimelineScope)(r)?b.b.getTimelineByIdSelector():Object(u.isInTableScope)(r)?c.j.getTableByIdSelector():void 0),[r]),j=Object(a.useMemo)((()=>d.join(",")),[d]),O=Object(E.a)((e=>{var t,n;return null===(t=null!==(n=f&&f(e,r))&&void 0!==n?n:v.b)||void 0===t?void 0:t.expandedDetail})),S=Object(a.useRef)((()=>{})),k=()=>{},w=Object(a.useMemo)((()=>{var e;return!!(o&&O&&O[o]&&null!==(e=O[o])&&void 0!==e&&e.panelView)}),[O,o]),I=Object(u.getScopedActions)(r),T=Object(a.useCallback)((e=>{e&&I&&m(I.toggleDetailPanel({...e,tabType:o,id:r}))}),[I,r,m,o]),C=Object(a.useCallback)(((e,t)=>{e&&T({panelView:"eventDetail",params:{eventId:e,indexName:j}}),S.current=null!=t?t:k}),[T,j]),M=Object(a.useCallback)(((e,t)=>{T({panelView:"hostDetail",params:{hostName:e}}),S.current=null!=t?t:k}),[T]),A=Object(a.useCallback)(((e,t,n)=>{T({panelView:"networkDetail",params:{ip:e,flowTarget:t}}),S.current=null!=n?n:k}),[T]),_=Object(a.useCallback)(((e,t)=>{T({panelView:"userDetail",params:{userName:e}}),S.current=null!=t?t:k}),[T]),F=Object(a.useCallback)((()=>{var e;S.current&&S.current(),I&&m(I.toggleDetailPanel({tabType:o,id:r})),o&&null!==(e=O[o])&&void 0!==e&&e.panelView&&r===g.c.active&&w&&h.a.toggleExpandedDetail({})}),[I,o,O,r,w,m]),D=Object(a.useMemo)((()=>w?i.a.createElement(x.a,{browserFields:s,entityType:e,handleOnPanelClosed:F,isFlyoutView:t,runtimeMappings:p,tabType:o,scopeId:r}):null),[s,e,F,t,p,w,o,r]);return{openEventDetailsPanel:C,openHostDetailsPanel:M,openNetworkDetailsPanel:A,openUserDetailsPanel:_,handleOnDetailsPanelClosed:F,shouldShowDetailsPanel:w,DetailsPanel:D}})({isFlyoutView:!Object(u.isActiveTimeline)(e),entityType:t,sourcererScope:M,scopeId:e,tabType:Object(u.isActiveTimeline)(e)?k:g.d.query}),D=Object(a.useMemo)((()=>{const e=n?n-118:void 0;return null!==S?r.getSessionView({...S,loadAlertDetails:A,isFullScreen:w,height:e,canReadPolicyManagement:m}):null}),[n,S,r,A,w,m]);return{openEventDetailsPanel:A,shouldShowDetailsPanel:_,SessionView:D,DetailsPanel:F}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(4);n(84);var r=n(323);const o=({_id:e,_index:t,timestamp:n})=>{const{getAppUrl:o}=Object(r.a)(),s=(({alertId:e,index:t,timestamp:n})=>`${i.g}/${e}?index=${t}&timestamp=${n}`)({alertId:e,index:t,timestamp:n}),l=t.includes(i.P);return Object(a.useMemo)((()=>{if(l)return null;const e=o({path:s});return`${window.location.origin}${e}`}),[l,o,s])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return k}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(5),c=n(44),u=n(41),d=n.n(u),p=n(126),m=n(1046),f=n(245),g=n(107),b=n(323),y=n(274);const h=()=>{},v={bordered:!0,showIcons:!1},E={className:"effected-policies-search"},x=d.a.div.withConfig({displayName:"StyledEuiSelectable",componentId:"sc-rb0j09-0"})([".effected-policies-search{border-bottom-left-radius:0;border-bottom-right-radius:0;}.euiSelectableList{border-top-left-radius:0;border-top-right-radius:0;border-top-width:0;}"]),j=d()(s.EuiFlexItem).withConfig({displayName:"StyledEuiFlexItemButtonGroup",componentId:"sc-rb0j09-1"})(["@media only screen and (max-width:","){align-items:center;}"],(e=>e.theme.eui.euiBreakpoints.m)),O=d()(s.EuiButtonGroup).withConfig({displayName:"StyledButtonGroup",componentId:"sc-rb0j09-2"})(["display:flex;justify-content:right;.euiButtonGroupButton{padding-right:",";}"],(e=>e.theme.eui.euiSizeL)),S=d.a.div.withConfig({displayName:"EffectivePolicyFormContainer",componentId:"sc-rb0j09-3"})([".policy-name .euiSelectableListItem__text{text-decoration:none !important;color:"," !important;}"],(e=>e.theme.eui.euiTextColor)),k=Object(r.memo)((({isGlobal:e,isPlatinumPlus:t,description:n,isLoading:a=!1,onChange:u,listProps:d,options:k,selected:w=[],disabled:I=!1,"data-test-subj":T,...C})=>{const{getAppUrl:M}=Object(b.a)(),{canReadPolicyManagement:A}=Object(p.a)().endpointPrivileges,_=Object(g.a)(T),F=Object(r.useMemo)((()=>[{id:"globalPolicy",label:l.i18n.translate("xpack.securitySolution.endpoint.effectedPolicySelect.global",{defaultMessage:"Global"}),iconType:e?"checkInCircleFilled":"empty","data-test-subj":_("global")},{id:"perPolicy",label:l.i18n.translate("xpack.securitySolution.endpoint.effectedPolicySelect.perPolicy",{defaultMessage:"Per Policy"}),iconType:e?"empty":"checkInCircleFilled","data-test-subj":_("perPolicy")}]),[_,e]),D=Object(r.useMemo)((()=>{const n=new Set(w.map((e=>e.id)));return k.map((a=>({label:a.name,className:"policy-name",prepend:o.a.createElement(s.EuiCheckbox,{id:Object(s.htmlIdGenerator)()(),onChange:h,checked:n.has(a.id),disabled:e||!t||I,"data-test-subj":`policy-${a.id}-checkbox`}),append:A?o.a.createElement(m.a,{href:M({path:Object(f.j)(a.id)}),appPath:Object(f.j)(a.id),target:"_blank","data-test-subj":_("policyLink")},o.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.effectedPolicySelect.viewPolicyLinkLabel",defaultMessage:"View policy"})):null,policy:a,checked:n.has(a.id)?"on":void 0,disabled:e||!t||I,"data-test-subj":`policy-${a.id}`}))).sort((({label:e},{label:t})=>e.localeCompare(t)))}),[A,I,M,_,e,t,k,w]),N=Object(r.useCallback)((t=>{u({isGlobal:e,selected:t.filter((e=>e.checked)).map((e=>e.policy))})}),[e,u]),P=Object(r.useCallback)((e=>{u({isGlobal:"globalPolicy"===e,selected:w})}),[u,w]),R=Object(r.useCallback)(((e,t)=>o.a.createElement(o.a.Fragment,null,t,e)),[]);return o.a.createElement(S,null,o.a.createElement(s.EuiText,{size:"xs"},o.a.createElement("h3",null,o.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.effectedPolicySelect.assignmentSectionTitle",defaultMessage:"Assignment"}))),o.a.createElement(s.EuiSpacer,{size:"xs"}),o.a.createElement(s.EuiFlexGroup,null,o.a.createElement(s.EuiFlexItem,{grow:2},o.a.createElement(s.EuiText,{size:"s"},o.a.createElement("p",null,n||l.i18n.translate("xpack.securitySolution.effectedPolicySelect.assignmentSectionDescription",{defaultMessage:"Assign globally across all policies, or assign it to specific policies."})))),o.a.createElement(j,{grow:1},o.a.createElement(s.EuiFormRow,{fullWidth:!0,isDisabled:I},o.a.createElement(O,{legend:"Global Policy Toggle",options:F,idSelected:e?"globalPolicy":"perPolicy",onChange:P,color:"primary","data-test-subj":_("byPolicyGlobalButtonGroup"),isDisabled:I})))),o.a.createElement(s.EuiSpacer,null),!e&&(a?o.a.createElement(y.a,{size:"l","data-test-subj":_("policiesLoader")}):o.a.createElement(s.EuiFormRow,{fullWidth:!0},o.a.createElement(x,null,o.a.createElement(s.EuiSelectable,i()({},C,{options:D,listProps:d||v,onChange:N,searchProps:E,searchable:!0,"data-test-subj":_("policiesSelectable")}),R)))))}));k.displayName="EffectedPolicySelect"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(2),i=n.n(a),r=n(44);const o=n(5).i18n.translate("xpack.securitySolution.detectionEngine.ruleInfo.UnknownText",{defaultMessage:"Unknown"});var s=n(132);const l=({createdBy:e,createdAt:t,"data-test-subj":n})=>i.a.createElement("div",{"data-test-subj":n},i.a.createElement(r.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.ruleCreationDescription",defaultMessage:"Created by: {by} on {date}",values:{by:null!=e?e:o,date:i.a.createElement(s.a,{value:null!=t?t:(new Date).toISOString(),fieldName:"createdAt"})}}));l.displayName="CreatedBy";const c=({updatedBy:e,updatedAt:t,"data-test-subj":n})=>i.a.createElement("div",{"data-test-subj":n},i.a.createElement(r.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.ruleDetails.ruleUpdateDescription",defaultMessage:"Updated by: {by} on {date}",values:{by:null!=e?e:o,date:i.a.createElement(s.a,{value:null!=t?t:(new Date).toISOString(),fieldName:"updatedAt"})}}));c.displayName="UpdatedBy"},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n.n(a),r=n(40),o=n(694),s=n(181),l=n(5),c=n(44),u=n(664);const d={type:"primary",id:"need-admin-for-update-rules",title:l.i18n.translate("xpack.securitySolution.detectionEngine.needAdminForUpdateCallOutBody.messageTitle",{defaultMessage:"Administration permissions required for alert migration"}),description:i.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.needAdminForUpdateCallOutBody.messageBody.messageDetail",defaultMessage:"{essence} Related documentation: {docs}",values:{essence:i.a.createElement("p",null,i.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.detectionEngine.needAdminForUpdateCallOutBody.messageBody.essenceDescription",defaultMessage:"You are currently missing the required permissions to auto migrate your alert data. Please have your administrator visit this page one time to auto migrate your alert data."})),docs:i.a.createElement("ul",null,i.a.createElement("li",null,i.a.createElement(u.b,null)),i.a.createElement("li",null,i.a.createElement(u.d,null)))}})},p=()=>{const[{signalIndexMappingOutdated:e,hasIndexManage:t}]=Object(s.b)();return null!=e&&e&&null!=t&&!t?i.a.createElement(i.a.Fragment,null,i.a.createElement(o.b,{condition:!0,message:d}),i.a.createElement(r.EuiSpacer,{size:"l"})):null},m=Object(a.memo)(p)},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f}));var a=n(2),i=n(197),r=n(213),o=n(102),s=n(125),l=n(590),c=n(893),u=n(855),d=n(1125),p=n(183);const m=({defineStepDefault:e,aboutStepDefault:t,scheduleStepDefault:n,actionsStepDefault:r})=>{const{triggersActionsUi:{actionTypeRegistry:p}}=Object(o.j)().services,{form:m}=Object(s.k)({defaultValue:e,options:{stripEmptyFields:!1},schema:l.a}),[f,g]=Object(a.useState)(e.eqlOptions),[b]=Object(s.m)({form:m}),y=Object(a.useMemo)((()=>"index"in b?{...b,eqlOptions:f}:e),[e,b,f]),h=Object(a.useMemo)((()=>Object(i.f)(y.ruleType)?c.b:c.a),[y.ruleType]),{form:v}=Object(s.k)({defaultValue:t,options:{stripEmptyFields:!1},schema:h}),[E]=Object(s.m)({form:v}),x="name"in E?E:t,{form:j}=Object(s.k)({defaultValue:n,options:{stripEmptyFields:!1},schema:u.a}),[O]=Object(s.m)({form:j}),S="interval"in O?O:n,k=Object(a.useMemo)((()=>(({actionTypeRegistry:e})=>({actions:{validations:[{validator:Object(d.a)(e)}]},responseActions:{},enabled:{},kibanaSiemAppUrl:{}}))({actionTypeRegistry:p})),[p]),{form:w}=Object(s.k)({defaultValue:r,options:{stripEmptyFields:!1},schema:k}),[I]=Object(s.m)({form:w});return{defineStepForm:m,defineStepData:y,aboutStepForm:v,aboutStepData:x,scheduleStepForm:j,scheduleStepData:S,actionsStepForm:w,actionsStepData:"actions"in I?I:r,eqlOptionsSelected:f,setEqlOptionsSelected:g}},f=({dataSourceType:e,index:t,dataViewId:n})=>{const{data:i}=Object(o.j)().services,[s,{browserFields:l,indexPatterns:c}]=Object(p.b)(t),[u,d]=Object(a.useState)(c);return Object(a.useEffect)((()=>{e!==r.a.IndexPatterns||s||d(c),e===r.a.DataView&&(async()=>{if(null!=n){const e=await i.dataViews.get(n);d(e)}})()}),[e,s,i,n,c]),{indexPattern:u,isIndexPatternLoading:s,browserFields:l}}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return D}));var a=n(2),i=n.n(a),r=n(103),o=n(51),s=n(115),l=n(114),c=n(134),u=n(102),d=n(161),p=n(122),m=n(133),f=n(111),g=n(272),b=n(40),y=n(41),h=n.n(y),v=n(916),E=n(949),x=n(116),j=n(641);const O=h.a.div.withConfig({displayName:"TopNContainer",componentId:"sc-149y4ld-0"})(["min-width:600px;"]),S=h()(b.EuiButtonIcon).withConfig({displayName:"CloseButton",componentId:"sc-149y4ld-1"})(["position:absolute;right:4px;top:4px;"]),k=h()(b.EuiSuperSelect).withConfig({displayName:"ViewSelect",componentId:"sc-149y4ld-2"})(["width:170px;"]),w=h.a.div.withConfig({displayName:"TopNContent",componentId:"sc-149y4ld-3"})(["margin-top:4px;margin-right:",";.euiPanel{border:none;}"],(({theme:e})=>e.eui.euiSizeXS)),I=({combinedQueries:e,defaultView:t,deleteQuery:n,filters:r,field:o,from:s,indexPattern:l,options:c,paddingSize:u,query:d,showLegend:p,setAbsoluteRangeDatePickerTarget:m,setQuery:f,scopeId:b,to:y,toggleTopN:h})=>{const[I,T]=Object(a.useState)(t),C=Object(a.useCallback)((e=>T(e)),[T]),M=Object(g.b)({scopeId:b,view:I}),{selectedPatterns:A,runtimeMappings:_}=Object(x.d)(M);Object(a.useEffect)((()=>{T(t)}),[t]);const F=Object(a.useMemo)((()=>i.a.createElement(k,{"data-test-subj":"view-select",disabled:1===c.length,onChange:C,options:c,valueOfSelected:I})),[C,c,I]),D=Object(a.useMemo)((()=>Object(g.d)({filters:r,tableId:b,view:I})),[r,b,I]);return i.a.createElement(O,{"data-test-subj":"topN-container"},i.a.createElement(w,null,"raw"===I||"all"===I?i.a.createElement(v.a,{combinedQueries:e,deleteQuery:n,filters:D,from:s,headerChildren:F,indexPattern:l,indexNames:A,runtimeMappings:_,onlyField:o,paddingSize:u,query:d,queryType:"topN",showLegend:p,setAbsoluteRangeDatePickerTarget:m,setQuery:f,showSpacer:!1,toggleTopN:h,scopeId:b,sourcererScopeId:M,to:y,hideQueryToggle:!0}):i.a.createElement(E.a,{combinedQueries:e,filters:D,headerChildren:F,onlyField:o,paddingSize:u,query:d,showLegend:p,setAbsoluteRangeDatePickerTarget:m,runtimeMappings:_,hideQueryToggle:!0})),i.a.createElement(S,{"aria-label":j.c,"data-test-subj":"close",iconType:"cross",onClick:h}))};I.displayName="TopNComponent";const T=i.a.memo(I);var C=n(118);const M=[],A={query:"",language:"kuery"},_=Object(r.connect)((()=>{const e=p.d.globalQuerySelector(),t=p.d.globalFiltersQuerySelector(),n=f.b.getTimelineByIdSelector(),a=p.d.getTimelineSelector(),i=f.b.getKqlFilterQuerySelector();return(r,o)=>{var s,l;const c=null!==(s=n(r,C.c.active))&&void 0!==s?s:m.b,u=null!==(l=c.filters)&&void 0!==l?l:M,d=a(r),{globalFilters:p}=o;return{activeTimelineEventType:c.eventType,activeTimelineFilters:c.activeTab===C.d.query?u:M,activeTimelineFrom:d.timerange.from,activeTimelineKqlQueryExpression:c.activeTab===C.d.query?i(r,C.c.active):null,activeTimelineTo:d.timerange.to,dataProviders:c.activeTab===C.d.query?c.dataProviders:[],globalQuery:e(r),globalFilters:null!=p?p:t(r),kqlMode:c.kqlMode}}})),F=({activeTimelineEventType:e,activeTimelineFilters:t,activeTimelineFrom:n,activeTimelineKqlQueryExpression:r,activeTimelineTo:p,browserFields:m,dataProviders:f,field:b,indexPattern:y,globalFilters:h=M,globalQuery:v=A,kqlMode:E,onFilterAdded:x,paddingSize:j,showLegend:O,scopeId:S,toggleTopN:k})=>{const{uiSettings:w}=Object(u.j)().services,{from:I,deleteQuery:C,setQuery:_,to:F}=Object(c.a)(),D=Object(g.a)(Object(s.isActiveTimeline)(null!=S?S:"")?e:void 0),N=Object(a.useMemo)((()=>{var e;return Object(s.isActiveTimeline)(null!=S?S:"")?null===(e=Object(d.d)({browserFields:m,config:Object(o.getEsQueryConfig)(w),dataProviders:f,filters:t,indexPattern:y,kqlMode:E,kqlQuery:{language:"kuery",query:null!=r?r:""}}))||void 0===e?void 0:e.filterQuery:void 0}),[S,m,w,f,t,y,E,r]),P=Object(a.useMemo)((()=>Object(g.c)(S)?"alert":D[0].value),[D,S]);return i.a.createElement(T,{combinedQueries:N,"data-test-subj":"top-n",defaultView:P,deleteQuery:Object(s.isActiveTimeline)(null!=S?S:"")?void 0:C,field:b,filters:Object(s.isActiveTimeline)(null!=S?S:"")?M:h,from:Object(s.isActiveTimeline)(null!=S?S:"")?n:I,indexPattern:y,options:D,paddingSize:j,query:Object(s.isActiveTimeline)(null!=S?S:"")?A:v,showLegend:O,setAbsoluteRangeDatePickerTarget:Object(s.isActiveTimeline)(null!=S?S:"")?l.a.timeline:l.a.global,setQuery:_,scopeId:S,to:Object(s.isActiveTimeline)(null!=S?S:"")?p:F,toggleTopN:k,onFilterAdded:x})};F.displayName="StatefulTopNComponent";const D=_(i.a.memo(F))},function(e,t,n){"use strict";n.d(t,"a",(function(){return x}));var a=n(130),i=n.n(a),r=n(42),o=n(2),s=n(3),l=n(51),c=n(216),u=n(102),d=n(338),p=n(115),m=n(5);const f=m.i18n.translate("xpack.securitySolution.matrixHistogram.errorSearchDescription",{defaultMessage:"An error has occurred on matrix histogram search"}),g=m.i18n.translate("xpack.securitySolution.matrixHistogram.failSearchDescription",{defaultMessage:"Failed to run search on matrix histogram"});var b=n(108),y=n(303),h=n(4);const v=[],E=({endDate:e,errorMessage:t,filterQuery:n,histogramType:a,indexNames:m,isPtrIncluded:E,onError:x,stackByField:j,runtimeMappings:O,startDate:S,threshold:k,skip:w=!1,includeMissingData:I=!0})=>{const{data:T}=Object(u.j)().services,C=Object(o.useRef)(r.noop),M=Object(o.useRef)(new AbortController),A=Object(o.useRef)(new s.Subscription),[_,F]=Object(o.useState)(!1),{startTracking:D}=Object(y.a)(),[N,P]=Object(o.useState)({defaultIndex:m,factoryQueryType:d.i,filterQuery:Object(c.a)(n),histogramType:a,timerange:{interval:"12h",from:S,to:e},stackByField:j,runtimeMappings:O,threshold:k,...null!=E?{isPtrIncluded:E}:{},...null!=I?{includeMissingData:I}:{}}),{addError:R,addWarning:L}=Object(b.a)(),[q,B]=Object(o.useState)({data:[],inspect:{dsl:[],response:[]},refetch:C.current,totalCount:-1,buckets:[]}),z=Object(o.useCallback)((e=>{const n=async()=>{M.current=new AbortController,F(!0);const{endTracking:n}=D({name:`${h.l} matrixHistogram ${a}`});A.current=T.search.search(e,{strategy:"securitySolutionSearchStrategy",abortSignal:M.current.signal}).subscribe({next:e=>{if(Object(l.isCompleteResponse)(e)){const t=Object(r.getOr)(v,d.k[a],e.rawResponse);F(!1),B((n=>({...n,data:e.matrixHistogramData,inspect:Object(p.getInspectResponse)(e,n.inspect),refetch:C.current,totalCount:t.reduce(((e,t)=>t.doc_count+e),0),buckets:t}))),n("success"),A.current.unsubscribe()}else Object(l.isErrorResponse)(e)&&(F(!1),L(f),n("invalid"),A.current.unsubscribe())},error:e=>{F(!1),R(e,{title:null!=t?t:g}),n("error"),A.current.unsubscribe()}})};A.current.unsubscribe(),M.current.abort(),n(),C.current=n}),[T.search,a,L,R,t,D]);return Object(o.useEffect)((()=>{P((t=>{const r={...t,defaultIndex:m,filterQuery:Object(c.a)(n),histogramType:a,timerange:{interval:"12h",from:S,to:e},stackByField:j,threshold:k,...null!=E?{isPtrIncluded:E}:{}};return i()(t,r)?t:r}))}),[m,e,n,S,j,a,k,E]),Object(o.useEffect)((()=>(w||z(N),()=>{A.current.unsubscribe(),M.current.abort()})),[N,z,w]),Object(o.useEffect)((()=>{w&&(F(!1),A.current.unsubscribe(),M.current.abort())}),[w]),[_,q,Object(o.useCallback)(((e,t)=>{z({...N,timerange:{interval:"12h",from:t,to:e}})}),[N,z])]},x=e=>{const[t,n]=E({...e,includeMissingData:!0}),a=Object(o.useMemo)((()=>!e.stackByField.endsWith(".ip")),[e.stackByField]),[i,r]=E({...e,includeMissingData:!1,skip:a||void 0===e.filterQuery||e.skip}),s=Object(o.useMemo)((()=>t||i),[t,i]),l=Object(o.useMemo)((()=>{if(a)return n;const{data:e,inspect:t,totalCount:i,refetch:o,buckets:l}=n,{data:c,inspect:u,totalCount:d,refetch:p}=r,m=()=>{o(),p()};return s?{data:[],inspect:{dsl:[],response:[]},refetch:m,totalCount:-1,buckets:[]}:{data:[...e,...c],inspect:{dsl:[...t.dsl,...u.dsl],response:[...t.response,...u.response]},totalCount:i+d,refetch:m,buckets:l}}),[s,n,r,a]);return[s,l]}},,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(962);n(78),n(405),n(406);var i=a.default({key:"css"}),r=i.flush,o=i.hydrate,s=i.cx,l=i.merge,c=i.getRegisteredStyles,u=i.injectGlobal,d=i.keyframes,p=i.css,m=i.sheet,f=i.cache;t.cache=f,t.css=p,t.cx=s,t.flush=r,t.getRegisteredStyles=c,t.hydrate=o,t.injectGlobal=u,t.keyframes=d,t.merge=l,t.sheet=m},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(78),i=n(405),r=n(406);function o(e){return e&&e.__esModule?e:{default:e}}var s=o(a);function l(e,t){if(void 0===e.inserted[t.name])return e.insert("",t,e.sheet,!0)}function c(e,t,n){var a=[],i=r.getRegisteredStyles(e,a,n);return a.length<2?n:i+t(a)}var u=function e(t){for(var n="",a=0;a<t.length;a++){var i=t[a];if(null!=i){var r=void 0;switch(typeof i){case"boolean":break;case"object":if(Array.isArray(i))r=e(i);else for(var o in r="",i)i[o]&&o&&(r&&(r+=" "),r+=o);break;default:r=i}r&&(n&&(n+=" "),n+=r)}}return n};t.default=function(e){var t=s.default(e);t.sheet.speedy=function(e){this.isSpeedy=e},t.compat=!0;var n=function(){for(var e=arguments.length,n=new Array(e),a=0;a<e;a++)n[a]=arguments[a];var o=i.serializeStyles(n,t.registered,void 0);return r.insertStyles(t,o,!1),t.key+"-"+o.name};return{css:n,cx:function(){for(var e=arguments.length,a=new Array(e),i=0;i<e;i++)a[i]=arguments[i];return c(t.registered,n,u(a))},injectGlobal:function(){for(var e=arguments.length,n=new Array(e),a=0;a<e;a++)n[a]=arguments[a];var r=i.serializeStyles(n,t.registered);l(t,r)},keyframes:function(){for(var e=arguments.length,n=new Array(e),a=0;a<e;a++)n[a]=arguments[a];var r=i.serializeStyles(n,t.registered),o="animation-"+r.name;return l(t,{name:r.name,styles:"@keyframes "+o+"{"+r.styles+"}"}),o},hydrate:function(e){e.forEach((function(e){t.inserted[e]=!0}))},flush:function(){t.registered={},t.inserted={},t.sheet.flush()},sheet:t.sheet,cache:t,getRegisteredStyles:r.getRegisteredStyles.bind(null,t.registered),merge:c.bind(null,t.registered,n)}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(964),i=n(966),r=n(703);function o(e){return e&&e.__esModule?e:{default:e}}var s=o(a),l=o(i),c=/[A-Z]|^ms/g,u=/_EMO_([^_]+?)_([^]*?)_EMO_/g,d=function(e){return 45===e.charCodeAt(1)},p=function(e){return null!=e&&"boolean"!=typeof e},m=o(r).default((function(e){return d(e)?e:e.replace(c,"-$&").toLowerCase()})),f=function(e,t){switch(e){case"animation":case"animationName":if("string"==typeof t)return t.replace(u,(function(e,t,n){return b={name:t,styles:n,next:b},t}))}return 1===l.default[e]||d(e)||"number"!=typeof t||0===t?t:t+"px"};function g(e,t,n){if(null==n)return"";if(void 0!==n.__emotion_styles)return n;switch(typeof n){case"boolean":return"";case"object":if(1===n.anim)return b={name:n.name,styles:n.styles,next:b},n.name;if(void 0!==n.styles){var a=n.next;if(void 0!==a)for(;void 0!==a;)b={name:a.name,styles:a.styles,next:b},a=a.next;return n.styles+";"}return function(e,t,n){var a="";if(Array.isArray(n))for(var i=0;i<n.length;i++)a+=g(e,t,n[i])+";";else for(var r in n){var o=n[r];if("object"!=typeof o)null!=t&&void 0!==t[o]?a+=r+"{"+t[o]+"}":p(o)&&(a+=m(r)+":"+f(r,o)+";");else if(!Array.isArray(o)||"string"!=typeof o[0]||null!=t&&void 0!==t[o[0]]){var s=g(e,t,o);switch(r){case"animation":case"animationName":a+=m(r)+":"+s+";";break;default:a+=r+"{"+s+"}"}}else for(var l=0;l<o.length;l++)p(o[l])&&(a+=m(r)+":"+f(r,o[l])+";")}return a}(e,t,n);case"function":if(void 0!==e){var i=b,r=n(e);return b=i,g(e,t,r)}}if(null==t)return n;var o=t[n];return void 0!==o?o:n}var b,y=/label:\s*([^\s;\n{]+)\s*(;|$)/g;t.serializeStyles=function(e,t,n){if(1===e.length&&"object"==typeof e[0]&&null!==e[0]&&void 0!==e[0].styles)return e[0];var a=!0,i="";b=void 0;var r=e[0];null==r||void 0===r.raw?(a=!1,i+=g(n,t,r)):i+=r[0];for(var o=1;o<e.length;o++)i+=g(n,t,e[o]),a&&(i+=r[o]);y.lastIndex=0;for(var l,c="";null!==(l=y.exec(i));)c+="-"+l[1];return{name:s.default(i)+c,styles:i,next:b}}},function(e,t,n){"use strict";e.exports=n(965)},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){for(var t,n=0,a=0,i=e.length;i>=4;++a,i-=4)t=1540483477*(65535&(t=255&e.charCodeAt(a)|(255&e.charCodeAt(++a))<<8|(255&e.charCodeAt(++a))<<16|(255&e.charCodeAt(++a))<<24))+(59797*(t>>>16)<<16),n=1540483477*(65535&(t^=t>>>24))+(59797*(t>>>16)<<16)^1540483477*(65535&n)+(59797*(n>>>16)<<16);switch(i){case 3:n^=(255&e.charCodeAt(a+2))<<16;case 2:n^=(255&e.charCodeAt(a+1))<<8;case 1:n=1540483477*(65535&(n^=255&e.charCodeAt(a)))+(59797*(n>>>16)<<16)}return(((n=1540483477*(65535&(n^=n>>>13))+(59797*(n>>>16)<<16))^n>>>15)>>>0).toString(36)}},function(e,t,n){"use strict";e.exports=n(967)},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default={animationIterationCount:1,aspectRatio:1,borderImageOutset:1,borderImageSlice:1,borderImageWidth:1,boxFlex:1,boxFlexGroup:1,boxOrdinalGroup:1,columnCount:1,columns:1,flex:1,flexGrow:1,flexPositive:1,flexShrink:1,flexNegative:1,flexOrder:1,gridRow:1,gridRowEnd:1,gridRowSpan:1,gridRowStart:1,gridColumn:1,gridColumnEnd:1,gridColumnSpan:1,gridColumnStart:1,msGridRow:1,msGridRowSpan:1,msGridColumn:1,msGridColumnSpan:1,fontWeight:1,lineHeight:1,opacity:1,order:1,orphans:1,tabSize:1,widows:1,zIndex:1,zoom:1,WebkitLineClamp:1,fillOpacity:1,floodOpacity:1,stopOpacity:1,strokeDasharray:1,strokeDashoffset:1,strokeMiterlimit:1,strokeOpacity:1,strokeWidth:1}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t=Object.create(null);return function(n){return void 0===t[n]&&(t[n]=e(n)),t[n]}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a="undefined"!=typeof document,i=function(e,t,n){var i=e.key+"-"+t.name;(!1===n||!1===a&&void 0!==e.compat)&&void 0===e.registered[i]&&(e.registered[i]=t.styles)};t.getRegisteredStyles=function(e,t,n){var a="";return n.split(" ").forEach((function(n){void 0!==e[n]?t.push(e[n]+";"):a+=n+" "})),a},t.insertStyles=function(e,t,n){i(e,t,n);var r=e.key+"-"+t.name;if(void 0===e.inserted[t.name]){var o="",s=t;do{var l=e.insert(t===s?"."+r:"",s,e.sheet,!0);a||void 0===l||(o+=l),s=s.next}while(void 0!==s);if(!a&&0!==o.length)return o}},t.registerStyles=i},,,function(e,t,n){var a=n(549)("set",n(1027));a.placeholder=n(550),e.exports=a},function(e,t,n){e.exports=n(33)(3822)},function(e,t,n){e.exports={ary:n(975),assign:n(998),clone:n(999),curry:n(1e3),forEach:n(625),isArray:n(258),isError:n(1001),isFunction:n(629),isWeakMap:n(1004),iteratee:n(1005),keys:n(717),rearg:n(1020),toInteger:n(627),toPath:n(1022)}},function(e,t,n){var a=n(435);e.exports=function(e,t,n){return t=n?void 0:t,t=e&&null==t?e.length:t,a(e,128,void 0,void 0,void 0,void 0,t)}},function(e,t,n){e.exports=n(33)(3349)},function(e,t,n){var a=n(341),i=n(342);e.exports=function(e,t,n){var r=1&t,o=a(e);return function t(){return(this&&this!==i&&this instanceof t?o:e).apply(r?n:this,arguments)}}},function(e,t,n){var a=n(616),i=n(341),r=n(617),o=n(620),s=n(626),l=n(443),c=n(342);e.exports=function(e,t,n){var u=i(e);return function i(){for(var d=arguments.length,p=Array(d),m=d,f=s(i);m--;)p[m]=arguments[m];var g=d<3&&p[0]!==f&&p[d-1]!==f?[]:l(p,f);return(d-=g.length)<n?o(e,t,r,i.placeholder,void 0,p,g,void 0,void 0,n-d):a(this&&this!==c&&this instanceof i?u:e,this,p)}}},function(e,t){e.exports=function(e,t){for(var n=e.length,a=0;n--;)e[n]===t&&++a;return a}},function(e,t,n){var a=n(438),i=n(621),r=n(981),o=n(983);e.exports=function(e){var t=r(e),n=o[t];if("function"!=typeof n||!(t in a.prototype))return!1;if(e===n)return!0;var s=i(n);return!!s&&e===s[0]}},function(e,t,n){var a=n(982),i=Object.prototype.hasOwnProperty;e.exports=function(e){for(var t=e.name+"",n=a[t],r=i.call(a,t)?n.length:0;r--;){var o=n[r],s=o.func;if(null==s||s==e)return o.name}return t}},function(e,t){e.exports={}},function(e,t,n){var a=n(438),i=n(622),r=n(439),o=n(258),s=n(440),l=n(984),c=Object.prototype.hasOwnProperty;function u(e){if(s(e)&&!o(e)&&!(e instanceof a)){if(e instanceof i)return e;if(c.call(e,"__wrapped__"))return l(e)}return new i(e)}u.prototype=r.prototype,u.prototype.constructor=u,e.exports=u},function(e,t,n){var a=n(438),i=n(622),r=n(441);e.exports=function(e){if(e instanceof a)return e.clone();var t=new i(e.__wrapped__,e.__chain__);return t.__actions__=r(e.__actions__),t.__index__=e.__index__,t.__values__=e.__values__,t}},function(e,t,n){e.exports=n(33)(3677)},function(e,t){var n=/\{\n\/\* \[wrapped with (.+)\] \*/,a=/,? & /;e.exports=function(e){var t=e.match(n);return t?t[1].split(a):[]}},function(e,t){var n=/\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/;e.exports=function(e,t){var a=t.length;if(!a)return e;var i=a-1;return t[i]=(a>1?"& ":"")+t[i],t=t.join(a>2?", ":" "),e.replace(n,"{\n/* [wrapped with "+t+"] */\n")}},function(e,t,n){e.exports=n(33)(3674)},function(e,t,n){var a=n(625),i=n(990),r=[["ary",128],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",32],["partialRight",64],["rearg",256]];e.exports=function(e,t){return a(r,(function(n){var a="_."+n[0];t&n[1]&&!i(e,a)&&e.push(a)})),e.sort()}},function(e,t,n){var a=n(991);e.exports=function(e,t){return!(null==e||!e.length)&&a(e,t,0)>-1}},function(e,t,n){var a=n(992),i=n(993),r=n(994);e.exports=function(e,t,n){return t==t?r(e,t,n):a(e,i,n)}},function(e,t){e.exports=function(e,t,n,a){for(var i=e.length,r=n+(a?1:-1);a?r--:++r<i;)if(t(e[r],r,e))return r;return-1}},function(e,t){e.exports=function(e){return e!=e}},function(e,t){e.exports=function(e,t,n){for(var a=n-1,i=e.length;++a<i;)if(e[a]===t)return a;return-1}},function(e,t,n){var a=n(441),i=n(442),r=Math.min;e.exports=function(e,t){for(var n=e.length,o=r(t.length,n),s=a(e);o--;){var l=t[o];e[o]=i(l,n)?s[l]:void 0}return e}},function(e,t,n){var a=n(616),i=n(341),r=n(342);e.exports=function(e,t,n,o){var s=1&t,l=i(e);return function t(){for(var i=-1,c=arguments.length,u=-1,d=o.length,p=Array(d+c),m=this&&this!==r&&this instanceof t?l:e;++u<d;)p[u]=o[u];for(;c--;)p[u++]=arguments[++i];return a(m,s?n:this,p)}}},function(e,t,n){var a=n(618),i=n(619),r=n(443),o="__lodash_placeholder__",s=128,l=Math.min;e.exports=function(e,t){var n=e[1],c=t[1],u=n|c,d=u<131,p=c==s&&8==n||c==s&&256==n&&e[7].length<=t[8]||384==c&&t[7].length<=t[8]&&8==n;if(!d&&!p)return e;1&c&&(e[2]=t[2],u|=1&n?0:4);var m=t[3];if(m){var f=e[3];e[3]=f?a(f,m,t[4]):m,e[4]=f?r(e[3],o):t[4]}return(m=t[5])&&(f=e[5],e[5]=f?i(f,m,t[6]):m,e[6]=f?r(e[5],o):t[6]),(m=t[7])&&(e[7]=m),c&s&&(e[8]=null==e[8]?t[8]:l(e[8],t[8])),null==e[9]&&(e[9]=t[9]),e[0]=t[0],e[1]=u,e}},function(e,t,n){e.exports=n(33)(3642)},function(e,t,n){var a=n(628);e.exports=function(e){return a(e,4)}},function(e,t,n){var a=n(435),i=8;function r(e,t,n){var o=a(e,i,void 0,void 0,void 0,void 0,void 0,t=n?void 0:t);return o.placeholder=r.placeholder,o}r.placeholder={},e.exports=r},function(e,t,n){var a=n(1002),i=n(440),r=n(1003);e.exports=function(e){if(!i(e))return!1;var t=a(e);return"[object Error]"==t||"[object DOMException]"==t||"string"==typeof e.message&&"string"==typeof e.name&&!r(e)}},function(e,t,n){e.exports=n(33)(355)},function(e,t,n){e.exports=n(33)(3667)},function(e,t,n){var a=n(715),i=n(440);e.exports=function(e){return i(e)&&"[object WeakMap]"==a(e)}},function(e,t,n){var a=n(628),i=n(904);e.exports=function(e){return i("function"==typeof e?e:a(e,1))}},function(e,t,n){var a=n(1007),i=n(1009),r=n(632);e.exports=function(e){var t=i(e);return 1==t.length&&t[0][2]?r(t[0][0],t[0][1]):function(n){return n===e||a(n,e,t)}}},function(e,t,n){var a=n(1008),i=n(630);e.exports=function(e,t,n,r){var o=n.length,s=o,l=!r;if(null==e)return!s;for(e=Object(e);o--;){var c=n[o];if(l&&c[2]?c[1]!==e[c[0]]:!(c[0]in e))return!1}for(;++o<s;){var u=(c=n[o])[0],d=e[u],p=c[1];if(l&&c[2]){if(void 0===d&&!(u in e))return!1}else{var m=new a;if(r)var f=r(d,p,u,e,t,m);if(!(void 0===f?i(p,d,3,r,m):f))return!1}}return!0}},function(e,t,n){e.exports=n(33)(1599)},function(e,t,n){var a=n(631),i=n(905);e.exports=function(e){for(var t=i(e),n=t.length;n--;){var r=t[n],o=e[r];t[n]=[r,o,a(o)]}return t}},function(e,t,n){var a=n(630),i=n(1011),r=n(1012),o=n(634),s=n(631),l=n(632),c=n(288);e.exports=function(e,t){return o(e)&&s(t)?l(c(e),t):function(n){var o=i(n,e);return void 0===o&&o===t?r(n,e):a(t,o,3)}}},function(e,t,n){e.exports=n(33)(1936)},function(e,t,n){var a=n(1013),i=n(1014);e.exports=function(e,t){return null!=e&&i(e,t,a)}},function(e,t){e.exports=function(e,t){return null!=e&&t in Object(e)}},function(e,t,n){var a=n(633),i=n(716),r=n(258),o=n(442),s=n(1015),l=n(288);e.exports=function(e,t,n){for(var c=-1,u=(t=a(t,e)).length,d=!1;++c<u;){var p=l(t[c]);if(!(d=null!=e&&n(e,p)))break;e=e[p]}return d||++c!=u?d:!!(u=null==e?0:e.length)&&s(u)&&o(p,u)&&(r(e)||i(e))}},function(e,t,n){e.exports=n(33)(1611)},function(e,t,n){var a=n(1017),i=n(1018),r=n(634),o=n(288);e.exports=function(e){return r(e)?a(o(e)):i(e)}},function(e,t){e.exports=function(e){return function(t){return null==t?void 0:t[e]}}},function(e,t,n){var a=n(1019);e.exports=function(e){return function(t){return a(t,e)}}},function(e,t,n){e.exports=n(33)(1652)},function(e,t,n){var a=n(435),i=n(1021)((function(e,t){return a(e,256,void 0,void 0,void 0,t)}));e.exports=i},function(e,t,n){e.exports=n(33)(3668)},function(e,t,n){var a=n(1023),i=n(441),r=n(258),o=n(1024),s=n(1025),l=n(288),c=n(1026);e.exports=function(e){return r(e)?a(e,l):o(e)?[e]:i(s(c(e)))}},function(e,t,n){e.exports=n(33)(1653)},function(e,t,n){e.exports=n(33)(820)},function(e,t,n){e.exports=n(33)(3636)},function(e,t,n){e.exports=n(33)(3638)},function(e,t,n){e.exports=n(1028)},function(e,t,n){var a=n(635);e.exports=function(e,t,n){return null==e?e:a(e,t,n)}},function(e,t,n){e.exports=n(33)(1655)},function(e,t,n){var a=n(549)("setWith",n(1031));a.placeholder=n(550),e.exports=a},function(e,t,n){e.exports=n(1032)},function(e,t,n){var a=n(635);e.exports=function(e,t,n,i){return i="function"==typeof i?i:void 0,null==e?e:a(e,t,n,i)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(104),i=n.n(a),r=n(40),o=n(2),s=n.n(o),l=n(41);const c=n.n(l)()(r.EuiEmptyPrompt).withConfig({displayName:"EmptyPrompt",componentId:"sc-tln1ed-0"})(["align-self:center;max-width:60em;"]);c.displayName="EmptyPrompt";const u=s.a.memo((({actions:e,message:t,title:n,...a})=>{const l=Object.keys(e),u=Object(o.useMemo)((()=>Object.values(e).filter((e=>e.label&&e.url)).map((({icon:e,label:t,target:n,url:a,descriptionTitle:i,description:o,onClick:c,fill:u=!0},d)=>null!=i||null!=o?s.a.createElement(r.EuiFlexItem,{grow:!1,style:{maxWidth:283},key:`empty-page-${l[d]}-action`},s.a.createElement(r.EuiCard,{title:null!=i&&i,description:null!=o&&o,footer:s.a.createElement(r.EuiButton,{href:a,onClick:c,iconType:e,target:n,fill:u,"data-test-subj":`empty-page-${l[d]}-action`},t)})):s.a.createElement(r.EuiFlexItem,{grow:!1,style:{maxWidth:283},key:`empty-page-${l[d]}-action`},s.a.createElement(r.EuiButton,{href:a,onClick:c,iconType:e,target:n,"data-test-subj":`empty-page-${l[d]}-action`},t))))),[e,l]);return s.a.createElement(c,i()({iconType:"logoSecurity",title:s.a.createElement(r.EuiText,null,s.a.createElement("h2",null,n)),body:t&&s.a.createElement("p",null,t),actions:s.a.createElement(r.EuiFlexGroup,{justifyContent:"center"},u)},a))}));u.displayName="EmptyPageComponent";const d=s.a.memo(u);d.displayName="EmptyPage"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(537),r=n(105);const o=Object(i.getSelectedDataviewSelector)(),s=e=>{const t=Object(r.a)((t=>o(t,e)));return Object(a.useCallback)((e=>{const n=null==t?void 0:t.fields;return n&&n[e]}),[null==t?void 0:t.fields])}},,,function(e,t){e.exports="data:image/svg+xml;base64,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"},function(e,t,n){"use strict";var a=n(796),i=n(2);function r(e,t,n){return e[t]?e[t][0]?e[t][0][n]:e[t][n]:"contentBoxSize"===t?e.contentRect["inlineSize"===n?"width":"height"]:void 0}e.exports=function(e){void 0===e&&(e={});var t=e.onResize,n=i.useRef(void 0);n.current=t;var o=e.round||Math.round,s=i.useRef(),l=i.useState({width:void 0,height:void 0}),c=l[0],u=l[1],d=i.useRef(!1);i.useEffect((function(){return d.current=!1,function(){d.current=!0}}),[]);var p=i.useRef({width:void 0,height:void 0}),m=function(e,t){var n=i.useRef(null),a=i.useRef(null);a.current=t;var r=i.useRef(null);i.useEffect((function(){o()}));var o=i.useCallback((function(){var t=r.current,i=a.current,o=t||(i?i instanceof Element?i:i.current:null);n.current&&n.current.element===o&&n.current.subscriber===e||(n.current&&n.current.cleanup&&n.current.cleanup(),n.current={element:o,subscriber:e,cleanup:o?e(o):void 0})}),[e]);return i.useEffect((function(){return function(){n.current&&n.current.cleanup&&(n.current.cleanup(),n.current=null)}}),[]),i.useCallback((function(e){r.current=e,o()}),[o])}(i.useCallback((function(t){return s.current&&s.current.box===e.box&&s.current.round===o||(s.current={box:e.box,round:o,instance:new a.ResizeObserver((function(t){var a=t[0],i="border-box"===e.box?"borderBoxSize":"device-pixel-content-box"===e.box?"devicePixelContentBoxSize":"contentBoxSize",s=r(a,i,"inlineSize"),l=r(a,i,"blockSize"),c=s?o(s):void 0,m=l?o(l):void 0;if(p.current.width!==c||p.current.height!==m){var f={width:c,height:m};p.current.width=c,p.current.height=m,n.current?n.current(f):d.current||u(f)}}))}),s.current.instance.observe(t,{box:e.box}),function(){s.current&&s.current.instance.unobserve(t)}}),[e.box,o]),e.ref);return i.useMemo((function(){return{ref:m,width:c.width,height:c.height}}),[m,c.width,c.height])}},,function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"f",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"c",(function(){return c}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.riskScore.technicalPreviewLabel",{defaultMessage:"Technical Preview"}),r=a.i18n.translate("xpack.securitySolution.riskScore.hostsDashboardWarningPanelTitle",{defaultMessage:"No host risk score data available to display"}),o=a.i18n.translate("xpack.securitySolution.riskScore.usersDashboardWarningPanelTitle",{defaultMessage:"No user risk score data available to display"}),s=a.i18n.translate("xpack.securitySolution.riskScore.hostsDashboardWarningPanelBody",{defaultMessage:"We haven’t found any host risk score data. Check if you have any global filters in the global KQL search bar. If you have just enabled the host risk module, the risk engine might need an hour to generate host risk score data and display in this panel."}),l=a.i18n.translate("xpack.securitySolution.riskScore.usersDashboardWarningPanelBody",{defaultMessage:"We haven’t found any user risk score data. Check if you have any global filters in the global KQL search bar. If you have just enabled the user risk module, the risk engine might need an hour to generate user risk score data and display in this panel."}),c=a.i18n.translate("xpack.securitySolution.riskScore.usersDashboardRestartTooltip",{defaultMessage:"The risk score calculation might take a while to run. However, by pressing restart, you can force it to run immediately."})},,function(e,t,n){"use strict";n.d(t,"a",(function(){return L}));var a=n(40),i=n(2),r=n.n(i),o=n(129),s=n(41),l=n.n(s),c=n(103),u=n(13),d=n(119),p=n(134),m=n(17),f=n(4),g=n(176),b=n(1066),y=n(1043),h=n(951),v=n(122),E=n(161),x=n(273),j=n(923),O=n(116),S=n(110),k=n(102),w=n(105),I=n(1047),T=n(501),C=n(832),M=n(135),A=n(328),_=n(312);const{updateIsLoading:F,updateTotalCount:D}=d.h,N=e=>!!e[o.b],P=l()(a.EuiFlexGroup).withConfig({displayName:"FullWidthFlexGroupTable",componentId:"sc-ikpuyo-0"})(["overflow:hidden;margin:0;display:",";"],(({$visible:e})=>e?"flex":"none")),R=l.a.div.withConfig({displayName:"EuiDataGridContainer",componentId:"sc-ikpuyo-1"})(["ul.euiPagination__list{li.euiPagination__item:last-child{",";}}div .euiDataGridRowCell__contentByHeight{height:auto;align-self:center;}div .euiDataGridRowCell--lastColumn .euiDataGridRowCell__contentByHeight{flex-grow:0;width:100%;}div .siemEventsTable__trSupplement--summary{display:block;}width:100%;"],(({hideLastPage:e})=>e?"display:none":"")),L=({configId:e,flyoutSize:t,inputFilters:n,tableId:a=d.e.alertsOnAlertsPage,sourcererScope:o=S.SourcererScopeName.detections,isLoading:s,onRuleChange:l})=>{const{triggersActionsUi:L,uiSettings:q}=Object(k.j)().services,{from:B,to:z,setQuery:$}=Object(p.a)(),V=Object(i.useRef)(null),U=Object(c.useDispatch)(),[G]=Object(i.useState)({timelineID:a,tabType:"query",enableHostDetailsFlyout:!0,enableIpDetailsFlyout:!0,onRuleChange:l}),{browserFields:H,indexPattern:W,runtimeMappings:Q}=Object(O.d)(o),Y=Object(m.b)(),K=Object(i.useMemo)((()=>v.d.globalFiltersQuerySelector()),[]),X=Object(i.useMemo)((()=>v.d.globalQuerySelector()),[]),J=Object(w.a)(X),Z=Object(w.a)(K),ee=Object(i.useMemo)((()=>d.j.getTableByIdSelector()),[]),te=Object(w.b)((e=>{var t;return(null!==(t=ee(e,a))&&void 0!==t?t:d.q).initialized})),ne=Object(i.useMemo)((()=>Object(T.a)(B,z)),[B,z]),ae=Object(i.useMemo)((()=>[...n,...null!=Z?Z:[],...null!=ne?ne:[]]),[n,Z,ne]),{dataTable:{graphEventId:ie,sessionViewConfig:re,viewMode:oe=b.a.viewMode,columns:se}=Object(_.f)(Y)}=Object(w.b)((e=>Object(C.a)(e,a))),le=Object(i.useMemo)((()=>null!=H&&null!=W?Object(E.d)({config:Object(u.getEsQueryConfig)(q),dataProviders:[],indexPattern:W,browserFields:H,filters:[...ae],kqlQuery:J,kqlMode:J.language}):null),[H,J,W,q,ae]);Object(x.a)({id:a,filterQuery:null==le?void 0:le.filterQuery,kqlError:null==le?void 0:le.kqlError,query:J,startDate:B,endDate:z});const ce=Object(i.useMemo)((()=>null!=le&&le.kqlError||null==le||!le.filterQuery?{bool:{}}:{bool:{filter:JSON.parse(null==le?void 0:le.filterQuery)}}),[null==le?void 0:le.filterQuery,null==le?void 0:le.kqlError]),ue=oe===f.Jc.eventRenderedView,de=Object(i.useMemo)((()=>({border:"none",fontSize:"s",header:"underline",stripes:ue})),[ue]),pe=Object(i.useMemo)((()=>{if(ue)return{defaultHeight:"auto"}}),[ue]),me=Object(i.useMemo)((()=>se.length?se:Object(I.b)(Y)),[se,Y]),fe=Object(i.useMemo)((()=>ue?{}:H),[ue,H]),ge=Object(i.useMemo)((()=>ue?A.a:me),[me,ue]),be=Object(i.useCallback)((({isLoading:e,totalCount:t,refresh:n})=>{U(F({id:a,isLoading:e})),U(D({id:a,totalCount:t})),V.current=n,$({id:a,loading:e,refetch:n,inspect:null})}),[U,a,V,$]),ye=Object(i.useMemo)((()=>({alertsTableConfigurationRegistry:L.alertsTableConfigurationRegistry,configurationId:e,id:`detection-engine-alert-table-${e}-${oe}`,flyoutSize:t,featureIds:["siem"],query:ce,showExpandToDetails:!1,gridStyle:de,shouldHighlightRow:N,rowHeightsOptions:pe,columns:ge,browserFields:fe,onUpdate:be,runtimeMappings:Q,toolbarVisibility:{showColumnSelector:!ue,showSortSelector:!ue}})),[L.alertsTableConfigurationRegistry,e,oe,t,ce,de,pe,ge,fe,be,Q,ue]);Object(i.useEffect)((()=>{te||U(d.h.initializeDataTableSettings({id:a,title:M.I,defaultColumns:ge.map((e=>({initialWidth:g.a,...e})))}))}),[U,a,ge,te]);const he=Object(i.useMemo)((()=>L.getAlertsStateTable(ye)),[ye,L]),{Navigation:ve}=Object(h.b)({scopeId:a}),{DetailsPanel:Ee,SessionView:xe}=Object(h.a)({entityType:"events",scopeId:a}),je=Object(i.useMemo)((()=>null!=ie&&ie.length>0||null!=re?r.a.createElement(y.a,{scopeId:a,SessionView:xe,Navigation:ve}):null),[ie,a,re,xe,ve]);return s?null:r.a.createElement("div",null,je,r.a.createElement(P,{$visible:!ie&&null==je,gutterSize:"none"},r.a.createElement(j.a.Provider,{value:G},r.a.createElement(R,{hideLastPage:!1},he))),Ee)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return C}));var a=n(2),i=n.n(a),r=n(40),o=n(48),s=n(103),l=n(41),c=n.n(l),u=n(119),d=n(115),p=n(105),m=n(114),f=n(178),g=n(529),b=n(182),y=n(924),h=n(498),v=n(111),E=n(133);const x="sessionViewFullScreen",j=Object(l.css)(["display:flex;flex-direction:column;flex:1;width:100%;"]),O=c.a.div.withConfig({displayName:"OverlayContainer",componentId:"sc-jhq5kd-0"})(["",""],j),S=Object(l.css)(["background-color:"," position:fixed;top:0;bottom:2em;left:0;right:0;z-index:",";"],(({theme:e})=>`${e.eui.euiColorEmptyShade};`),o.euiThemeVars.euiZLevel3),k=c.a.div.withConfig({displayName:"FullScreenOverlayContainer",componentId:"sc-jhq5kd-1"})(["",""],S),w=c()(y.a).withConfig({displayName:"StyledResolver",componentId:"sc-jhq5kd-2"})(["height:100%;"]),I=c()(r.EuiFlexItem).withConfig({displayName:"ScrollableFlexItem",componentId:"sc-jhq5kd-3"})([""," overflow:hidden;width:100%;&.","{","}"],(({theme:e})=>`background-color: ${e.eui.euiColorEmptyShade};`),x,(({theme:e})=>`padding: 0 ${e.eui.euiSizeM}`)),T=({SessionView:e,Navigation:t,scopeId:n})=>{const o=Object(s.useDispatch)(),{globalFullScreen:l}=Object(f.a)(),{timelineFullScreen:c}=Object(f.c)(),y=Object(a.useMemo)((()=>Object(d.isInTableScope)(n)?u.j.getTableByIdSelector():Object(d.isTimelineScope)(n)?v.b.getTimelineByIdSelector():void 0),[n]),T=Object(d.isInTableScope)(n)?u.q:E.b,{graphEventId:C,sessionViewConfig:M}=Object(p.a)((e=>{var t;return null!==(t=y&&y(e,n))&&void 0!==t?t:T})),A=Object(a.useMemo)((()=>Object(g.b)({globalFullScreen:l,isActiveTimelines:Object(d.isActiveTimeline)(n),timelineFullScreen:c})),[l,n,c]);Object(a.useEffect)((()=>()=>{const e=Object(d.getScopedActions)(n);e&&o(e.updateGraphEventId({id:n,graphEventId:""})),Object(d.isActiveTimeline)(n)?o(b.c.setFullScreen({id:m.a.timeline,fullScreen:!1})):o(b.c.setFullScreen({id:m.a.global,fullScreen:!1}))}),[o,n]);const{from:_,to:F,shouldUpdate:D,selectedPatterns:N}=Object(h.a)(Object(d.isActiveTimeline)(n)),P=Object(a.useMemo)((()=>({from:_,to:F})),[_,F]),R=Object(a.useRef)(null);Object(a.useLayoutEffect)((()=>{A&&R.current?R.current.setAttribute("style",S.join("")):R.current&&R.current.setAttribute("style",j.join(""))}),[A]);const L=Object(a.useMemo)((()=>void 0!==C?i.a.createElement(w,{databaseDocumentID:C,resolverComponentInstanceID:n,indices:N,shouldUpdate:D,filters:P}):i.a.createElement(r.EuiFlexGroup,{alignItems:"center",justifyContent:"center",style:{height:"100%"}},i.a.createElement(r.EuiLoadingSpinner,{size:"xl"}))),[C,n,N,D,P]);return Object(d.isActiveTimeline)(n)||null===M?A&&!Object(d.isActiveTimeline)(n)?i.a.createElement(k,{"data-test-subj":"overlayContainer"},i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},t)),i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),L):i.a.createElement(O,{"data-test-subj":"overlayContainer"},i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),i.a.createElement(r.EuiFlexGroup,{gutterSize:"none",justifyContent:"spaceBetween"},i.a.createElement(r.EuiFlexItem,{grow:!1},t)),i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),L):i.a.createElement(O,{"data-test-subj":"overlayContainer",ref:R},i.a.createElement(r.EuiFlexGroup,{alignItems:"flexStart",gutterSize:"none",direction:"column"},i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),i.a.createElement(r.EuiFlexItem,{grow:!1},t),i.a.createElement(r.EuiHorizontalRule,{margin:"none"}),i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(I,{grow:2,className:A?x:""},e)))},C=i.a.memo(T)},function(e,t,n){"use strict";n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f}));var a=n(2),i=n.n(a),r=n(42),o=n(40),s=n(1280),l=n.n(s),c=n(1283),u=n(41);const d=n.n(u).a.span.withConfig({displayName:"FlagWrapper",componentId:"sc-pwsog3-0"})(["position:relative;top:1px;"]),p=e=>e&&2===e.length?e.toUpperCase().replace(/./g,(e=>String.fromCharCode(55356,56741+e.charCodeAt(0)))):null,m=Object(a.memo)((({countryCode:e,displayCountryNameOnHover:t=!1})=>{Object(a.useEffect)((()=>{t&&Object(r.isEmpty)(l.a.getNames("en"))&&l.a.registerLocale(c)}),[]);const n=p(e);return null!==n?t?i.a.createElement(o.EuiToolTip,{position:"top",content:l.a.getName(e,"en")},i.a.createElement(d,{"data-test-subj":"country-flag"},n)):i.a.createElement(d,{"data-test-subj":"country-flag"},n):null}));m.displayName="CountryFlag";const f=Object(a.memo)((({countryCode:e,displayCountryNameOnHover:t=!1})=>{const[n,s]=Object(a.useState)(!1);Object(a.useEffect)((()=>{Object(r.isEmpty)(l.a.getNames("en"))&&l.a.registerLocale(c),s(!0)}),[]);const u=p(e);return null!==u&&n?t?i.a.createElement(o.EuiToolTip,{position:"top",content:l.a.getName(e,"en")},i.a.createElement(d,{"data-test-subj":"country-flag"},u)):i.a.createElement(i.a.Fragment,null,i.a.createElement(d,{"data-test-subj":"country-flag"},u),` ${l.a.getName(e,"en")}`):null}));f.displayName="CountryFlagAndName"},function(e,t,n){"use strict";n.d(t,"b",(function(){return P})),n.d(t,"a",(function(){return R}));var a=n(42),i=n(50),r=n.n(i),o=n(62),s=n.n(o),l=n(49),c=n(5),u=n(129),d=n(3),p=n(563),m=n(118),f=n(106),g=n(530),b=n(133),y=n(164),h=n(161),v=n(115),E=n(501),x=n(209),j=n(102),O=n(4),S=n(534),k=n(286);n(410);const w=({ecs:e})=>{if(Array.isArray(e)){const t=e.reduce(((e,t)=>{const n=t.timestamp?new Date(t.timestamp):new Date;return e.includes(n.valueOf())?e:[...e,n.valueOf()]}),[]);return{from:new Date(Math.min(...t)).toISOString(),to:new Date(Math.max(...t)).toISOString()}}const t=e,n=Object(v.getField)(t,u.A),a=r.a.duration(r()().diff(s.a.parse(null!=n?n[0]:"now-1d"))),i=Object(v.getField)(t,u.sb),o=Array.isArray(i)?i[0]:i,l=r()(null!=o?o:new Date).toISOString();return{to:l,from:r()(l).subtract(a).toISOString()}},I=e=>{const t=Object(v.getField)(e,u.O);return"threshold"===t||Array.isArray(t)&&t.length>0&&"threshold"===t[0]},T=e=>{const t=Object(v.getField)(e,u.O);return"new_terms"===t||Array.isArray(t)&&t.length>0&&"new_terms"===t[0]},C=e=>null!=Object(v.getField)(e,u.Y),M=(e,t,n="Alert Ids")=>1===t.length?[{meta:{alias:null,negate:!1,disabled:!1,type:"phrase",key:e,params:{query:t[0]}},query:{match_phrase:{_id:t[0]}},$state:{store:l.FilterStateStore.APP_STATE}}]:[{query:{bool:{filter:{ids:{values:t}}}},meta:{alias:n,negate:!1,disabled:!1,type:"phrases",key:e,value:t.join(),params:t},$state:{store:l.FilterStateStore.APP_STATE}}],A=(e,t)=>{const n=1===t.length;return[{and:[],id:`send-alert-to-timeline-action-default-draggable-event-details-value-formatted-field-value-${m.c.active}-alert-id-${t.join(",")}`,name:t.join(","),enabled:!0,excluded:!1,kqlQuery:"",queryMatch:{field:e,value:n?t[0]:t,operator:n?":":"includes"}}]},_=(e,t,n)=>({filters:"KqlFilter"===t?M("_id",e,n):[],dataProviders:"dataProvider"===t?A("_id",e):[]}),F=async(e,t,n,a,i)=>{try{var o,l,d,f,g,y,h,E,x,w,I,T,C,M,A,_,F,D,N,P,R,L;const c=await j.b.get().http.fetch(O.db,{method:"POST",body:JSON.stringify(Object(S.a)([e._id]))}),k=(null!==(o=null==c?void 0:c.hits.hits.reduce(((e,{_id:t,_index:n,_source:a={}})=>[...e,{...Object(S.b)(a),_id:t,_index:n,timestamp:a["@timestamp"]}]),[]))&&void 0!==o?o:[])[0],q=Object(v.getField)(k,u.G),B=Object(v.getField)(k,u.v),z=(null!==(l=null!==(d=q.filters)&&void 0!==d?d:null===(f=k.signal)||void 0===f||null===(g=f.rule)||void 0===g?void 0:g.filters)&&void 0!==l?l:[]).map((e=>null!=e.meta?e:{...e,meta:{}})),$=null!==(y=null!==(h=q.language)&&void 0!==h?h:null===(E=k.signal)||void 0===E||null===(x=E.rule)||void 0===x?void 0:x.language)&&void 0!==y?y:"kuery",V=null!==(w=null!==(I=q.query)&&void 0!==I?I:null===(T=k.signal)||void 0===T||null===(C=T.rule)||void 0===C?void 0:C.query)&&void 0!==w?w:"",U=null!==(M=null!==(A=Object(v.getField)(k,p.f))&&void 0!==A?A:null===(_=k.signal)||void 0===_||null===(F=_.rule)||void 0===F?void 0:F.index)&&void 0!==M?M:[],{thresholdFrom:G,thresholdTo:H,dataProviders:W}=(e=>(Array.isArray(e)?e:[e]).reduce(((e,t)=>{var n,a,i,o;const l=null!==(n=Object(v.getField)(t,`${u.G}.threshold`))&&void 0!==n?n:null===(a=t.signal)||void 0===a||null===(i=a.rule)||void 0===i?void 0:i.threshold,c=Object(v.getField)(t,p.h),d=Object(v.getField)(t,p.e),f=Array.isArray(d)?d[0]:d,g=r()(f),b=((e,t)=>{const n=Object(v.getField)(e,u.A),a=Array.isArray(n)?n[0]:n,i=s.a.parse(a),o=r()(),l=r.a.duration(o.diff(i));return t.clone().subtract(l)})(t,g),y=Array.isArray(l.field)?l.field:[l.field];return{thresholdFrom:null!==(o=c.from)&&void 0!==o?o:b.toISOString(),thresholdTo:g.toISOString(),dataProviders:[...e.dataProviders,...y.reduce(((e,t,n)=>{const a=c.terms.filter((e=>e.field===t))[0].value,i=Array.isArray(a)?a[0]:a;if(!i)return e;const r=t.replace(".","-"),o={id:`send-alert-to-timeline-action-default-draggable-event-details-value-formatted-field-value-${m.c.active}-${r}-${i}`,name:t,enabled:!0,excluded:!1,kqlQuery:"",queryMatch:{field:t,value:i,operator:":"}};return 0===n?[...e,{...o,and:[]}]:(e[0].and.push(o),e)}),[])]}}),{dataProviders:[],thresholdFrom:"",thresholdTo:""}))(k),Q=await i(e),Y=(null!==(D=a.filters)&&void 0!==D?D:z).concat(Q?[Q]:[]);return t({from:G,notes:null,timeline:{...b.b,columns:null!==(N=a.columns)&&void 0!==N?N:b.b.columns,description:`_id: ${k._id}`,filters:Y,dataProviders:null!==(P=a.dataProviders)&&void 0!==P?P:W,id:m.c.active,indexNames:U,dateRange:{start:G,end:H},eventType:"all",kqlQuery:{filterQuery:{kuery:{kind:$,expression:null!==(R=a.query)&&void 0!==R?R:V},serializedQuery:null!==(L=a.query)&&void 0!==L?L:V}}},to:H,ruleNote:n,ruleAuthor:B})}catch(n){const{toasts:a}=j.b.get().notifications;a.addError(n,{toastMessage:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createThresholdTimelineFailure",{defaultMessage:"Failed to create timeline for document _id: {id}",values:{id:e._id}}),title:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createThresholdTimelineFailureTitle",{defaultMessage:"Failed to create threshold alert timeline"})});const i=k.a.toISOString(),r=k.b.toISOString();return t({from:i,notes:null,timeline:{...b.b,id:m.c.active,indexNames:[],dateRange:{start:i,end:r},eventType:"all"},to:r})}},D=async(e,t,n,a,i)=>{try{var o,s,l,d,f,g,y,h,E,x,w,I,T,C,M,A,_,F,D,N,P,R;const c=await j.b.get().http.fetch(O.db,{method:"POST",body:JSON.stringify(Object(S.a)([e._id]))}),k=(null!==(o=null==c?void 0:c.hits.hits.reduce(((e,{_id:t,_index:n,_source:a={}})=>[...e,{...Object(S.b)(a),_id:t,_index:n,timestamp:a["@timestamp"]}]),[]))&&void 0!==o?o:[])[0],L=Object(v.getField)(k,u.G),q=(null!==(s=null!==(l=L.filters)&&void 0!==l?l:null===(d=k.signal)||void 0===d||null===(f=d.rule)||void 0===f?void 0:f.filters)&&void 0!==s?s:[]).map((e=>null!=e.meta?e:{...e,meta:{}})),B=null!==(g=null!==(y=L.language)&&void 0!==y?y:null===(h=k.signal)||void 0===h||null===(E=h.rule)||void 0===E?void 0:E.language)&&void 0!==g?g:"kuery",z=null!==(x=null!==(w=L.query)&&void 0!==w?w:null===(I=k.signal)||void 0===I||null===(T=I.rule)||void 0===T?void 0:T.query)&&void 0!==x?x:"",$=null!==(C=null!==(M=Object(v.getField)(k,p.f))&&void 0!==M?M:null===(A=k.signal)||void 0===A||null===(_=A.rule)||void 0===_?void 0:_.index)&&void 0!==C?C:[],{from:V,to:U,dataProviders:G}=(e=>{var t;const n=Array.isArray(e)?e[0]:e,a=Object(v.getField)(n,p.e),i=(null!==(t=Object(v.getField)(n,`${u.G}.new_terms_fields`))&&void 0!==t?t:[]).map(((e,t)=>{const a=e.replace(".","-"),i=Object(v.getField)(n,p.b)[t];return{id:`send-alert-to-timeline-action-default-draggable-event-details-value-formatted-field-value-${m.c.active}-${a}-${i}`,name:e,enabled:!0,excluded:!1,kqlQuery:"",queryMatch:{field:e,value:i,operator:":"},and:[]}})),o=i.length?[{...i[0],and:i.slice(1)}]:[];return{from:a,to:r()().toISOString(),dataProviders:o}})(k),H=await i(e),W=(null!==(F=a.filters)&&void 0!==F?F:q).concat(H?[H]:[]);return t({from:V,notes:null,timeline:{...b.b,columns:null!==(D=a.columns)&&void 0!==D?D:b.b.columns,description:`_id: ${k._id}`,filters:W,dataProviders:null!==(N=a.dataProviders)&&void 0!==N?N:G,id:m.c.active,indexNames:$,dateRange:{start:V,end:U},eventType:"all",kqlQuery:{filterQuery:{kuery:{kind:B,expression:null!==(P=a.query)&&void 0!==P?P:z},serializedQuery:null!==(R=a.query)&&void 0!==R?R:z}}},to:U,ruleNote:n})}catch(n){const{toasts:a}=j.b.get().notifications;a.addError(n,{toastMessage:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createNewTermsTimelineFailure",{defaultMessage:"Failed to create timeline for document _id: {id}",values:{id:e._id}}),title:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createNewTermsTimelineFailureTitle",{defaultMessage:"Failed to create new terms alert timeline"})});const i=k.a.toISOString(),r=k.b.toISOString();return t({from:i,notes:null,timeline:{...b.b,id:m.c.active,indexNames:[],dateRange:{start:i,end:r},eventType:"all"},to:r})}},N=async(e,t,n,a,i)=>{try{var r,o,s,l,d,f,g,y,h,E,x,w,I,T,C,M,A,_,F,D,N,P;const c=await j.b.get().http.fetch(O.db,{method:"POST",body:JSON.stringify(Object(S.a)([e._id]))}),k=(null!==(r=null==c?void 0:c.hits.hits.reduce(((e,{_id:t,_index:n,_source:a={}})=>[...e,{...Object(S.b)(a),_id:t,_index:n,timestamp:a["@timestamp"]}]),[]))&&void 0!==r?r:[])[0],R=Object(v.getField)(k,u.G),L=(null!==(o=null!==(s=R.filters)&&void 0!==s?s:null===(l=k.signal)||void 0===l||null===(d=l.rule)||void 0===d?void 0:d.filters)&&void 0!==o?o:[]).map((e=>null!=e.meta?e:{...e,meta:{}})),q=null!==(f=null!==(g=R.language)&&void 0!==g?g:null===(y=k.signal)||void 0===y||null===(h=y.rule)||void 0===h?void 0:h.language)&&void 0!==f?f:"kuery",B=null!==(E=null!==(x=R.query)&&void 0!==x?x:null===(w=k.signal)||void 0===w||null===(I=w.rule)||void 0===I?void 0:I.query)&&void 0!==E?E:"",z=null!==(T=null!==(C=Object(v.getField)(k,p.f))&&void 0!==C?C:null===(M=k.signal)||void 0===M||null===(A=M.rule)||void 0===A?void 0:A.index)&&void 0!==T?T:[],{from:$,to:V,dataProviders:U}=(e=>{const t=Array.isArray(e)?e[0]:e,n=Object(v.getField)(t,u.bb),a=Object(v.getField)(t,u.Z),i=Object(v.getField)(t,u.cb).map((e=>{const t=e.field.replace(".","-"),n=`send-alert-to-timeline-action-default-draggable-event-details-value-formatted-field-value-${m.c.active}-${t}-${e.value}`;return null==e.value?{id:n,name:t,enabled:!0,excluded:!0,kqlQuery:"",queryMatch:{field:e.field,value:"",operator:":*"}}:{id:n,name:t,enabled:!0,excluded:!1,kqlQuery:"",queryMatch:{field:e.field,value:e.value,operator:":"}}}));return{from:n,to:a,dataProviders:[{...i[0],and:i.slice(1)}]}})(k),G=await i(e),H=(null!==(_=a.filters)&&void 0!==_?_:L).concat(G?[G]:[]);return t({from:$,notes:null,timeline:{...b.b,columns:null!==(F=a.columns)&&void 0!==F?F:b.b.columns,description:`_id: ${k._id}`,filters:H,dataProviders:null!==(D=a.dataProviders)&&void 0!==D?D:U,id:m.c.active,indexNames:z,dateRange:{start:$,end:V},eventType:"all",kqlQuery:{filterQuery:{kuery:{kind:q,expression:null!==(N=a.query)&&void 0!==N?N:B},serializedQuery:null!==(P=a.query)&&void 0!==P?P:B}}},to:V,ruleNote:n})}catch(n){const{toasts:a}=j.b.get().notifications;a.addError(n,{toastMessage:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createSuppressedTimelineFailure",{defaultMessage:"Failed to create timeline for document _id: {id}",values:{id:e._id}}),title:c.i18n.translate("xpack.securitySolution.detectionEngine.alerts.createSuppressedTimelineFailureTitle",{defaultMessage:"Failed to create suppressed alert timeline"})});const i=k.a.toISOString(),r=k.b.toISOString();return t({from:i,notes:null,timeline:{...b.b,id:m.c.active,indexNames:[],dateRange:{start:i,end:r},eventType:"all"},to:r})}},P=(e,t,n="dataProvider",a)=>{const i=Array.isArray(t)?t.map((e=>e._id)):[],{to:r,from:o}=w({ecs:t}),{dataProviders:s,filters:l}=_(i,n,a||`${t.length} event IDs`);e({from:o,notes:null,timeline:{...b.b,dataProviders:s,id:m.c.active,indexNames:[],dateRange:{start:o,end:r},eventType:"all",filters:l,kqlQuery:{filterQuery:{kuery:{kind:"kuery",expression:""},serializedQuery:""}}},to:r})},R=async({createTimeline:e,ecsData:t,updateTimelineIsLoading:n,searchStrategyClient:i,getExceptionFilter:r})=>{const o=Array.isArray(t)?t[0]:t,s=Object(v.getField)(o,u.F),l=Object(v.getField)(o,u.v),c=Array.isArray(s)&&s.length>0?s[0]:"",j=Object(v.getField)(o,p.g),O=Object(a.isEmpty)(j)?"":Array.isArray(j)?j[0]:j,{to:S,from:k}=w({ecs:t});if(Object(a.isEmpty)(O)){if(I(o))return F(o,e,c,{},r);if(T(o))return D(o,e,c,{},r);if(C(o))return N(o,e,c,{},r);{let{dataProviders:n,filters:i}=_([o._id],"dataProvider");if((e=>{const t=Object(v.getField)(e,u.O),n=Object(v.getField)(e,p.a);return("eql"===t||Array.isArray(t)&&"eql"===t[0])&&(null==n?void 0:n.length)>0})(o)){const e=((e,t)=>{if(!Object(a.isEmpty)(e)&&Array.isArray(t)&&t.length>1)return{dataProviders:[],filters:M(p.a,t.reduce(((e,t)=>{const n=Object(v.getField)(t,p.a),a=Array.isArray(n)?n[0]:n;return e.includes(a)?e:[...e,a]}),[]))};if(!Array.isArray(t)||1===t.length){const e=Array.isArray(t)?t[0]:t,n=Object(v.getField)(e,p.a),a=Object(v.getFieldKey)(e,p.a),i=Array.isArray(n)?n[0]:n;return{dataProviders:[{and:[],id:`send-alert-to-timeline-action-default-draggable-event-details-value-formatted-field-value-${m.c.active}-alert-id-${i}`,name:e._id,enabled:!0,excluded:!1,kqlQuery:"",queryMatch:{field:a,value:i,operator:":"}}],filters:[]}}return{filters:[],dataProviders:[]}})([o._id],t);n=e.dataProviders,i=e.filters}return e({from:k,notes:null,timeline:{...b.b,dataProviders:n,id:m.c.active,indexNames:[],dateRange:{start:k,end:S},eventType:"all",filters:i,kqlQuery:{filterQuery:{kuery:{kind:"kuery",expression:""},serializedQuery:""}}},to:S,ruleNote:c,ruleAuthor:l})}}try{var A,P;n({id:m.c.active,isLoading:!0});const[t,s]=await Promise.all([Object(x.d)(O),Object(d.lastValueFrom)(i.search({defaultIndex:[],indexName:null!==(A=o._index)&&void 0!==A?A:"",eventId:o._id,factoryQueryType:g.c.details},{strategy:"timelineSearchStrategy"}))]),u=Object(a.getOr)({},"data.getOneTimeline",t),p=null!==(P=s.data)&&void 0!==P?P:[];if(!Object(a.isEmpty)(u)){var R,L,q,B,z,$,V;const t=Object(y.g)(u),{timeline:n,notes:a}=Object(y.c)(t,!0,null!==(R=t.timelineType)&&void 0!==R?R:f.l.default),i=Object(E.d)(null!==(L=null===(q=n.kqlQuery)||void 0===q||null===(B=q.filterQuery)||void 0===B||null===(z=B.kuery)||void 0===z?void 0:z.expression)&&void 0!==L?L:"",p,n.timelineType),s=Object(E.c)(null!==($=n.filters)&&void 0!==$?$:[],p),d=Object(E.b)(null!==(V=n.dataProviders)&&void 0!==V?V:[],p,n.timelineType);return I(o)?F(o,e,c,{filters:s,query:i,dataProviders:d,columns:n.columns},r):T(o)?D(o,e,c,{filters:s,query:i,dataProviders:d,columns:n.columns},r):C(o)?N(o,e,c,{filters:s,query:i,dataProviders:d,columns:n.columns},r):e({from:k,timeline:{...n,title:"",timelineType:f.l.default,templateTimelineId:null,status:f.k.draft,dataProviders:d,eventType:"all",filters:s,dateRange:{start:k,end:S},kqlQuery:{filterQuery:{kuery:{kind:null!==(U=null===(G=n.kqlQuery)||void 0===G||null===(H=G.filterQuery)||void 0===H||null===(W=H.kuery)||void 0===W?void 0:W.kind)&&void 0!==U?U:"kuery",expression:i},serializedQuery:Object(h.f)(i)}},noteIds:null!==(Q=null==a?void 0:a.map((e=>e.noteId)))&&void 0!==Q?Q:[],show:!0},to:S,ruleNote:c,ruleAuthor:l,notes:null!=a?a:null});var U,G,H,W,Q}}catch{return n({id:m.c.active,isLoading:!1}),e({from:k,notes:null,timeline:{...b.b,id:m.c.active,indexNames:[],dateRange:{start:k,end:S},eventType:"all"},to:S})}}},,function(e,t,n){"use strict";var a=n(328);n.d(t,"b",(function(){return a.b}));var i=n(734);n.d(t,"a",(function(){return i.a}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(119),i=n(2),r=n(103),o=n(105);const{updateShowBuildingBlockAlertsFilter:s,updateShowThreatIndicatorAlertsFilter:l}=a.h,c=e=>{const t=Object(r.useDispatch)(),n=Object(i.useMemo)((()=>a.j.getTableByIdSelector()),[]),{showOnlyThreatIndicatorAlerts:c,showBuildingBlockAlerts:u}=Object(o.b)((t=>{var i,r;return null!==(i=(null!==(r=n(t,e))&&void 0!==r?r:a.q).additionalFilters)&&void 0!==i?i:a.q.additionalFilters}));return{showBuildingBlockAlerts:u,setShowBuildingBlockAlerts:Object(i.useCallback)((n=>{t(s({id:e,showBuildingBlockAlerts:n}))}),[t,e]),showOnlyThreatIndicatorAlerts:c,setShowOnlyThreatIndicatorAlerts:Object(i.useCallback)((n=>{t(l({id:e,showOnlyThreatIndicatorAlerts:n}))}),[t,e])}}},function(e,t,n){"use strict";n.d(t,"d",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"b",(function(){return d})),n.d(t,"c",(function(){return p})),n.d(t,"a",(function(){return f})),n(197);var a=n(268),i=n(4),r=n(213),o=n(207),s=n(334);const l=[r.c.defineRule,r.c.aboutRule,r.c.scheduleRule,r.c.ruleActions],c={anomalyThreshold:50,index:[],indexPattern:{fields:[],title:""},machineLearningJobId:[],ruleType:"query",threatIndex:[],queryBar:{query:{query:"",language:"kuery"},filters:[],saved_id:null},threatQueryBar:{query:{query:i.U,language:"kuery"},filters:[],saved_id:null},requiredFields:[],relatedIntegrations:[],threatMapping:[],threshold:{field:[],value:"200",cardinality:{field:[],value:""}},timeline:{id:null,title:a.b},eqlOptions:{},dataSourceType:r.a.IndexPatterns,newTermsFields:[],historyWindowSize:"7d",shouldLoadQueryDynamically:!1,groupByFields:[],groupByRadioSelection:r.b.PerRuleExecution,groupByDuration:{value:5,unit:"m"},suppressionMissingFields:o.f},u={author:[],name:"",description:"",isAssociatedToEndpointList:!1,isBuildingBlock:!1,severity:{value:"low",mapping:Object(s.c)([]),isMappingChecked:!1},riskScore:{value:21,mapping:[],isMappingChecked:!1},investigationFields:[],references:[""],falsePositives:[""],license:"",ruleNameOverride:"",tags:[],timestampOverride:"",threat:[{framework:"MITRE ATT&CK",tactic:{id:"none",name:"none",reference:"none"},technique:[]}],note:"",threatIndicatorPath:void 0,timestampOverrideFallbackDisabled:void 0},d={interval:"5m",from:"1m"},p={interval:"1h",from:"5m"},m={...c.queryBar,query:{...c.queryBar.query,query:"*:*"}},f={forNormalRules:c.queryBar,forThreatMatchRules:m}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n(172),r=n(675),o=n(137),s=n(688),l=n(591),c=n(859);const u=`${o.Gb}.ndjson`;function d(){const e=Object(c.a)(),t=Object(l.a)();return Object(a.useCallback)((async n=>{try{Object(r.a)(n,u),e({actionType:i.b.export,summary:await Object(s.b)(n)})}catch(e){t({actionType:i.b.export,error:e})}}),[e,t])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return p}));var a=n(2),i=n.n(a),r=n(40),o=n(41),s=n.n(o),l=n(339);const c=s.a.h1.withConfig({displayName:"Header",componentId:"sc-1epdllw-0"})(["display:grid;grid-gap:12px;grid-template-columns:auto auto;align-items:center;justify-items:start;justify-content:start;"]);c.displayName="Header";const u=s.a.span.withConfig({displayName:"TitleWrapper",componentId:"sc-1epdllw-1"})(["min-width:0;max-width:100%;"]);u.displayName="TitleWrapper";const d=({title:e,badgeOptions:t})=>i.a.createElement(r.EuiTitle,{size:"l"},i.a.createElement(c,{"data-test-subj":"header-page-title"},i.a.createElement(u,null,i.a.createElement(l.b,{tooltipContent:e},e)),t&&i.a.createElement(i.a.Fragment,null,t.beta?i.a.createElement(r.EuiBetaBadge,{label:t.text,tooltipContent:t.tooltip,tooltipPosition:"bottom",size:t.size}):i.a.createElement(r.EuiBadge,{color:t.color||"hollow",title:""},t.text)))),p=i.a.memo(d)},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(204),r=n(474),o=n(957);const s=()=>{const{enableDatafeed:e,isLoading:t}=Object(o.a)(),{loading:n,jobs:s,refetch:l}=Object(r.a)(),[c,u]=Object(a.useState)(!1),d=Object(a.useCallback)((async a=>{if(n||t)return;if(!a||!a.length)return;u(!0);const r=s.filter((e=>a.includes(e.id)));await Promise.all(r.map((async t=>{var n;if(Object(i.c)(t.jobState,t.datafeedState))return!0;const a=null!==(n=t.latestTimestampMs)&&void 0!==n?n:0;await e(t,a)}))),l(),u(!1)}),[e,t,n,s,l]);return{loading:n,jobs:s,starting:c,startMlJobs:d}}},,,,,function(e,t,n){"use strict";n.d(t,"d",(function(){return U})),n.d(t,"a",(function(){return G})),n.d(t,"c",(function(){return H})),n.d(t,"b",(function(){return W}));var a=n(2),i=n.n(a),r=n(40),o=n(1419),s=n.n(o),l=n(48),c=n(5);const u=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.viewRuleDetailsText",{defaultMessage:"Show rule details"}),d=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.rulePreviewAboutSectionText",{defaultMessage:"About"}),p=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.rulePreviewDefinitionSectionText",{defaultMessage:"Definition"}),m=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.rulePreviewScheduleSectionText",{defaultMessage:"Schedule"}),f=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.rulePreviewActionsSectionText",{defaultMessage:"Actions"}),g=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.alertReasonTitle",{defaultMessage:"Alert reason"});var b=n(322);const y=(b.c,b.a,"securitySolutionDocumentDetailsFlyoutRulePreviewDefinitionSection"),h=(b.c,b.a,"securitySolutionDocumentDetailsFlyoutRulePreviewScheduleSection"),v=(b.c,b.a,"securitySolutionDocumentDetailsFlyoutRulePreviewActionsSection");b.c,b.a;var E=n(744),x=n(420),j=n(382);const O=s.a.div`
  overflow-x: auto;
  padding-block: ${l.euiThemeVars.euiSizeS};
`,S=s.a.div``,k=()=>{const{dataAsNestedObject:e,scopeId:t}=Object(E.b)(),n=Object(a.useMemo)((()=>null!=e?Object(x.a)({data:e,rowRenderers:j.b}):null),[e]),o=Object(a.useMemo)((()=>n&&e?n.renderRow({contextId:"event-details",data:e,isDraggable:!1,scopeId:t}):null),[n,e,t]);return e&&n?i.a.createElement(r.EuiPanel,{hasShadow:!1,"data-test-subj":"securitySolutionDocumentDetailsFlyoutAlertReasonPreviewBody"},i.a.createElement(r.EuiTitle,null,i.a.createElement("h6",null,g)),i.a.createElement(r.EuiSpacer,{size:"m"}),i.a.createElement(O,null,i.a.createElement(S,{className:"eui-displayInlineBlock"},o))):null};k.displayName="AlertReasonPreview";const w=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.rulePreviewPanel",{defaultMessage:"Rule preview"}),I=c.i18n.translate("xpack.securitySolution.flyout.documentDetails.alertReasonPreviewPanel",{defaultMessage:"Alert reason preview"});var T=n(102),C=n(741),M=n(282),A=n(334),_=n(862),F=n(954);const D=({rule:e,isSuppressed:t})=>i.a.createElement("div",{"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewTitle"},i.a.createElement(r.EuiTitle,null,i.a.createElement("h6",null,e.name)),t&&i.a.createElement(i.a.Fragment,null,i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiBadge,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewTitleSuppressed",title:""},_.a)),i.a.createElement(r.EuiSpacer,{size:"s"}),i.a.createElement(r.EuiFlexGroup,{gutterSize:"xs",direction:"column"},i.a.createElement(r.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewCreatedByText"},i.a.createElement(r.EuiText,{size:"xs"},i.a.createElement(F.a,{createdBy:null==e?void 0:e.created_by,createdAt:null==e?void 0:e.created_at}))),i.a.createElement(r.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewUpdatedByText"},i.a.createElement(r.EuiText,{size:"xs"},i.a.createElement(F.b,{updatedBy:null==e?void 0:e.updated_by,updatedAt:null==e?void 0:e.updated_at})))));D.displayName="RulePreviewTitle";var N=n(746),P=n(745),R=n(740),L=n(528);const q=Object(a.memo)((()=>{var e,t;const{ruleId:n,indexPattern:o}=Object(E.b)(),[s,l]=Object(a.useState)(null),{rule:c,loading:u,isExistingRule:g}=Object(M.a)(null!=n?n:""),{data:x}=Object(T.j)().services;Object(a.useEffect)((()=>{null!=c&&l(c)}),[c]);const{aboutRuleData:j,defineRuleData:O,scheduleRuleData:S,ruleActionsData:k}=null!=s?Object(A.g)({rule:s,detailsView:!0}):{aboutRuleData:null,defineRuleData:null,scheduleRuleData:null,ruleActionsData:null},[w,I]=Object(a.useState)();Object(a.useEffect)((()=>{(async()=>{if(null!=(null==O?void 0:O.dataViewId)&&""!==(null==O?void 0:O.dataViewId)){const e=await x.dataViews.get(null==O?void 0:O.dataViewId);I(e.title)}})()}),[x.dataViews,null==O?void 0:O.dataViewId]);const{isSavedQueryLoading:_,savedQueryBar:F}=Object(C.a)({savedQueryId:null==s?void 0:s.saved_id,ruleType:null==s?void 0:s.type}),q=Boolean(null==k||null===(e=k.actions)||void 0===e?void 0:e.length),B=Boolean(null==k||null===(t=k.responseActions)||void 0===t?void 0:t.length),z=null!=k&&(q||B);return s?i.a.createElement(r.EuiPanel,{hasShadow:!1,"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewBody",className:"eui-yScroll"},i.a.createElement(D,{rule:s,isSuppressed:!g}),i.a.createElement(r.EuiHorizontalRule,{margin:"s"}),i.a.createElement(b.b,{title:d,expanded:!0,"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewAboutSection"},i.a.createElement(r.EuiText,{size:"s"},s.description),i.a.createElement(r.EuiSpacer,{size:"s"}),j&&i.a.createElement(N.b,{addPadding:!1,descriptionColumns:"single",defaultValues:j,isInPanelView:!0})),i.a.createElement(r.EuiHorizontalRule,{margin:"l"}),O&&!_&&i.a.createElement(i.a.Fragment,null,i.a.createElement(b.b,{title:p,expanded:!1,"data-test-subj":y},i.a.createElement(P.c,{addPadding:!1,descriptionColumns:"single",defaultValues:{...O,dataViewTitle:w,queryBar:null!=F?F:O.queryBar},indexPattern:o,isInPanelView:!0})),i.a.createElement(r.EuiHorizontalRule,{margin:"l"})),S&&i.a.createElement(i.a.Fragment,null,i.a.createElement(b.b,{title:m,expanded:!1,"data-test-subj":h},i.a.createElement(R.b,{addPadding:!1,descriptionColumns:"single",defaultValues:S,isInPanelView:!0})),i.a.createElement(r.EuiHorizontalRule,{margin:"l"})),z&&i.a.createElement(b.b,{title:f,expanded:!1,"data-test-subj":v},i.a.createElement(L.b,{addPadding:!1,defaultValues:k}))):u?i.a.createElement(r.EuiLoadingSpinner,{size:"l","data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewLoadingSpinner"}):null}));q.displayName="RulePreview";var B=n(1263),z=n(188);const $=Object(a.memo)((()=>{const{scopeId:e,eventId:t,ruleId:n}=Object(E.b)();return n?i.a.createElement(r.EuiFlyoutFooter,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutRulePreviewFooter"},i.a.createElement(r.EuiFlexGroup,{justifyContent:"center"},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(B.a,{contextId:e,eventId:t,fieldName:z.n,fieldType:"string",isAggregatable:!1,isDraggable:!1,linkValue:n,value:u,openInNewTab:!0})))):null}));$.displayName="RulePreviewFooter";const V=[{id:"rule-preview",name:w,content:i.a.createElement(q,null),footer:i.a.createElement($,null)},{id:"alert-reason-preview",name:I,content:i.a.createElement(k,null)}],U="rule-preview",G="alert-reason-preview",H="document-details-preview",W=Object(a.memo)((({path:e})=>{const t=Object(a.useMemo)((()=>e?V.find((t=>t.id===e.tab)):null),[e]);return t?i.a.createElement(r.EuiFlexGroup,{justifyContent:"spaceBetween",direction:"column",gutterSize:"none",style:{height:"100%"}},i.a.createElement(r.EuiFlexItem,{style:{marginTop:"-15px"}},t.content),i.a.createElement(r.EuiFlexItem,{grow:!1},t.footer)):null}));W.displayName="PreviewPanel"},function(e,t,n){"use strict";n.d(t,"a",(function(){return ne}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(103),l=n(279),c=n(42),u=n(1101),d=n(534),p=n(105),m=n(708),f=n(1126),g=n(116),b=n(110),y=n(40),h=n(135);const v=o.a.createElement(o.a.Fragment,null,o.a.createElement("span",{className:"smallDot"},o.a.createElement(y.EuiIcon,{type:"dot",color:"#54b399"})),o.a.createElement("span",{className:"smallDot"},o.a.createElement(y.EuiIcon,{type:"dot",color:"#d6bf57"})),o.a.createElement("span",{className:"smallDot"},o.a.createElement(y.EuiIcon,{type:"dot",color:"#da8b45"})),o.a.createElement("span",null,o.a.createElement(y.EuiIcon,{type:"dot",color:"#e7664c"})),h.S),E=(e,t)=>{var n,a,i,r,s,l,c,u,d,p,m,f,g,b,E,x,j,O,S,k,w,I,T,C;const M=null!==(n=t.severitiesSubAggregation)&&void 0!==n&&n.buckets&&null!==(a=t.severitiesSubAggregation)&&void 0!==a&&null!==(i=a.buckets)&&void 0!==i&&i.length?(e=>{switch(e){case"low":return o.a.createElement(o.a.Fragment,null,o.a.createElement(y.EuiIcon,{type:"dot",color:"#54b399"}),h.Q);case"medium":return o.a.createElement(o.a.Fragment,null,o.a.createElement(y.EuiIcon,{type:"dot",color:"#d6bf57"}),h.R);case"high":return o.a.createElement(o.a.Fragment,null,o.a.createElement(y.EuiIcon,{type:"dot",color:"#da8b45"}),h.P);case"critical":return o.a.createElement(o.a.Fragment,null,o.a.createElement(y.EuiIcon,{type:"dot",color:"#e7664c"}),h.O)}return null})(null===(r=t.severitiesSubAggregation)||void 0===r?void 0:r.buckets[0].key.toString()):null,A=null!==(s=t.countSeveritySubAggregation)&&void 0!==s&&s.value&&(null===(l=t.countSeveritySubAggregation)||void 0===l?void 0:l.value)>1?v:M,_=A?[{title:h.N,renderer:A}]:[],F=[{title:h.K,badge:{value:t.doc_count,width:50,color:"#a83632"}}];switch(e){case"kibana.alert.rule.name":return[..._,{title:h.T,badge:{value:null!==(c=null===(u=t.usersCountAggregation)||void 0===u?void 0:u.value)&&void 0!==c?c:0}},{title:h.L,badge:{value:null!==(d=null===(p=t.hostsCountAggregation)||void 0===p?void 0:p.value)&&void 0!==d?d:0}},...F];case"host.name":return[..._,{title:h.T,badge:{value:null!==(m=null===(f=t.usersCountAggregation)||void 0===f?void 0:f.value)&&void 0!==m?m:0}},{title:h.M,badge:{value:null!==(g=null===(b=t.rulesCountAggregation)||void 0===b?void 0:b.value)&&void 0!==g?g:0}},...F];case"user.name":return[..._,{title:h.L,badge:{value:null!==(E=null===(x=t.hostsCountAggregation)||void 0===x?void 0:x.value)&&void 0!==E?E:0}},{title:h.M,badge:{value:null!==(j=null===(O=t.rulesCountAggregation)||void 0===O?void 0:O.value)&&void 0!==j?j:0}},...F];case"source.ip":return[..._,{title:h.L,badge:{value:null!==(S=null===(k=t.hostsCountAggregation)||void 0===k?void 0:k.value)&&void 0!==S?S:0}},{title:h.M,badge:{value:null!==(w=null===(I=t.rulesCountAggregation)||void 0===I?void 0:I.value)&&void 0!==w?w:0}},...F]}return[..._,{title:h.M,badge:{value:null!==(T=null===(C=t.rulesCountAggregation)||void 0===C?void 0:C.value)&&void 0!==T?T:0}},...F]};var x=n(48),j=n(517),O=n(728),S=n(137);const k=(e,t,n)=>{var a,i,r,s;switch(e){case"kibana.alert.rule.name":return Object(c.isArray)(t.key)?o.a.createElement(w,{ruleName:t.key[0],ruleDescription:null!==(a=Object(j.a)(null===(i=Object(j.a)(null===(r=t.description)||void 0===r?void 0:r.buckets))||void 0===i?void 0:i.key))&&void 0!==a?a:"",tags:null===(s=t.ruleTags)||void 0===s?void 0:s.buckets}):void 0;case"host.name":return o.a.createElement(I,{hostName:t.key,nullGroupMessage:n});case"user.name":return o.a.createElement(T,{userName:t.key,nullGroupMessage:n});case"source.ip":return o.a.createElement(C,{sourceIp:t.key,nullGroupMessage:n})}},w=o.a.memo((({ruleName:e,ruleDescription:t,tags:n})=>o.a.createElement("div",{style:{display:"table",tableLayout:"fixed",width:"100%"}},o.a.createElement(y.EuiFlexGroup,{"data-test-subj":"rule-name-group-renderer",gutterSize:"m",alignItems:"center"},o.a.createElement(y.EuiFlexItem,{grow:!1,style:{display:"contents"}},o.a.createElement(y.EuiTitle,{size:"xs"},o.a.createElement("h5",{className:"eui-textTruncate"},e.trim()))),n&&n.length>0?o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(O.a,{items:n.map((e=>e.key.toString())),popoverTitle:S.pb,popoverButtonTitle:n.length.toString(),popoverButtonIcon:"tag",dataTestPrefix:"tags",renderItem:(e,t)=>o.a.createElement(y.EuiBadge,{color:"hollow",key:`${e}-${t}`,"data-test-subj":"tag"},e)})):null),o.a.createElement(y.EuiText,{size:"s"},o.a.createElement("p",{className:"eui-textTruncate"},o.a.createElement(y.EuiTextColor,{color:"subdued"},t))))));w.displayName="RuleNameGroup";const I=o.a.memo((({hostName:e,nullGroupMessage:t})=>o.a.createElement(y.EuiFlexGroup,{"data-test-subj":"host-name-group-renderer",gutterSize:"s",alignItems:"center"},o.a.createElement(y.EuiFlexItem,{grow:!1,style:{backgroundColor:x.euiThemeVars.euiColorVis1_behindText,borderRadius:"50%"}},o.a.createElement(y.EuiIcon,{type:"database",size:"l",style:{padding:4}})),o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiTitle,{size:"xs"},o.a.createElement("h5",null,e))),t&&o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiIconTip,{content:t,position:"right"})))));I.displayName="HostNameGroupContent";const T=o.a.memo((({userName:e,nullGroupMessage:t})=>{var n;const a=null!==(n=Object(j.a)(e))&&void 0!==n?n:"-";return o.a.createElement(y.EuiFlexGroup,{"data-test-subj":"user-name-group-renderer",gutterSize:"s",alignItems:"center"},o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiAvatar,{name:a,color:x.euiThemeVars.euiColorVis0})),o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiTitle,{size:"xs"},o.a.createElement("h5",null,e))),t&&o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiIconTip,{content:t,position:"right"})))}));T.displayName="UserNameGroupContent";const C=o.a.memo((({sourceIp:e,nullGroupMessage:t})=>o.a.createElement(y.EuiFlexGroup,{"data-test-subj":"source-ip-group-renderer",gutterSize:"s",alignItems:"center"},o.a.createElement(y.EuiFlexItem,{grow:!1,style:{backgroundColor:x.euiThemeVars.euiColorVis3_behindText,borderRadius:"50%"}},o.a.createElement(y.EuiIcon,{style:{padding:4},type:"ip",size:"l"})),o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiTitle,{size:"xs"},o.a.createElement("h5",null,e))),t&&o.a.createElement(y.EuiFlexItem,{grow:!1},o.a.createElement(y.EuiIconTip,{content:t,position:"right"})))));C.displayName="SourceIpGroupContent";var M=n(58),A=n(122),_=n(159),F=n(108),D=n(719),N=n(410),P=n(344),R=n(19),L=n(142),q=n(18);const B=e=>{const t=[{unitsCount:{cardinality:{field:"kibana.alert.uuid"}}}];switch(e){case"kibana.alert.rule.name":t.push({description:{terms:{field:"kibana.alert.rule.description",size:1}}},{countSeveritySubAggregation:{cardinality:{field:"kibana.alert.severity"}}},{severitiesSubAggregation:{terms:{field:"kibana.alert.severity"}}},{usersCountAggregation:{cardinality:{field:"user.name"}}},{hostsCountAggregation:{cardinality:{field:"host.name"}}},{ruleTags:{terms:{field:"kibana.alert.rule.tags"}}});break;case"host.name":t.push({rulesCountAggregation:{cardinality:{field:"kibana.alert.rule.rule_id"}}},{countSeveritySubAggregation:{cardinality:{field:"kibana.alert.severity"}}},{severitiesSubAggregation:{terms:{field:"kibana.alert.severity"}}},{usersCountAggregation:{cardinality:{field:"user.name"}}});break;case"user.name":case"source.ip":t.push({rulesCountAggregation:{cardinality:{field:"kibana.alert.rule.rule_id"}}},{countSeveritySubAggregation:{cardinality:{field:"kibana.alert.severity"}}},{severitiesSubAggregation:{terms:{field:"kibana.alert.severity"}}},{hostsCountAggregation:{cardinality:{field:"host.name"}}});break;default:t.push({rulesCountAggregation:{cardinality:{field:"kibana.alert.rule.rule_id"}}})}return t};var z=n(102),$=n(47),V=n(49),U=n(51),G=n(161),H=n(149),W=n(134),Q=n(273),Y=n(391),K=n(501),X=n(233),J=n(232);const Z=({currentAlertStatusFilterValue:e,defaultFilters:t=[],from:n,getGrouping:a,globalFilters:i,globalQuery:s,groupingLevel:c,hasIndexMaintenance:u,hasIndexWrite:d,loading:m,onGroupClose:f,pageIndex:v,pageSize:E,parentGroupingFilter:x,renderChildComponent:j,runtimeMappings:O,selectedGroup:S,setPageIndex:k,setPageSize:w,signalIndexName:I,tableId:T,to:C})=>{const{services:{uiSettings:Z}}=Object(z.j)(),{browserFields:ee,indexPattern:te}=Object(g.d)(b.SourcererScopeName.detections),ne=Object(r.useCallback)((e=>null!=ee&&null!=te?Object(G.d)({config:Object(U.getEsQueryConfig)(Z),dataProviders:[],indexPattern:te,browserFields:ee,filters:[...null!=t?t:[],...i,...e,...x?JSON.parse(x):[],...Object(K.a)(n,C)],kqlQuery:s,kqlMode:s.language}):null),[ee,t,n,i,s,te,x,C,Z]),ae=Object(r.useMemo)((()=>{try{var e;return[Object(V.buildEsQuery)(void 0,null!=s?[s]:[],[...null!==(e=null==i?void 0:i.filter((e=>!1===e.meta.disabled)))&&void 0!==e?e:[],...null!=t?t:[],...x?JSON.parse(x):[]])]}catch(e){return[]}}),[t,i,s,x]),ie=Object(r.useMemo)((()=>`SuperUniqueValue-${Object($.v4)()}`),[]),re=Object(r.useMemo)((()=>(({additionalFilters:e,from:t,pageIndex:n,pageSize:a,runtimeMappings:i,selectedGroup:r,uniqueValue:o,to:s})=>Object(l.d)({additionalFilters:e,from:t,groupByField:r,statsAggregations:Object(l.e)([r])?[]:B(r),pageNumber:n*a,runtimeMappings:i,uniqueValue:o,size:a,sort:[{unitsCount:{order:"desc"}}],to:s}))({additionalFilters:ae,selectedGroup:S,uniqueValue:ie,from:n,runtimeMappings:O,to:C,pageSize:E,pageIndex:v})),[ae,n,v,E,O,S,C,ie]),oe=Object(r.useMemo)((()=>ne([])),[ne]);Object(Q.a)({id:T,filterQuery:null==oe?void 0:oe.filterQuery,kqlError:null==oe?void 0:oe.kqlError,query:s,startDate:n,endDate:C});const{data:se,loading:le,refetch:ce,request:ue,response:de,setQuery:pe}=Object(X.a)({query:re,indexName:I,queryName:J.a.ALERTS_GROUPING,skip:Object(l.e)([S])}),me=Object(r.useRef)(null),fe=Object(r.useMemo)((()=>Object(l.f)(null===me.current?S:me.current,ie,null==se?void 0:se.aggregations)),[null==se?void 0:se.aggregations,S,ie]);Object(r.useEffect)((()=>{var e,t,n,a,i;Object(l.e)([S])||(me.current=null!==(e=null==re||null===(t=re.runtime_mappings)||void 0===t||null===(n=t.groupByField)||void 0===n||null===(a=n.script)||void 0===a||null===(i=a.params)||void 0===i?void 0:i.selectedGroup)&&void 0!==e?e:"",pe(re))}),[re,S,pe]);const{deleteQuery:ge,setQuery:be}=Object(W.a)(),ye=Object(r.useMemo)((()=>`alerts-grouping-${Object($.v4)()}`),[]);Object(Y.a)({deleteQuery:ge,loading:le,refetch:ce,request:ue,response:de,setQuery:be,uniqueQueryId:ye});const he=Object(r.useMemo)((()=>o.a.createElement(H.b,{queryId:ye,inspectIndex:0,title:h.C})),[ye]),ve=(({currentStatus:e,showAlertStatusActions:t=!0})=>{const{addSuccess:n,addError:a,addWarning:i}=Object(F.a)(),{startTransaction:s}=Object(_.b)(),l=A.d.globalQuery(),c=Object(p.a)(l),u=Object(r.useCallback)((()=>{c.forEach((e=>e.refetch&&e.refetch()))}),[c]),{services:{telemetry:d}}=Object(M.useKibana)(),m=Object(r.useCallback)((e=>{d.reportAlertsGroupingTakeAction(e)}),[d]),f=Object(r.useCallback)(((e,t,n)=>{u()}),[u]),g=Object(r.useCallback)(((e,t)=>{u()}),[u]),b=Object(r.useCallback)(((e,t,a)=>{if(t>0)i({title:Object(R.f)(t),text:Object(R.g)(e,t)});else{let t;switch(a){case"closed":t=h.A(e);break;case"open":t=h.G(e);break;case"acknowledged":t=h.c(e)}n({title:t})}f&&f(e,t,a)}),[n,i,f]),v=Object(r.useCallback)(((e,t)=>{let n;switch(e){case"closed":n=h.z;break;case"open":n=h.F;break;case"acknowledged":n=h.b}a(t.message,{title:n}),g&&g(e,t)}),[a,g]),E=Object(r.useCallback)((async({groupNumber:e,query:t,status:n,tableId:a,selectedGroup:i})=>{s(t?{name:D.a.BULK_QUERY_STATUS_UPDATE}:{name:D.a.STATUS_UPDATE}),Object(q.h)(q.a.CLICK,q.e.groupedAlertsTakeAction({tableId:a,groupNumber:e,status:n})),m({tableId:a,groupNumber:e,status:n,groupByField:i});try{var r,o;const e=await Object(N.a)({status:n,query:t?JSON.parse(t):{}});b(null!==(r=e.updated)&&void 0!==r?r:0,null!==(o=e.version_conflicts)&&void 0!==o?o:0,n)}catch(e){v(n,e)}}),[s,m,b,v]);return Object(r.useMemo)((()=>({query:n,tableId:a,groupNumber:i,selectedGroup:r})=>{const s=[];if(t)if(e&&1===e.length){const t=e[0];t!==L.d&&s.push(o.a.createElement(y.EuiContextMenuItem,{key:"open","data-test-subj":"open-alert-status",onClick:()=>E({groupNumber:i,query:n,selectedGroup:r,status:L.d,tableId:a})},P.l)),t!==L.b&&s.push(o.a.createElement(y.EuiContextMenuItem,{key:"acknowledge","data-test-subj":"acknowledged-alert-status",onClick:()=>E({groupNumber:i,query:n,selectedGroup:r,status:L.b,tableId:a})},P.i)),t!==L.c&&s.push(o.a.createElement(y.EuiContextMenuItem,{key:"close","data-test-subj":"close-alert-status",onClick:()=>E({groupNumber:i,query:n,selectedGroup:r,status:L.c,tableId:a})},P.j))}else{const e={[L.d]:P.l,[L.b]:P.i,[L.c]:P.j};Object.keys(e).forEach((t=>s.push(o.a.createElement(y.EuiContextMenuItem,{key:t,"data-test-subj":`${t}-alert-status`,onClick:()=>E({groupNumber:i,query:n,selectedGroup:r,status:t,tableId:a})},e[t]))))}return s}),[e,E,t])})({currentStatus:e,showAlertStatusActions:d&&u}),Ee=Object(r.useCallback)(((e,n)=>{var a;return ve({groupNumber:n,query:null===(a=ne([...null!=t?t:[],...e]))||void 0===a?void 0:a.filterQuery,selectedGroup:S,tableId:T})}),[t,ne,S,T,ve]);return Object(r.useMemo)((()=>a({activePage:v,data:fe,groupingLevel:c,inspectButton:he,isLoading:m||le,itemsPerPage:E,onChangeGroupsItemsPerPage:e=>w(e),onChangeGroupsPage:e=>k(e),onGroupClose:f,renderChildComponent:j,selectedGroup:S,takeActionItems:Ee})),[fe,a,Ee,c,he,le,m,f,v,E,j,S,k,w])},ee=o.a.memo(Z),te=e=>{const t=Object(s.useDispatch)(),{indexPattern:n,selectedPatterns:a}=Object(g.d)(b.SourcererScopeName.detections),{services:{storage:y,telemetry:h}}=Object(z.j)(),{getStoragePageSize:v,setStoragePageSize:x}=((e,t)=>Object(r.useMemo)((()=>({getStoragePageSize:()=>e.get(`grouping-table-${t}`)||Array(3).fill(25),setStoragePageSize:n=>{e.set(`grouping-table-${t}`,n)}})),[e,t]))(y,e.tableId),{onGroupChange:j,onGroupToggle:O}=Object(r.useMemo)((()=>({onGroupChange:e=>{h.reportAlertsGroupingChanged(e)},onGroupToggle:e=>h.reportAlertsGroupingToggled({...e,tableId:e.groupingId})})),[h]),S=Object(r.useCallback)((n=>{t(Object(m.a)({tableId:e.tableId,options:n}))}),[t,e.tableId]),{getGrouping:w,selectedGroups:I,setSelectedGroups:T}=Object(l.g)({componentProps:{groupPanelRenderer:k,groupStatsRenderer:E,onGroupToggle:O,unit:f.a},defaultGroupingOptions:Object(d.c)(e.tableId),fields:n.fields,groupingId:e.tableId,maxGroupingLevels:3,onGroupChange:j,onOptionsChange:S,tracker:q.h}),C=Object(p.a)((t=>Object(u.a)()(t,e.tableId)));Object(r.useEffect)((()=>{Object(l.e)(I)&&t(Object(m.a)({activeGroups:I,tableId:e.tableId}))}),[t,e.tableId,I]),Object(r.useEffect)((()=>{null==C||Object(l.e)(C.activeGroups)||T(C.activeGroups)}),[C,T]);const[M,A]=Object(r.useState)(Array(3).fill(0)),[_,F]=Object(r.useState)(v),D=Object(r.useCallback)((()=>{A((e=>e.map((()=>0))))}),[]),N=Object(r.useCallback)(((e,t,n)=>{"index"===n&&A((n=>{const a=[...n];return a[t]=e,a})),"size"===n&&(F((n=>{const a=[...n];return a[t]=e,x(a),a})),A((e=>{const n=[...e];return n[t]=0,n})))}),[x]),P=Object(r.useRef)({defaultFilters:e.defaultFilters,globalFilters:e.globalFilters,globalQuery:e.globalQuery,selectedGroups:I});Object(r.useEffect)((()=>{const t={defaultFilters:e.defaultFilters,globalFilters:e.globalFilters,globalQuery:e.globalQuery,selectedGroups:I};Object(c.isEqual)(P.current,t)||(D(),P.current=t)}),[e.defaultFilters,e.globalFilters,e.globalQuery,D,I]);const R=Object(r.useCallback)(((t,n,a)=>{var r,s;let l;return l=t<I.length-1?e=>R(t+1,I[t+1],JSON.stringify([...e,...a?JSON.parse(a):[]])):t=>e.renderChildComponent([...t,...a?JSON.parse(a):[]]),o.a.createElement(ee,i()({},e,{getGrouping:w,groupingLevel:t,onGroupClose:()=>{return e=t,void A((t=>{const n=t.splice(e+1,t.length);return[...t,...n.map((()=>0))]}));var e},pageIndex:null!==(r=M[t])&&void 0!==r?r:0,pageSize:null!==(s=_[t])&&void 0!==s?s:25,parentGroupingFilter:a,renderChildComponent:l,selectedGroup:n,setPageIndex:e=>N(e,t,"index"),setPageSize:e=>N(e,t,"size")}))}),[w,M,_,e,I,N]);return Object(c.isEmpty)(a)?null:R(0,I[0])},ne=o.a.memo(te)},function(e,t,n){"use strict";n.d(t,"a",(function(){return h})),n.d(t,"b",(function(){return v}));var a=n(2),i=n.n(a),r=n(4),o=n(214),s=n(108),l=n(102),c=n(5);const u=c.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.readListsPrivileges.errorDescription",{defaultMessage:"Failed to retrieve lists privileges"}),d=c.i18n.translate("xpack.securitySolution.containers.detectionEngine.alerts.detectionEnginePrivileges.errorFetching",{defaultMessage:"Failed to retreive detection engine privileges"});var p=n(141),m=n(239);var f=n(8),g=n(17),b=n(700),y=n(1070);const h=Object(a.createContext)({listPrivileges:{loading:!1,error:void 0,result:void 0},detectionEnginePrivileges:{loading:!1,error:void 0,result:void 0},endpointPrivileges:{loading:!0,...Object(b.b)()},kibanaSecuritySolutionsPrivileges:{crud:!1,read:!1}}),v=({kibanaCapabilities:e,children:t})=>{const n=!0===e[r.tc].crud,c=!0===e[r.tc].show,[v,E]=Object(a.useState)({crud:n,read:c}),x=((e=!0)=>{const t=Object(l.i)(),{lists:n}=Object(l.j)().services,{start:i,...r}=Object(o.l)(),{addError:c}=Object(s.a)(),d=Object(a.useRef)(new AbortController);return Object(a.useEffect)((()=>{const{loading:a,result:o,error:s}=r;!e||!n||a||o||s||(d.current.abort(),d.current=new AbortController,i({http:t,signal:d.current.signal}))}),[t,n,i,r,e]),Object(a.useEffect)((()=>()=>{d.current.abort()}),[]),Object(a.useEffect)((()=>{const e=r.error;null!=e&&c(e,{title:u})}),[c,r.error]),{loading:r.loading,error:r.error,result:r.result}})(c),j=((e=!0)=>{const{start:t,...n}=Object(p.a)(Object(p.d)(m.i)),{addError:i}=Object(s.a)(),r=Object(a.useRef)(new AbortController);return Object(a.useEffect)((()=>{const{loading:a,result:i,error:o}=n;!e||a||i||o||(r.current.abort(),r.current=new AbortController,t({signal:r.current.signal}))}),[t,n,e]),Object(a.useEffect)((()=>()=>{r.current.abort()}),[]),Object(a.useEffect)((()=>{const e=n.error;null!=e&&i(e,{title:d})}),[i,n.error]),n})(c),O=(()=>{var e,t;const n=Object(p.b)(),i=Object(l.f)(),r=Object(l.j)().services.fleet,o=null===(e=Object(y.b)())||void 0===e?void 0:e.fleet,s=null!==(t=null==r?void 0:r.authz)&&void 0!==t?t:null==o?void 0:o.authz,c=Object(g.b)(),[u,d]=Object(a.useState)(!1),[m,h]=Object(a.useState)([]),v=Object(a.useMemo)((()=>{const e=!u||!i;return Object.freeze({loading:e,...e||!s||Object(f.isEmpty)(i)?Object(b.b)():Object(b.a)(c,s,m)})}),[u,i,s,c,m]);return Object(a.useEffect)((()=>{(async()=>{i&&n()&&(h(null==i?void 0:i.roles),d(!0))})()}),[n,i]),v})();return Object(a.useEffect)((()=>{E((e=>e.read!==c||e.crud!==n?{read:c,crud:n}:e))}),[n,c]),i.a.createElement(h.Provider,{value:{listPrivileges:x,detectionEnginePrivileges:j,endpointPrivileges:O,kibanaSecuritySolutionsPrivileges:v}},t)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return N}));var a=n(2),i=n.n(a),r=n(377),o=n(105),s=n(102),l=n(122),c=n(190),u=n(176),d=n(40),p=n(41),m=n.n(p),f=n(5);const g=f.i18n.translate("xpack.securitySolution.fieldBrowser.createFieldButton",{defaultMessage:"Create field"}),b=m()(d.EuiButton).withConfig({displayName:"StyledButton",componentId:"sc-1abg8tf-0"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeM)),y=f.i18n.translate("xpack.securitySolution.fieldBrowser.fieldName",{defaultMessage:"Name"}),h=f.i18n.translate("xpack.securitySolution.fieldBrowser.descriptionLabel",{defaultMessage:"Description"}),v=f.i18n.translate("xpack.securitySolution.fieldBrowser.categoryLabel",{defaultMessage:"Category"}),E=f.i18n.translate("xpack.securitySolution.fieldBrowser.runtimeLabel",{defaultMessage:"Runtime"}),x=f.i18n.translate("xpack.securitySolution.fieldBrowser.runtimeTitle",{defaultMessage:"Runtime Field"}),j=f.i18n.translate("xpack.securitySolution.fieldBrowser.actionsLabel",{defaultMessage:"Actions"}),O=f.i18n.translate("xpack.securitySolution.fieldBrowser.editButton",{defaultMessage:"Edit"}),S=f.i18n.translate("xpack.securitySolution.fieldBrowser.removeButton",{defaultMessage:"Remove"}),k=f.i18n.translate("xpack.securitySolution.fieldBrowser.editButtonDescription",{defaultMessage:"Edit runtime field"}),w=f.i18n.translate("xpack.securitySolution.fieldBrowser.removeButtonDescription",{defaultMessage:"Delete runtime field"});var I=n(217),T=n(117),C=n(339);const M=m()(d.EuiIcon).withConfig({displayName:"TypeIcon",componentId:"sc-1coc1q1-0"})(["margin:0 4px;position:relative;top:-1px;"]);M.displayName="TypeIcon";const A=m.a.span.withConfig({displayName:"Description",componentId:"sc-1coc1q1-1"})(["user-select:text;width:",";"],(({width:e})=>e));A.displayName="Description";const _=i.a.memo((({fieldId:e,highlight:t=""})=>i.a.createElement(d.EuiText,{size:"xs"},i.a.createElement(d.EuiHighlight,{"data-test-subj":`field-${e}-name`,search:t},e))));_.displayName="FieldName";var F=n(159),D=n(196);const N=({sourcererScope:e,editorActionsRef:t,removeColumn:n,upsertColumn:p})=>{const[m,N]=Object(a.useState)(null),{startTransaction:P}=Object(F.b)(),{indexFieldsSearch:R}=Object(r.b)(),{dataViewFieldEditor:L,data:{dataViews:q}}=Object(s.j)().services,B=Object(a.useMemo)((()=>l.e.scopeIdSelector()),[]),{missingPatterns:z,selectedDataViewId:$}=Object(o.a)((t=>B(t,e)));Object(a.useEffect)((()=>{null==$||z.length||(async e=>{const t=await q.get(e);N(t)})($)}),[$,z,q]);const V=Object(a.useCallback)((e=>{if(m&&$){const a=L.openEditor({ctx:{dataView:m},fieldName:e,onSave:async a=>{P({name:D.c.FIELD_SAVED}),await R({dataViewId:$,cleanCache:!0});for(const t of a)e&&e!==t.name&&n(e),p({columnHeaderType:c.a,id:t.name,initialWidth:u.a},0);t&&(t.current=null)}});t&&(t.current={closeEditor:()=>{t.current=null,a()}})}}),[m,$,L,t,R,n,p,P]),U=Object(a.useCallback)((e=>{m&&$&&L.openDeleteModal({ctx:{dataView:m},fieldName:e,onDelete:async()=>{P({name:D.c.FIELD_DELETED}),await R({dataViewId:$}),n(e)}})}),[m,$,L,R,n,P]),G=Object(a.useMemo)((()=>null==L?void 0:L.userPermissions.editIndexPattern()),[null==L?void 0:L.userPermissions]),H=(({isAllowed:e,loading:t,openFieldEditor:n})=>{const r=Object(a.useCallback)((({onHide:e})=>i.a.createElement(b,{iconType:t?"none":"plusInCircle","aria-label":g,"data-test-subj":"create-field",onClick:()=>{n(),e()},isLoading:t},g)),[t,n]);return e?r:void 0})({isAllowed:G&&!!$,loading:!m,openFieldEditor:V}),W=(({hasFieldEditPermission:e,openFieldEditor:t,openDeleteFieldModal:n})=>Object(a.useCallback)((({highlight:a,onHide:r})=>{const o=e?[{name:O,description:k,type:"icon",icon:"pencil",isPrimary:!0,onClick:({name:e})=>{t(e),r()},available:({isRuntime:e})=>e,"data-test-subj":"actionEditRuntimeField"},{name:S,description:w,type:"icon",icon:"trash",color:"danger",isPrimary:!0,onClick:({name:e})=>{n(e),r()},available:({isRuntime:e})=>e,"data-test-subj":"actionDeleteRuntimeField"}]:[];return[{field:"name",name:y,render:(e,{type:t})=>i.a.createElement(d.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiToolTip,{content:t},i.a.createElement(M,{"data-test-subj":`field-${e}-icon`,type:Object(I.d)(null!=t?t:null)}))),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(_,{fieldId:e,highlight:a}))),sortable:!0,width:"225px"},{field:"description",name:h,render:(e,{name:t})=>{return i.a.createElement(d.EuiToolTip,{content:e},i.a.createElement(i.a.Fragment,null,i.a.createElement(d.EuiScreenReaderOnly,{"data-test-subj":"descriptionForScreenReaderOnly"},i.a.createElement("p",null,(n=t,f.i18n.translate("xpack.securitySolution.fieldBrowser.descriptionForScreenReaderOnly",{values:{field:n},defaultMessage:"Description for field {field}:"})))),i.a.createElement(C.a,null,i.a.createElement(A,{width:o.length>0?"335px":"400px","data-test-subj":`field-${t}-description`},`${null!=e?e:Object(T.e)()}`))));var n},sortable:!0,width:o.length>0?"335px":"400px"},{field:"isRuntime",name:E,render:e=>e?i.a.createElement(d.EuiHealth,{color:"success",title:x}):null,sortable:!0,width:"80px"},{field:"category",name:v,render:(e,{name:t})=>i.a.createElement(d.EuiBadge,{"data-test-subj":`field-${t}-category`},e),sortable:!0,width:"115px"},...o.length>0?[{name:j,actions:o,width:"80px"}]:[]]}),[e,t,n]))({hasFieldEditPermission:G,openFieldEditor:V,openDeleteFieldModal:U});return Object(a.useMemo)((()=>({createFieldButton:H,getFieldTableColumns:W})),[H,W])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return x})),n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return O}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(1134),l=n(40),c=n(102);const u=({integration:e})=>{const t=Object(c.d)(),n=e.integrationTitle,a=`${t}/${e.targetUrl}`;return i.a.createElement(l.EuiLink,{href:a,target:"_blank","data-test-subj":"integrationLink"},n)},d=i.a.memo(u);d.displayName="IntegrationLink";var p=n(736);const m=o()(l.EuiBadge).withConfig({displayName:"PaddedBadge",componentId:"sc-63ceph-0"})(["margin-left:5px;"]),f=({integration:e})=>{const{installationStatus:t}=e;if(!t.isKnown)return null;const{isInstalled:n,isEnabled:a}=t,r=n?"success":"#E0E5EE",o=n?a?p.c:p.e:p.j,s=n?a?p.b:p.d:p.i;return i.a.createElement(l.EuiToolTip,{content:o},i.a.createElement(m,{color:r,"data-test-subj":"statusBadge"},s))},g=i.a.memo(f);g.displayName="IntegrationStatusBadge";const b=o.a.span.withConfig({displayName:"VersionWarningIconContainer",componentId:"sc-8orjjk-0"})(["margin-left:5px;"]),y=({integration:e})=>{const{installationStatus:t}=e;return t.isKnown&&t.isInstalled&&t.isVersionMismatch?i.a.createElement(b,null,i.a.createElement(l.EuiIconTip,{type:"warning",color:"warning",content:p.f(t.installedVersion,e.requiredVersion)})):null},h=i.a.memo(y);h.displayName="IntegrationVersionMismatchIcon";const v=o.a.div.withConfig({displayName:"Wrapper",componentId:"sc-hszsn0-0"})(["overflow:hidden;"]),E=({integration:e})=>i.a.createElement(v,null,i.a.createElement(d,{integration:e})," ",i.a.createElement(g,{integration:e}),i.a.createElement(h,{integration:e})),x=i.a.memo(E),j=({relatedIntegrations:e})=>{const{integrations:t}=Object(s.a)(e);return i.a.createElement(i.a.Fragment,null,t.map(((e,t)=>i.a.createElement(x,{key:`${e.packageName}-${t}`,integration:e}))))},O=(e,t)=>null==t||0===t.length?[]:[{title:e,description:i.a.createElement(j,{relatedIntegrations:t})}]},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(2),i=n.n(a),r=n(40),o=n(5),s=n(41),l=n.n(s),c=n(44),u=n(124);const d=o.i18n.translate("xpack.securitySolution.management.policiesSelector.globalEntries",{defaultMessage:"Global entries"}),p=o.i18n.translate("xpack.securitySolution.management.policiesSelector.unassignedEntries",{defaultMessage:"Unassigned entries"}),m=Object(a.memo)((({policies:e,onChangeSelection:t,defaultExcludedPolicies:n,defaultIncludedPolicies:o})=>{const{euiTheme:s}=Object(r.useEuiTheme)(),[l,m]=Object(a.useState)(!1),[g,b]=Object(a.useState)(""),[y,h]=Object(a.useState)([]),v=Object(u.a)("excludePoliciesInFilterEnabled");Object(a.useEffect)((()=>{const t=o?o.split(",").reduce(((e,t)=>({...e,[t]:!0})),{}):{},a=n?n.split(",").reduce(((e,t)=>({...e,[t]:!0})),{}):{},i=e=>t[e]?"on":a[e]?"off":void 0;h([...e.map((e=>({name:e.name,id:e.id,checked:i(e.id)}))),{name:d,id:"global",checked:i("global")},{name:p,id:"unassigned",checked:i("unassigned")}])}),[e]);const E=Object(a.useCallback)((()=>{m((e=>!e))}),[]),x=Object(a.useCallback)((()=>{m(!1)}),[]),j=Object(a.useCallback)((e=>{const t=e.target.value||"";b(t)}),[]),O=Object(a.useCallback)((e=>{if(!y[e])return;const n=[...y];switch(n[e].checked){case"on":n[e].checked=v?"off":void 0;break;case"off":n[e].checked=void 0;break;default:n[e].checked="on"}h(n),t(n)}),[y,t,v]),S=Object(a.useMemo)((()=>y.map(((e,t)=>e.name.toLowerCase().includes(g.toLowerCase())?i.a.createElement(r.EuiFilterSelectItem,{checked:e.checked,key:t,onClick:()=>O(t),"data-test-subj":`policiesSelector-popover-items-${e.id}`},e.name):null))),[y,g,O]),k=Object(a.useMemo)((()=>i.a.createElement(r.EuiFilterButton,{iconType:"arrowDown","data-test-subj":"policiesSelectorButton",onClick:E,isSelected:l,numFilters:y.length,hasActiveFilters:!!y.find((e=>"on"===e.checked)),numActiveFilters:y.filter((e=>"on"===e.checked)).length},i.a.createElement(r.EuiText,null,i.a.createElement(c.FormattedMessage,{id:"xpack.securitySolution.management.policiesSelector.label",defaultMessage:"Policies"})))),[l,y,E]);return i.a.createElement(r.EuiFlexGroup,{"data-test-subj":"policiesSelector",direction:"row",alignItems:"center",gutterSize:"l"},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFilterGroup,null,i.a.createElement(r.EuiPopover,{button:k,isOpen:l,closePopover:x,panelPaddingSize:"none"},i.a.createElement(r.EuiPopoverTitle,{paddingSize:"s"},i.a.createElement(r.EuiFieldSearch,{"data-test-subj":"policiesSelectorSearch",compressed:!0,onChange:j,value:g})),i.a.createElement(f,{"data-test-subj":"policiesSelector-popover",className:"eui-yScroll",$_css:30*s.base},S)))))}));m.displayName="PoliciesSelector";var f=l()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-gji8ln-0"})((e=>({maxHeight:e.$_css}))),g=n(126);const b=Object(a.memo)((({defaultValue:e="",onSearch:t,placeholder:n,hasPolicyFilter:s,policyList:l,defaultIncludedPolicies:c,hideRefreshButton:u=!1})=>{const{canCreateArtifactsByPolicy:d}=Object(g.a)().endpointPrivileges,[p,f]=Object(a.useState)(e),[b,y]=Object(a.useState)(c||""),h=Object(a.useCallback)((e=>{const n=e.filter((e=>"on"===e.checked)).map((e=>e.id)).join(",");y(n),t(p,n,!1)}),[t,p]),v=Object(a.useCallback)((e=>f(e.target.value)),[f]),E=Object(a.useCallback)((()=>t(p,b,!0)),[t,p,b]),x=Object(a.useCallback)((e=>{t(e,b,!1)}),[t,b]);return i.a.createElement(r.EuiFlexGroup,{"data-test-subj":"searchExceptions",direction:"row",alignItems:"center",gutterSize:"m"},i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiFieldSearch,{defaultValue:e,placeholder:n,onChange:v,onSearch:x,isClearable:!0,fullWidth:!0,"data-test-subj":"searchField"})),d&&s&&l?i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(m,{policies:l,defaultIncludedPolicies:c,onChangeSelection:h})):null,u?null:i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiButton,{iconType:"refresh",onClick:E,"data-test-subj":"searchButton"},o.i18n.translate("xpack.securitySolution.management.search.button",{defaultMessage:"Refresh"}))))}));b.displayName="SearchExceptions"},,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(119),i=n(190),r=n(176);const o=[{columnHeaderType:i.a,id:"@timestamp",initialWidth:r.b,esTypes:["date"],type:"date"},{columnHeaderType:i.a,id:"message"},{columnHeaderType:i.a,id:"host.name"},{columnHeaderType:i.a,id:"event.module"},{columnHeaderType:i.a,id:"agent.type"},{columnHeaderType:i.a,id:"event.dataset"},{columnHeaderType:i.a,id:"event.action"},{columnHeaderType:i.a,id:"user.name"},{columnHeaderType:i.a,id:"source.ip"},{columnHeaderType:i.a,id:"destination.ip"}],s={...a.q,columns:o}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n(172),r=n(265),o=n(46),s=n(4),l=n(143);const c=["POST",s.eb],u=e=>Object(o.useMutation)((e=>Object(l.b)(e)),{...e,mutationKey:c});var d=n(591),p=n(860);function m(){const{mutateAsync:e}=u(),t=Object(d.a)(),n=Object(p.a)(),o=Object(r.c)(),s=null==o?void 0:o.actions.setLoadingRules;return{bulkExport:Object(a.useCallback)((async a=>{try{var r;return null==s||s({ids:null!==(r=a.ids)&&void 0!==r?r:n(i.b.export),action:i.b.export}),await e(a)}catch(e){t({actionType:i.b.export,error:e})}finally{null==s||s({ids:[],action:null})}}),[n,s,e,t])}}},,function(e,t,n){"use strict";let a;n.d(t,"a",(function(){return a})),function(e){e.alert="alert",e.asset="asset",e.enrichment="enrichment",e.event="event",e.metric="metric",e.state="state",e.pipeline_error="pipeline_error",e.signal="signal"}(a||(a={}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(2);const i=n.n(a).a.createContext(void 0),r=()=>Object(a.useContext)(i)},,function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(42);const r=(e,t,n)=>{const a=n[e];return Array.isArray(a)?a.map((e=>Object(i.getOr)(null,t,e))).filter((e=>null!==e)):Object(i.getOr)(void 0,t,a)},o=e=>{const t=Object(a.useMemo)((()=>e),[e]),n=Object(a.useMemo)((()=>({})),[]),i=Object(a.useCallback)(((e,t)=>{n[e]=t}),[n]);return Object(a.useCallback)((e=>{let a;return a=Object.hasOwn(n,e)?n[e]:t?((e,t,n)=>{if(e&&t){if(Object.hasOwn(t,e))return t[e];{const a=(e=>{const t=(e=>{const t=RegExp("[.]","g"),n=[];let a=t.exec(e);for(;a;)n.push(a.index),a=t.exec(e);return n.reverse()})(e);return t.map((t=>[e.slice(0,t),e.slice(t+1)]))})(e);for(const[i,o]of a)if(Object.hasOwn(t,i)&&t[i]){const a=r(i,o,t);return n(e,a),a}}}})(e,t,i):void 0,Array.isArray(a)&&0===a.length?void 0:a}),[i,n,t])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(1163);Object.defineProperty(t,"createMemo",{enumerable:!0,get:function(){return a.default}});var i=n(1164);Object.defineProperty(t,"createReducerContext",{enumerable:!0,get:function(){return i.default}});var r=n(1165);Object.defineProperty(t,"createReducer",{enumerable:!0,get:function(){return r.default}});var o=n(1166);Object.defineProperty(t,"createStateContext",{enumerable:!0,get:function(){return o.default}});var s=n(544);Object.defineProperty(t,"useAsync",{enumerable:!0,get:function(){return s.default}});var l=n(545);Object.defineProperty(t,"useAsyncFn",{enumerable:!0,get:function(){return l.default}});var c=n(1167);Object.defineProperty(t,"useAsyncRetry",{enumerable:!0,get:function(){return c.default}});var u=n(1168);Object.defineProperty(t,"useAudio",{enumerable:!0,get:function(){return u.default}});var d=n(1170);Object.defineProperty(t,"useBattery",{enumerable:!0,get:function(){return d.default}});var p=n(1172);Object.defineProperty(t,"useBeforeUnload",{enumerable:!0,get:function(){return p.default}});var m=n(1173);Object.defineProperty(t,"useBoolean",{enumerable:!0,get:function(){return m.default}});var f=n(1174);Object.defineProperty(t,"useClickAway",{enumerable:!0,get:function(){return f.default}});var g=n(1175);Object.defineProperty(t,"useCookie",{enumerable:!0,get:function(){return g.default}});var b=n(1177);Object.defineProperty(t,"useCopyToClipboard",{enumerable:!0,get:function(){return b.default}});var y=n(780);Object.defineProperty(t,"useCounter",{enumerable:!0,get:function(){return y.default}});var h=n(1178);Object.defineProperty(t,"useCss",{enumerable:!0,get:function(){return h.default}});var v=n(556);Object.defineProperty(t,"useCustomCompareEffect",{enumerable:!0,get:function(){return v.default}});var E=n(1184);Object.defineProperty(t,"useDebounce",{enumerable:!0,get:function(){return E.default}});var x=n(1074);Object.defineProperty(t,"useDeepCompareEffect",{enumerable:!0,get:function(){return x.default}});var j=n(1185);Object.defineProperty(t,"useDefault",{enumerable:!0,get:function(){return j.default}});var O=n(1186);Object.defineProperty(t,"useDrop",{enumerable:!0,get:function(){return O.default}});var S=n(1187);Object.defineProperty(t,"useDropArea",{enumerable:!0,get:function(){return S.default}});var k=n(361);Object.defineProperty(t,"useEffectOnce",{enumerable:!0,get:function(){return k.default}});var w=n(1188);Object.defineProperty(t,"useEnsuredForwardedRef",{enumerable:!0,get:function(){return w.default}}),Object.defineProperty(t,"ensuredForwardRef",{enumerable:!0,get:function(){return w.ensuredForwardRef}});var I=n(447);Object.defineProperty(t,"useEvent",{enumerable:!0,get:function(){return I.default}});var T=n(1189);Object.defineProperty(t,"useError",{enumerable:!0,get:function(){return T.default}});var C=n(1190);Object.defineProperty(t,"useFavicon",{enumerable:!0,get:function(){return C.default}});var M=n(1191);Object.defineProperty(t,"useFullscreen",{enumerable:!0,get:function(){return M.default}});var A=n(1193);Object.defineProperty(t,"useGeolocation",{enumerable:!0,get:function(){return A.default}});var _=n(781);Object.defineProperty(t,"useGetSet",{enumerable:!0,get:function(){return _.default}});var F=n(1194);Object.defineProperty(t,"useGetSetState",{enumerable:!0,get:function(){return F.default}});var D=n(1195);Object.defineProperty(t,"useHarmonicIntervalFn",{enumerable:!0,get:function(){return D.default}});var N=n(1197);Object.defineProperty(t,"useHover",{enumerable:!0,get:function(){return N.default}});var P=n(782);Object.defineProperty(t,"useHoverDirty",{enumerable:!0,get:function(){return P.default}});var R=n(1198);Object.defineProperty(t,"useIdle",{enumerable:!0,get:function(){return R.default}});var L=n(1200);Object.defineProperty(t,"useIntersection",{enumerable:!0,get:function(){return L.default}});var q=n(1201);Object.defineProperty(t,"useInterval",{enumerable:!0,get:function(){return q.default}});var B=n(35);Object.defineProperty(t,"useIsomorphicLayoutEffect",{enumerable:!0,get:function(){return B.default}});var z=n(783);Object.defineProperty(t,"useKey",{enumerable:!0,get:function(){return z.default}});var $=n(1202);Object.defineProperty(t,"createBreakpoint",{enumerable:!0,get:function(){return $.default}});var V=n(784);Object.defineProperty(t,"useKeyPress",{enumerable:!0,get:function(){return V.default}});var U=n(1203);Object.defineProperty(t,"useKeyPressEvent",{enumerable:!0,get:function(){return U.default}});var G=n(785);Object.defineProperty(t,"useLatest",{enumerable:!0,get:function(){return G.default}});var H=n(786);Object.defineProperty(t,"useLifecycles",{enumerable:!0,get:function(){return H.default}});var W=n(787);Object.defineProperty(t,"useList",{enumerable:!0,get:function(){return W.default}});var Q=n(1204);Object.defineProperty(t,"useLocalStorage",{enumerable:!0,get:function(){return Q.default}});var Y=n(1205);Object.defineProperty(t,"useLocation",{enumerable:!0,get:function(){return Y.default}});var K=n(1206);Object.defineProperty(t,"useLockBodyScroll",{enumerable:!0,get:function(){return K.default}});var X=n(1207);Object.defineProperty(t,"useLogger",{enumerable:!0,get:function(){return X.default}});var J=n(1208);Object.defineProperty(t,"useLongPress",{enumerable:!0,get:function(){return J.default}});var Z=n(788);Object.defineProperty(t,"useMap",{enumerable:!0,get:function(){return Z.default}});var ee=n(1209);Object.defineProperty(t,"useMedia",{enumerable:!0,get:function(){return ee.default}});var te=n(1210);Object.defineProperty(t,"useMediaDevices",{enumerable:!0,get:function(){return te.default}});var ne=n(1211);Object.defineProperty(t,"useMediatedState",{enumerable:!0,get:function(){return ne.useMediatedState}});var ae=n(1212);Object.defineProperty(t,"useMethods",{enumerable:!0,get:function(){return ae.default}});var ie=n(1213);Object.defineProperty(t,"useMotion",{enumerable:!0,get:function(){return ie.default}});var re=n(789);Object.defineProperty(t,"useMount",{enumerable:!0,get:function(){return re.default}});var oe=n(267);Object.defineProperty(t,"useMountedState",{enumerable:!0,get:function(){return oe.default}});var se=n(790);Object.defineProperty(t,"useMouse",{enumerable:!0,get:function(){return se.default}});var le=n(1214);Object.defineProperty(t,"useMouseHovered",{enumerable:!0,get:function(){return le.default}});var ce=n(1215);Object.defineProperty(t,"useMouseWheel",{enumerable:!0,get:function(){return ce.default}});var ue=n(1216);Object.defineProperty(t,"useNetwork",{enumerable:!0,get:function(){return ue.default}});var de=n(1217);Object.defineProperty(t,"useNumber",{enumerable:!0,get:function(){return de.default}});var pe=n(10);Object.defineProperty(t,"useObservable",{enumerable:!0,get:function(){return pe.default}});var me=n(1218);Object.defineProperty(t,"useOrientation",{enumerable:!0,get:function(){return me.default}});var fe=n(1219);Object.defineProperty(t,"usePageLeave",{enumerable:!0,get:function(){return fe.default}});var ge=n(1220);Object.defineProperty(t,"usePermission",{enumerable:!0,get:function(){return ge.default}});var be=n(246);Object.defineProperty(t,"usePrevious",{enumerable:!0,get:function(){return be.default}});var ye=n(1221);Object.defineProperty(t,"usePreviousDistinct",{enumerable:!0,get:function(){return ye.default}});var he=n(1222);Object.defineProperty(t,"usePromise",{enumerable:!0,get:function(){return he.default}});var ve=n(1223);Object.defineProperty(t,"useQueue",{enumerable:!0,get:function(){return ve.default}});var Ee=n(791);Object.defineProperty(t,"useRaf",{enumerable:!0,get:function(){return Ee.default}});var xe=n(1224);Object.defineProperty(t,"useRafLoop",{enumerable:!0,get:function(){return xe.default}});var je=n(362);Object.defineProperty(t,"useRafState",{enumerable:!0,get:function(){return je.default}});var Oe=n(1225);Object.defineProperty(t,"useSearchParam",{enumerable:!0,get:function(){return Oe.default}});var Se=n(1226);Object.defineProperty(t,"useScratch",{enumerable:!0,get:function(){return Se.default}});var ke=n(1232);Object.defineProperty(t,"useScroll",{enumerable:!0,get:function(){return ke.default}});var we=n(1233);Object.defineProperty(t,"useScrolling",{enumerable:!0,get:function(){return we.default}});var Ie=n(1234);Object.defineProperty(t,"useSessionStorage",{enumerable:!0,get:function(){return Ie.default}});var Te=n(360);Object.defineProperty(t,"useSetState",{enumerable:!0,get:function(){return Te.default}});var Ce=n(1235);Object.defineProperty(t,"useShallowCompareEffect",{enumerable:!0,get:function(){return Ce.default}});var Me=n(1237);Object.defineProperty(t,"useSize",{enumerable:!0,get:function(){return Me.default}});var Ae=n(1238);Object.defineProperty(t,"useSlider",{enumerable:!0,get:function(){return Ae.default}});var _e=n(1239);Object.defineProperty(t,"useSpeech",{enumerable:!0,get:function(){return _e.default}});var Fe=n(1240);Object.defineProperty(t,"useStartTyping",{enumerable:!0,get:function(){return Fe.default}});var De=n(1241);Object.defineProperty(t,"useStateWithHistory",{enumerable:!0,get:function(){return De.useStateWithHistory}});var Ne=n(1242);Object.defineProperty(t,"useStateList",{enumerable:!0,get:function(){return Ne.default}});var Pe=n(1243);Object.defineProperty(t,"useThrottle",{enumerable:!0,get:function(){return Pe.default}});var Re=n(1244);Object.defineProperty(t,"useThrottleFn",{enumerable:!0,get:function(){return Re.default}});var Le=n(1245);Object.defineProperty(t,"useTimeout",{enumerable:!0,get:function(){return Le.default}});var qe=n(557);Object.defineProperty(t,"useTimeoutFn",{enumerable:!0,get:function(){return qe.default}});var Be=n(1246);Object.defineProperty(t,"useTitle",{enumerable:!0,get:function(){return Be.default}});var ze=n(779);Object.defineProperty(t,"useToggle",{enumerable:!0,get:function(){return ze.default}});var $e=n(1247);Object.defineProperty(t,"useTween",{enumerable:!0,get:function(){return $e.default}});var Ve=n(448);Object.defineProperty(t,"useUnmount",{enumerable:!0,get:function(){return Ve.default}});var Ue=n(1248);Object.defineProperty(t,"useUnmountPromise",{enumerable:!0,get:function(){return Ue.default}});var Ge=n(308);Object.defineProperty(t,"useUpdate",{enumerable:!0,get:function(){return Ge.default}});var He=n(359);Object.defineProperty(t,"useUpdateEffect",{enumerable:!0,get:function(){return He.default}});var We=n(1249);Object.defineProperty(t,"useUpsert",{enumerable:!0,get:function(){return We.default}});var Qe=n(1250);Object.defineProperty(t,"useVibrate",{enumerable:!0,get:function(){return Qe.default}});var Ye=n(1251);Object.defineProperty(t,"useVideo",{enumerable:!0,get:function(){return Ye.default}});var Ke=n(1252);Object.defineProperty(t,"useStateValidator",{enumerable:!0,get:function(){return Ke.default}});var Xe=n(1253);Object.defineProperty(t,"useScrollbarWidth",{enumerable:!0,get:function(){return Xe.useScrollbarWidth}});var Je=n(1255);Object.defineProperty(t,"useMultiStateValidator",{enumerable:!0,get:function(){return Je.useMultiStateValidator}});var Ze=n(1256);Object.defineProperty(t,"useWindowScroll",{enumerable:!0,get:function(){return Ze.default}});var et=n(1257);Object.defineProperty(t,"useWindowSize",{enumerable:!0,get:function(){return et.default}});var tt=n(1258);Object.defineProperty(t,"useMeasure",{enumerable:!0,get:function(){return tt.default}});var nt=n(1259);Object.defineProperty(t,"useRendersCount",{enumerable:!0,get:function(){return nt.useRendersCount}});var at=n(445);Object.defineProperty(t,"useFirstMountState",{enumerable:!0,get:function(){return at.useFirstMountState}});var it=n(1260);Object.defineProperty(t,"useSet",{enumerable:!0,get:function(){return it.default}});var rt=n(1261);Object.defineProperty(t,"createGlobalState",{enumerable:!0,get:function(){return rt.createGlobalState}});var ot=n(1262);Object.defineProperty(t,"useHash",{enumerable:!0,get:function(){return ot.useHash}})},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(146),r=a.__importDefault(n(556));t.default=function(e,t){r.default(e,t,i.isDeepEqual)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n(142),r=n(344),o=n(410),s=n(108),l=n(159),c=n(719);const u=({eventIds:e,currentStatus:t,query:n,setEventsLoading:u,showAlertStatusActions:d=!0,setEventsDeleted:p,onUpdateSuccess:m,onUpdateFailure:f,customBulkActions:g})=>{const{addSuccess:b,addError:y,addWarning:h}=Object(s.a)(),{startTransaction:v}=Object(l.b)(),E=Object(a.useCallback)(((e,t,n)=>{if(t>0)h({title:r.t(t),text:r.u(e,t)});else{let t;switch(n){case"closed":t=r.o(e);break;case"open":t=r.q(e);break;case"acknowledged":t=r.b(e)}b({title:t})}m&&m(e,t,n)}),[b,h,m]),x=Object(a.useCallback)(((e,t)=>{let n;switch(e){case"closed":n=r.n;break;case"open":n=r.p;break;case"acknowledged":n=r.a}y(t.message,{title:n}),f&&f(e,t)}),[y,f]),j=Object(a.useCallback)((async t=>{n?v({name:c.a.BULK_QUERY_STATUS_UPDATE}):e.length>1?v({name:c.a.BULK_STATUS_UPDATE}):v({name:c.a.STATUS_UPDATE});try{var a,i;u({eventIds:e,isLoading:!0});const s=await Object(o.a)({status:t,query:n&&JSON.parse(n),signalIds:e});if(p({eventIds:e,isDeleted:!0}),s.version_conflicts&&1===e.length)throw new Error(r.k);E(null!==(a=s.updated)&&void 0!==a?a:0,null!==(i=s.version_conflicts)&&void 0!==i?i:0,t)}catch(e){x(t,e)}finally{u({eventIds:e,isLoading:!1})}}),[u,e,n,p,E,x,v]);return Object(a.useMemo)((()=>{const a=[];d&&(t!==i.d&&a.push({key:"open","data-test-subj":"open-alert-status",onClick:()=>j(i.d),name:r.l}),t!==i.b&&a.push({key:"acknowledge","data-test-subj":"acknowledged-alert-status",onClick:()=>j(i.b),name:r.i}),t!==i.c&&a.push({key:"close","data-test-subj":"close-alert-status",onClick:()=>j(i.c),name:r.j}));const o=g?g.reduce(((t,a)=>{const i=!(!n||!a.disableOnQuery);return t.push({key:a.key,disabled:i,"data-test-subj":a["data-test-subj"],toolTipContent:i?a.disabledLabel:null,onClick:()=>a.onClick(e),name:a.label}),t}),[]):[];return[...a,...o]}),[t,g,e,j,n,d])}},function(e,t,n){"use strict";var a=n(295);n.d(t,"a",(function(){return a.a})),n.d(t,"b",(function(){return a.b}))},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(186),i=n(282);const r=({dataFormattedForFieldBrowser:e})=>{const t=Object(a.b)(e),{loading:n,error:r,rule:o}=Object(i.a)(t.ruleId);return{loading:n,error:r,basicAlertData:t,ruleNote:null==o?void 0:o.note}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(165),o=n(168),s=n(798);const l=({index:e=0,score:t})=>{const n=Object(s.a)(t.severity);return i.a.createElement(r.c,{mode:r.a.HOVER_DOWN,data:{value:t.entityValue,field:t.entityName},triggerId:r.d.DEFAULT,visibleCellActions:5},i.a.createElement(i.a.Fragment,null,0!==e&&i.a.createElement(i.a.Fragment,null,",",i.a.createElement(o.i,null)),n))};l.displayName="ScoreComponent";const c=i.a.memo(l);c.displayName="Score"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(40),o=n(77),s=n(102);const l=({score:e,startDate:t,endDate:n,linkName:a})=>{const{services:{ml:l,http:c}}=Object(s.j)(),u=Object(o.useMlHref)(l,c.basePath.get(),{page:"explorer",pageState:{jobIds:[e.jobId],timeRange:{from:new Date(t).toISOString(),to:new Date(n).toISOString(),mode:"absolute"},refreshInterval:{pause:!0,value:0,display:"Off"}}},[e.jobId]);return u?i.a.createElement(r.EuiLink,{href:u,target:"_blank","data-test-subj":`explorer-link-${e.jobId}`},a):null}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a}));const a=n(5).i18n.translate("xpack.securitySolution.components.ml.anomaly.errors.anomaliesTableFetchFailureTitle",{defaultMessage:"Anomalies table fetch failure"})},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"j",(function(){return r})),n.d(t,"e",(function(){return o})),n.d(t,"d",(function(){return s})),n.d(t,"a",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"k",(function(){return p})),n.d(t,"i",(function(){return m})),n.d(t,"h",(function(){return f}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.hostsTable.hostsTitle",{defaultMessage:"All hosts"}),r=e=>a.i18n.translate("xpack.securitySolution.hostsTable.unit",{values:{totalCount:e},defaultMessage:"{totalCount, plural, =1 {host} other {hosts}}"}),o=(a.i18n.translate("xpack.securitySolution.hostsRiskTable.tableTitle",{defaultMessage:"Host risk"}),a.i18n.translate("xpack.securitySolution.hostsTable.nameTitle",{defaultMessage:"Host name"})),s=a.i18n.translate("xpack.securitySolution.hostsTable.lastSeenTitle",{defaultMessage:"Last seen"}),l=a.i18n.translate("xpack.securitySolution.hostsTable.firstLastSeenToolTip",{defaultMessage:"Relative to the selected date range"}),c=a.i18n.translate("xpack.securitySolution.hostsTable.hostRiskToolTip",{defaultMessage:"The host's risk score determines its risk classification. Risky hosts are labeled as critical or high."}),u=a.i18n.translate("xpack.securitySolution.hostsTable.osLastSeenToolTip",{defaultMessage:"Last observed operating system"}),d=a.i18n.translate("xpack.securitySolution.hostsTable.osTitle",{defaultMessage:"Operating system"}),p=a.i18n.translate("xpack.securitySolution.hostsTable.versionTitle",{defaultMessage:"Version"}),m=a.i18n.translate("xpack.securitySolution.hostsTable.rows",{values:{numRows:5},defaultMessage:"{numRows} {numRows, plural, =0 {rows} =1 {row} other {rows}}"}),f=a.i18n.translate("xpack.securitySolution.hostsTable.rows",{values:{numRows:10},defaultMessage:"{numRows} {numRows, plural, =0 {rows} =1 {row} other {rows}}"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return O}));var a=n(1414),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(44),c=n(294),u=n(17),d=n(271),p=n(1127),m=n(202),f=n(223),g=n(191),b=n(235),y=n(320),h=n(117),v=n(142);const E="prevalence-details",x="now-30d",j=[{field:"field",name:f.u,"data-test-subj":g.u,render:e=>o.a.createElement(s.EuiText,{size:"xs"},e),width:"20%"},{field:"values",name:f.w,"data-test-subj":g.z,render:e=>o.a.createElement(s.EuiFlexGroup,{direction:"column",gutterSize:"none"},e.map((e=>o.a.createElement(s.EuiFlexItem,{key:e},o.a.createElement(s.EuiText,{size:"xs"},e))))),width:"20%"},{name:o.a.createElement(s.EuiToolTip,{content:f.q},o.a.createElement(s.EuiFlexGroup,{direction:"column",gutterSize:"none"},o.a.createElement(s.EuiFlexItem,null,f.p),o.a.createElement(s.EuiFlexItem,null,f.r))),"data-test-subj":g.r,render:e=>{const t=e.values.map((t=>Object(y.a)(e.field,`timeline-indicator-${e.field}-${t}`,t)));return e.alertCount>0?o.a.createElement(d.a,{asEmptyButton:!0,dataProviders:t,filters:[],timeRange:{kind:"absolute",from:e.from,to:e.to}},o.a.createElement(c.a,{count:e.alertCount})):Object(h.d)()},width:"10%"},{name:o.a.createElement(s.EuiToolTip,{content:f.t},o.a.createElement(s.EuiFlexGroup,{direction:"column",gutterSize:"none"},o.a.createElement(s.EuiFlexItem,null,f.s),o.a.createElement(s.EuiFlexItem,null,f.r))),"data-test-subj":g.s,render:e=>{const t=e.values.map((t=>({...Object(y.a)(e.field,`timeline-indicator-${e.field}-${t}`,t),and:[Object(y.b)("event.kind","timeline-indicator-event.kind-not-signal","signal",v.e,!0)]})));return e.docCount>0?o.a.createElement(d.a,{asEmptyButton:!0,dataProviders:t,filters:[],timeRange:{kind:"absolute",from:e.from,to:e.to},keepDataView:!0},o.a.createElement(c.a,{count:e.docCount})):Object(h.d)()},width:"10%"},{field:"hostPrevalence",name:o.a.createElement(s.EuiToolTip,{content:f.l},o.a.createElement(s.EuiFlexGroup,{direction:"column",gutterSize:"none"},o.a.createElement(s.EuiFlexItem,null,f.m),o.a.createElement(s.EuiFlexItem,null,f.v))),"data-test-subj":g.v,render:e=>o.a.createElement(s.EuiText,{size:"xs"},`${Math.round(100*e)}%`),width:"10%"},{field:"userPrevalence",name:o.a.createElement(s.EuiToolTip,{content:f.M},o.a.createElement(s.EuiFlexGroup,{direction:"column",gutterSize:"none"},o.a.createElement(s.EuiFlexItem,null,f.N),o.a.createElement(s.EuiFlexItem,null,f.v))),"data-test-subj":g.y,render:e=>o.a.createElement(s.EuiText,{size:"xs"},`${Math.round(100*e)}%`),width:"10%"}],O=()=>{const{browserFields:e,dataFormattedForFieldBrowser:t,eventId:n,investigationFields:a}=Object(b.b)(),c=Object(u.b)().isPlatinumPlus(),[d,y]=Object(r.useState)(x),[h,v]=Object(r.useState)("now"),[E,O]=Object(r.useState)((i.a.parse(x)||new Date).toISOString()),[S,k]=Object(r.useState)((i.a.parse("now")||new Date).toISOString()),{loading:w,error:I,data:T}=Object(p.a)({dataFormattedForFieldBrowser:t,investigationFields:a,interval:{from:d,to:h}}),C=Object(r.useMemo)((()=>T.map((e=>({...e,from:E,to:S})))),[T,E,S]);if(w)return o.a.createElement(s.EuiFlexGroup,{justifyContent:"spaceAround","data-test-subj":g.q},o.a.createElement(s.EuiFlexItem,{grow:!1},o.a.createElement(s.EuiLoadingSpinner,{size:"m"})));if(!n||!t||!e||I)return o.a.createElement(s.EuiEmptyPrompt,{iconType:"error",color:"danger",title:o.a.createElement("h2",null,Object(m.g)(f.n)),body:o.a.createElement("p",null,Object(m.f)(f.n)),"data-test-subj":g.t});const M=o.a.createElement(o.a.Fragment,null,o.a.createElement(s.EuiCallOut,{"data-test-subj":`${g.x}UpSell`},o.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.prevalenceTableAlertUpsell",defaultMessage:"Preview of a {subscription} feature showing host and user prevalence.",values:{subscription:o.a.createElement(s.EuiLink,{href:"https://www.elastic.co/pricing/",target:"_blank"},o.a.createElement(l.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.prevalenceTableAlertUpsellLink",defaultMessage:"Platinum"}))}})),o.a.createElement(s.EuiSpacer,{size:"s"}));return o.a.createElement(o.a.Fragment,null,!c&&M,o.a.createElement(s.EuiPanel,null,o.a.createElement(s.EuiSuperDatePicker,{start:d,end:h,onTimeChange:({start:e,end:t,isInvalid:n})=>{if(n)return;y(e),v(t);const a=i.a.parse(e);a&&a.isValid()&&O(a.toISOString());const r=i.a.parse(t);r&&r.isValid()&&k(r.toISOString())},"data-test-subj":g.p}),o.a.createElement(s.EuiSpacer,{size:"m"}),T.length>0?o.a.createElement(s.EuiInMemoryTable,{items:C,columns:j,"data-test-subj":g.x}):o.a.createElement("div",{"data-test-subj":`${g.w}Error`},f.o)))};O.displayName="PrevalenceDetails"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(42),i=n(129),r=n(319),o=n(655);const s=({dataFormattedForFieldBrowser:e,investigationFields:t})=>{var n,s;if(!e)return{};const l=Object(o.a)(e),c=Object(a.find)({category:"event",field:"event.code"},e),u=Array.isArray(null==c?void 0:c.originalValue)?null==c||null===(n=c.originalValue)||void 0===n?void 0:n[0]:null==c?void 0:c.originalValue,d=Object(a.find)({category:"kibana",field:i.O},e),p=Array.isArray(null==d?void 0:d.originalValue)?null==d||null===(s=d.originalValue)||void 0===s?void 0:s[0]:null==d?void 0:d.originalValue;return Object(o.b)({eventCategories:l,eventCode:u,eventRuleType:p,highlightedFieldsOverride:null!=t?t:[]}).reduce(((t,n)=>{const i=e.find((e=>e.field===n.id||n.legacyId&&e.field===n.legacyId));if(!i)return t;const o=i.values;return!o||Object(a.isEmpty)(o)?t:(i.field===n.legacyId&&(n.id=n.legacyId),"agent.id"!==n.id||Object(r.b)({data:e})?{...t,[n.id]:{...n.overrideField&&{overrideField:n.overrideField},values:o}}:t)}),{})}},function(e,t,n){"use strict";n.d(t,"b",(function(){return a})),n.d(t,"a",(function(){return i}));const a=(e,t)=>Object.keys(e).map((n=>{const a=e[n].values,i=e[n].overrideField||n;return{field:i,description:{field:i,values:a,scopeId:t}}})),i=e=>Object.keys(e).reduce(((t,n)=>({...t,[n]:{terms:{[n]:e[n].values}}})),[])},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(394),r=n(115),o=n(366);const s=({entityId:e,scopeId:t})=>{const{loading:n,error:s,count:l,alertIds:c}=Object(i.a)({field:o.c,value:e,isActiveTimelines:Object(r.isActiveTimeline)(t),signalIndexName:null,includeAlertIds:!0,ignoreTimerange:!0});return Object(a.useMemo)((()=>({loading:n,error:s,data:c||[],dataCount:l||0})),[c,l,s,n])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n(366),r=n(394),o=n(115);const s=({originalEventId:e,scopeId:t})=>{const{loading:n,error:s,count:l,alertIds:c}=Object(r.a)({field:i.e,value:e,isActiveTimelines:Object(o.isActiveTimeline)(t),signalIndexName:null,includeAlertIds:!0});return Object(a.useMemo)((()=>({loading:n,error:s,data:c||[],dataCount:l||0})),[c,l,s,n])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(46),i=n(2),r=n(102),o=n(4);const s=({eventId:e})=>{const{services:{cases:t}}=Object(r.j)(),{data:n,isLoading:s,isError:l}=Object(a.useQuery)(["useFetchRelatedCases",e],(()=>t.api.getRelatedCases(e,{owner:o.i})),{keepPreviousData:!0});return Object(i.useMemo)((()=>({loading:s,error:l,data:n||[],dataCount:(null==n?void 0:n.length)||0})),[n,l,s])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(102);const i=()=>Object(a.h)().read},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(2),i=n(42),r=n(683),o=n(124),s=n(17),l=n(261),c=n(366);const u=({getFieldsData:e,dataAsNestedObject:t,dataFormattedForFieldBrowser:n})=>{const u=Object(o.a)("insightsRelatedAlertsByProcessAncestry"),d=Object(r.a)(t||void 0),p=Object(l.a)(e(c.a)),m=Object(a.useMemo)((()=>Object(i.find)({category:"kibana",field:"kibana.alert.rule.parameters.index"},n)),[n]),f=Object(s.b)().isPlatinumPlus();return{show:u&&d&&null!=p&&null!=m&&f,...p&&{documentId:p},...m&&m.values&&{indices:m.values}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(129);const i=({getFieldsData:e})=>{const t=e(a.Y),n=t?parseInt(t[0],10):0;return{show:Boolean(t),alertSuppressionCount:n}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(366),i=n(261);const r=({getFieldsData:e})=>{const t=Object(i.a)(e(a.e));return{show:null!=t,...t&&{originalEventId:t}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(366),i=n(261);const r=({getFieldsData:e})=>{const t=Object(i.a)(e(a.c));return{show:null!=t,...t&&{entityId:t}}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(684),r=n(115);const o=({documentId:e,indices:t,scopeId:n})=>{const o=Object(r.isActiveTimeline)(n),{loading:s,error:l,alertIds:c}=Object(i.a)({isActiveTimeline:o,documentId:e,indices:t});return Object(a.useMemo)((()=>({loading:s,error:l,data:c,dataCount:(null==c?void 0:c.length)||0})),[c,l,s])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(1274),c=n.n(l);const u=s()(a.EuiFlexGroup).withConfig({displayName:"ThreatEuiFlexGroupStyles",componentId:"sc-14mwgam-0"})([".euiFlexItem{margin-bottom:0px;}"]),d=s()(a.EuiFlexItem).withConfig({displayName:"SubtechniqueFlexItem",componentId:"sc-14mwgam-1"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeM)),p=s()(a.EuiButtonEmpty).withConfig({displayName:"TechniqueLinkItem",componentId:"sc-14mwgam-2"})([".euiIcon{width:8px;height:8px;}align-self:flex-start;"]),m=({label:e,threat:t})=>{const[o,s]=Object(i.useState)([]),[l,m]=Object(i.useState)([]),[f,g]=Object(i.useState)([]);return Object(i.useEffect)((()=>{!async function(){const e=await n.e(19).then(n.bind(null,1443));g(e.subtechniques),s(e.techniques),m(e.tactics)}()}),[]),r.a.createElement(u,{direction:"column"},t.map(((e,t)=>{const n=l.find((t=>t.id===e.tactic.id));return r.a.createElement(a.EuiFlexItem,{key:`${e.tactic.name}-${t}`},r.a.createElement(a.EuiLink,{"data-test-subj":"threatTacticLink",href:e.tactic.reference,target:"_blank"},null!=n?n.label:`${e.tactic.name} (${e.tactic.id})`),r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",alignItems:"flexStart",direction:"column"},e.technique&&e.technique.map(((e,t)=>{var n;const i=o.find((t=>t.id===e.id));return r.a.createElement(a.EuiFlexItem,{key:null!==(n=null==i?void 0:i.id)&&void 0!==n?n:t},r.a.createElement(p,{"data-test-subj":"threatTechniqueLink",href:e.reference,target:"_blank",iconType:c.a,size:"xs"},null!=i?i.label:`${e.name} (${e.id})`),r.a.createElement(a.EuiFlexGroup,{gutterSize:"none",alignItems:"flexStart",direction:"column"},null!=e.subtechnique&&e.subtechnique.map(((e,t)=>{var n;const a=f.find((t=>t.id===e.id));return r.a.createElement(d,{key:null!==(n=null==a?void 0:a.id)&&void 0!==n?n:t},r.a.createElement(p,{"data-test-subj":"threatSubtechniqueLink",href:e.reference,target:"_blank",iconType:c.a,size:"xs"},null!=a?a.label:`${e.name} (${e.id})`))}))))}))))})))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));var a=n(2);const i=n.n(a).a.createContext(null),r=()=>{var e;return null===(e=Object(a.useContext)(i))||void 0===e?void 0:e.current}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o})),n.d(t,"d",(function(){return s}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.utilityBar.additionalFiltersTitle",{defaultMessage:"Additional filters"}),r=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.utilityBar.additionalFiltersActions.showBuildingBlockTitle",{defaultMessage:"Include building block alerts"}),o=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.utilityBar.additionalFiltersActions.showOnlyThreatIndicatorAlerts",{defaultMessage:"Show only threat indicator alerts"}),s=a.i18n.translate("xpack.securitySolution.detectionEngine.alerts.utilityBar.takeActionTitle",{defaultMessage:"Take action"})},function(e,t,n){"use strict";n.d(t,"a",(function(){return f})),n.d(t,"e",(function(){return g})),n.d(t,"b",(function(){return b})),n.d(t,"d",(function(){return y})),n.d(t,"f",(function(){return h})),n.d(t,"g",(function(){return v})),n.d(t,"c",(function(){return x}));var a=n(2),i=n.n(a),r=n(5),o=n(44),s=n(40),l=n(126),c=n(102),u=n(940),d=n(574),p=n(888),m=n(575);const f=r.i18n.translate("xpack.securitySolution.eventFilters.aboutInfo",{defaultMessage:"Event filters exclude high volume or unwanted events from being written to Elasticsearch."}),g=r.i18n.translate("xpack.securitySolution.eventFilter.form.name.label",{defaultMessage:"Name"}),b=r.i18n.translate("xpack.securitySolution.eventFilter.form.description.placeholder",{defaultMessage:"Description"}),y=r.i18n.translate("xpack.securitySolution.eventFilter.form.name.error",{defaultMessage:"The name can't be empty"}),h=r.i18n.translate("xpack.securitySolution.eventFilter.form.os.label",{defaultMessage:"Select operating system"}),v=r.i18n.translate("xpack.securitySolution.eventFilter.form.rule.name",{defaultMessage:"Endpoint Event Filtering"}),E={pageTitle:r.i18n.translate("xpack.securitySolution.eventFilters.pageTitle",{defaultMessage:"Event Filters"}),pageAboutInfo:r.i18n.translate("xpack.securitySolution.eventFilters.pageAboutInfo",{defaultMessage:"Event filters exclude high volume or unwanted events from being written to Elasticsearch."}),pageAddButtonTitle:r.i18n.translate("xpack.securitySolution.eventFilters.pageAddButtonTitle",{defaultMessage:"Add event filter"}),getShowingCountLabel:e=>r.i18n.translate("xpack.securitySolution.eventFilters.showingTotal",{defaultMessage:"Showing {total} {total, plural, one {event filter} other {event filters}}",values:{total:e}}),cardActionEditLabel:r.i18n.translate("xpack.securitySolution.eventFilters.cardActionEditLabel",{defaultMessage:"Edit event filter"}),cardActionDeleteLabel:r.i18n.translate("xpack.securitySolution.eventFilters.cardActionDeleteLabel",{defaultMessage:"Delete event filter"}),flyoutCreateTitle:r.i18n.translate("xpack.securitySolution.eventFilters.flyoutCreateTitle",{defaultMessage:"Add event filter"}),flyoutEditTitle:r.i18n.translate("xpack.securitySolution.eventFilters.flyoutEditTitle",{defaultMessage:"Edit event filter"}),flyoutCreateSubmitButtonLabel:r.i18n.translate("xpack.securitySolution.eventFilters.flyoutCreateSubmitButtonLabel",{defaultMessage:"Add event filter"}),flyoutCreateSubmitSuccess:({name:e})=>r.i18n.translate("xpack.securitySolution.eventFilters.flyoutCreateSubmitSuccess",{defaultMessage:'"{name}" has been added to the event filters list.',values:{name:e}}),flyoutEditSubmitSuccess:({name:e})=>r.i18n.translate("xpack.securitySolution.eventFilters.flyoutEditSubmitSuccess",{defaultMessage:'"{name}" has been updated.',values:{name:e}}),flyoutDowngradedLicenseDocsInfo:e=>i.a.createElement(i.a.Fragment,null,i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.eventFilters.flyoutDowngradedLicenseDocsInfo",defaultMessage:"For more information, see our "}),i.a.createElement(s.EuiLink,{target:"_blank",href:`${e.eventFilters}`},i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.eventFilters.flyoutDowngradedLicenseDocsLink",defaultMessage:"Event filters documentation"}))),deleteActionSuccess:e=>r.i18n.translate("xpack.securitySolution.eventFilters.deleteSuccess",{defaultMessage:'"{itemName}" has been removed from event filters list.',values:{itemName:e}}),emptyStateTitleNoEntries:r.i18n.translate("xpack.securitySolution.eventFilters.emptyStateTitleNoEntries",{defaultMessage:"There are no event filters to display."}),emptyStateTitle:r.i18n.translate("xpack.securitySolution.eventFilters.emptyStateTitle",{defaultMessage:"Add your first event filter"}),emptyStateInfo:r.i18n.translate("xpack.securitySolution.eventFilters.emptyStateInfo",{defaultMessage:"Add an event filter to exclude high volume or unwanted events from being written to Elasticsearch."}),emptyStatePrimaryButtonLabel:r.i18n.translate("xpack.securitySolution.eventFilters.emptyStatePrimaryButtonLabel",{defaultMessage:"Add event filter"}),searchPlaceholderInfo:r.i18n.translate("xpack.securitySolution.eventFilters.searchPlaceholderInfo",{defaultMessage:"Search on the fields below: name, description, comments, value"})},x=Object(a.memo)((()=>{const{canWriteEventFilters:e}=Object(l.a)().endpointPrivileges,t=Object(c.i)(),n=d.a.getInstance(t);return i.a.createElement(u.a,{apiClient:n,ArtifactFormComponent:p.a,labels:E,"data-test-subj":"EventFiltersListPage",searchableFields:m.d,flyoutSize:"l",allowCardCreateAction:e,allowCardEditAction:e,allowCardDeleteAction:e})}));x.displayName="EventFiltersList"},function(e,t,n){"use strict";n.d(t,"a",(function(){return v}));var a=n(48),i=n(2),r=n.n(i),o=n(4),s=n(102),l=n(117),c=n(224),u=n(393),d=n(364),p=n(168),m=n(274),f=n(473),g=n(162),b=n(231),y=n(149),h=n(330);const v=r.a.memo((({contextID:e,id:t,ip:n,data:i,isDraggable:v=!1,isInDetailsSidePanel:E=!1,loading:x,flowTarget:j,startDate:O,endDate:S,isLoadingAnomaliesData:k,anomaliesData:w,narrowDateRange:I,indexPatterns:T,jobNameById:C})=>{const M=Object(g.a)(),A=Object(b.a)(M),[_]=Object(s.p)(o.B),F=i[j],D=[{title:d.i,description:Object(c.g)([`${j}.geo.city_name`,`${j}.geo.region_name`],i,e,v)},{title:d.c,description:F?Object(c.d)(F.autonomousSystem,j,e,v):Object(l.d)()}],N=[A?[...D,{title:d.j,description:r.a.createElement(f.a,{anomalies:w,startDate:O,endDate:S,isLoading:k,narrowDateRange:I,jobNameById:C})}]:D,[{title:d.d,description:r.a.createElement(u.a,{indexPatterns:T,field:`${j}.ip`,value:n,type:u.b.FIRST_SEEN})},{title:d.h,description:r.a.createElement(u.a,{indexPatterns:T,field:`${j}.ip`,value:n,type:u.b.LAST_SEEN})}],[{title:d.e,description:F&&i.host?Object(c.e)({host:i.host,isDraggable:v,ipFilter:n,contextID:e}):Object(l.d)()},{title:d.f,description:F&&i.host?Object(c.f)(i.host,n,e,v):Object(l.d)()}],[{title:d.o,description:Object(c.i)(n)},{title:d.k,description:Object(c.h)(n)}]];return r.a.createElement(y.c,null,r.a.createElement(p.g,{direction:E?"column":"row"},!E&&r.a.createElement(y.b,{queryId:t,title:d.g,inspectIndex:0}),N.map(((e,t)=>r.a.createElement(h.a,{descriptionList:e,key:t}))),x&&r.a.createElement(m.a,{overlay:!0,overlayBackground:_?a.euiDarkVars.euiPageBackgroundColor:a.euiLightVars.euiPageBackgroundColor,size:"xl"})))}));v.displayName="IpOverview"},function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var a=n(113);const i=(e,t)=>t===a.g.source?[{fieldName:"source.ip",fieldValue:e}]:t===a.g.destination?[{fieldName:"destination.ip",fieldValue:e}]:[]},function(e,t,n){"use strict";n.d(t,"b",(function(){return u})),n.d(t,"a",(function(){return d}));var a=n(23),i=n(2),r=n(878),o=n(278),s=n(279),l=n(735),c=n(21);const u=({defaultGroupingOptions:e,groupingId:t,fields:n,onGroupChange:a,maxGroupingLevels:r})=>{const o=Object(i.useCallback)((e=>{a([e])}),[a]);return Object(c.jsx)(s.a,{groupingId:t,groupsSelected:["none"],"data-test-subj":"alerts-table-group-selector",onGroupChange:o,fields:n,maxGroupingLevels:r,options:e})},d=({defaultGroupingOptions:e,dispatch:t,fields:n,groupingId:u,groupingState:d,maxGroupingLevels:p=1,onGroupChange:m,onOptionsChange:f,tracker:g})=>{var b;const{activeGroups:y,options:h}=null!==(b=Object(r.b)({groups:d},u))&&void 0!==b?b:o.c,v=Object(i.useCallback)((e=>{t(r.a.updateActiveGroups({id:u,activeGroups:e}))}),[t,u]),E=Object(i.useCallback)((e=>{t(r.a.updateGroupOptions({id:u,newOptionList:e})),null==f||f(e)}),[t,u,f]),x=Object(i.useCallback)((e=>{if(y.find((t=>t===e))){const t=y.filter((t=>t!==e));return void(0===t.length?v(["none"]):v(t))}const t=Object(s.e)([e])?[e]:[...y.filter((e=>"none"!==e)),e];v(t),null==g||g(a.METRIC_TYPE.CLICK,l.a.groupChanged({groupingId:u,selected:e})),null==m||m({tableId:u,groupByField:e})}),[u,m,y,v,g]);return Object(i.useEffect)((()=>{if(0===h.length&&e.length>0)return E(e.find((e=>y.find((t=>t===e.key))))?e:[...e,...Object(s.e)(y)?[]:y.map((e=>({key:e,label:e})))]);if(Object(s.e)(y))return;const t=h.map((e=>e.key)),n=[...h];y.forEach((e=>{t.includes(e)||n.push({label:e,key:e})})),n.length!==h.length&&E(n)}),[e,h,y,E]),Object(c.jsx)(s.a,{groupingId:u,groupsSelected:y,"data-test-subj":"alerts-table-group-selector",onGroupChange:x,fields:n,maxGroupingLevels:p,options:h})}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(139);const i=({groups:e},t)=>e[t],r=()=>Object(a.createSelector)(i,(e=>e))},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(2),i=n(365);const r=Object(i.c)(),o=()=>{const[e]=Object(a.useState)(r);return{globalKQLHeaderPortalNode:e}}},function(e,t,n){const a=n(157),i=n(292),{safeRe:r,t:o}=n(310);e.exports=(e,t)=>{if(e instanceof a)return e;if("number"==typeof e&&(e=String(e)),"string"!=typeof e)return null;let n=null;if((t=t||{}).rtl){let t;for(;(t=r[o.COERCERTL].exec(e))&&(!n||n.index+n[0].length!==e.length);)n&&t.index+t[0].length===n.index+n[0].length||(n=t),r[o.COERCERTL].lastIndex=t.index+t[1].length+t[2].length;r[o.COERCERTL].lastIndex=-1}else n=e.match(r[o.COERCE]);return null===n?null:i(`${n[2]}.${n[3]||"0"}.${n[4]||"0"}`,t)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return p}));var a=n(2),i=n.n(a),r=n(41),o=n.n(r),s=n(40),l=n(77),c=n(102);const u=o()(s.EuiLink).withConfig({displayName:"StyledJobEuiLInk",componentId:"sc-ilb29r-0"})(["margin-right:",";"],(({theme:e})=>e.eui.euiSizeS)),d=({jobId:e,jobName:t})=>{const{services:{http:n,ml:a}}=Object(c.j)(),r=Object(l.useMlHref)(a,n.basePath.get(),{page:l.ML_PAGES.ANOMALY_DETECTION_JOBS_MANAGE,pageState:{jobId:[e]}},[e]);return i.a.createElement(u,{"data-test-subj":"machineLearningJobLink",href:r,target:"_blank"},i.a.createElement("span",{"data-test-subj":"machineLearningJob"},null!=t?t:e))},p=Object(a.memo)(d)},function(e,t,n){"use strict";n.d(t,"a",(function(){return O}));var a=n(42),i=n(40),r=n(2),o=n.n(r),s=n(343),l=n.n(s),c=n(839),u=n.n(c),d=n(41),p=n.n(d),m=n(69),f=n(44),g=n(129),b=n(4),y=n(125),h=n(102),v=n(852);const E=[{isSummaryOption:!0,isForEachAlertOption:!0,value:{value:"onActiveAlert",inputDisplay:v.d,"data-test-subj":"onActiveAlert",dropdownDisplay:o.a.createElement(i.EuiText,{size:"s"},o.a.createElement("p",null,o.a.createElement(f.FormattedMessage,{defaultMessage:"Per rule run",id:"xpack.securitySolution.detectionEngine.ruleNotifyWhen.onActiveAlert.label"})))}},{isSummaryOption:!0,isForEachAlertOption:!1,value:{value:"onThrottleInterval",inputDisplay:v.a,"data-test-subj":"onThrottleInterval",dropdownDisplay:o.a.createElement(i.EuiText,{size:"s"},o.a.createElement("p",null,o.a.createElement(f.FormattedMessage,{defaultMessage:"Custom frequency",id:"xpack.securitySolution.detectionEngine.ruleNotifyWhen.onThrottleInterval.label"})))}}],x=p.a.div.withConfig({displayName:"FieldErrorsContainer",componentId:"sc-kyvj3t-0"})(["p{margin-bottom:0;}"]),j=p.a.div.attrs((({className:e="",$caseIndexes:t=[]})=>({className:e}))).withConfig({displayName:"ContainerActions",componentId:"sc-kyvj3t-1"})(["",""],(({$caseIndexes:e})=>e.map((e=>`\n        div[id="${e}"].euiAccordion__childWrapper .euiAccordion__children {\n          padding: 0px;\n          .euiFlexGroup {\n            display: none;\n          }\n          .euiSpacer.euiSpacer--xl {\n            height: 0px;\n          }\n        }\n      `)))),O=({field:e,messageVariables:t,summaryMessageVariables:n})=>{const[s,c]=Object(r.useState)(null),d=Object(y.l)(),{isValid:p}=d,{triggersActionsUi:{getActionForm:f}}=Object(h.j)().services,[O,S]=Object(r.useState)(!1),k=Object(r.useMemo)((()=>Object(a.isEmpty)(e.value)?[]:e.value),[e.value]),w=Object(r.useMemo)((()=>k.reduce(((e,t,n)=>".case"===t.actionTypeId?[...e,`${n}`]:e),[])),[k]),I=Object(r.useCallback)(((t,n)=>{const i=[...k];Object(a.isEmpty)(i[n].params)&&S(!0),i[n]=l()(i[n],{id:t}),e.setValue(i)}),[e,k]),T=Object(r.useCallback)((t=>e.setValue(t)),[e]),C=Object(r.useCallback)(((t,n,a)=>{const i=()=>{e.setValue((e=>{const i=[...e];return i[a]={...i[a],params:{...i[a].params,[t]:n}},i}))};O?(setTimeout(i,0),S(!1)):i()}),[e,O]),M=Object(r.useCallback)(((t,n,i)=>{e.setValue((e=>{const r=[...e],{alertsFilter:o,...s}=r[i],l={...o};return n?l[t]=n:delete l[t],r[i]={...s,...Object(a.isEmpty)(l)?{}:{alertsFilter:l}},r}))}),[e]),A=Object(r.useCallback)(((t,n,a)=>{e.setValue((e=>{var i;const r=[...e];return r[a]={...r[a],frequency:{...null!==(i=r[a].frequency)&&void 0!==i?i:b.Pb,[t]:n}},r}))}),[e]),_=void 0!==p,F=Object(r.useMemo)((()=>f({actions:k,messageVariables:t,summaryMessageVariables:n,defaultActionGroupId:"default",setActionIdByIndex:I,setActions:T,setActionParamsProperty:C,setActionFrequencyProperty:A,setActionAlertsFilterProperty:M,featureId:m.SecurityConnectorFeatureId,producerId:g.mb.SIEM,defaultActionMessage:v.c,defaultSummaryMessage:v.e,hideActionHeader:!0,hasAlertsMappings:!0,notifyWhenSelectOptions:E,defaultRuleFrequency:b.Pb,disableErrorMessages:!_})),[k,f,t,n,A,I,C,T,M,_]);return Object(r.useEffect)((()=>{if(!1===p){const t=e.errors.map((({message:e})=>e)).join("\n");return c(t)}return c(null)}),[e.errors,p]),o.a.createElement(j,{$caseIndexes:w},s?o.a.createElement(o.a.Fragment,null,o.a.createElement(x,null,o.a.createElement(i.EuiCallOut,{title:v.b,color:"danger",iconType:"warning"},o.a.createElement(u.a,null,s))),o.a.createElement(i.EuiSpacer,null)):null,F)}},function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return r})),n.d(t,"c",(function(){return o}));const a={filter:"",tags:[],showCustomRules:!1,showElasticRules:!1,enabled:void 0,ruleExecutionStatus:void 0},i={field:"enabled",order:"desc"},r=1,o=20},function(e,t,n){"use strict";n.d(t,"a",(function(){return g}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(172),c=n(196),u=n(159),d=n(612),p=n(265);const m=s()(a.EuiSwitch).withConfig({displayName:"StaticSwitch",componentId:"sc-1s9ljiu-0"})([".euiSwitch__thumb,.euiSwitch__icon{transition:none;}"]);m.displayName="StaticSwitch";const f=({id:e,isDisabled:t,isLoading:n,enabled:o,startMlJobsIfNeeded:s,onChange:f})=>{const[g,b]=Object(i.useState)(!1),y=Object(p.c)(),{startTransaction:h}=Object(u.b)(),{executeBulkAction:v}=Object(d.b)({suppressSuccessToast:!y}),E=Object(i.useCallback)((async t=>{b(!0),h({name:o?c.e.DISABLE:c.e.ENABLE});const n=t.target.checked;n&&await(null==s?void 0:s());const a=await v({type:n?l.b.enable:l.b.disable,ids:[e]});null!=a&&a.attributes.results.updated.length&&(null==f||f(a.attributes.results.updated[0].enabled)),b(!1)}),[o,v,e,f,s,h]),x=Object(i.useMemo)((()=>g!==n&&n||g),[g,n]);return r.a.createElement(a.EuiFlexGroup,{alignItems:"center",justifyContent:"spaceAround",id:`rule-switch-${e}`},r.a.createElement(a.EuiFlexItem,{grow:!1},x?r.a.createElement(a.EuiLoadingSpinner,{size:"m","data-test-subj":"ruleSwitchLoader"}):r.a.createElement(m,{"data-test-subj":"ruleSwitch",showLabel:!1,label:"",disabled:t,checked:o,onChange:E})))},g=r.a.memo(f);g.displayName="RuleSwitch"},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(166);const c=s()(a.EuiPanel).withConfig({displayName:"MyPanel",componentId:"sc-j93jp7-0"})(["position:relative;"]);c.displayName="MyPanel";const u=({children:e,loading:t,title:n})=>r.a.createElement(c,{hasBorder:!0},t&&r.a.createElement(a.EuiProgress,{size:"xs",color:"accent",position:"absolute","data-test-subj":"stepPanelProgress"}),n&&r.a.createElement(l.a,{title:n}),e),d=Object(i.memo)(u)},function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var a=n(2),i=n.n(a),r=n(40),o=n(137);const s=({columnName:e,children:t})=>{const[n,s]=Object(a.useState)(!1);return i.a.createElement(r.EuiPopover,{anchorPosition:"upCenter",isOpen:n,closePopover:()=>s(!1),button:i.a.createElement(r.EuiButtonIcon,{"aria-label":o.cc(e),onClick:e=>{s(!n),e.stopPropagation()},size:"xs",color:"primary",iconType:"questionInCircle",style:{height:"auto"}})},t)},l=i.a.memo(s);l.displayName="PopoverTooltip"},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n.n(a),r=n(40);const o=({title:e,tooltipContent:t,customTooltip:n})=>i.a.createElement(r.EuiFlexGroup,{gutterSize:"none"},i.a.createElement(r.EuiFlexItem,{style:{width:"calc(100% - 20px)"}},i.a.createElement("span",{className:"eui-textTruncate"},e)),null!=n?n:i.a.createElement(r.EuiToolTip,{content:t},i.a.createElement(r.EuiIcon,{"data-test-subj":"tableHeaderIcon",size:"m",color:"subdued",type:"questionInCircle",style:{marginLeft:4}}))),s=i.a.memo(o);s.displayName="TableHeaderTooltipCell"},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(102);const r=()=>{const{storage:e}=Object(i.j)().services,t=Object(a.useCallback)((t=>{var n;return null!==(n=e.get(`${t}-messages`))&&void 0!==n?n:[]}),[e]),n=Object(a.useCallback)(((t,n)=>{var a;const i=null!==(a=e.get(`${t}-messages`))&&void 0!==a?a:[];e.set(`${t}-messages`,[...i,n])}),[e]),r=Object(a.useCallback)(((t,n)=>{var a;return(null!==(a=e.get(`${t}-messages`))&&void 0!==a?a:[]).filter((e=>e===n)).length>0}),[e]),o=Object(a.useCallback)(((t,n)=>{var a;const i=null!==(a=e.get(`${t}-messages`))&&void 0!==a?a:[];e.set(`${t}-messages`,[...i.filter((e=>e!==n))])}),[e]);return{getMessages:t,addMessage:n,clearAllMessages:Object(a.useCallback)((t=>e.remove(`${t}-messages`)),[e]),removeMessage:o,hasMessage:r}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(40),i=n(2),r=n.n(i),o=n(142),s=n(135);const l=({status:e=o.d,onFilterGroupChanged:t})=>{const n=[{id:"open",label:s.H,"data-test-subj":"openAlerts"},{id:"acknowledged",label:s.a,"data-test-subj":"acknowledgedAlerts"},{id:"closed",label:s.y,"data-test-subj":"closedAlerts"}],l=Object(i.useCallback)((e=>{t(e)}),[t]);return r.a.createElement(a.EuiButtonGroup,{legend:"filter status",color:"primary",options:n,idSelected:e,"data-test-subj":"alerts-table-filter-group",onChange:l})},c=r.a.memo(l)},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(2),i=n(472);const r=()=>{const[e,t,n]=Object(i.a)(),r=Object(a.useRef)(),o=Object(a.useCallback)((e=>{var t;null===(t=r.current)||void 0===t||t.call(r,e)}),[]),s=Object(a.useCallback)((()=>{var e;null===(e=r.current)||void 0===e||e.call(r,null)}),[]),l=Object(a.useCallback)((()=>(t(),new Promise((e=>{r.current=e})).finally((()=>{n()})))),[t,n]);return{isBulkDuplicateConfirmationVisible:e,showBulkDuplicateConfirmation:Object(a.useCallback)((async()=>{const e=await l();return e?o(e):s(),e}),[l,o,s]),cancelRuleDuplication:s,confirmRuleDuplication:o}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var a=n(2),i=n.n(a),r=n(40),o=n(687),s=n(935);const l=({onCancel:e,onConfirm:t,rulesCount:n})=>{const[l,c]=Object(a.useState)(o.a.withExceptions),u=Object(a.useCallback)((e=>{c(e)}),[c]),d=Object(a.useCallback)((()=>{t(l)}),[t,l]);return i.a.createElement(r.EuiConfirmModal,{title:s.c.MODAL_TITLE(n),onConfirm:d,cancelButtonText:s.c.CANCEL_BUTTON,confirmButtonText:s.c.CONTINUE_BUTTON,defaultFocusedButton:"confirm",onCancel:e},i.a.createElement(r.EuiText,null,s.c.MODAL_TEXT(n)),i.a.createElement(r.EuiSpacer,null),i.a.createElement(r.EuiRadioGroup,{options:[{id:o.a.withExceptions,label:i.a.createElement(r.EuiText,{size:"s"},s.c.DUPLICATE_EXCEPTIONS_INCLUDE_EXPIRED_EXCEPTIONS_LABEL(n),i.a.createElement(r.EuiIconTip,{content:s.c.DUPLICATE_TOOLTIP,position:"bottom"})),"data-test-subj":o.a.withExceptions},{id:o.a.withExceptionsExcludeExpiredExceptions,label:i.a.createElement(r.EuiText,{size:"s"},s.c.DUPLICATE_EXCEPTIONS_TEXT(n),i.a.createElement(r.EuiIconTip,{content:s.c.DUPLICATE_TOOLTIP,position:"bottom"})),"data-test-subj":o.a.withExceptionsExcludeExpiredExceptions},{id:o.a.withoutExceptions,label:s.c.DUPLICATE_WITHOUT_EXCEPTIONS_TEXT(n),"data-test-subj":o.a.withoutExceptions}],idSelected:l,onChange:u}))},c=i.a.memo(l);c.displayName="BulkActionDuplicateExceptionsConfirmation"},function(e,t,n){"use strict";e.exports=n(1422)},function(e,t,n){"use strict";e.exports=n(1423)},function(e,t,n){"use strict";n.d(t,"a",(function(){return s}));var a=n(2),i=n.n(a),r=n(422),o=n(681);const s=e=>[{headerCellRender:()=>i.a.createElement(i.a.Fragment,null,o.a),id:"default-timeline-control-column",rowCellRender:r.a,width:Object(r.c)(e)}]},,,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return X})),n.d(t,"b",(function(){return J}));var a=n(2),i=n.n(a),r=n(40),o=n(223),s=n(191),l=n(202),c=n(193),u=n(512),d=n(129),p=n(329),m=n(46),f=n(8),g=n(102),b=n(13);const y=[5,10,20],h={pageIndex:0,pageSize:y[0]},v=(e,t)=>t,E={sort:{field:"@timestamp",direction:"desc"},enableAllColumns:!0},x=(e,t)=>({...e,sort:t}),j=e=>{const{setPagination:t,pagination:n,pageSizeOptions:i}=(()=>{const[e,t]=Object(a.useReducer)(v,h);return Object(a.useMemo)((()=>({pageSizeOptions:[...y],pagination:e,setPagination:t})),[e])})(),{sorting:r,sortConfig:o,setSorting:s}=(()=>{const[e,t]=Object(a.useReducer)(x,E),n=Object(a.useMemo)((()=>[{[e.sort.field]:e.sort.direction}]),[e.sort.direction,e.sort.field]);return{sorting:e,setSorting:t,sortConfig:n}})(),{data:l,totalItemCount:c,loading:u,error:d}=(({alertIds:e,from:t,size:n,sort:i})=>{const{services:{data:r}}=Object(g.j)(),o=Object(a.useMemo)((()=>{return e=r.search,async({signal:t,alertIds:n,from:a,size:i,sort:r})=>new Promise(((o,s)=>{const l=e.search({params:{body:{query:{ids:{values:n}},from:a,size:i,sort:r,fields:["*"],_source:!1}}},{abortSignal:t}).subscribe((e=>{Object(b.isCompleteResponse)(e)?(l.unsubscribe(),o(e.rawResponse)):Object(b.isErrorResponse)(e)&&(l.unsubscribe(),s(new Error("Error while loading alerts")))}))}));var e}),[r.search]),{data:s,isLoading:l,isError:c}=Object(m.useQuery)(["useFetchAlerts",e,t,n,i],(async({signal:a})=>o({signal:a,alertIds:e,from:t,size:n,sort:i})),{keepPreviousData:!0});return Object(a.useMemo)((()=>{var e,t;const n=null==s||null===(e=s.hits)||void 0===e?void 0:e.total;return{loading:l,error:c,data:(null==s||null===(t=s.hits)||void 0===t?void 0:t.hits)||[],totalItemCount:Object(f.isNumber)(n)?n:0}}),[s,c,l])})({alertIds:e,from:n.pageIndex*n.pageSize,size:n.pageSize,sort:o});return{paginationConfig:Object(a.useMemo)((()=>({...n,pageSizeOptions:i,totalItemCount:c})),[i,n,c]),setPagination:t,setSorting:s,loading:u,data:l,sorting:r,error:d}};var O=n(249),S=n(271),k=n(135),w=n(320);const I=({tooltip:e,anchorPosition:t="top",children:n})=>i.a.createElement(r.EuiToolTip,{content:e,position:t},n),T=[{field:"@timestamp",name:o.i,truncateText:!0,dataType:"date",render:e=>{const t=Object(r.formatDate)(e,"MMM D, YYYY @ HH:mm:ss.SSS");return i.a.createElement(I,{tooltip:t},i.a.createElement("span",null,t))}},{field:d.D,name:o.g,truncateText:!0,render:e=>i.a.createElement(I,{tooltip:e},i.a.createElement("span",null,e))},{field:d.p,name:o.f,truncateText:!0,render:e=>i.a.createElement(I,{tooltip:e,anchorPosition:"left"},i.a.createElement("span",null,e))},{field:"kibana.alert.severity",name:o.h,truncateText:!0,render:e=>{const t=c.p.decode(e),n=Object(u.isRight)(t)?i.a.createElement(p.a,{value:t.right}):i.a.createElement("p",null,e);return i.a.createElement(I,{tooltip:e},n)}}],C=({title:e,loading:t,alertIds:n,scopeId:o,eventId:s,noItemsMessage:l,"data-test-subj":c})=>{const{setPagination:u,setSorting:d,data:p,loading:m,paginationConfig:f,sorting:g,error:b}=j(n||[]),y=Object(a.useCallback)((({page:e,sort:t})=>{if(e){const{index:t,size:n}=e;u({pageIndex:t,pageSize:n})}t&&d(t)}),[u,d]),h=Object(a.useMemo)((()=>p.map((e=>e.fields)).map(((e={})=>Object.keys(e).reduce(((t,n)=>{var a;return t[n]=(null==e||null===(a=e[n])||void 0===a?void 0:a[0])||(null==e?void 0:e[n]),t}),{})))),[p]),v=Boolean(n&&n.length&&n.length>=5),E=Object(a.useMemo)((()=>v?null:A(o,s,n)),[n,v,o,s]),x=Object(a.useMemo)((()=>v?M(n):null),[n,v]);return i.a.createElement(O.a,{header:{title:e,iconType:"warning",headerContent:n&&n.length&&n.length>0?i.a.createElement("div",{"data-test-subj":`${c}InvestigateInTimeline`},i.a.createElement(S.a,{dataProviders:E,filters:x,asEmptyButton:!0,iconType:"timeline"},k.h)):null},content:{error:b},expand:{expandable:!0,expandedOnFirstRender:!0},"data-test-subj":c},i.a.createElement(r.EuiBasicTable,{"data-test-subj":`${c}Table`,loading:t||m,items:h,columns:T,pagination:f,sorting:g,onChange:y,noItemsMessage:l}))},M=e=>e&&e.length?[{meta:{alias:o.d,type:"phrases",key:"_id",params:[...e],negate:!1,disabled:!1,value:e.join()},query:{bool:{should:e.map((e=>({match_phrase:{_id:e}}))),minimum_should_match:1}}}]:null,A=(e,t,n)=>n&&n.length?n.reduce(((n,a,i)=>{const r=`${e}-${t}-event.id-${i}-${a}`;return n.push(Object(w.a)("_id",r,a)),n}),[]):null;var _=n(1085);const F=({entityId:e,scopeId:t,eventId:n})=>{const{loading:a,error:r,data:c,dataCount:u}=Object(_.a)({entityId:e,scopeId:t}),d=`${u} ${Object(l.d)(u)}`;return r?null:i.a.createElement(C,{title:d,loading:a,alertIds:c,scopeId:t,eventId:n,noItemsMessage:o.y,"data-test-subj":s.d})};F.displayName="RelatedAlertsBySession";var D=n(1086);const N=({originalEventId:e,scopeId:t,eventId:n})=>{const{loading:a,error:r,data:c,dataCount:u}=Object(D.a)({originalEventId:e,scopeId:t}),d=`${u} ${Object(l.c)(u)}`;return r?null:i.a.createElement(C,{title:d,loading:a,alertIds:c,scopeId:t,eventId:n,noItemsMessage:o.z,"data-test-subj":s.e})};N.displayName="RelatedAlertsBySameSourceEvent";var P=n(123),R=n(1087);const L=[{field:"title",name:o.b,truncateText:!0,render:(e,t)=>i.a.createElement(I,{tooltip:t.title},i.a.createElement(P.a,{detailName:t.id,title:t.title},t.title))},{field:"status",name:o.c,truncateText:!0,width:"25%"}],q=({eventId:e})=>{const{loading:t,error:n,data:a,dataCount:c}=Object(R.a)({eventId:e}),u=`${c} ${Object(l.b)(c)}`;return t?i.a.createElement(r.EuiSkeletonText,{lines:1,size:"m",isLoading:t,contentAriaLabel:"Loading"}):n?null:i.a.createElement(O.a,{header:{title:u,iconType:"warning"},content:{error:n},expand:{expandable:!0,expandedOnFirstRender:!0},"data-test-subj":s.g},i.a.createElement(r.EuiInMemoryTable,{loading:t,items:a,columns:L,pagination:!0,message:o.A,"data-test-subj":s.f}))};q.displayName="RelatedCases";var B=n(1088),z=n(1089),$=n(1090),V=n(235),U=n(1091),G=n(1092),H=n(1093);const W=({documentId:e,indices:t,scopeId:n,eventId:a})=>{const{loading:r,error:c,data:u,dataCount:d}=Object(H.a)({documentId:e,indices:t,scopeId:n}),p=`${d} ${Object(l.a)(d)}`;return c?null:i.a.createElement(C,{title:p,loading:r,alertIds:u,scopeId:n,eventId:a,noItemsMessage:o.x,"data-test-subj":s.c})};W.displayName="RelatedAlertsByAncestry";var Q=n(243),Y=n(928);const K=({dataAsNestedObject:e,alertSuppressionCount:t})=>{const n=i.a.createElement(r.EuiFlexGroup,{alignItems:"center",gutterSize:"s"},i.a.createElement(r.EuiFlexItem,null,`${t} ${Object(l.e)(t)}`),i.a.createElement(r.EuiFlexItem,null,i.a.createElement(r.EuiBetaBadge,{label:Q.w,style:{verticalAlign:"middle"},size:"s","data-test-subj":s.F}))),a=t>0&&i.a.createElement("div",{"data-test-subj":`${s.h}InvestigateInTimeline`},i.a.createElement(Y.a,{ecsRowData:e,buttonType:"emptyButton"}));return i.a.createElement(O.a,{header:{title:n,iconType:"layers",headerContent:a},"data-test-subj":s.h})};K.displayName="SuppressedAlerts";const X="correlations-details",J=()=>{const{dataAsNestedObject:e,dataFormattedForFieldBrowser:t,eventId:n,getFieldsData:a,scopeId:l}=Object(V.b)(),{show:c,documentId:u,indices:d}=Object(z.a)({getFieldsData:a,dataAsNestedObject:e,dataFormattedForFieldBrowser:t}),{show:p,originalEventId:m}=Object(U.a)({getFieldsData:a}),{show:f,entityId:g}=Object(G.a)({getFieldsData:a}),b=Object(B.a)(),{show:y,alertSuppressionCount:h}=Object($.a)({getFieldsData:a}),v=c||p||f||b||y;return i.a.createElement(i.a.Fragment,null,v?i.a.createElement(r.EuiFlexGroup,{gutterSize:"l",direction:"column"},y&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(K,{alertSuppressionCount:h,dataAsNestedObject:e})),b&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(q,{eventId:n})),p&&m&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(N,{originalEventId:m,scopeId:l,eventId:n})),f&&g&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(F,{entityId:g,scopeId:l,eventId:n})),c&&u&&d&&i.a.createElement(r.EuiFlexItem,null,i.a.createElement(W,{documentId:u,indices:d,scopeId:l,eventId:n}))):i.a.createElement("div",{"data-test-subj":`${s.i}Error`},o.e))};J.displayName="CorrelationsDetails"},function(e,t,n){"use strict";n.d(t,"a",(function(){return h}));var a=n(40),i=n(2),r=n.n(i),o=n(129),s=n(4),l=n(102),c=n(344),u=n(8);const d=(e,t)=>e.checked?t.checked&&e.checked<=t.checked?1:-1:t.checked?1:0,p=(e,t)=>{const n=Object(u.intersection)(...e),a=Object(u.union)(...e);return Object(u.union)(a,t).map((e=>{let t={checked:void 0,"data-test-subj":"unselected-alert-tag"};return n.includes(e)?t={checked:"on","data-test-subj":"selected-alert-tag"}:a.includes(e)&&(t={checked:"mixed","data-test-subj":"mixed-alert-tag"}),{label:e,...t}})).sort(d)},m={selectableAlertTags:[],tagsToAdd:new Set,tagsToRemove:new Set},f=({alertItems:e,refresh:t,refetchQuery:n,setIsLoading:u,clearSelection:d,closePopoverMenu:f,onSubmit:g})=>{const[b]=Object(l.p)(s.w),y=Object(i.useMemo)((()=>e.map((e=>{var t,n;return null!==(t=null===(n=e.data.find((e=>e.field===o.kb)))||void 0===n?void 0:n.value)&&void 0!==t?t:[]}))),[e]),[{selectableAlertTags:h,tagsToAdd:v,tagsToRemove:E},x]=Object(i.useReducer)(((e,t)=>{switch(t.type){case"addAlertTag":{const{value:n}=t;return e.tagsToAdd.add(n),e.tagsToRemove.delete(n),e}case"removeAlertTag":{const{value:n}=t;return e.tagsToRemove.add(n),e.tagsToAdd.delete(n),e}case"setSelectableAlertTags":{const{value:n}=t;return{...e,selectableAlertTags:n}}default:return e}}),{...m,selectableAlertTags:p(y,b),tagsToAdd:new Set,tagsToRemove:new Set}),j=Object(i.useCallback)((e=>{x({type:"addAlertTag",value:e})}),[x]),O=Object(i.useCallback)((e=>{x({type:"removeAlertTag",value:e})}),[x]),S=Object(i.useCallback)((e=>{x({type:"setSelectableAlertTags",value:e})}),[x]),k=Object(i.useCallback)((async()=>{if(0===v.size&&0===E.size)return void f();const a=Array.from(v),i=Array.from(E),r=e.map((e=>e._id)),o={tags_to_add:a,tags_to_remove:i};null!=g&&(f(),await g(o,r,(()=>{n&&n(),t&&t(),d&&d()}),u))}),[f,v,E,e,n,t,d,u,g]),w=Object(i.useCallback)(((e,t,n)=>{"on"===n.checked?j(n.label):n.checked||O(n.label),S(e)}),[j,O,S]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(a.EuiSelectable,{searchable:!0,searchProps:{placeholder:c.h},"aria-label":c.h,options:h,onChange:w,emptyMessage:c.f,noMatchesMessage:c.g,"data-test-subj":"alert-tags-selectable-menu"},((e,t)=>r.a.createElement("div",null,r.a.createElement(a.EuiPopoverTitle,null,t),e))),r.a.createElement(a.EuiButton,{"data-test-subj":"alert-tags-update-button",fullWidth:!0,size:"s",onClick:k},c.c))},g=Object(i.memo)(f);var b=n(58),y=n(108);const h=({refetch:e})=>{const t=(()=>{const{http:e}=Object(b.useKibana)().services,{addSuccess:t,addError:n}=Object(y.a)(),a=Object(i.useRef)(null),r=Object(i.useCallback)((e=>t(c.w(e))),[t]),o=Object(i.useCallback)((e=>{n(e.message,{title:c.v})}),[n]);return Object(i.useEffect)((()=>{let e=!1;const t=new AbortController;return a.current=async(n,a,i,c)=>{try{c(!0);const o=await(async({tags:e,ids:t,signal:n})=>l.b.get().http.fetch(s.ab,{method:"POST",body:JSON.stringify({tags:e,ids:t}),signal:n}))({tags:n,ids:a,signal:t.signal});e||(i(),c(!1),r(o.items.length))}catch(t){e||(c(!1),o(t))}},()=>{e=!0,t.abort()}}),[e,o,r]),a.current})(),n=Object(i.useCallback)((async(e,n,a,i)=>{t&&await t(e,n,a,i)}),[t]),o=[{key:"manage-alert-tags","data-test-subj":"alert-tags-context-menu-item",name:c.d,panel:1,label:c.d,disableOnQuery:!0}],u=Object(i.useMemo)((()=>r.a.createElement(a.EuiFlexGroup,{alignItems:"center",gutterSize:"s",responsive:!1},r.a.createElement(a.EuiFlexItem,{grow:!1},c.d),r.a.createElement(a.EuiFlexItem,{grow:!1},r.a.createElement(a.EuiIconTip,{content:c.e,position:"right"})))),[]),d=Object(i.useCallback)((({alertItems:t,refresh:a,setIsBulkActionsLoading:i,clearSelection:o,closePopoverMenu:s})=>r.a.createElement(g,{alertItems:t,refresh:a,refetchQuery:e,setIsLoading:i,clearSelection:o,closePopoverMenu:s,onSubmit:n})),[n,e]);return{alertTagsItems:o,alertTagsPanels:Object(i.useMemo)((()=>[{id:1,title:u,"data-test-subj":"alert-tags-context-menu-panel",renderContent:d}]),[u,d])}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return M}));var a=n(2),i=n.n(a),r=n(3),o=n(41),s=n.n(o),l=n(130),c=n.n(l),u=n(40),d=n(13),p=n(72);const m=Object(a.memo)((({indexPattern:e,isLoading:t=!1,isRefreshPaused:n,filterQuery:r,filterManager:o,filters:s,refreshInterval:l,dataTestSubj:c,displayStyle:u})=>{const d=Object(a.useCallback)((e=>{o.setFilters(e)}),[o]),m=Object(a.useMemo)((()=>[e]),[e]);return i.a.createElement(p.SearchBar,{showSubmitButton:!1,filters:s,indexPatterns:m,isLoading:t,isRefreshPaused:n,query:r,onFiltersUpdated:d,refreshInterval:l,showAutoRefreshOnly:!1,showFilterBar:!0,showDatePicker:!1,showQueryInput:!1,showSaveQuery:!1,dataTestSubj:c,displayStyle:u})}));m.displayName="FilterBar";var f=n(108),g=n(371),b=n(8);const y=({ariaLabel:e,errors:t})=>{const[n,r]=Object(a.useState)(!1),o=Object(a.useCallback)((()=>{r(!n)}),[n]),s=Object(a.useCallback)((()=>{r(!1)}),[]);return i.a.createElement(u.EuiPopover,{"data-test-subj":"eql-validation-errors-popover",button:i.a.createElement(u.EuiButtonEmpty,{"data-test-subj":"eql-validation-errors-popover-button",iconType:"error",size:"s",color:"danger","aria-label":e,onClick:o},t.length),isOpen:n,closePopover:s,anchorPosition:"downCenter"},i.a.createElement("div",{"data-test-subj":"eql-validation-errors-popover-content"},i.a.createElement(u.EuiPopoverTitle,null,g.k),t.map(((e,t)=>i.a.createElement(u.EuiText,{key:t},e)))))};var h=n(102);const v=s()(u.EuiText).withConfig({displayName:"InlineText",componentId:"sc-yylwe5-0"})(["display:inline-block;"]),E=()=>{const e=Object(h.j)().services.docLinks.links.query.eql;return i.a.createElement(u.EuiLink,{external:!0,href:e,target:"_blank"},i.a.createElement(v,{size:"xs"},g.i))},x=s()(u.EuiPanel).withConfig({displayName:"Container",componentId:"sc-x7d5ta-0"})(["border-radius:0;background:",";padding:"," ",";"],(({theme:e})=>e.eui.euiPageBackgroundColor),(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiSizeS)),j=s()(u.EuiFlexGroup).withConfig({displayName:"FlexGroup",componentId:"sc-x7d5ta-1"})(["min-height:",";"],(({theme:e})=>e.eui.euiSizeXL)),O=s()(u.EuiFlexItem).withConfig({displayName:"FlexItemLeftBorder",componentId:"sc-x7d5ta-2"})(["border-left:1px solid ",";"],(({theme:e})=>e.eui.euiColorLightShade)),S=s()(u.EuiFlexItem).withConfig({displayName:"FlexItemWithMarginRight",componentId:"sc-x7d5ta-3"})(["margin-right:",";"],(({theme:e})=>e.eui.euiSizeS)),k=s()(u.EuiLoadingSpinner).withConfig({displayName:"Spinner",componentId:"sc-x7d5ta-4"})(["margin:0 ",";"],(({theme:e})=>e.eui.euiSizeS)),w={asPlainText:!0},I=({errors:e,isLoading:t,isSizeOptionDisabled:n,optionsData:r,optionsSelected:o,onOptionsChange:s})=>{var l;const[c,d]=Object(a.useState)(!1),[p,m]=Object(a.useState)(null!==(l=null==o?void 0:o.size)&&void 0!==l?l:100),f=Object(a.useRef)(),h=Object(a.useCallback)((()=>{d(!0)}),[]),v=Object(a.useCallback)((()=>{d(!1)}),[]),I=Object(a.useCallback)((e=>{s&&(e.length>0?s("eventCategoryField",e[0].label):s("eventCategoryField",void 0))}),[s]),T=Object(a.useCallback)((e=>{s&&(e.length>0?s("tiebreakerField",e[0].label):s("tiebreakerField",void 0))}),[s]),C=Object(a.useCallback)((e=>{s&&(e.length>0?s("timestampField",e[0].label):s("timestampField",void 0))}),[s]),M=Object(a.useCallback)((e=>{var t,n,a,i;s&&(m(null==e||null===(t=e.target)||void 0===t?void 0:t.value),null!==(n=f.current)&&void 0!==n&&n.cancel&&(null===(i=f.current)||void 0===i||i.cancel()),f.current=Object(b.debounce)((e=>s("size",e)),800),f.current(null==e||null===(a=e.target)||void 0===a?void 0:a.value))}),[s]),A=Object(a.useMemo)((()=>null!=(null==o?void 0:o.eventCategoryField)?[{label:null==o?void 0:o.eventCategoryField}]:void 0),[null==o?void 0:o.eventCategoryField]),_=Object(a.useMemo)((()=>null!=(null==o?void 0:o.tiebreakerField)?[{label:null==o?void 0:o.tiebreakerField}]:void 0),[null==o?void 0:o.tiebreakerField]),F=Object(a.useMemo)((()=>null!=(null==o?void 0:o.timestampField)?[{label:null==o?void 0:o.timestampField}]:void 0),[null==o?void 0:o.timestampField]);return i.a.createElement(x,null,i.a.createElement(j,{alignItems:"center",justifyContent:"spaceBetween",gutterSize:"none"},i.a.createElement(u.EuiFlexItem,null,e.length>0&&i.a.createElement(y,{ariaLabel:g.l,errors:e}),t&&i.a.createElement(k,{"data-test-subj":"eql-validation-loading",size:"m"})),!s&&i.a.createElement(u.EuiFlexItem,{grow:!1},i.a.createElement(E,null)),s&&i.a.createElement(i.a.Fragment,null,i.a.createElement(S,{grow:!1},i.a.createElement(E,null)),i.a.createElement(O,{grow:!1},i.a.createElement(u.EuiPopover,{button:i.a.createElement(u.EuiButtonIcon,{onClick:h,iconType:"controlsVertical",isDisabled:c,"aria-label":"eql settings","data-test-subj":"eql-settings-trigger"}),isOpen:c,closePopover:v,anchorPosition:"downCenter",ownFocus:!1},i.a.createElement(u.EuiPopoverTitle,null,g.j),i.a.createElement("div",{style:{width:"300px"}},!n&&i.a.createElement(u.EuiFormRow,{"data-test-subj":"eql-size-field",label:g.h,helpText:g.g},i.a.createElement(u.EuiFieldNumber,{value:p,onChange:M,min:1,max:1e4})),i.a.createElement(u.EuiFormRow,{"data-test-subj":"eql-event-category-field",label:g.b,helpText:g.a},i.a.createElement(u.EuiComboBox,{options:null==r?void 0:r.keywordFields,selectedOptions:A,singleSelection:w,onChange:I})),i.a.createElement(u.EuiFormRow,{"data-test-subj":"eql-tiebreaker-field",label:g.d,helpText:g.c},i.a.createElement(u.EuiComboBox,{options:null==r?void 0:r.nonDateFields,selectedOptions:_,singleSelection:w,onChange:T})),i.a.createElement(u.EuiFormRow,{"data-test-subj":"eql-timestamp-field",label:g.f,helpText:g.e},i.a.createElement(u.EuiComboBox,{options:null==r?void 0:r.dateFields,selectedOptions:F,singleSelection:w,onChange:C}))))))))};var T=n(750);const C=s()(u.EuiTextArea).withConfig({displayName:"TextArea",componentId:"sc-u3oqty-0"})(["display:block;border:",";border-bottom:0;box-shadow:none;min-height:",";"],(({theme:e})=>e.eui.euiBorderThin),(({theme:e})=>e.eui.euiFormControlHeight)),M=({dataTestSubj:e,field:t,isLoading:n=!1,indexPattern:o,showFilterBar:s,idAria:l,optionsData:p,optionsSelected:b,isSizeOptionDisabled:y,onOptionsChange:v,onValidityChange:E,onValiditingChange:x})=>{const{addError:j}=Object(f.a)(),[O,S]=Object(a.useState)([]),{isValidating:k,value:w,setValue:M}=t,{isValid:A,message:_,messages:F,error:D}=Object(T.c)(t),{uiSettings:N}=Object(h.j)().services,P=Object(a.useRef)(new d.FilterManager(N));Object(a.useEffect)((()=>{null!=E&&E(A)}),[A,E]),Object(a.useEffect)((()=>{S(null!=F?F:[])}),[F]),Object(a.useEffect)((()=>{D&&j(D,{title:g.m})}),[D,j]),Object(a.useEffect)((()=>{x&&x(k)}),[k,x]),Object(a.useEffect)((()=>{let e=!0;const t=new r.Subscription;return P.current.setFilters([]),t.add(P.current.getUpdates$().subscribe({next:()=>{if(e){const e=P.current.getFilters(),{filters:t}=w;c()(t,e)||M({...w,filters:e})}}})),()=>{e=!1,t.unsubscribe()}}),[w,P,M]),Object(a.useEffect)((()=>{const{filters:e}=w;c()(e,P.current.getFilters())||P.current.setFilters(e)}),[w,P]);const R=Object(a.useCallback)((e=>{const t=e.target.value;x&&x(!0),S([]),M({filters:w.filters,query:{query:t,language:"eql"},saved_id:null})}),[w,M,x]);return i.a.createElement(u.EuiFormRow,{label:t.label,labelAppend:t.labelAppend,helpText:t.helpText,error:_,isInvalid:!A&&!k,fullWidth:!0,"data-test-subj":e,describedByIds:l?[l]:void 0},i.a.createElement(i.a.Fragment,null,i.a.createElement(C,{"data-test-subj":"eqlQueryBarTextInput",fullWidth:!0,isInvalid:!A&&!k,value:w.query.query,onChange:R}),i.a.createElement(I,{errors:O,isLoading:k,isSizeOptionDisabled:y,optionsData:p,optionsSelected:b,onOptionsChange:v}),s&&i.a.createElement(i.a.Fragment,null,i.a.createElement(u.EuiSpacer,{size:"s"}),i.a.createElement(m,{"data-test-subj":"eqlFilterBar",indexPattern:o,isLoading:n,isRefreshPaused:!1,filterQuery:w.query,filterManager:P.current,filters:P.current.getFilters()||[],displayStyle:"inPage"}))))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return u}));var a=n(79),i=n(1379),r=n.n(i),o=n(42),s=n(5);const l=e=>{if(!e)return"";const t=e.split(".")[1];return t?Object(o.startCase)(t):""},c=async(e,t)=>{const n=await(async(e,t)=>{var n;const a=await(null===(n=t.get(e.actionTypeId))||void 0===n?void 0:n.validateParams(e.params));if(a){const e=Object.values(a.errors);if(e.length){const t=e.filter((e=>Object(o.isString)(e)||Object(o.isArray)(e))),n=Object(o.uniq)(Object(o.flattenDeep)(t));if(n.length)return n}}return[]})(e,t),i=(e=>{const t=[];return Object.entries(e).forEach((([e,n])=>{if(Object(o.isString)(n))try{r.a.render(n,{})}catch(n){t.push((e=>s.i18n.translate("xpack.securitySolution.detectionEngine.createRule.stepRuleActions.invalidMustacheTemplateErrorMessage",{defaultMessage:"{key} is not valid mustache template",values:{key:Object(o.startCase)(e)}}))(e))}})),t})(e.params),l=Object(a.validateActionFilterQuery)(e);return[...n,...i,...l?[l]:[]]},u=(e,t=100)=>n=>{let a=!1;const i=new Promise((i=>{setTimeout((()=>{a?i():i((e=>async(...t)=>{const[{value:n,path:a}]=t,i=[];for(const t of n){const n=await c(t,e);if(n.length){const e=l(t.actionTypeId),a=n.map((e=>`*   ${e}\n`));i.push(`\n**${e}:**\n${a.join("")}`)}}if(i.length)return{code:"ERR_FIELD_FORMAT",path:a,message:`${i.join("\n")}`}})(e)(n))}),t)}));return i.cancel=()=>{a=!0},i}},function(e,t,n){"use strict";n.d(t,"a",(function(){return r}));var a=n(5),i=n(41);n.n(i).a.span.withConfig({displayName:"UnitCount",componentId:"sc-1p6k0dy-0"})(["font-size:",";font-weight:",";border-right:",";margin-right:",";padding-right:",";"],(({theme:e})=>e.eui.euiFontSizeXS),(({theme:e})=>e.eui.euiFontWeightSemiBold),(({theme:e})=>e.eui.euiBorderThin),(({theme:e})=>e.eui.euiSizeS),(({theme:e})=>e.eui.euiSizeM));const r=e=>{return t=e,a.i18n.translate("xpack.securitySolution.eventsTab.unit",{values:{totalCount:t},defaultMessage:"{totalCount, plural, =1 {alert} other {alerts}}"});var t}},function(e,t,n){"use strict";n.d(t,"a",(function(){return x}));var a=n(2),i=n(1083),r=n(1084),o=n(49),s=n(46),l=n(102),c=n(498),u=n(115),d=n(110);const p="fieldNames",m="eventKind",f="hostName",g="userName",b="hosts",y="users",h=(e,t,n,a)=>{const i=Object(o.buildEsQuery)(void 0,[],[{query:{bool:{filter:[{range:{"@timestamp":{gte:t,lte:n}}}]}},meta:{}}]);return v(i,e,a)},v=(e,t,n)=>({params:{index:n,body:{query:e,aggs:{[p]:{filters:{filters:t},aggs:{[f]:{cardinality:{field:"host.name"}},[g]:{cardinality:{field:"user.name"}},[m]:{terms:{field:"event.kind",size:10}}}},[b]:{cardinality:{field:"host.name"}},[y]:{cardinality:{field:"user.name"}}},size:0}}});var E=n(1069);const x=({interval:e,dataFormattedForFieldBrowser:t,investigationFields:n})=>{const o=Object(i.a)({dataFormattedForFieldBrowser:t,investigationFields:n}),v=Object(a.useMemo)((()=>Object(r.a)(o)),[o]),{data:x,loading:j,error:O}=(({highlightedFieldsFilters:e,interval:{from:t,to:n}})=>{const{services:{data:{search:a}}}=Object(l.j)(),{selectedPatterns:i}=Object(c.a)(Object(u.isActiveTimeline)(d.SourcererScopeName.default)),r=h(e,t,n,i),{data:o,isLoading:p,isError:m}=Object(s.useQuery)(["useFetchFieldValuePairWithAggregation",e,t,n],(()=>(async(e,t)=>{let n;return new Promise(((a,i)=>{e.search(t).subscribe({next:e=>{n=e.rawResponse},complete:()=>{a(n)},error:e=>{i(e)}})}))})(a,r)));return{loading:p,error:m,data:o}})({highlightedFieldsFilters:v,interval:e}),S=[];if(x&&x.aggregations){const e=x.aggregations[b].value,t=x.aggregations[y].value;Object.keys(x.aggregations[p].buckets).forEach((n=>{var a;const i=o[n].values,r=(null===(a=x.aggregations[p].buckets[n][m].buckets.find((e=>e.key===E.a.signal)))||void 0===a?void 0:a.doc_count)||0;let s=0;x.aggregations[p].buckets[n][m].buckets.reduce(((e,t)=>(t.key!==E.a.signal&&(s+=t.doc_count),e)),s);const l=x.aggregations[p].buckets[n][f].value,c=x.aggregations[p].buckets[n][g].value,u=e?l/e:0,d=t?c/t:0;S.push({field:n,values:i,alertCount:r,docCount:s,hostPrevalence:u,userPrevalence:d})}))}return{loading:j,error:O,data:S}}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return x}));var a=n(2),i=n.n(a),r=n(40),o=n(1410),s=n.n(o),l=n(927),c=n(943),u=n(186),d=n(336),p=n(4),m=n(110),f=n(509),g=n(348),b=n(116),y=n(175),h=n(235),v=n(191);const E="threat-intelligence-details",x=()=>{const{enrichments:e,eventFields:t,isEnrichmentsLoading:n,isEventDataLoading:o,isLoading:E,range:x,setRange:j}=(()=>{const{indexName:e,eventId:t}=Object(h.b)(),[{pageName:n}]=Object(y.a)(),i=n===p.wc.detections?m.SourcererScopeName.detections:m.SourcererScopeName.default,r=Object(b.d)(i),[o,s]=Object(g.a)({indexName:e,eventId:t,runtimeMappings:r.runtimeMappings,skip:!t}),{isAlert:l}=Object(u.b)(s),c=Object(a.useMemo)((()=>s||[]),[s]),v=Object(a.useMemo)((()=>Object(d.b)(c||[])),[c]),{result:E,loading:x,setRange:j,range:O}=Object(f.c)(v),S=Object(a.useMemo)((()=>l?Object(d.f)(c).map((e=>Object(d.g)(e))):[]),[c,l]);return{enrichments:Object(a.useMemo)((()=>x||null==E||!E.enrichments?S:Object(d.a)([...S,...E.enrichments])),[x,E,S]),eventFields:v,isEnrichmentsLoading:x,isEventDataLoading:o,isLoading:x||o,range:O,setRange:j}})();return o?i.a.createElement(r.EuiFlexGroup,{justifyContent:"spaceAround","data-test-subj":v.G},i.a.createElement(r.EuiFlexItem,{grow:!1},i.a.createElement(r.EuiLoadingSpinner,{size:"m"}))):i.a.createElement(i.a.Fragment,null,i.a.createElement(c.a,{before:null,loading:E,enrichments:e,showInvestigationTimeEnrichments:!s()(t)},i.a.createElement(i.a.Fragment,null,i.a.createElement(l.a,{setRange:j,loading:n,range:x}),i.a.createElement(r.EuiSpacer,{size:"m"}))))};x.displayName="ThreatIntelligenceDetails"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u}));var a=n(2),i=n(216),r=n(113),o=n(5);const s=o.i18n.translate("xpack.securitySolution.networkDetails.errorSearchDescription",{defaultMessage:"An error has occurred on network details search"});o.i18n.translate("xpack.securitySolution.networkDetails.failSearchDescription",{defaultMessage:"Failed to run search on network details"});var l=n(194);const c="networkDetailsQuery",u=({filterQuery:e,id:t=c,indexNames:n,ip:o,skip:u})=>{const{loading:d,result:p,search:m,refetch:f,inspect:g}=Object(l.a)({factoryQueryType:r.r.details,initialResult:{networkDetails:{}},errorMessage:s,abort:u}),b=Object(a.useMemo)((()=>({networkDetails:p.networkDetails,id:t,inspect:g,isInspected:!1,refetch:f})),[t,g,f,p.networkDetails]),y=Object(a.useMemo)((()=>({defaultIndex:n,factoryQueryType:r.r.details,filterQuery:Object(i.a)(e),ip:o})),[e,n,o]);return Object(a.useEffect)((()=>{!u&&y&&m(y)}),[y,m,u]),[d,b]}},function(e,t,n){"use strict";n.d(t,"a",(function(){return b}));var a=n(40),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(676),c=n(268),u=n(106);const d=s()(a.EuiInputPopover).withConfig({displayName:"StyledEuiInputPopover",componentId:"sc-1feu4fu-0"})([".rightArrowIcon{.euiFieldText{padding-left:12px;padding-right:40px;&[readonly]{cursor:pointer;background-size:0 100%;background-repeat:no-repeat;&:focus{background-color:",";background-image:linear-gradient( to top,",","," 2px,transparent 2px,transparent 100% );background-size:100% 100%;}}}.euiFormControlLayoutIcons{left:unset;right:12px;}}"],(({theme:e})=>e.eui.euiFormBackgroundColor),(({theme:e})=>e.eui.euiFocusRingColor),(({theme:e})=>e.eui.euiFocusRingColor)),p=e=>[{description:c.a,favorite:[],label:c.b,id:void 0,title:c.b,checked:"-1"===e?"on":void 0}],m=({isDisabled:e,hideUntitled:t=!1,timelineId:n,timelineTitle:o,timelineType:s=u.l.template,onTimelineChange:m,placeholder:f})=>{const[g,b]=Object(i.useState)(!1),y=Object(i.useCallback)((()=>{b(!1)}),[]),h=Object(i.useCallback)((()=>{b(!0)}),[]),v=Object(i.useMemo)((()=>r.a.createElement(a.EuiFieldText,{readOnly:!0,disabled:e,onFocus:h,onClick:h,value:null!=o?o:c.b,icon:"arrowDown"})),[h,e,o]),E=Object(i.useCallback)((({timelines:e,onlyFavorites:a,searchTimelineValue:i})=>[...a||""!==i?[]:p(null==n?"-1":n),...e.filter((e=>!t||""!==e.title)).map(((e,t)=>({description:e.description,favorite:e.favorite,label:e.title,id:s===u.l.template?e.templateTimelineId:e.savedObjectId,key:`${e.title}-${t}`,title:e.title,checked:[e.savedObjectId,e.templateTimelineId].includes(n)?"on":void 0})))]),[t,n,s]);return r.a.createElement(d,{id:"searchTimelinePopover",input:v,isOpen:g,closePopover:y,anchorClassName:"rightArrowIcon"},r.a.createElement(l.a,{hideUntitled:t,getSelectableOptions:E,onClosePopover:y,onTimelineChange:m,timelineType:s,placeholder:f}))},f=Object(i.memo)(m);var g=n(125);const b=({dataTestSubj:e,field:t,idAria:n,isDisabled:o=!1,placeholder:s})=>{const[l,c]=Object(i.useState)(null),[u,d]=Object(i.useState)(null),{isInvalid:p,errorMessage:m}=Object(g.i)(t);Object(i.useEffect)((()=>{const{id:e,title:n}=t.value;l!==e&&(c(e),d(n))}),[t.value,l]);const b=Object(i.useCallback)(((e,n)=>{null===n?t.setValue({id:n,title:null}):l!==n&&t.setValue({id:n,title:e})}),[t,l]);return r.a.createElement(a.EuiFormRow,{label:t.label,labelAppend:t.labelAppend,helpText:t.helpText,error:m,isInvalid:p,"data-test-subj":e,describedByIds:n?[n]:void 0},r.a.createElement(f,{isDisabled:o,hideUntitled:!0,timelineId:l,timelineTitle:u,onTimelineChange:b,placeholder:s}))}},function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n(693),r=n(185),o=n(5);const s=o.i18n.translate("xpack.securitySolution.endpoint.detections.takeAction.responseActionConsole.notSupportedTooltip",{defaultMessage:"Add the Elastic Defend integration via Elastic Agent to enable this feature"}),l=o.i18n.translate("xpack.securitySolution.endpoint.detections.takeAction.responseActionConsole.unenrolledTooltip",{defaultMessage:"Host is no longer enrolled with the Elastic Defend integration"}),c=o.i18n.translate("xpack.securitySolution.endpoint.detections.takeAction.responseActionConsole.loadingTooltip",{defaultMessage:"Loading"}),u=o.i18n.translate("xpack.securitySolution.endpoint.detections.takeAction.responseActionConsole.generalMetadataErrorTooltip",{defaultMessage:"Failed to retrieve Endpoint metadata"}),d=({endpointId:e,onClick:t})=>{const n=Object(i.d)(),{data:o,isFetching:d,error:p}=Object(i.c)(e,{enabled:Boolean(e)}),[m,f]=Object(a.useMemo)((()=>{var e,t,n;return d?[!0,c]:p&&404===(null===(e=p.body)||void 0===e?void 0:e.statusCode)?[!0,s]:p&&400===(null===(t=p.body)||void 0===t?void 0:t.statusCode)&&null!==(n=p.body)&&void 0!==n&&n.message.includes("unenrolled")||(null==o?void 0:o.host_status)===r.c.UNENROLLED?[!0,l]:p?[!0,u]:[!1,void 0]}),[o,p,d]);return{handleResponseActionsClick:Object(a.useCallback)((()=>{o&&n(o.metadata),t&&t()}),[o,t,n]),isDisabled:m,tooltip:f}}},,function(e,t,n){"use strict";n.d(t,"a",(function(){return d}));var a=n(2),i=n(8),r=n(1284),o=n.n(r);const s=(e,t)=>null==t?`${Object(i.capitalize)(e)}`:`${Object(i.capitalize)(e)} ${Object(i.capitalize)(t)}`,l=e=>{var t;return null!==(t=o.a.valid(o.a.coerce(e)))&&void 0!==t?t:""},c=(e,t,n)=>`app/integrations/detail/${n?`${e}-${n}`:e}/overview${t?`?integration=${t}`:""}`;var u=n(872);const d=e=>{const{data:t}=Object(u.a)({packages:[]});return Object(a.useMemo)((()=>{const n=((e,t)=>((e,t)=>e.map((e=>{if(null==t)return{related:e,installed:null,isLoaded:!1};{const n=t.find((t=>t.package_name===e.package&&(null==t?void 0:t.integration_name)===(null==e?void 0:e.integration)));return{related:e,installed:null!=n?n:null,isLoaded:!0}}})))(e,t).map((e=>(e=>{var t;const{related:n,installed:a,isLoaded:i}=e,r=n.package,u=null!==(t=n.integration)&&void 0!==t?t:null,d=n.version;if(!i){const e=s(r,u),t=l(d);return{packageName:r,integrationName:u,integrationTitle:e,requiredVersion:d,targetVersion:t,targetUrl:c(r,u,t),installationStatus:{isKnown:!1}}}if(null==a){const e=s(r,u),t=l(d);return{packageName:r,integrationName:u,integrationTitle:e,requiredVersion:d,targetVersion:t,targetUrl:c(r,u,t),installationStatus:{isKnown:!0,isInstalled:!1,isEnabled:!1,isVersionMismatch:!1,installedVersion:""}}}{var p;const e=null!==(p=a.integration_title)&&void 0!==p?p:a.package_title,t=a.package_version,n=o.a.satisfies(t,d),i=n?t:l(d);return{packageName:r,integrationName:u,integrationTitle:e,requiredVersion:d,targetVersion:i,targetUrl:c(r,u,i),installationStatus:{isKnown:!0,isInstalled:!0,isEnabled:a.is_enabled,isVersionMismatch:!n,installedVersion:t}}}})(e))).sort(((e,t)=>e.integrationTitle.localeCompare(t.integrationTitle))))(e,t);return{integrations:n,isLoaded:null!=t}}),[e,t])}},function(e,t,n){"use strict";n.d(t,"a",(function(){return y}));var a=n(104),i=n.n(a),r=n(2),o=n.n(r),s=n(40),l=n(41),c=n.n(l),u=n(44),d=n(47),p=n(107),m=n(173);const f=c.a.div.withConfig({displayName:"RootContainer",componentId:"sc-ptw6hp-0"})(["position:relative;padding-top:",";.body{min-height:",";&-content{position:relative;}}"],(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiSizeXXL)),g=Object(r.memo)((({"data-test-subj":e})=>o.a.createElement(s.EuiEmptyPrompt,{"data-test-subj":e,title:o.a.createElement(u.FormattedMessage,{id:"xpack.securitySolution.endpoint.paginatedContent.noItemsFoundTitle",defaultMessage:"No items found"})})));g.displayName="DefaultNoItemsFound";const b=Object(r.memo)((({message:e,"data-test-subj":t})=>o.a.createElement(s.EuiText,{textAlign:"center","data-test-subj":t},o.a.createElement(s.EuiSpacer,{size:"m"}),o.a.createElement(s.EuiIcon,{type:"minusInCircle",color:"danger"})," ",e,o.a.createElement(s.EuiSpacer,{size:"m"}))));b.displayName="ErrorMessage";const y=Object(r.memo)((({items:e,ItemComponent:t,itemComponentProps:n,itemId:a,onChange:l,pagination:c,loading:u,noItemsMessage:y,error:h,contentClassName:v,"data-test-subj":E,"aria-label":x,className:j,children:O})=>{const[S]=Object(r.useState)(new WeakMap),k=Object(p.a)(E),w=Object(r.useMemo)((()=>Math.ceil(((null==c?void 0:c.totalItemCount)||1)/((null==c?void 0:c.pageSize)||1))),[null==c?void 0:c.pageSize,null==c?void 0:c.totalItemCount]);Object(r.useEffect)((()=>{!u&&w>0&&w<((null==c?void 0:c.pageIndex)||0)+1&&l({pageIndex:w-1,pageSize:(null==c?void 0:c.pageSize)||0})}),[w,l,c,u]);const I=Object(r.useCallback)((e=>{if(null!=c&&c.pageIndex){var t,n;const a=Math.floor((null!==(t=null==c?void 0:c.pageIndex)&&void 0!==t?t:m.b)*(null!==(n=null==c?void 0:c.pageSize)&&void 0!==n?n:m.c)/e);l({pageSize:e,pageIndex:isNaN(a)?m.b:a})}else l({pageSize:e,pageIndex:m.b})}),[l,c]),T=Object(r.useCallback)((e=>{l({pageIndex:e,pageSize:(null==c?void 0:c.pageSize)||m.c})}),[l,null==c?void 0:c.pageSize]),C=Object(r.useMemo)((()=>{if(h)return h instanceof Error?o.a.createElement(b,{message:h.message,"data-test-subj":k("error")}):"string"==typeof h?o.a.createElement(b,{message:h,"data-test-subj":k("error")}):h;const r=t;return e.length?e.map((e=>{let t;return a?t=e[a]:S.has(e)?t=S.get(e):(t=Object(d.v4)(),S.set(e,t)),o.a.createElement(r,i()({},n(e),{key:t}))})):u?void 0:y||o.a.createElement(g,{"data-test-subj":k("noResults")})}),[t,h,k,n,a,S,e,y,u]);return o.a.createElement(f,{"data-test-subj":E,"aria-label":x,className:j},u&&o.a.createElement(s.EuiProgress,{size:"xs",color:"primary",position:"absolute","data-test-subj":k("loader")}),o.a.createElement("div",{className:"body","data-test-subj":k("body")},o.a.createElement("div",{className:`body-content ${v}`},O||C)),c&&(O||e.length>0)&&o.a.createElement("div",{"data-test-subj":k("footer")},o.a.createElement(s.EuiSpacer,{size:"l"}),o.a.createElement(s.EuiTablePagination,{activePage:c.pageIndex,itemsPerPage:c.pageSize,itemsPerPageOptions:c.pageSizeOptions,pageCount:w,showPerPageOptions:c.showPerPageOptions,onChangeItemsPerPage:I,onChangePage:T})))}));y.displayName="PaginatedContent"},,function(e,t,n){"use strict";const a=n(1138),i={codes:new Map([[100,"Continue"],[101,"Switching Protocols"],[102,"Processing"],[200,"OK"],[201,"Created"],[202,"Accepted"],[203,"Non-Authoritative Information"],[204,"No Content"],[205,"Reset Content"],[206,"Partial Content"],[207,"Multi-Status"],[300,"Multiple Choices"],[301,"Moved Permanently"],[302,"Moved Temporarily"],[303,"See Other"],[304,"Not Modified"],[305,"Use Proxy"],[307,"Temporary Redirect"],[400,"Bad Request"],[401,"Unauthorized"],[402,"Payment Required"],[403,"Forbidden"],[404,"Not Found"],[405,"Method Not Allowed"],[406,"Not Acceptable"],[407,"Proxy Authentication Required"],[408,"Request Time-out"],[409,"Conflict"],[410,"Gone"],[411,"Length Required"],[412,"Precondition Failed"],[413,"Request Entity Too Large"],[414,"Request-URI Too Large"],[415,"Unsupported Media Type"],[416,"Requested Range Not Satisfiable"],[417,"Expectation Failed"],[418,"I'm a teapot"],[422,"Unprocessable Entity"],[423,"Locked"],[424,"Failed Dependency"],[425,"Too Early"],[426,"Upgrade Required"],[428,"Precondition Required"],[429,"Too Many Requests"],[431,"Request Header Fields Too Large"],[451,"Unavailable For Legal Reasons"],[500,"Internal Server Error"],[501,"Not Implemented"],[502,"Bad Gateway"],[503,"Service Unavailable"],[504,"Gateway Time-out"],[505,"HTTP Version Not Supported"],[506,"Variant Also Negotiates"],[507,"Insufficient Storage"],[509,"Bandwidth Limit Exceeded"],[510,"Not Extended"],[511,"Network Authentication Required"]])};t.Boom=class extends Error{constructor(e,n={}){if(e instanceof Error)return t.boomify(a.clone(e),n);const{statusCode:r=500,data:o=null,ctor:s=t.Boom}=n,l=new Error(e||void 0);Error.captureStackTrace(l,s),l.data=o;const c=i.initialize(l,r);return Object.defineProperty(c,"typeof",{value:s}),n.decorate&&Object.assign(c,n.decorate),c}static[Symbol.hasInstance](e){return this===t.Boom?t.isBoom(e):this.prototype.isPrototypeOf(e)}},t.isBoom=function(e,t){return e instanceof Error&&!!e.isBoom&&(!t||e.output.statusCode===t)},t.boomify=function(e,t){return a.assert(e instanceof Error,"Cannot wrap non-Error object"),void 0!==(t=t||{}).data&&(e.data=t.data),t.decorate&&Object.assign(e,t.decorate),e.isBoom?!1===t.override||!t.statusCode&&!t.message?e:i.initialize(e,t.statusCode||e.output.statusCode,t.message):i.initialize(e,t.statusCode||500,t.message)},t.badRequest=function(e,n){return new t.Boom(e,{statusCode:400,data:n,ctor:t.badRequest})},t.unauthorized=function(e,n,i){const r=new t.Boom(e,{statusCode:401,ctor:t.unauthorized});if(!n)return r;if("string"!=typeof n)return r.output.headers["WWW-Authenticate"]=n.join(", "),r;let o=`${n}`;return(i||e)&&(r.output.payload.attributes={}),i&&("string"==typeof i?(o+=" "+a.escapeHeaderAttribute(i),r.output.payload.attributes=i):o+=" "+Object.keys(i).map((e=>{let t=i[e];return null==t&&(t=""),r.output.payload.attributes[e]=t,`${e}="${a.escapeHeaderAttribute(t.toString())}"`})).join(", ")),e?(i&&(o+=","),o+=` error="${a.escapeHeaderAttribute(e)}"`,r.output.payload.attributes.error=e):r.isMissing=!0,r.output.headers["WWW-Authenticate"]=o,r},t.paymentRequired=function(e,n){return new t.Boom(e,{statusCode:402,data:n,ctor:t.paymentRequired})},t.forbidden=function(e,n){return new t.Boom(e,{statusCode:403,data:n,ctor:t.forbidden})},t.notFound=function(e,n){return new t.Boom(e,{statusCode:404,data:n,ctor:t.notFound})},t.methodNotAllowed=function(e,n,a){const i=new t.Boom(e,{statusCode:405,data:n,ctor:t.methodNotAllowed});return"string"==typeof a&&(a=[a]),Array.isArray(a)&&(i.output.headers.Allow=a.join(", ")),i},t.notAcceptable=function(e,n){return new t.Boom(e,{statusCode:406,data:n,ctor:t.notAcceptable})},t.proxyAuthRequired=function(e,n){return new t.Boom(e,{statusCode:407,data:n,ctor:t.proxyAuthRequired})},t.clientTimeout=function(e,n){return new t.Boom(e,{statusCode:408,data:n,ctor:t.clientTimeout})},t.conflict=function(e,n){return new t.Boom(e,{statusCode:409,data:n,ctor:t.conflict})},t.resourceGone=function(e,n){return new t.Boom(e,{statusCode:410,data:n,ctor:t.resourceGone})},t.lengthRequired=function(e,n){return new t.Boom(e,{statusCode:411,data:n,ctor:t.lengthRequired})},t.preconditionFailed=function(e,n){return new t.Boom(e,{statusCode:412,data:n,ctor:t.preconditionFailed})},t.entityTooLarge=function(e,n){return new t.Boom(e,{statusCode:413,data:n,ctor:t.entityTooLarge})},t.uriTooLong=function(e,n){return new t.Boom(e,{statusCode:414,data:n,ctor:t.uriTooLong})},t.unsupportedMediaType=function(e,n){return new t.Boom(e,{statusCode:415,data:n,ctor:t.unsupportedMediaType})},t.rangeNotSatisfiable=function(e,n){return new t.Boom(e,{statusCode:416,data:n,ctor:t.rangeNotSatisfiable})},t.expectationFailed=function(e,n){return new t.Boom(e,{statusCode:417,data:n,ctor:t.expectationFailed})},t.teapot=function(e,n){return new t.Boom(e,{statusCode:418,data:n,ctor:t.teapot})},t.badData=function(e,n){return new t.Boom(e,{statusCode:422,data:n,ctor:t.badData})},t.locked=function(e,n){return new t.Boom(e,{statusCode:423,data:n,ctor:t.locked})},t.failedDependency=function(e,n){return new t.Boom(e,{statusCode:424,data:n,ctor:t.failedDependency})},t.tooEarly=function(e,n){return new t.Boom(e,{statusCode:425,data:n,ctor:t.tooEarly})},t.preconditionRequired=function(e,n){return new t.Boom(e,{statusCode:428,data:n,ctor:t.preconditionRequired})},t.tooManyRequests=function(e,n){return new t.Boom(e,{statusCode:429,data:n,ctor:t.tooManyRequests})},t.illegal=function(e,n){return new t.Boom(e,{statusCode:451,data:n,ctor:t.illegal})},t.internal=function(e,n,a=500){return i.serverError(e,n,a,t.internal)},t.notImplemented=function(e,n){return i.serverError(e,n,501,t.notImplemented)},t.badGateway=function(e,n){return i.serverError(e,n,502,t.badGateway)},t.serverUnavailable=function(e,n){return i.serverError(e,n,503,t.serverUnavailable)},t.gatewayTimeout=function(e,n){return i.serverError(e,n,504,t.gatewayTimeout)},t.badImplementation=function(e,n){const a=i.serverError(e,n,500,t.badImplementation);return a.isDeveloperError=!0,a},i.initialize=function(e,t,n){const r=parseInt(t,10);if(a.assert(!isNaN(r)&&r>=400,"First argument must be a number (400+):",t),e.isBoom=!0,e.isServer=r>=500,e.hasOwnProperty("data")||(e.data=null),e.output={statusCode:r,payload:{},headers:{}},Object.defineProperty(e,"reformat",{value:i.reformat,configurable:!0}),n||e.message||(e.reformat(),n=e.output.payload.error),n){const t=Object.getOwnPropertyDescriptor(e,"message")||Object.getOwnPropertyDescriptor(Object.getPrototypeOf(e),"message");a.assert(!t||t.configurable&&!t.get,"The error is not compatible with boom"),e.message=n+(e.message?": "+e.message:""),e.output.payload.message=e.message}return e.reformat(),e},i.reformat=function(e=!1){this.output.payload.statusCode=this.output.statusCode,this.output.payload.error=i.codes.get(this.output.statusCode)||"Unknown",500===this.output.statusCode&&!0!==e?this.output.payload.message="An internal server error occurred":this.message&&(this.output.payload.message=this.message)},i.serverError=function(e,n,a,i){return n instanceof Error&&!n.isBoom?t.boomify(n,{statusCode:a,message:e}):new t.Boom(e,{statusCode:a,data:n,ctor:i})}},function(e,t,n){"use strict";t.applyToDefaults=n(1139),t.assert=n(301),t.Bench=n(1140),t.block=n(1141),t.clone=n(539),t.contain=n(1142),t.deepEqual=n(767),t.Error=n(762),t.escapeHeaderAttribute=n(1143),t.escapeHtml=n(1144),t.escapeJson=n(1145),t.escapeRegex=n(768),t.flatten=n(1146),t.ignore=n(766),t.intersect=n(1147),t.isPromise=n(1148),t.merge=n(765),t.once=n(1149),t.reach=n(426),t.reachTemplate=n(1150),t.stringify=n(763),t.wait=n(1151)},function(e,t,n){"use strict";const a=n(301),i=n(539),r=n(765),o=n(426),s={};e.exports=function(e,t,n={}){if(a(e&&"object"==typeof e,"Invalid defaults value: must be an object"),a(!t||!0===t||"object"==typeof t,"Invalid source value: must be true, falsy or an object"),a("object"==typeof n,"Invalid options: must be an object"),!t)return null;if(n.shallow)return s.applyToDefaultsWithShallow(e,t,n);const o=i(e);if(!0===t)return o;const l=void 0!==n.nullOverride&&n.nullOverride;return r(o,t,{nullOverride:l,mergeArrays:!1})},s.applyToDefaultsWithShallow=function(e,t,n){const l=n.shallow;a(Array.isArray(l),"Invalid keys");const c=new Map,u=!0===t?null:new Set;for(let n of l){n=Array.isArray(n)?n:n.split(".");const a=o(e,n);a&&"object"==typeof a?c.set(a,u&&o(t,n)||a):u&&u.add(n)}const d=i(e,{},c);if(!u)return d;for(const e of u)s.reachCopy(d,t,e);const p=void 0!==n.nullOverride&&n.nullOverride;return r(d,t,{nullOverride:p,mergeArrays:!1})},s.reachCopy=function(e,t,n){for(const e of n){if(!(e in t))return;const n=t[e];if("object"!=typeof n||null===n)return;t=n}const a=t;let i=e;for(let e=0;e<n.length-1;++e){const t=n[e];"object"!=typeof i[t]&&(i[t]={}),i=i[t]}i[n[n.length-1]]=a}},function(e,t,n){"use strict";(function(t){const n={};e.exports=n.Bench=class{constructor(){this.ts=0,this.reset()}reset(){this.ts=n.Bench.now()}elapsed(){return n.Bench.now()-this.ts}static now(){const e=t.hrtime();return 1e3*e[0]+e[1]/1e6}}}).call(this,n(404))},function(e,t,n){"use strict";const a=n(766);e.exports=function(){return new Promise(a)}},function(e,t,n){"use strict";const a=n(301),i=n(767),r=n(768),o=n(540),s={};e.exports=function(e,t,n={}){return"object"!=typeof t&&(t=[t]),a(!Array.isArray(t)||t.length,"Values array cannot be empty"),"string"==typeof e?s.string(e,t,n):Array.isArray(e)?s.array(e,t,n):(a("object"==typeof e,"Reference must be string or an object"),s.object(e,t,n))},s.array=function(e,t,n){if(Array.isArray(t)||(t=[t]),!e.length)return!1;if(n.only&&n.once&&e.length!==t.length)return!1;let a;const i=new Map;for(const e of t)if(n.deep&&e&&"object"==typeof e){a=a||s.compare(n);let t=!1;for(const[n,r]of i.entries())if(a(n,e)){++r.allowed,t=!0;break}t||i.set(e,{allowed:1,hits:0})}else{const t=i.get(e);t?++t.allowed:i.set(e,{allowed:1,hits:0})}let r=0;for(const t of e){let e;if(n.deep&&t&&"object"==typeof t){a=a||s.compare(n);for(const[n,r]of i.entries())if(a(n,t)){e=r;break}}else e=i.get(t);if(e&&(++e.hits,++r,n.once&&e.hits>e.allowed))return!1}if(n.only&&r!==e.length)return!1;for(const e of i.values())if(e.hits!==e.allowed&&e.hits<e.allowed&&!n.part)return!1;return!!r},s.object=function(e,t,n){a(void 0===n.once,"Cannot use option once with object");const i=o.keys(e,n);if(!i.length)return!1;if(Array.isArray(t))return s.array(i,t,n);const r=Object.getOwnPropertySymbols(t).filter((e=>t.propertyIsEnumerable(e))),l=[...Object.keys(t),...r],c=s.compare(n),u=new Set(l);for(const a of i)if(u.has(a)){if(!c(t[a],e[a]))return!1;u.delete(a)}else if(n.only)return!1;return!u.size||!!n.part&&u.size<l.length},s.string=function(e,t,n){if(""===e)return 1===t.length&&""===t[0]||!n.once&&!t.some((e=>""!==e));const i=new Map,o=[];for(const e of t)if(a("string"==typeof e,"Cannot compare string reference to non-string value"),e){const t=i.get(e);t?++t.allowed:(i.set(e,{allowed:1,hits:0}),o.push(r(e)))}else if(n.once||n.only)return!1;if(!o.length)return!0;const s=new RegExp(`(${o.join("|")})`,"g"),l=e.replace(s,((e,t)=>(++i.get(t).hits,"")));if(n.only&&l)return!1;let c=!1;for(const e of i.values())if(e.hits&&(c=!0),e.hits!==e.allowed){if(e.hits<e.allowed&&!n.part)return!1;if(n.once)return!1}return!!c},s.compare=function(e){if(!e.deep)return s.shallow;const t=void 0!==e.only,n=void 0!==e.part,a={prototype:t?e.only:!!n&&!e.part,part:t?!e.only:!!n&&e.part};return(e,t)=>i(e,t,a)},s.shallow=function(e,t){return e===t}},function(e,t,n){"use strict";const a=n(301);e.exports=function(e){return a(/^[ \w\!#\$%&'\(\)\*\+,\-\.\/\:;<\=>\?@\[\]\^`\{\|\}~\"\\]*$/.test(e),"Bad attribute value ("+e+")"),e.replace(/\\/g,"\\\\").replace(/\"/g,'\\"')}},function(e,t,n){"use strict";const a={};e.exports=function(e){if(!e)return"";let t="";for(let n=0;n<e.length;++n){const i=e.charCodeAt(n);a.isSafe(i)?t+=e[n]:t+=a.escapeHtmlChar(i)}return t},a.escapeHtmlChar=function(e){const t=a.namedHtml[e];return void 0!==t?t:e>=256?"&#"+e+";":`&#x${e.toString(16).padStart(2,"0")};`},a.isSafe=function(e){return void 0!==a.safeCharCodes[e]},a.namedHtml={38:"&amp;",60:"&lt;",62:"&gt;",34:"&quot;",160:"&nbsp;",162:"&cent;",163:"&pound;",164:"&curren;",169:"&copy;",174:"&reg;"},a.safeCharCodes=function(){const e={};for(let t=32;t<123;++t)(t>=97||t>=65&&t<=90||t>=48&&t<=57||32===t||46===t||44===t||45===t||58===t||95===t)&&(e[t]=null);return e}()},function(e,t,n){"use strict";e.exports=function(e){if(!e)return"";let t;return e.replace(/[<>&\u2028\u2029]/g,(e=>(t=e.charCodeAt(0),60===t?"\\u003c":62===t?"\\u003e":38===t?"\\u0026":8232===t?"\\u2028":"\\u2029")))}},function(e,t,n){"use strict";const a={};e.exports=a.flatten=function(e,t){const n=t||[];for(let t=0;t<e.length;++t)Array.isArray(e[t])?a.flatten(e[t],n):n.push(e[t]);return n}},function(e,t,n){"use strict";const a={};e.exports=function(e,t,n={}){if(!e||!t)return n.first?null:[];const i=[],r=Array.isArray(e)?new Set(e):e,o=new Set;for(const e of t)if(a.has(r,e)&&!o.has(e)){if(n.first)return e;i.push(e),o.add(e)}return n.first?null:i},a.has=function(e,t){return"function"==typeof e.has?e.has(t):void 0!==e[t]}},function(e,t,n){"use strict";e.exports=function(e){return!!e&&"function"==typeof e.then}},function(e,t,n){"use strict";e.exports=function(e){if(e._hoekOnce)return e;let t=!1;const n=function(...n){t||(t=!0,e(...n))};return n._hoekOnce=!0,n}},function(e,t,n){"use strict";const a=n(426);e.exports=function(e,t,n){return t.replace(/{([^{}]+)}/g,((t,i)=>{const r=a(e,i,n);return null==r?"":r}))}},function(e,t,n){"use strict";e.exports=function(e,t){if("number"!=typeof e&&void 0!==e)throw new TypeError("Timeout must be a number");return new Promise((n=>setTimeout(n,e,t)))}},function(e,t,n){"use strict";e.exports=e=>encodeURIComponent(e).replace(/[!'()*]/g,(e=>`%${e.charCodeAt(0).toString(16).toUpperCase()}`))},function(e,t,n){"use strict";var a="%[a-f0-9]{2}",i=new RegExp("("+a+")|([^%]+?)","gi"),r=new RegExp("("+a+")+","gi");function o(e,t){try{return[decodeURIComponent(e.join(""))]}catch(e){}if(1===e.length)return e;t=t||1;var n=e.slice(0,t),a=e.slice(t);return Array.prototype.concat.call([],o(n),o(a))}function s(e){try{return decodeURIComponent(e)}catch(a){for(var t=e.match(i)||[],n=1;n<t.length;n++)t=(e=o(t,n).join("")).match(i)||[];return e}}e.exports=function(e){if("string"!=typeof e)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof e+"`");try{return e=e.replace(/\+/g," "),decodeURIComponent(e)}catch(t){return function(e){for(var t={"%FE%FF":"��","%FF%FE":"��"},n=r.exec(e);n;){try{t[n[0]]=decodeURIComponent(n[0])}catch(e){var a=s(n[0]);a!==n[0]&&(t[n[0]]=a)}n=r.exec(e)}t["%C2"]="�";for(var i=Object.keys(t),o=0;o<i.length;o++){var l=i[o];e=e.replace(new RegExp(l,"g"),t[l])}return e}(e)}}},function(e,t,n){"use strict";e.exports=(e,t)=>{if("string"!=typeof e||"string"!=typeof t)throw new TypeError("Expected the arguments to be of type `string`");if(""===t)return[e];const n=e.indexOf(t);return-1===n?[e]:[e.slice(0,n),e.slice(n+t.length)]}},function(e,t){e.exports=function(){var e=document.getSelection();if(!e.rangeCount)return function(){};for(var t=document.activeElement,n=[],a=0;a<e.rangeCount;a++)n.push(e.getRangeAt(a));switch(t.tagName.toUpperCase()){case"INPUT":case"TEXTAREA":t.blur();break;default:t=null}return e.removeAllRanges(),function(){"Caret"===e.type&&e.removeAllRanges(),e.rangeCount||n.forEach((function(t){e.addRange(t)})),t&&t.focus()}}},function(e,t,n){e.exports=n(33)(1459)},function(e,t,n){e.exports=n(33)(2963)},function(e,t,n){e.exports=n(33)(2977)},function(e,t,n){e.exports=n(33)(2972)},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.createEpicMiddleware=void 0;var a=n(3),i=n(60),r=n(773);n(548),t.createEpicMiddleware=function(e){void 0===e&&(e={});var t,n=new(0,a.queueScheduler.constructor)(a.queueScheduler.schedulerActionCtor),o=new a.Subject,s=function(s){t=s;var l=new a.Subject,c=new a.Subject,u=l.asObservable().pipe(i.observeOn(n)),d=new r.StateObservable(c.pipe(i.observeOn(n)),t.getState());return o.pipe(i.map((function(t){var n=t(u,d,e.dependencies);if(!n)throw new TypeError('Your root Epic "'+(t.name||"<anonymous>")+"\" does not return a stream. Double check you're not missing a return statement!");return n})),i.mergeMap((function(e){return a.from(e).pipe(i.subscribeOn(n),i.observeOn(n))}))).subscribe(t.dispatch),function(e){return function(n){var a=e(n);return c.next(t.getState()),l.next(n),a}}};return s.run=function(e){o.next(e)},s}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.combineEpics=void 0;var a=n(3);t.combineEpics=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];var n=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return a.merge.apply(void 0,e.map((function(e){var n=e.apply(void 0,t);if(!n)throw new TypeError('combineEpics: one of the provided Epics "'+(e.name||"<anonymous>")+"\" does not return a stream. Double check you're not missing a return statement!");return n})))};try{Object.defineProperty(n,"name",{value:"combineEpics("+e.map((function(e){return e.name||"<anonymous>"})).join(", ")+")"})}catch(e){}return n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ofType=void 0;var a=n(60),i=(n(548),function(e,t){return e===t||"function"==typeof t&&e===t.toString()});t.ofType=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];var n=e.length;return a.filter(1===n?function(t){return i(t.type,e[0])}:function(t){for(var a=0;a<n;a++)if(i(t.type,e[a]))return!0;return!1})}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){return function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return a.useMemo((function(){return e.apply(void 0,t)}),t)}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){var n=a.createContext(void 0);return[function(){var e=a.useContext(n);if(null==e)throw new Error("useReducerContext must be used inside a ReducerProvider.");return e},function(i){var r=i.children,o=i.initialState;return function(e,t){return a.createElement(n.Provider,e,t)}({value:a.useReducer(e,void 0!==o?o:t)},r)},n]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(359));t.default=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];var n,a=(n=e,function(e,t){return n.reduceRight((function(t,n){return n(e)(t)}),t)});return function(e,t,n){void 0===n&&(n=function(e){return e});var o=i.useRef(n(t)),s=i.useState(o.current)[1],l=i.useCallback((function(t){return o.current=e(o.current,t),s(o.current),t}),[e]),c=i.useRef(a({getState:function(){return o.current},dispatch:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return c.current.apply(c,e)}},l));return r.default((function(){c.current=a({getState:function(){return o.current},dispatch:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return c.current.apply(c,e)}},l)}),[l]),[o.current,c.current]}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){var t=a.createContext(void 0);return[function(){var e=a.useContext(t);if(null==e)throw new Error("useStateContext must be used inside a StateProvider.");return e},function(n){var i=n.children,r=n.initialValue;return function(e,n){return a.createElement(t.Provider,e,n)}({value:a.useState(void 0!==r?r:e)},i)},t]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(544));t.default=function(e,t){void 0===t&&(t=[]);var n=i.useState(0),o=n[0],s=n[1],l=r.default(e,a.__spreadArrays(t,[o])),c=l.loading,u=i.useCallback((function(){c||s((function(e){return e+1}))}),a.__spreadArrays(t,[c]));return a.__assign(a.__assign({},l),{retry:u})}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(778)).default("audio");t.default=a},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){for(var t=[],n=0;n<e.length;n++)t.push({start:e.start(n),end:e.end(n)});return t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r="object"==typeof navigator?navigator:void 0,o=r&&"function"==typeof r.getBattery;t.default=o?function(){var e=a.useState({isSupported:!0,fetched:!1}),t=e[0],n=e[1];return a.useEffect((function(){var e=!0,a=null,o=function(){if(e&&a){var r={isSupported:!0,fetched:!0,level:a.level,charging:a.charging,dischargingTime:a.dischargingTime,chargingTime:a.chargingTime};!i.isDeepEqual(t,r)&&n(r)}};return r.getBattery().then((function(t){e&&(a=t,i.on(a,"chargingchange",o),i.on(a,"chargingtimechange",o),i.on(a,"dischargingtimechange",o),i.on(a,"levelchange",o),o())})),function(){e=!1,a&&(i.off(a,"chargingchange",o),i.off(a,"chargingtimechange",o),i.off(a,"dischargingtimechange",o),i.off(a,"levelchange",o))}}),[]),t}:function(){return{isSupported:!1}}},function(e,t,n){"use strict";e.exports=function e(t,n){if(t===n)return!0;if(t&&n&&"object"==typeof t&&"object"==typeof n){if(t.constructor!==n.constructor)return!1;var a,i,r;if(Array.isArray(t)){if((a=t.length)!=n.length)return!1;for(i=a;0!=i--;)if(!e(t[i],n[i]))return!1;return!0}if(t.constructor===RegExp)return t.source===n.source&&t.flags===n.flags;if(t.valueOf!==Object.prototype.valueOf)return t.valueOf()===n.valueOf();if(t.toString!==Object.prototype.toString)return t.toString()===n.toString();if((a=(r=Object.keys(t)).length)!==Object.keys(n).length)return!1;for(i=a;0!=i--;)if(!Object.prototype.hasOwnProperty.call(n,r[i]))return!1;for(i=a;0!=i--;){var o=r[i];if(!("_owner"===o&&t.$$typeof||e(t[o],n[o])))return!1}return!0}return t!=t&&n!=n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){void 0===e&&(e=!0);var n=a.useCallback((function(n){if("function"!=typeof e||e())return n.preventDefault(),t&&(n.returnValue=t),t}),[e,t]);a.useEffect((function(){if(e)return window.addEventListener("beforeunload",n),function(){return window.removeEventListener("beforeunload",n)}}),[e,n])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(779));t.default=a.default},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r=["mousedown","touchstart"];t.default=function(e,t,n){void 0===n&&(n=r);var o=a.useRef(t);a.useEffect((function(){o.current=t}),[t]),a.useEffect((function(){for(var t=function(t){var n=e.current;n&&!n.contains(t.target)&&o.current(t)},a=0,r=n;a<r.length;a++){var s=r[a];i.on(document,s,t)}return function(){for(var e=0,a=n;e<a.length;e++){var r=a[e];i.off(document,r,t)}}}),[n,e])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(1176));t.default=function(e){var t=i.useState((function(){return r.default.get(e)||null})),n=t[0],a=t[1];return[n,i.useCallback((function(t,n){r.default.set(e,t,n),a(t)}),[e]),i.useCallback((function(){r.default.remove(e),a(null)}),[e])]}},function(e,t,n){var a,i,r;
/*!
 * JavaScript Cookie v2.2.1
 * https://github.com/js-cookie/js-cookie
 *
 * Copyright 2006, 2015 Klaus Hartl & Fagner Brack
 * Released under the MIT license
 */r=function(){function e(){for(var e=0,t={};e<arguments.length;e++){var n=arguments[e];for(var a in n)t[a]=n[a]}return t}function t(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function n(a){function i(){}function r(t,n,r){if("undefined"!=typeof document){"number"==typeof(r=e({path:"/"},i.defaults,r)).expires&&(r.expires=new Date(1*new Date+864e5*r.expires)),r.expires=r.expires?r.expires.toUTCString():"";try{var o=JSON.stringify(n);/^[\{\[]/.test(o)&&(n=o)}catch(e){}n=a.write?a.write(n,t):encodeURIComponent(String(n)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),t=encodeURIComponent(String(t)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[\(\)]/g,escape);var s="";for(var l in r)r[l]&&(s+="; "+l,!0!==r[l]&&(s+="="+r[l].split(";")[0]));return document.cookie=t+"="+n+s}}function o(e,n){if("undefined"!=typeof document){for(var i={},r=document.cookie?document.cookie.split("; "):[],o=0;o<r.length;o++){var s=r[o].split("="),l=s.slice(1).join("=");n||'"'!==l.charAt(0)||(l=l.slice(1,-1));try{var c=t(s[0]);if(l=(a.read||a)(l,c)||t(l),n)try{l=JSON.parse(l)}catch(e){}if(i[c]=l,e===c)break}catch(e){}}return e?i[e]:i}}return i.set=r,i.get=function(e){return o(e,!1)},i.getJSON=function(e){return o(e,!0)},i.remove=function(t,n){r(t,"",e(n,{expires:-1}))},i.defaults={},i.withConverter=n,i}((function(){}))},void 0===(i="function"==typeof(a=r)?a.call(t,n,t,e):a)||(e.exports=i),e.exports=r()},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(516)),r=n(2),o=a.__importDefault(n(267)),s=a.__importDefault(n(360));t.default=function(){var e=o.default(),t=s.default({value:void 0,error:void 0,noUserInteraction:!0}),n=t[0],a=t[1];return[n,r.useCallback((function(t){var n,r;if(e())try{if("string"!=typeof t&&"number"!=typeof t){var o=new Error("Cannot copy typeof "+typeof t+" to clipboard, must be a string");return void a({value:t,error:o,noUserInteraction:!0})}if(""===t)return o=new Error("Cannot copy empty string to clipboard."),void a({value:t,error:o,noUserInteraction:!0});r=t.toString(),n=i.default(r),a({value:r,error:void 0,noUserInteraction:n})}catch(o){a({value:r,error:o,noUserInteraction:n})}}),[])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(1179),r=n(1180),o=n(1181),s=n(1183),l=n(2),c=a.__importDefault(n(35)),u=i.create();r.addon(u),o.addon(u);var d=0;t.default=function(e){var t=l.useMemo((function(){return"react-use-css-"+(d++).toString(36)}),[]),n=l.useMemo((function(){return new u.VSheet}),[]);return c.default((function(){var a={};return s.cssToTree(a,e,"."+t,""),n.diff(a),function(){n.diff({})}})),t}},function(e,t,n){"use strict";var a=/[A-Z]/g;t.create=function(e){var t=(e=e||{}).assign||Object.assign,n=t({raw:"",pfx:"_",client:"object"==typeof window,assign:t,stringify:JSON.stringify,kebab:function(e){return e.replace(a,"-$&").toLowerCase()},decl:function(e,t){return(e=n.kebab(e))+":"+t+";"},hash:function(e){return function(e){for(var t=5381,n=e.length;n;)t=33*t^e.charCodeAt(--n);return"_"+(t>>>0).toString(36)}(n.stringify(e))},selector:function(e,t){return e+(":"===t[0]?"":" ")+t},putRaw:function(e){n.raw+=e}},e);return n.client&&(n.sh||document.head.appendChild(n.sh=document.createElement("style")),n.putRaw=function(e){var t=n.sh.sheet;try{t.insertRule(e,t.cssRules.length)}catch(e){}}),n.put=function(e,t,a){var i,r,o="",s=[];for(i in t)(r=t[i])instanceof Object&&!(r instanceof Array)?s.push(i):o+=n.decl(i,r,e,a);o&&(o=e+"{"+o+"}",n.putRaw(a?a+"{"+o+"}":o));for(var l=0;l<s.length;l++)"@"===(i=s[l])[0]&&"@font-face"!==i?n.putAt(e,t[i],i):n.put(n.selector(e,i),t[i],a)},n.putAt=n.put,n}},function(e,t,n){"use strict";t.addon=function(e){e.client&&(document.head.appendChild(e.msh=document.createElement("style")),e.createRule=function(t,n){var a=t+"{}";n&&(a=n+"{"+a+"}");var i=n?e.msh.sheet:e.sh.sheet,r=i.insertRule(a,i.cssRules.length),o=(i.cssRules||i.rules)[r];if(o.index=r,n){var s=(o.cssRules||o.rules)[0];o.style=s.style,o.styleMap=s.styleMap}return o})}},function(e,t,n){"use strict";var a=n(1182).removeRule;t.addon=function(e){if(e.client){var t=e.kebab;n.prototype.diff=function(e){var n,a=this.decl,i=this.rule.style;for(n in a)void 0===e[n]&&i.removeProperty(n);for(n in e)e[n]!==a[n]&&i.setProperty(t(n),e[n]);this.decl=e},n.prototype.del=function(){a(this.rule)},i.prototype.diff=function(e){var t=this.tree;for(var a in t)if(void 0===e[a]){var i=t[a];for(var r in i)i[r].del()}for(var a in e)if(void 0===t[a])for(var r in e[a])(l=new n(r,a)).diff(e[a][r]),e[a][r]=l;else{var o=t[a],s=e[a];for(var r in o)s[r]||o[r].del();for(var r in s){var l;(l=o[r])?(l.diff(s[r]),s[r]=l):((l=new n(r,a)).diff(s[r]),s[r]=l)}}this.tree=e},e.VRule=n,e.VSheet=i}function n(t,n){this.rule=e.createRule(t,n),this.decl={}}function i(){this.tree={}}}},function(e,t){t.removeRule=function(e){var t=e.index,n=e.parentStyleSheet,a=n.cssRules||n.rules;for(t=Math.max(t,a.length-1);t>=0;){if(a[t]===e){n.deleteRule(t);break}t--}}},function(e,t){t.cssToTree=function e(t,n,a,i){var r,o,s={},l=!1;for(r in n)"object"!=typeof(o=n[r])&&(l=!0,s[r]=o);for(r in l&&(t[i]||(t[i]={}),t[i][a]=s),n)if("object"==typeof(o=n[r]))if("@"===r[0])e(t,o,a,r);else{var c=r.indexOf("&")>-1,u=a.split(",");if(c)for(var d=0;d<u.length;d++)u[d]=r.replace(/&/g,u[d]);else for(d=0;d<u.length;d++)u[d]=u[d]+" "+r;e(t,o,u.join(","),i)}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(557));t.default=function(e,t,n){void 0===t&&(t=0),void 0===n&&(n=[]);var a=r.default(e,t),o=a[0],s=a[1],l=a[2];return i.useEffect(l,n),[o,s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){var n=a.useState(t),i=n[0],r=n[1];return null==i?[e,r]:[i,r]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=function(){};t.default=function(e,t){void 0===e&&(e={}),void 0===t&&(t=[]);var n=e.onFiles,o=e.onText,s=e.onUri,l=i.useState(!1),c=l[0],u=l[1],d=i.useCallback(u,[]),p=i.useMemo((function(){return function(e){return function(t,n){var a=t.getData("text/uri-list");if(a)(e.onUri||r)(a,n);else if(t.files&&t.files.length)(e.onFiles||r)(Array.from(t.files),n);else if(n.clipboardData){var i=n.clipboardData.getData("text");(e.onText||r)(i,n)}}}(e)}),[n,o,s]);return i.useEffect((function(){var e=function(e){e.preventDefault(),d(!0)},t=function(e){e.preventDefault(),d(!0)},n=function(){d(!1)},a=function(){d(!1)},i=function(e){e.preventDefault(),d(!1),p(e.dataTransfer,e)},r=function(e){p(e.clipboardData,e)};return document.addEventListener("dragover",e),document.addEventListener("dragenter",t),document.addEventListener("dragleave",n),document.addEventListener("dragexit",a),document.addEventListener("drop",i),o&&document.addEventListener("paste",r),function(){document.removeEventListener("dragover",e),document.removeEventListener("dragenter",t),document.removeEventListener("dragleave",n),document.removeEventListener("dragexit",a),document.removeEventListener("drop",i),document.removeEventListener("paste",r)}}),a.__spreadArrays([p],t)),{over:c}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(267)),o=function(){};t.default=function(e){void 0===e&&(e={});var t=e.onFiles,n=e.onText,a=e.onUri,s=r.default(),l=i.useState(!1),c=l[0],u=l[1],d=i.useMemo((function(){return function(e,t){return function(n,a){var i=n.getData("text/uri-list");i?(e.onUri||o)(i,a):n.files&&n.files.length?(e.onFiles||o)(Array.from(n.files),a):n.items&&n.items.length&&n.items[0].getAsString((function(n){t&&(e.onText||o)(n,a)}))}}(e,s())}),[t,n,a]),p=i.useMemo((function(){return function(e,t){return{onDragOver:function(e){e.preventDefault()},onDragEnter:function(e){e.preventDefault(),t(!0)},onDragLeave:function(){t(!1)},onDrop:function(n){n.preventDefault(),n.persist(),t(!1),e(n.dataTransfer,n)},onPaste:function(t){t.persist(),e(t.clipboardData,t)}}}(d,u)}),[d,u]);return[p,{over:c}]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ensuredForwardRef=void 0;var a=n(2);function i(e){var t=a.useRef(e&&e.current);return a.useEffect((function(){e&&(e.current=t.current)}),[e]),t}t.default=i,t.ensuredForwardRef=function(e){return a.forwardRef((function(t,n){var a=i(n);return e(t,a)}))}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(){var e=a.useState(null),t=e[0],n=e[1];return a.useEffect((function(){if(t)throw t}),[t]),a.useCallback((function(e){n(e)}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){a.useEffect((function(){var t=document.querySelector("link[rel*='icon']")||document.createElement("link");t.type="image/x-icon",t.rel="shortcut icon",t.href=e,document.getElementsByTagName("head")[0].appendChild(t)}),[e])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(1192)),o=a.__importDefault(n(35)),s=function(){};t.default=function(e,t,n){void 0===n&&(n={});var a=n.video,l=n.onClose,c=void 0===l?s:l,u=i.useState(t),d=u[0],p=u[1];return o.default((function(){if(t&&e.current){var n=function(){a.current.removeEventListener("webkitendfullscreen",n),c()},i=function(){if(r.default.isEnabled){var e=r.default.isFullscreen;p(e),e||c()}};if(r.default.isEnabled){try{r.default.request(e.current),p(!0)}catch(e){c(e),p(!1)}r.default.on("change",i)}else a&&a.current&&a.current.webkitEnterFullscreen?(a.current.webkitEnterFullscreen(),a.current.addEventListener("webkitendfullscreen",n),p(!0)):(c(),p(!1));return function(){if(p(!1),r.default.isEnabled)try{r.default.off("change",i),r.default.exit()}catch(e){}else a&&a.current&&a.current.webkitExitFullscreen&&(a.current.removeEventListener("webkitendfullscreen",n),a.current.webkitExitFullscreen())}}}),[t,a,e]),d}},function(e,t,n){
/*!
* screenfull
* v5.0.0 - 2019-09-09
* (c) Sindre Sorhus; MIT License
*/
!function(){"use strict";var t="undefined"!=typeof window&&void 0!==window.document?window.document:{},n=e.exports,a=function(){for(var e,n=[["requestFullscreen","exitFullscreen","fullscreenElement","fullscreenEnabled","fullscreenchange","fullscreenerror"],["webkitRequestFullscreen","webkitExitFullscreen","webkitFullscreenElement","webkitFullscreenEnabled","webkitfullscreenchange","webkitfullscreenerror"],["webkitRequestFullScreen","webkitCancelFullScreen","webkitCurrentFullScreenElement","webkitCancelFullScreen","webkitfullscreenchange","webkitfullscreenerror"],["mozRequestFullScreen","mozCancelFullScreen","mozFullScreenElement","mozFullScreenEnabled","mozfullscreenchange","mozfullscreenerror"],["msRequestFullscreen","msExitFullscreen","msFullscreenElement","msFullscreenEnabled","MSFullscreenChange","MSFullscreenError"]],a=0,i=n.length,r={};a<i;a++)if((e=n[a])&&e[1]in t){for(a=0;a<e.length;a++)r[n[0][a]]=e[a];return r}return!1}(),i={change:a.fullscreenchange,error:a.fullscreenerror},r={request:function(e){return new Promise(function(n,i){var r=function(){this.off("change",r),n()}.bind(this);this.on("change",r),e=e||t.documentElement,Promise.resolve(e[a.requestFullscreen]()).catch(i)}.bind(this))},exit:function(){return new Promise(function(e,n){if(this.isFullscreen){var i=function(){this.off("change",i),e()}.bind(this);this.on("change",i),Promise.resolve(t[a.exitFullscreen]()).catch(n)}else e()}.bind(this))},toggle:function(e){return this.isFullscreen?this.exit():this.request(e)},onchange:function(e){this.on("change",e)},onerror:function(e){this.on("error",e)},on:function(e,n){var a=i[e];a&&t.addEventListener(a,n,!1)},off:function(e,n){var a=i[e];a&&t.removeEventListener(a,n,!1)},raw:a};a?(Object.defineProperties(r,{isFullscreen:{get:function(){return Boolean(t[a.fullscreenElement])}},element:{enumerable:!0,get:function(){return t[a.fullscreenElement]}},isEnabled:{enumerable:!0,get:function(){return Boolean(t[a.fullscreenEnabled])}}}),n?e.exports=r:window.screenfull=r):n?e.exports={isEnabled:!1}:window.screenfull={isEnabled:!1}}()},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2);t.default=function(e){var t,n=i.useState({loading:!0,accuracy:null,altitude:null,altitudeAccuracy:null,heading:null,latitude:null,longitude:null,speed:null,timestamp:Date.now()}),r=n[0],o=n[1],s=!0,l=function(e){s&&o({loading:!1,accuracy:e.coords.accuracy,altitude:e.coords.altitude,altitudeAccuracy:e.coords.altitudeAccuracy,heading:e.coords.heading,latitude:e.coords.latitude,longitude:e.coords.longitude,speed:e.coords.speed,timestamp:e.timestamp})},c=function(e){return s&&o((function(t){return a.__assign(a.__assign({},t),{loading:!1,error:e})}))};return i.useEffect((function(){return navigator.geolocation.getCurrentPosition(l,c,e),t=navigator.geolocation.watchPosition(l,c,e),function(){s=!1,navigator.geolocation.clearWatch(t)}}),[]),r}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(308));t.default=function(e){void 0===e&&(e={});var t=r.default(),n=i.useRef(a.__assign({},e));return[i.useCallback((function(){return n.current}),[]),i.useCallback((function(e){e&&(Object.assign(n.current,e),t())}),[])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(1196);t.default=function(e,t){void 0===t&&(t=0);var n=a.useRef((function(){}));a.useEffect((function(){n.current=e})),a.useEffect((function(){if(null!==t){var e=i.setHarmonicInterval((function(){return n.current()}),t);return function(){return i.clearHarmonicInterval(e)}}}),[t])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=0,i={};t.clearHarmonicInterval=function(e){var t=e.bucket,n=e.id;delete t.listeners[n];var a=!1;for(var r in t.listeners){a=!0;break}a||(clearInterval(t.timer),delete i[t.ms])},t.setHarmonicInterval=function(e,t){var n,r=a++;if(i[t])i[t].listeners[r]=e;else{var o=setInterval((function(){for(var e,n=i[t].listeners,a=!1,r=0,o=Object.values(n);r<o.length;r++){var s=o[r];try{s()}catch(t){a=!0,e=t}}if(a)throw e}),t);i[t]={ms:t,timer:o,listeners:(n={},n[r]=e,n)}}return{bucket:i[t],id:r}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importStar(n(2)),i=a.useState,r=function(){};t.default=function(e){var t,n,o=i(!1),s=o[0],l=o[1];return"function"==typeof e&&(e=e(s)),[a.cloneElement(e,{onMouseEnter:(n=e.props.onMouseEnter,function(e){(n||r)(e),l(!0)}),onMouseLeave:(t=e.props.onMouseLeave,function(e){(t||r)(e),l(!1)})}),s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(1199),r=n(146),o=["mousemove","mousedown","resize","keydown","touchstart","wheel"];t.default=function(e,t,n){void 0===e&&(e=6e4),void 0===t&&(t=!1),void 0===n&&(n=o);var s=a.useState(t),l=s[0],c=s[1];return a.useEffect((function(){for(var t,a=!0,o=l,s=function(e){a&&(o=e,c(e))},u=i.throttle(50,(function(){o&&s(!1),clearTimeout(t),t=setTimeout((function(){return s(!0)}),e)})),d=function(){document.hidden||u()},p=0;p<n.length;p++)r.on(window,n[p],u);return r.on(document,"visibilitychange",d),t=setTimeout((function(){return s(!0)}),e),function(){a=!1;for(var e=0;e<n.length;e++)r.off(window,n[e],u);r.off(document,"visibilitychange",d)}}),[e,n]),l}},function(e,t,n){"use strict";function a(e,t,n,a){var i,r=!1,o=0;function s(){i&&clearTimeout(i)}function l(){var l=this,c=Date.now()-o,u=arguments;function d(){o=Date.now(),n.apply(l,u)}r||(a&&!i&&d(),s(),void 0===a&&c>e?d():!0!==t&&(i=setTimeout(a?function(){i=void 0}:d,void 0===a?e-c:e)))}return"boolean"!=typeof t&&(a=n,n=t,t=void 0),l.cancel=function(){s(),r=!0},l}Object.defineProperty(t,"__esModule",{value:!0}),t.throttle=a,t.debounce=function(e,t,n){return void 0===n?a(e,t,!1):a(e,n,!1!==t)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){var n=a.useState(null),i=n[0],r=n[1];return a.useEffect((function(){if(e.current&&"function"==typeof IntersectionObserver){var n=new IntersectionObserver((function(e){r(e[0])}),t);return n.observe(e.current),function(){r(null),n.disconnect()}}return function(){}}),[e.current,t.threshold,t.root,t.rootMargin]),i}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){var n=a.useRef((function(){}));a.useEffect((function(){n.current=e})),a.useEffect((function(){if(null!==t){var e=setInterval((function(){return n.current()}),t||0);return function(){return clearInterval(e)}}}),[t])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){return void 0===e&&(e={laptopL:1440,laptop:1024,tablet:768}),function(){var t=a.useState(0),n=t[0],i=t[1];a.useEffect((function(){var e=function(){i(window.innerWidth)};return e(),window.addEventListener("resize",e),function(){window.removeEventListener("resize",e)}}));var r=a.useMemo((function(){return Object.entries(e).sort((function(e,t){return e[1]>=t[1]?1:-1}))}),[e]),o=r.reduce((function(e,t){var a=t[0],i=t[1];return n>=i?a:e}),r[0][0]);return o}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(784)),r=a.__importDefault(n(359));t.default=function(e,t,n,a){void 0===a&&(a=i.default);var o=a(e),s=o[0],l=o[1];r.default((function(){!s&&n?n(l):s&&t&&t(l)}),[s])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r=function(){};t.default=function(e,t,n){if(!i.isClient)return[t,r,r];if(!e)throw new Error("useLocalStorage key may not be falsy");var o=n?n.raw?function(e){return e}:n.deserializer:JSON.parse,s=a.useState((function(){try{var a=n?n.raw?String:n.serializer:JSON.stringify,i=localStorage.getItem(e);return null!==i?o(i):(t&&localStorage.setItem(e,a(t)),t)}catch(e){return t}})),l=s[0],c=s[1],u=a.useCallback((function(t){try{var a="function"==typeof t?t(l):t;if(void 0===a)return;var i;i=n?n.raw?"string"==typeof a?a:JSON.stringify(a):n.serializer?n.serializer(a):JSON.stringify(a):JSON.stringify(a),localStorage.setItem(e,i),c(o(i))}catch(e){}}),[e,c]),d=a.useCallback((function(){try{localStorage.removeItem(e),c(void 0)}catch(e){}}),[e,c]);return[l,u,d]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r=function(e){var t=window.history,n=t[e];t[e]=function(t){var a=n.apply(this,arguments),i=new Event(e.toLowerCase());return i.state=t,window.dispatchEvent(i),a}};i.isClient&&(r("pushState"),r("replaceState"));var o=function(e){var t=window.history,n=t.state,a=t.length,i=window.location;return{trigger:e,state:n,length:a,hash:i.hash,host:i.host,hostname:i.hostname,href:i.href,origin:i.origin,pathname:i.pathname,port:i.port,protocol:i.protocol,search:i.search}},s="function"==typeof Event;t.default=i.isClient&&s?function(){var e=a.useState(o("load")),t=e[0],n=e[1];return a.useEffect((function(){var e=function(){return n(o("popstate"))},t=function(){return n(o("pushstate"))},a=function(){return n(o("replacestate"))};return i.on(window,"popstate",e),i.on(window,"pushstate",t),i.on(window,"replacestate",a),function(){i.off(window,"popstate",e),i.off(window,"pushstate",t),i.off(window,"replacestate",a)}}),[]),t}:function(){return{trigger:"load",length:1}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getClosestBody=void 0;var a=n(2);function i(e){if(!e)return null;if("BODY"===e.tagName)return e;if("IFRAME"===e.tagName){var t=e.contentDocument;return t?t.body:null}return e.offsetParent?i(e.offsetParent):null}function r(e){var t=e||window.event;return t.touches.length>1||(t.preventDefault&&t.preventDefault(),!1)}t.getClosestBody=i;var o="undefined"!=typeof window&&window.navigator&&window.navigator.platform&&/iP(ad|hone|od)/.test(window.navigator.platform),s=new Map,l="object"==typeof document?document:void 0,c=!1;t.default=l?function(e,t){void 0===e&&(e=!0);var n=a.useRef(l.body);t=t||n;var u=function(e){var t=s.get(e);t&&(1===t.counter?(s.delete(e),o?(e.ontouchmove=null,c&&(document.removeEventListener("touchmove",r),c=!1)):e.style.overflow=t.initialOverflow):s.set(e,{counter:t.counter-1,initialOverflow:t.initialOverflow}))};a.useEffect((function(){var n=i(t.current);n&&(e?function(e){var t=s.get(e);t?s.set(e,{counter:t.counter+1,initialOverflow:t.initialOverflow}):(s.set(e,{counter:1,initialOverflow:e.style.overflow}),o?c||(document.addEventListener("touchmove",r,{passive:!1}),c=!0):e.style.overflow="hidden")}(n):u(n))}),[e,t.current]),a.useEffect((function(){var e=i(t.current);if(e)return function(){u(e)}}),[])}:function(e,t){void 0===e&&(e=!0)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(361)),r=a.__importDefault(n(359));t.default=function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n];i.default((function(){return console.log.apply(console,a.__spreadArrays([e+" mounted"],t)),function(){return console.log(e+" unmounted")}})),r.default((function(){console.log.apply(console,a.__spreadArrays([e+" updated"],t))}))}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=function(e){(function(e){return"touches"in e})(e)&&e.touches.length<2&&e.preventDefault&&e.preventDefault()};t.default=function(e,t){var n=void 0===t?{}:t,r=n.isPreventDefault,o=void 0===r||r,s=n.delay,l=void 0===s?300:s,c=a.useRef(),u=a.useRef(),d=a.useCallback((function(t){o&&t.target&&(t.target.addEventListener("touchend",i,{passive:!1}),u.current=t.target),c.current=setTimeout((function(){return e(t)}),l)}),[e,l,o]),p=a.useCallback((function(){c.current&&clearTimeout(c.current),o&&u.current&&u.current.removeEventListener("touchend",i)}),[o]);return{onMouseDown:function(e){return d(e)},onTouchStart:function(e){return d(e)},onMouseUp:p,onMouseLeave:p,onTouchEnd:p}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146);t.default=function(e,t){void 0===t&&(t=!1);var n=a.useState(i.isClient?function(){return window.matchMedia(e).matches}:t),r=n[0],o=n[1];return a.useEffect((function(){var t=!0,n=window.matchMedia(e),a=function(){t&&o(!!n.matches)};return n.addListener(a),o(n.matches),function(){t=!1,n.removeListener(a)}}),[e]),r}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r=function(){};t.default="object"==typeof navigator&&navigator.mediaDevices?function(){var e=a.useState({}),t=e[0],n=e[1];return a.useEffect((function(){var e=!0,t=function(){navigator.mediaDevices.enumerateDevices().then((function(t){e&&n({devices:t.map((function(e){return{deviceId:e.deviceId,groupId:e.groupId,kind:e.kind,label:e.label}}))})})).catch(r)};return i.on(navigator.mediaDevices,"devicechange",t),t(),function(){e=!1,i.off(navigator.mediaDevices,"devicechange",t)}}),[]),t}:function(){return{}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useMediatedState=void 0;var a=n(2);t.useMediatedState=function(e,t){var n=a.useRef(e),i=a.useState(t),r=i[0],o=i[1];return[r,a.useCallback((function(e){2===n.current.length?n.current(e,o):o(n.current(e))}),[r])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){var n=a.useMemo((function(){return function(t,n){var a;return(a=e(t))[n.type].apply(a,n.payload)}}),[e]),i=a.useReducer(n,t),r=i[0],o=i[1],s=a.useMemo((function(){return Object.keys(e(t)).reduce((function(e,t){return e[t]=function(){for(var e=[],n=0;n<arguments.length;n++)e[n]=arguments[n];return o({type:t,payload:e})},e}),{})}),[e,t]);return[r,s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r={acceleration:{x:null,y:null,z:null},accelerationIncludingGravity:{x:null,y:null,z:null},rotationRate:{alpha:null,beta:null,gamma:null},interval:16};t.default=function(e){void 0===e&&(e=r);var t=a.useState(e),n=t[0],o=t[1];return a.useEffect((function(){var e=function(e){var t=e.acceleration,n=e.accelerationIncludingGravity,a=e.rotationRate,i=e.interval;o({acceleration:{x:t.x,y:t.y,z:t.z},accelerationIncludingGravity:{x:n.x,y:n.y,z:n.z},rotationRate:{alpha:a.alpha,beta:a.beta,gamma:a.gamma},interval:i})};return i.on(window,"devicemotion",e),function(){i.off(window,"devicemotion",e)}}),[]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(782)),r=a.__importDefault(n(790)),o={current:null};t.default=function(e,t){void 0===t&&(t={});var n=!!t.whenHovered,a=!!t.bound,s=i.default(e,n),l=r.default(n&&!s?o:e);return a&&(l.elX=Math.max(0,Math.min(l.elX,l.elW)),l.elY=Math.max(0,Math.min(l.elY,l.elH))),l}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(){var e=a.useState(0),t=e[0],n=e[1];return a.useEffect((function(){var e=function(e){n(e.deltaY+t)};return window.addEventListener("wheel",e,!1),function(){return window.removeEventListener("wheel",e)}})),t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=n(146),o=function(){if("object"!=typeof navigator)return null;var e=navigator;return e.connection||e.mozConnection||e.webkitConnection},s=function(){var e=o();return e?{downlink:e.downlink,downlinkMax:e.downlinkMax,effectiveType:e.effectiveType,type:e.type,rtt:e.rtt}:{}};t.default=function(e){void 0===e&&(e={});var t=i.useState(e),n=t[0],l=t[1];return i.useEffect((function(){var e=n,t=function(t){e=a.__assign(a.__assign({},e),t),l(e)},i=o(),c=function(){t({online:!0,since:new Date})},u=function(){t({online:!1,since:new Date})},d=function(){t(s())};return r.on(window,"online",c),r.on(window,"offline",u),i&&(r.on(i,"change",d),t(a.__assign(a.__assign(a.__assign({},n),{online:navigator.onLine,since:void 0}),s()))),function(){r.off(window,"online",c),r.off(window,"offline",u),i&&r.off(i,"change",d)}}),[]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(780));t.default=a.default},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r={angle:0,type:"landscape-primary"};t.default=function(e){void 0===e&&(e=r);var t=window.screen,n=a.useState(e),o=n[0],s=n[1];return a.useEffect((function(){var n=!0,a=function(){if(n){var a=t.orientation;if(a){var i=a.angle,r=a.type;s({angle:i,type:r})}else window.orientation?s({angle:"number"==typeof window.orientation?window.orientation:0,type:""}):s(e)}};return i.on(window,"orientationchange",a),a(),function(){n=!1,i.off(window,"orientationchange",a)}}),[]),o}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){void 0===t&&(t=[]),a.useEffect((function(){if(e){var t=function(t){var n=(t=t||window.event).relatedTarget||t.toElement;n&&"HTML"!==n.nodeName||e()};return document.addEventListener("mouseout",t),function(){document.removeEventListener("mouseout",t)}}}),t)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146),r=function(){};t.default=function(e){var t=!0,n=null,o=a.useState(""),s=o[0],l=o[1],c=function(){t&&n&&l(n.state)};return a.useEffect((function(){return navigator.permissions.query(e).then((function(e){n=e,c(),i.on(n,"change",c)})).catch(r),function(){t=!1,n&&i.off(n,"change",c)}}),[]),s}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(445),r=function(e,t){return e===t};t.default=function(e,t){void 0===t&&(t=r);var n=a.useRef(),o=a.useRef(e);return i.useFirstMountState()||t(o.current,e)||(n.current=o.current,o.current=e),n.current}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(267));t.default=function(){var e=r.default();return i.useCallback((function(t){return new Promise((function(n,a){t.then((function(t){e()&&n(t)}),(function(t){e()&&a(t)}))}))}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2);t.default=function(e){void 0===e&&(e=[]);var t=i.useState(e),n=t[0],r=t[1];return{add:function(e){r((function(t){return a.__spreadArrays(t,[e])}))},remove:function(){var e;return r((function(t){var n=t[0],a=t.slice(1);return e=n,a})),e},get first(){return n[0]},get last(){return n[n.length-1]},get size(){return n.length}}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t){void 0===t&&(t=!0);var n=a.useRef(null),i=a.useRef(!1),r=a.useRef(e);r.current=e;var o=a.useCallback((function(e){i.current&&(r.current(e),n.current=requestAnimationFrame(o))}),[]),s=a.useMemo((function(){return[function(){i.current&&(i.current=!1,n.current&&cancelAnimationFrame(n.current))},function(){i.current||(i.current=!0,n.current=requestAnimationFrame(o))},function(){return i.current}]}),[]);return a.useEffect((function(){return t&&s[1](),s[0]}),[]),s}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=function(e,t){return new URLSearchParams(e).get(t)};t.default="object"==typeof window?function(e){var t=window.location,n=a.useState((function(){return i(t.search,e)})),r=n[0],o=n[1];return a.useEffect((function(){var n=function(){o(i(t.search,e))};return window.addEventListener("popstate",n),window.addEventListener("pushstate",n),window.addEventListener("replacestate",n),function(){window.removeEventListener("popstate",n),window.removeEventListener("pushstate",n),window.removeEventListener("replacestate",n)}}),[]),r}:function(){return null}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ScratchSensor=void 0;var a=n(34),i=n(2),r=n(1227),o=a.__importDefault(n(785)),s=function(){},l=function(e){void 0===e&&(e={});var t=e.disabled,n=o.default(e),r=i.useState({isScratching:!1}),l=r[0],c=r[1],u=i.useRef(l),d=i.useRef(!1),p=i.useRef(null),m=i.useState(null),f=m[0],g=m[1];return i.useEffect((function(){if(!t&&f){var e,i,r=function(e,t){cancelAnimationFrame(p.current),p.current=requestAnimationFrame((function(){var i=f.getBoundingClientRect(),r=i.left,o=i.top,l=r+window.scrollX,d=o+window.scrollY,p=e-l,m=t-d;c((function(e){var t=a.__assign(a.__assign({},e),{dx:p-(e.x||0),dy:m-(e.y||0),end:Date.now(),isScratching:!0});return u.current=t,(n.current.onScratch||s)(t),t}))}))},o=function(e){r(e.pageX,e.pageY)},l=function(e){r(e.changedTouches[0].pageX,e.changedTouches[0].pageY)},m=function(){d.current&&(d.current=!1,u.current=a.__assign(a.__assign({},u.current),{isScratching:!1}),(n.current.onScratchEnd||s)(u.current),c({isScratching:!1}),window.removeEventListener("mousemove",o),window.removeEventListener("touchmove",l),window.removeEventListener("mouseup",e),window.removeEventListener("touchend",i))};e=m,i=m;var g=function(t,a){if(d.current){var r=f.getBoundingClientRect(),p=r.left,m=r.top,g=p+window.scrollX,b=m+window.scrollY,y=t-g,h=a-b,v=Date.now(),E={isScratching:!0,start:v,end:v,docX:t,docY:a,x:y,y:h,dx:0,dy:0,elH:f.offsetHeight,elW:f.offsetWidth,elX:g,elY:b};u.current=E,(n.current.onScratchStart||s)(E),c(E),window.addEventListener("mousemove",o),window.addEventListener("touchmove",l),window.addEventListener("mouseup",e),window.addEventListener("touchend",i)}},b=function(e){d.current=!0,g(e.pageX,e.pageY)},y=function(e){d.current=!0,g(e.changedTouches[0].pageX,e.changedTouches[0].pageY)};return f.addEventListener("mousedown",b),f.addEventListener("touchstart",y),function(){f.removeEventListener("mousedown",b),f.removeEventListener("touchstart",y),window.removeEventListener("mousemove",o),window.removeEventListener("touchmove",l),window.removeEventListener("mouseup",e),window.removeEventListener("touchend",i),p.current&&cancelAnimationFrame(p.current),p.current=null,d.current=!1,u.current={isScratching:!1},c(u.current)}}}),[f,t,n]),[g,l]};t.ScratchSensor=function(e){e.children;var t=a.__rest(e,["children"]),n=l(t),o=n[0],s=n[1],c=r.render(e,s);return i.cloneElement(c,a.__assign(a.__assign({},c.props),{ref:function(e){c.props.ref&&("object"==typeof c.props.ref&&(c.props.ref.current=e),"function"==typeof c.props.ref&&c.props.ref(e)),o(e)}}))},t.default=l},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.hookToRenderProp=t.createEnhancer=t.render=void 0;var a=n(34),i=a.__importDefault(n(792));t.render=i.default;var r=a.__importDefault(n(1228));t.createEnhancer=r.default;var o=a.__importDefault(n(1231));t.hookToRenderProp=o.default},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.divWrapper=void 0;var a=n(34),i=a.__importStar(n(2)),r=a.__importDefault(n(1229)),o=i.createElement,s=function(e,t,n,i){var r;return o(e,t?a.__assign(((r={})[t]=i,r),n):a.__assign(a.__assign({},i),n))};t.divWrapper=function(e,t,n,a){return o("div",null,s(e,t,n,a))},t.default=function(e,t,n){void 0===n&&(n=s);var a=function(i,s,l){void 0===s&&(s=t),void 0===l&&(l=null);var c="string"==typeof i;if(c)return function(e){return a(e,i||t,s)};var u=function(t){return o(e,l,(function(e){return n(i,s,t,e)}))};return c?r.default(u):u};return a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(1230));t.default=function(e){return e.prototype?e:a.default(e)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importStar(n(2));t.default=function(e){var t=function(t){function n(){return null!==t&&t.apply(this,arguments)||this}return a.__extends(n,t),n.prototype.render=function(){return e(this.props,this.context)},n}(i.Component);return t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(792)),i=function(e){return[e]};t.default=function(e,t){return void 0===t&&(t=i),function(n){return a.default(n,e.apply(void 0,t(n)))}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(362));t.default=function(e){var t=r.default({x:0,y:0}),n=t[0],a=t[1];return i.useEffect((function(){var t=function(){e.current&&a({x:e.current.scrollLeft,y:e.current.scrollTop})};return e.current&&e.current.addEventListener("scroll",t,{capture:!1,passive:!0}),function(){e.current&&e.current.removeEventListener("scroll",t)}}),[e]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e){var t=a.useState(!1),n=t[0],i=t[1];return a.useEffect((function(){if(e.current){var t,n=function(){i(!0),clearTimeout(t),t=setTimeout((function(){i(!1)}),150)};return e.current.addEventListener("scroll",n,!1),function(){e.current&&e.current.removeEventListener("scroll",n,!1)}}return function(){}}),[e]),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(146);t.default=function(e,t,n){if(!i.isClient)return[t,function(){}];var r=a.useState((function(){try{var a=sessionStorage.getItem(e);return"string"!=typeof a?(sessionStorage.setItem(e,n?String(t):JSON.stringify(t)),t):n?a:JSON.parse(a||"null")}catch(e){return t}})),o=r[0],s=r[1];return a.useEffect((function(){try{var t=n?String(o):JSON.stringify(o);sessionStorage.setItem(e,t)}catch(e){}})),[o,s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(1236),r=a.__importDefault(n(556)),o=function(e,t){return e.every((function(e,n){return i.equal(e,t[n])}))};t.default=function(e,t){r.default(e,t,o)}},function(e,t){var n=Object.keys;t.equal=function(e,t){if(e===t)return!0;if(!(e instanceof Object&&t instanceof Object))return!1;for(var a=n(e),i=a.length,r=0;r<i;r++)if(!(a[r]in t))return!1;for(r=0;r<i;r++)if(e[a[r]]!==t[a[r]])return!1;return i===n(t).length}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importStar(n(2)),r=n(146),o=i.useState,s=i.useEffect,l=i.useRef;t.default=function(e,t){var n=void 0===t?{}:t,c=n.width,u=void 0===c?1/0:c,d=n.height,p=void 0===d?1/0:d;if(!r.isClient)return["function"==typeof e?e({width:u,height:p}):e,{width:u,height:p}];var m=o({width:u,height:p}),f=m[0],g=m[1];"function"==typeof e&&(e=e(f));var b=e.props.style||{},y=l(null),h=null,v=function(){var e=y.current,t=e?{width:e.offsetWidth,height:e.offsetHeight}:{width:u,height:p};g(t)},E=function(e){e.addEventListener("resize",v),setTimeout(v,35)};return s((function(){var e=y.current;if(e){if(e.contentWindow)h=e.contentWindow,E(h);else{var t=function(){e.removeEventListener("load",t),h=e.contentWindow,E(h)};e.addEventListener("load",t)}return function(){h&&h.removeEventListener&&h.removeEventListener("resize",v)}}}),[]),b.position="relative",[i.cloneElement.apply(i,a.__spreadArrays([e,{style:b}],a.__spreadArrays([i.createElement("iframe",{ref:y,style:{background:"transparent",border:"none",height:"100%",left:0,position:"absolute",top:0,width:"100%",zIndex:-1}})],i.Children.toArray(e.props.children)))),f]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=n(146),o=a.__importDefault(n(267)),s=a.__importDefault(n(360)),l=function(){};t.default=function(e,t){void 0===t&&(t={});var n=o.default(),a=i.useRef(!1),c=i.useRef(0),u=i.useRef(0),d=s.default({isSliding:!1,value:0}),p=d[0],m=d[1];return c.current=p.value,i.useEffect((function(){if(r.isClient){var i=void 0===t.styles||t.styles,o=void 0!==t.reverse&&t.reverse;e.current&&i&&(e.current.style.userSelect="none");var s=function(){!a.current&&n()&&((t.onScrubStart||l)(),a.current=!0,m({isSliding:!0}),y())},d=function(){a.current&&n()&&((t.onScrubStop||l)(c.current),a.current=!1,m({isSliding:!1}),h())},p=function(e){s(),f(e)},f=t.vertical?function(e){return v(e.clientY)}:function(e){return v(e.clientX)},g=function(e){s(),b(e)},b=t.vertical?function(e){return v(e.changedTouches[0].clientY)}:function(e){return v(e.changedTouches[0].clientX)},y=function(){r.on(document,"mousemove",f),r.on(document,"mouseup",d),r.on(document,"touchmove",b),r.on(document,"touchend",d)},h=function(){r.off(document,"mousemove",f),r.off(document,"mouseup",d),r.off(document,"touchmove",b),r.off(document,"touchend",d)},v=function(a){cancelAnimationFrame(u.current),u.current=requestAnimationFrame((function(){if(n()&&e.current){var i=e.current.getBoundingClientRect(),r=t.vertical?i.top:i.left,s=t.vertical?i.height:i.width;if(!s)return;var c=(a-r)/s;c>1?c=1:c<0&&(c=0),o&&(c=1-c),m({value:c}),(t.onScrub||l)(c)}}))};return r.on(e.current,"mousedown",p),r.on(e.current,"touchstart",g),function(){r.off(e.current,"mousedown",p),r.off(e.current,"touchstart",g)}}}),[e,t.vertical]),p}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(789)),o=a.__importDefault(n(360)),s="object"==typeof window&&"object"==typeof window.speechSynthesis?window.speechSynthesis.getVoices():[];t.default=function(e,t){void 0===t&&(t={});var n=o.default({isPlaying:!1,lang:t.lang||"default",voice:t.voice||s[0],rate:t.rate||1,pitch:t.pitch||1,volume:t.volume||1}),a=n[0],l=n[1],c=i.useRef(null);return r.default((function(){var n=new SpeechSynthesisUtterance(e);t.lang&&(n.lang=t.lang),t.voice&&(n.voice=t.voice),n.rate=t.rate||1,n.pitch=t.pitch||1,n.volume=t.volume||1,n.onstart=function(){return l({isPlaying:!0})},n.onresume=function(){return l({isPlaying:!0})},n.onend=function(){return l({isPlaying:!1})},n.onpause=function(){return l({isPlaying:!1})},c.current=n,window.speechSynthesis.speak(c.current)})),a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(35));t.default=function(e){a.default((function(){var t=function(t){var n,a,i,r,o;!function(){var e=document.activeElement,t=document.body;if(!e)return!1;if(e===t)return!1;switch(e.tagName){case"INPUT":case"TEXTAREA":return!0}return e.hasAttribute("contenteditable")}()&&(a=(n=t).keyCode,i=n.metaKey,r=n.ctrlKey,o=n.altKey,!(i||r||o)&&(a>=48&&a<=57||a>=65&&a<=90))&&e(t)};return document.addEventListener("keydown",t),function(){document.removeEventListener("keydown",t)}}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useStateWithHistory=void 0;var a=n(2),i=n(445),r=n(446);t.useStateWithHistory=function(e,t,n){if(void 0===t&&(t=10),t<1)throw new Error("Capacity has to be greater than 1, got '"+t+"'");var o=i.useFirstMountState(),s=a.useState(e),l=s[0],c=s[1],u=a.useRef(null!=n?n:[]),d=a.useRef(0);return o&&(u.current.length?(u.current[u.current.length-1]!==e&&u.current.push(e),u.current.length>t&&(u.current=u.current.slice(u.current.length-t))):u.current.push(e),d.current=u.current.length&&u.current.length-1),[l,a.useCallback((function(e){c((function(n){return(e=r.resolveHookState(e))!==n&&(d.current<u.current.length-1&&(u.current=u.current.slice(0,d.current+1)),d.current=u.current.push(e)-1,u.current.length>t&&(u.current=u.current.slice(u.current.length-t))),e}))}),[l,t]),a.useMemo((function(){return{history:u.current,position:d.current,capacity:t,back:function(e){void 0===e&&(e=1),d.current&&c((function(){return d.current-=Math.min(e,d.current),u.current[d.current]}))},forward:function(e){void 0===e&&(e=1),d.current!==u.current.length-1&&c((function(){return d.current=Math.min(d.current+e,u.current.length-1),u.current[d.current]}))},go:function(e){e!==d.current&&c((function(){return d.current=e<0?Math.max(u.current.length+e,0):Math.min(u.current.length-1,e),u.current[d.current]}))}}}),[l])]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(267)),o=a.__importDefault(n(308)),s=a.__importDefault(n(359));t.default=function(e){void 0===e&&(e=[]);var t=r.default(),n=o.default(),l=i.useRef(0);s.default((function(){e.length<=l.current&&(l.current=e.length-1,n())}),[e.length]);var c=i.useMemo((function(){return{next:function(){return c.setStateAt(l.current+1)},prev:function(){return c.setStateAt(l.current-1)},setStateAt:function(a){t()&&e.length&&a!==l.current&&(l.current=a>=0?a%e.length:e.length+a%e.length,n())},setState:function(a){if(t()){var i=e.length?e.indexOf(a):-1;if(-1===i)throw new Error("State '"+a+"' is not a valid state (does not exist in state list)");l.current=i,n()}}}}),[e]);return a.__assign({state:e[l.current],currentIndex:l.current},c)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(448));t.default=function(e,t){void 0===t&&(t=200);var n=i.useState(e),a=n[0],o=n[1],s=i.useRef(),l=i.useRef(null),c=i.useRef(0);return i.useEffect((function(){if(s.current)l.current=e,c.current=!0;else{o(e);var n=function(){c.current?(c.current=!1,o(l.current),s.current=setTimeout(n,t)):s.current=void 0};s.current=setTimeout(n,t)}}),[e]),r.default((function(){s.current&&clearTimeout(s.current)})),a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(448));t.default=function(e,t,n){void 0===t&&(t=200);var a=i.useState(null),o=a[0],s=a[1],l=i.useRef(),c=i.useRef();return i.useEffect((function(){if(l.current)c.current=n;else{s(e.apply(void 0,n));var a=function(){c.current?(s(e.apply(void 0,c.current)),c.current=void 0,l.current=setTimeout(a,t)):l.current=void 0};l.current=setTimeout(a,t)}}),n),r.default((function(){l.current&&clearTimeout(l.current)})),o}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(557)),r=a.__importDefault(n(308));t.default=function(e){void 0===e&&(e=0);var t=r.default();return i.default(t,e)}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i={restoreOnUnmount:!1};t.default="undefined"!=typeof document?function(e,t){void 0===t&&(t=i);var n=a.useRef(document.title);document.title=e,a.useEffect((function(){return t&&t.restoreOnUnmount?function(){document.title=n.current}:void 0}),[])}:function(e){}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(1403),r=a.__importDefault(n(791));t.default=function(e,t,n){return void 0===e&&(e="inCirc"),void 0===t&&(t=200),void 0===n&&(n=0),(0,i.easing[e])(r.default(t,n))}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(){var e=a.useRef(!1);return a.useEffect((function(){return function(){e.current=!0}})),a.useMemo((function(){return function(t,n){return new Promise((function(a,i){t.then((function(t){e.current||a(t)}),(function(t){e.current?n?n(t):console.error("useUnmountPromise",t):i(t)}))}))}}),[])}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=a.__importDefault(n(787));t.default=function(e,t){void 0===t&&(t=[]);var n=i.default(t),r=n[0],o=n[1];return[r,a.__assign(a.__assign({},o),{upsert:function(t){o.upsert(e,t)}})]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i="object"==typeof navigator&&"vibrate"in navigator;t.default=i?function(e,t,n){void 0===e&&(e=!0),void 0===t&&(t=[1e3,1e3]),void 0===n&&(n=!0),a.useEffect((function(){var a;if(e&&(navigator.vibrate(t),n)){var i=t instanceof Array?t.reduce((function(e,t){return e+t})):t;a=setInterval((function(){navigator.vibrate(t)}),i)}return function(){e&&(navigator.vibrate(0),n&&clearInterval(a))}}),[e])}:function(){}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34).__importDefault(n(778)).default("video");t.default=a},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2);t.default=function(e,t,n){void 0===n&&(n=[void 0]);var i=a.useRef(t),r=a.useRef(e);i.current=t,r.current=e;var o=a.useState(n),s=o[0],l=o[1],c=a.useCallback((function(){i.current.length>=2?i.current(r.current,l):l(i.current(r.current))}),[l]);return a.useEffect((function(){c()}),[e]),[s,c]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useScrollbarWidth=void 0;var a=n(1254),i=n(2);t.useScrollbarWidth=function(){var e=i.useState(a.scrollbarWidth()),t=e[0],n=e[1];return i.useEffect((function(){if(void 0===t){var e=requestAnimationFrame((function(){n(a.scrollbarWidth())}));return function(){return cancelAnimationFrame(e)}}}),[]),t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=function(e){if("undefined"==typeof document)return 0;if(document.body&&(!document.readyState||"loading"!==document.readyState)){if(!0!==e&&"number"==typeof a.__cache)return a.__cache;var t=document.createElement("div"),n=t.style;n.display="block",n.position="absolute",n.width="100px",n.height="100px",n.left="-999px",n.top="-999px",n.overflow="scroll",document.body.insertBefore(t,null);var i=t.clientWidth;if(0!==i)return a.__cache=100-i,document.body.removeChild(t),a.__cache;document.body.removeChild(t)}};t.scrollbarWidth=a},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useMultiStateValidator=void 0;var a=n(2);t.useMultiStateValidator=function(e,t,n){if(void 0===n&&(n=[void 0]),"object"!=typeof e)throw new Error("states expected to be an object or array, got "+typeof e);var i=a.useRef(t),r=a.useRef(e);i.current=t,r.current=e;var o=a.useState(n),s=o[0],l=o[1],c=a.useCallback((function(){i.current.length>=2?i.current(r.current,l):l(i.current(r.current))}),[l]);return a.useEffect((function(){c()}),Object.values(e)),[s,c]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=n(146),o=a.__importDefault(n(362));t.default=function(){var e=o.default({x:r.isClient?window.pageXOffset:0,y:r.isClient?window.pageYOffset:0}),t=e[0],n=e[1];return i.useEffect((function(){var e=function(){n({x:window.pageXOffset,y:window.pageYOffset})};return window.addEventListener("scroll",e,{capture:!1,passive:!0}),function(){window.removeEventListener("scroll",e)}}),[]),t}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(362)),o=n(146);t.default=function(e,t){void 0===e&&(e=1/0),void 0===t&&(t=1/0);var n=r.default({width:o.isClient?window.innerWidth:e,height:o.isClient?window.innerHeight:t}),a=n[0],s=n[1];return i.useEffect((function(){if(o.isClient){var e=function(){s({width:window.innerWidth,height:window.innerHeight})};return window.addEventListener("resize",e),function(){window.removeEventListener("resize",e)}}}),[]),a}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2),r=a.__importDefault(n(35)),o=n(146),s={x:0,y:0,width:0,height:0,top:0,left:0,bottom:0,right:0};t.default=o.isClient&&window.ResizeObserver?function(){var e=i.useState(null),t=e[0],n=e[1],a=i.useState(s),o=a[0],l=a[1],c=i.useMemo((function(){return new window.ResizeObserver((function(e){if(e[0]){var t=e[0].contentRect,n=t.x,a=t.y,i=t.width,r=t.height,o=t.top,s=t.left,c=t.bottom,u=t.right;l({x:n,y:a,width:i,height:r,top:o,left:s,bottom:c,right:u})}}))}),[]);return r.default((function(){if(t)return c.observe(t),function(){c.disconnect()}}),[t]),[n,o]}:function(){return[function(){},s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useRendersCount=void 0;var a=n(2);t.useRendersCount=function(){return++a.useRef(0).current}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(34),i=n(2);t.default=function(e){void 0===e&&(e=new Set);var t=i.useState(e),n=t[0],r=t[1],o=i.useMemo((function(){return{add:function(e){return r((function(t){return new Set(a.__spreadArrays(Array.from(t),[e]))}))},remove:function(e){return r((function(t){return new Set(Array.from(t).filter((function(t){return t!==e})))}))},toggle:function(e){return r((function(t){return t.has(e)?new Set(Array.from(t).filter((function(t){return t!==e}))):new Set(a.__spreadArrays(Array.from(t),[e]))}))},reset:function(){return r(e)}}}),[r]),s=a.__assign({has:i.useCallback((function(e){return n.has(e)}),[n])},o);return[n,s]}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.createGlobalState=void 0;var a=n(34),i=n(2),r=a.__importDefault(n(361)),o=a.__importDefault(n(35));function s(e){var t={state:e,setState:function(e){t.state=e,t.setters.forEach((function(e){return e(t.state)}))},setters:[]};return function(){var e=i.useState(t.state),n=e[0],a=e[1];return r.default((function(){return function(){t.setters=t.setters.filter((function(e){return e!==a}))}})),o.default((function(){t.setters.includes(a)||t.setters.push(a)})),[n,t.setState]}}t.createGlobalState=s,t.default=s},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.useHash=void 0;var a=n(34),i=n(2),r=a.__importDefault(n(786));t.useHash=function(){var e=i.useState((function(){return window.location.hash})),t=e[0],n=e[1],a=i.useCallback((function(){n(window.location.hash)}),[]);r.default((function(){window.addEventListener("hashchange",a)}),(function(){window.removeEventListener("hashchange",a)}));var o=i.useCallback((function(e){e!==t&&(window.location.hash=e)}),[t]);return[t,o]}},,function(e,t){},function(e,t,n){e.exports=n(33)(1734)},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var a=n(0),i=n.n(a);const r="".padStart(2);class LineWriter{constructor(e="\n"){i()(this,"_indent",""),i()(this,"_lines",[]),i()(this,"_separator",void 0),this._indent="",this._lines=[],this._separator=e}addLine(e){this._lines.push(`${this._indent}${e}`)}addLineAndIndent(e){this._lines.push(`${this._indent}${e}`),this._indent=`${this._indent}${r}`}dedentAndAddLine(e){this._indent=this._indent.substr(2),this._lines.push(`${this._indent}${e}`)}indent(){this._indent=`${this._indent}${r}`}dedent(){this._indent=this._indent.substr(2)}getContent(){return this._lines.join(this._separator)}}const o=(e="\n")=>new LineWriter(e)},function(e,t,n){e.exports=n.p+"94cccf20036d014924e63d4d595e88e1.svg"},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(2),i=n(64),r=function(e,t){return r=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},r(e,t)};function o(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var s=function(){return s=Object.assign||function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},s.apply(this,arguments)},l={width:"100%",height:"10px",top:"0px",left:"0px",cursor:"row-resize"},c={width:"10px",height:"100%",top:"0px",left:"0px",cursor:"col-resize"},u={width:"20px",height:"20px",position:"absolute"},d={top:s(s({},l),{top:"-5px"}),right:s(s({},c),{left:void 0,right:"-5px"}),bottom:s(s({},l),{top:void 0,bottom:"-5px"}),left:s(s({},c),{left:"-5px"}),topRight:s(s({},u),{right:"-10px",top:"-10px",cursor:"ne-resize"}),bottomRight:s(s({},u),{right:"-10px",bottom:"-10px",cursor:"se-resize"}),bottomLeft:s(s({},u),{left:"-10px",bottom:"-10px",cursor:"sw-resize"}),topLeft:s(s({},u),{left:"-10px",top:"-10px",cursor:"nw-resize"})},p=function(e){function t(){var t=null!==e&&e.apply(this,arguments)||this;return t.onMouseDown=function(e){t.props.onResizeStart(e,t.props.direction)},t.onTouchStart=function(e){t.props.onResizeStart(e,t.props.direction)},t}return o(t,e),t.prototype.render=function(){return a.createElement("div",{className:this.props.className||"",style:s(s({position:"absolute",userSelect:"none"},d[this.props.direction]),this.props.replaceStyles||{}),onMouseDown:this.onMouseDown,onTouchStart:this.onTouchStart},this.props.children)},t}(a.PureComponent),m={width:"auto",height:"auto"},f=function(e,t,n){return Math.max(Math.min(e,n),t)},g=function(e,t){return Math.round(e/t)*t},b=function(e,t){return new RegExp(e,"i").test(t)},y=function(e){return Boolean(e.touches&&e.touches.length)},h=function(e,t,n){void 0===n&&(n=0);var a=t.reduce((function(n,a,i){return Math.abs(a-e)<Math.abs(t[n]-e)?i:n}),0),i=Math.abs(t[a]-e);return 0===n||i<n?t[a]:e},v=function(e){return"auto"===(e=e.toString())||e.endsWith("px")||e.endsWith("%")||e.endsWith("vh")||e.endsWith("vw")||e.endsWith("vmax")||e.endsWith("vmin")?e:e+"px"},E=function(e,t,n,a){if(e&&"string"==typeof e){if(e.endsWith("px"))return Number(e.replace("px",""));if(e.endsWith("%"))return t*(Number(e.replace("%",""))/100);if(e.endsWith("vw"))return n*(Number(e.replace("vw",""))/100);if(e.endsWith("vh"))return a*(Number(e.replace("vh",""))/100)}return e},x=["as","style","className","grid","snap","bounds","boundsByDirection","size","defaultSize","minWidth","minHeight","maxWidth","maxHeight","lockAspectRatio","lockAspectRatioExtraWidth","lockAspectRatioExtraHeight","enable","handleStyles","handleClasses","handleWrapperStyle","handleWrapperClass","children","onResizeStart","onResize","onResizeStop","handleComponent","scale","resizeRatio","snapGap"],j="__resizable_base__",O=function(e){function t(t){var n=e.call(this,t)||this;return n.ratio=1,n.resizable=null,n.parentLeft=0,n.parentTop=0,n.resizableLeft=0,n.resizableRight=0,n.resizableTop=0,n.resizableBottom=0,n.targetLeft=0,n.targetTop=0,n.appendBase=function(){if(!n.resizable||!n.window)return null;var e=n.parentNode;if(!e)return null;var t=n.window.document.createElement("div");return t.style.width="100%",t.style.height="100%",t.style.position="absolute",t.style.transform="scale(0, 0)",t.style.left="0",t.style.flex="0 0 100%",t.classList?t.classList.add(j):t.className+=j,e.appendChild(t),t},n.removeBase=function(e){var t=n.parentNode;t&&t.removeChild(e)},n.ref=function(e){e&&(n.resizable=e)},n.state={isResizing:!1,width:void 0===(n.propsSize&&n.propsSize.width)?"auto":n.propsSize&&n.propsSize.width,height:void 0===(n.propsSize&&n.propsSize.height)?"auto":n.propsSize&&n.propsSize.height,direction:"right",original:{x:0,y:0,width:0,height:0},backgroundStyle:{height:"100%",width:"100%",backgroundColor:"rgba(0,0,0,0)",cursor:"auto",opacity:0,position:"fixed",zIndex:9999,top:"0",left:"0",bottom:"0",right:"0"},flexBasis:void 0},n.onResizeStart=n.onResizeStart.bind(n),n.onMouseMove=n.onMouseMove.bind(n),n.onMouseUp=n.onMouseUp.bind(n),n}return o(t,e),Object.defineProperty(t.prototype,"parentNode",{get:function(){return this.resizable?this.resizable.parentNode:null},enumerable:!1,configurable:!0}),Object.defineProperty(t.prototype,"window",{get:function(){return this.resizable&&this.resizable.ownerDocument?this.resizable.ownerDocument.defaultView:null},enumerable:!1,configurable:!0}),Object.defineProperty(t.prototype,"propsSize",{get:function(){return this.props.size||this.props.defaultSize||m},enumerable:!1,configurable:!0}),Object.defineProperty(t.prototype,"size",{get:function(){var e=0,t=0;if(this.resizable&&this.window){var n=this.resizable.offsetWidth,a=this.resizable.offsetHeight,i=this.resizable.style.position;"relative"!==i&&(this.resizable.style.position="relative"),e="auto"!==this.resizable.style.width?this.resizable.offsetWidth:n,t="auto"!==this.resizable.style.height?this.resizable.offsetHeight:a,this.resizable.style.position=i}return{width:e,height:t}},enumerable:!1,configurable:!0}),Object.defineProperty(t.prototype,"sizeStyle",{get:function(){var e=this,t=this.props.size,n=function(t){if(void 0===e.state[t]||"auto"===e.state[t])return"auto";if(e.propsSize&&e.propsSize[t]&&e.propsSize[t].toString().endsWith("%")){if(e.state[t].toString().endsWith("%"))return e.state[t].toString();var n=e.getParentSize();return Number(e.state[t].toString().replace("px",""))/n[t]*100+"%"}return v(e.state[t])};return{width:t&&void 0!==t.width&&!this.state.isResizing?v(t.width):n("width"),height:t&&void 0!==t.height&&!this.state.isResizing?v(t.height):n("height")}},enumerable:!1,configurable:!0}),t.prototype.getParentSize=function(){if(!this.parentNode)return this.window?{width:this.window.innerWidth,height:this.window.innerHeight}:{width:0,height:0};var e=this.appendBase();if(!e)return{width:0,height:0};var t=!1,n=this.parentNode.style.flexWrap;"wrap"!==n&&(t=!0,this.parentNode.style.flexWrap="wrap"),e.style.position="relative",e.style.minWidth="100%",e.style.minHeight="100%";var a={width:e.offsetWidth,height:e.offsetHeight};return t&&(this.parentNode.style.flexWrap=n),this.removeBase(e),a},t.prototype.bindEvents=function(){this.window&&(this.window.addEventListener("mouseup",this.onMouseUp),this.window.addEventListener("mousemove",this.onMouseMove),this.window.addEventListener("mouseleave",this.onMouseUp),this.window.addEventListener("touchmove",this.onMouseMove,{capture:!0,passive:!1}),this.window.addEventListener("touchend",this.onMouseUp))},t.prototype.unbindEvents=function(){this.window&&(this.window.removeEventListener("mouseup",this.onMouseUp),this.window.removeEventListener("mousemove",this.onMouseMove),this.window.removeEventListener("mouseleave",this.onMouseUp),this.window.removeEventListener("touchmove",this.onMouseMove,!0),this.window.removeEventListener("touchend",this.onMouseUp))},t.prototype.componentDidMount=function(){if(this.resizable&&this.window){var e=this.window.getComputedStyle(this.resizable);this.setState({width:this.state.width||this.size.width,height:this.state.height||this.size.height,flexBasis:"auto"!==e.flexBasis?e.flexBasis:void 0})}},t.prototype.componentWillUnmount=function(){this.window&&this.unbindEvents()},t.prototype.createSizeForCssProperty=function(e,t){var n=this.propsSize&&this.propsSize[t];return"auto"!==this.state[t]||this.state.original[t]!==e||void 0!==n&&"auto"!==n?e:"auto"},t.prototype.calculateNewMaxFromBoundary=function(e,t){var n,a,i=this.props.boundsByDirection,r=this.state.direction,o=i&&b("left",r),s=i&&b("top",r);if("parent"===this.props.bounds){var l=this.parentNode;l&&(n=o?this.resizableRight-this.parentLeft:l.offsetWidth+(this.parentLeft-this.resizableLeft),a=s?this.resizableBottom-this.parentTop:l.offsetHeight+(this.parentTop-this.resizableTop))}else"window"===this.props.bounds?this.window&&(n=o?this.resizableRight:this.window.innerWidth-this.resizableLeft,a=s?this.resizableBottom:this.window.innerHeight-this.resizableTop):this.props.bounds&&(n=o?this.resizableRight-this.targetLeft:this.props.bounds.offsetWidth+(this.targetLeft-this.resizableLeft),a=s?this.resizableBottom-this.targetTop:this.props.bounds.offsetHeight+(this.targetTop-this.resizableTop));return n&&Number.isFinite(n)&&(e=e&&e<n?e:n),a&&Number.isFinite(a)&&(t=t&&t<a?t:a),{maxWidth:e,maxHeight:t}},t.prototype.calculateNewSizeFromDirection=function(e,t){var n=this.props.scale||1,a=this.props.resizeRatio||1,i=this.state,r=i.direction,o=i.original,s=this.props,l=s.lockAspectRatio,c=s.lockAspectRatioExtraHeight,u=s.lockAspectRatioExtraWidth,d=o.width,p=o.height,m=c||0,f=u||0;return b("right",r)&&(d=o.width+(e-o.x)*a/n,l&&(p=(d-f)/this.ratio+m)),b("left",r)&&(d=o.width-(e-o.x)*a/n,l&&(p=(d-f)/this.ratio+m)),b("bottom",r)&&(p=o.height+(t-o.y)*a/n,l&&(d=(p-m)*this.ratio+f)),b("top",r)&&(p=o.height-(t-o.y)*a/n,l&&(d=(p-m)*this.ratio+f)),{newWidth:d,newHeight:p}},t.prototype.calculateNewSizeFromAspectRatio=function(e,t,n,a){var i=this.props,r=i.lockAspectRatio,o=i.lockAspectRatioExtraHeight,s=i.lockAspectRatioExtraWidth,l=void 0===a.width?10:a.width,c=void 0===n.width||n.width<0?e:n.width,u=void 0===a.height?10:a.height,d=void 0===n.height||n.height<0?t:n.height,p=o||0,m=s||0;if(r){var g=(u-p)*this.ratio+m,b=(d-p)*this.ratio+m,y=(l-m)/this.ratio+p,h=(c-m)/this.ratio+p,v=Math.max(l,g),E=Math.min(c,b),x=Math.max(u,y),j=Math.min(d,h);e=f(e,v,E),t=f(t,x,j)}else e=f(e,l,c),t=f(t,u,d);return{newWidth:e,newHeight:t}},t.prototype.setBoundingClientRect=function(){if("parent"===this.props.bounds){var e=this.parentNode;if(e){var t=e.getBoundingClientRect();this.parentLeft=t.left,this.parentTop=t.top}}if(this.props.bounds&&"string"!=typeof this.props.bounds){var n=this.props.bounds.getBoundingClientRect();this.targetLeft=n.left,this.targetTop=n.top}if(this.resizable){var a=this.resizable.getBoundingClientRect(),i=a.left,r=a.top,o=a.right,s=a.bottom;this.resizableLeft=i,this.resizableRight=o,this.resizableTop=r,this.resizableBottom=s}},t.prototype.onResizeStart=function(e,t){if(this.resizable&&this.window){var n,a=0,i=0;if(e.nativeEvent&&function(e){return Boolean((e.clientX||0===e.clientX)&&(e.clientY||0===e.clientY))}(e.nativeEvent)?(a=e.nativeEvent.clientX,i=e.nativeEvent.clientY):e.nativeEvent&&y(e.nativeEvent)&&(a=e.nativeEvent.touches[0].clientX,i=e.nativeEvent.touches[0].clientY),this.props.onResizeStart&&this.resizable&&!1===this.props.onResizeStart(e,t,this.resizable))return;this.props.size&&(void 0!==this.props.size.height&&this.props.size.height!==this.state.height&&this.setState({height:this.props.size.height}),void 0!==this.props.size.width&&this.props.size.width!==this.state.width&&this.setState({width:this.props.size.width})),this.ratio="number"==typeof this.props.lockAspectRatio?this.props.lockAspectRatio:this.size.width/this.size.height;var r=this.window.getComputedStyle(this.resizable);if("auto"!==r.flexBasis){var o=this.parentNode;if(o){var l=this.window.getComputedStyle(o).flexDirection;this.flexDir=l.startsWith("row")?"row":"column",n=r.flexBasis}}this.setBoundingClientRect(),this.bindEvents();var c={original:{x:a,y:i,width:this.size.width,height:this.size.height},isResizing:!0,backgroundStyle:s(s({},this.state.backgroundStyle),{cursor:this.window.getComputedStyle(e.target).cursor||"auto"}),direction:t,flexBasis:n};this.setState(c)}},t.prototype.onMouseMove=function(e){var t=this;if(this.state.isResizing&&this.resizable&&this.window){if(this.window.TouchEvent&&y(e))try{e.preventDefault(),e.stopPropagation()}catch(e){}var n=this.props,a=n.maxWidth,r=n.maxHeight,o=n.minWidth,s=n.minHeight,l=y(e)?e.touches[0].clientX:e.clientX,c=y(e)?e.touches[0].clientY:e.clientY,u=this.state,d=u.direction,p=u.original,m=u.width,f=u.height,b=this.getParentSize(),v=function(e,t,n,a,i,r,o){return a=E(a,e.width,t,n),i=E(i,e.height,t,n),r=E(r,e.width,t,n),o=E(o,e.height,t,n),{maxWidth:void 0===a?void 0:Number(a),maxHeight:void 0===i?void 0:Number(i),minWidth:void 0===r?void 0:Number(r),minHeight:void 0===o?void 0:Number(o)}}(b,this.window.innerWidth,this.window.innerHeight,a,r,o,s);a=v.maxWidth,r=v.maxHeight,o=v.minWidth,s=v.minHeight;var x=this.calculateNewSizeFromDirection(l,c),j=x.newHeight,O=x.newWidth,S=this.calculateNewMaxFromBoundary(a,r);this.props.snap&&this.props.snap.x&&(O=h(O,this.props.snap.x,this.props.snapGap)),this.props.snap&&this.props.snap.y&&(j=h(j,this.props.snap.y,this.props.snapGap));var k=this.calculateNewSizeFromAspectRatio(O,j,{width:S.maxWidth,height:S.maxHeight},{width:o,height:s});if(O=k.newWidth,j=k.newHeight,this.props.grid){var w=g(O,this.props.grid[0]),I=g(j,this.props.grid[1]),T=this.props.snapGap||0;O=0===T||Math.abs(w-O)<=T?w:O,j=0===T||Math.abs(I-j)<=T?I:j}var C={width:O-p.width,height:j-p.height};m&&"string"==typeof m&&(m.endsWith("%")?O=O/b.width*100+"%":m.endsWith("vw")?O=O/this.window.innerWidth*100+"vw":m.endsWith("vh")&&(O=O/this.window.innerHeight*100+"vh")),f&&"string"==typeof f&&(f.endsWith("%")?j=j/b.height*100+"%":f.endsWith("vw")?j=j/this.window.innerWidth*100+"vw":f.endsWith("vh")&&(j=j/this.window.innerHeight*100+"vh"));var M={width:this.createSizeForCssProperty(O,"width"),height:this.createSizeForCssProperty(j,"height")};"row"===this.flexDir?M.flexBasis=M.width:"column"===this.flexDir&&(M.flexBasis=M.height),i.flushSync((function(){t.setState(M)})),this.props.onResize&&this.props.onResize(e,d,this.resizable,C)}},t.prototype.onMouseUp=function(e){var t=this.state,n=t.isResizing,a=t.direction,i=t.original;if(n&&this.resizable){var r={width:this.size.width-i.width,height:this.size.height-i.height};this.props.onResizeStop&&this.props.onResizeStop(e,a,this.resizable,r),this.props.size&&this.setState(this.props.size),this.unbindEvents(),this.setState({isResizing:!1,backgroundStyle:s(s({},this.state.backgroundStyle),{cursor:"auto"})})}},t.prototype.updateSize=function(e){this.setState({width:e.width,height:e.height})},t.prototype.renderResizer=function(){var e=this,t=this.props,n=t.enable,i=t.handleStyles,r=t.handleClasses,o=t.handleWrapperStyle,s=t.handleWrapperClass,l=t.handleComponent;if(!n)return null;var c=Object.keys(n).map((function(t){return!1!==n[t]?a.createElement(p,{key:t,direction:t,onResizeStart:e.onResizeStart,replaceStyles:i&&i[t],className:r&&r[t]},l&&l[t]?l[t]:null):null}));return a.createElement("div",{className:s,style:o},c)},t.prototype.render=function(){var e=this,t=Object.keys(this.props).reduce((function(t,n){return-1!==x.indexOf(n)||(t[n]=e.props[n]),t}),{}),n=s(s(s({position:"relative",userSelect:this.state.isResizing?"none":"auto"},this.props.style),this.sizeStyle),{maxWidth:this.props.maxWidth,maxHeight:this.props.maxHeight,minWidth:this.props.minWidth,minHeight:this.props.minHeight,boxSizing:"border-box",flexShrink:0});this.state.flexBasis&&(n.flexBasis=this.state.flexBasis);var i=this.props.as||"div";return a.createElement(i,s({ref:this.ref,style:n,className:this.props.className},t),this.state.isResizing&&a.createElement("div",{style:this.state.backgroundStyle}),this.props.children,this.renderResizer())},t.defaultProps={as:"div",onResizeStart:function(){},onResize:function(){},onResizeStop:function(){},enable:{top:!0,right:!0,bottom:!0,left:!0,topRight:!0,bottomRight:!0,bottomLeft:!0,topLeft:!0},style:{},grid:[1,1],lockAspectRatio:!1,lockAspectRatioExtraWidth:0,lockAspectRatioExtraHeight:0,scale:1,resizeRatio:1,snapGap:0},t}(a.PureComponent);t.Resizable=O},function(e,t,n){switch(window.__kbnThemeTag__){case"v8dark":return n(1270);case"v8light":return n(1272)}},function(e,t,n){var a=n(256),i=n(1271);"string"==typeof(i=i.__esModule?i.default:i)&&(i=[[e.i,i,""]]);a(i,{insert:"head",singleton:!1}),e.exports=i.locals||{}},function(e,t,n){(t=n(257)(!1)).push([e.i,".kbnFieldButton{align-items:flex-start;border-radius:6px;display:flex;font-size:14px;font-size:1rem;line-height:1.71429rem;margin-bottom:4px;padding:0 8px;transition:box-shadow .15s cubic-bezier(.694,.0482,.335,1),background-color .15s cubic-bezier(.694,.0482,.335,1)}.kbnFieldButton-isActive,.kbnFieldButton:focus-within{outline:2px solid currentColor}.kbnFieldButton-isActive:focus-visible,.kbnFieldButton:focus-within:focus-visible{outline-style:auto}.kbnFieldButton-isActive:not(:focus-visible),.kbnFieldButton:focus-within:not(:focus-visible){outline:none}.kbnFieldButton__button{align-items:flex-start;display:flex;flex-grow:1;line-height:normal;padding:8px 0;text-align:left}.kbnFieldButton__fieldIcon{flex-shrink:0;line-height:0}.kbnFieldButton__name{flex-grow:1;padding:0 8px;word-break:break-word}.kbnFieldButton__infoIcon{align-items:center;display:flex;flex-shrink:0;justify-content:center;line-height:0;min-height:16px}.kbnFieldButton__fieldAction{margin-left:8px}.kbnFieldButton__dragHandle{margin-right:8px}.kbnFieldButton__dragHandle,.kbnFieldButton__fieldAction{line-height:32px}.kbnFieldButton--xs{font-size:12px}.kbnFieldButton--xs .kbnFieldButton__button{padding:4px 0}.kbnFieldButton--xs .kbnFieldButton__fieldAction{margin-left:4px}.kbnFieldButton--xs .kbnFieldButton__dragHandle,.kbnFieldButton--xs .kbnFieldButton__fieldAction{line-height:24px}.kbnFieldButton--flushBoth{padding-left:0;padding-right:0}",""]),e.exports=t},function(e,t,n){var a=n(256),i=n(1273);"string"==typeof(i=i.__esModule?i.default:i)&&(i=[[e.i,i,""]]);a(i,{insert:"head",singleton:!1}),e.exports=i.locals||{}},function(e,t,n){(t=n(257)(!1)).push([e.i,".kbnFieldButton{align-items:flex-start;border-radius:6px;display:flex;font-size:14px;font-size:1rem;line-height:1.71429rem;margin-bottom:4px;padding:0 8px;transition:box-shadow .15s cubic-bezier(.694,.0482,.335,1),background-color .15s cubic-bezier(.694,.0482,.335,1)}.kbnFieldButton-isActive,.kbnFieldButton:focus-within{outline:2px solid currentColor}.kbnFieldButton-isActive:focus-visible,.kbnFieldButton:focus-within:focus-visible{outline-style:auto}.kbnFieldButton-isActive:not(:focus-visible),.kbnFieldButton:focus-within:not(:focus-visible){outline:none}.kbnFieldButton__button{align-items:flex-start;display:flex;flex-grow:1;line-height:normal;padding:8px 0;text-align:left}.kbnFieldButton__fieldIcon{flex-shrink:0;line-height:0}.kbnFieldButton__name{flex-grow:1;padding:0 8px;word-break:break-word}.kbnFieldButton__infoIcon{align-items:center;display:flex;flex-shrink:0;justify-content:center;line-height:0;min-height:16px}.kbnFieldButton__fieldAction{margin-left:8px}.kbnFieldButton__dragHandle{margin-right:8px}.kbnFieldButton__dragHandle,.kbnFieldButton__fieldAction{line-height:32px}.kbnFieldButton--xs{font-size:12px}.kbnFieldButton--xs .kbnFieldButton__button{padding:4px 0}.kbnFieldButton--xs .kbnFieldButton__fieldAction{margin-left:4px}.kbnFieldButton--xs .kbnFieldButton__dragHandle,.kbnFieldButton--xs .kbnFieldButton__fieldAction{line-height:24px}.kbnFieldButton--flushBoth{padding-left:0;padding-right:0}",""]),e.exports=t},function(e,t){e.exports="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOCIgaGVpZ2h0PSI4IiBmaWxsPSJub25lIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMSAwSDB2OGg4VjdIMVYweiIgZmlsbD0iI0QzREFFNiIvPjwvc3ZnPg=="},function(e,t,n){!function(e,t,n,a,i,r){"use strict";function o(e,t){switch(arguments.length){case 0:break;case 1:this.range(e);break;default:this.range(t).domain(e)}return this}function s(e,t){switch(arguments.length){case 0:break;case 1:"function"==typeof e?this.interpolator(e):this.range(e);break;default:this.domain(e),"function"==typeof t?this.interpolator(t):this.range(t)}return this}const l=Symbol("implicit");function c(){var e=new Map,t=[],n=[],a=l;function i(i){var r=i+"",o=e.get(r);if(!o){if(a!==l)return a;e.set(r,o=t.push(i))}return n[(o-1)%n.length]}return i.domain=function(n){if(!arguments.length)return t.slice();t=[],e=new Map;for(const a of n){const n=a+"";e.has(n)||e.set(n,t.push(a))}return i},i.range=function(e){return arguments.length?(n=Array.from(e),i):n.slice()},i.unknown=function(e){return arguments.length?(a=e,i):a},i.copy=function(){return c(t,n).unknown(a)},o.apply(i,arguments),i}function u(){var e,n,a=c().unknown(void 0),i=a.domain,r=a.range,s=0,l=1,d=!1,p=0,m=0,f=.5;function g(){var a=i().length,o=l<s,c=o?l:s,u=o?s:l;e=(u-c)/Math.max(1,a-p+2*m),d&&(e=Math.floor(e)),c+=(u-c-e*(a-p))*f,n=e*(1-p),d&&(c=Math.round(c),n=Math.round(n));var g=t.range(a).map((function(t){return c+e*t}));return r(o?g.reverse():g)}return delete a.unknown,a.domain=function(e){return arguments.length?(i(e),g()):i()},a.range=function(e){return arguments.length?([s,l]=e,s=+s,l=+l,g()):[s,l]},a.rangeRound=function(e){return[s,l]=e,s=+s,l=+l,d=!0,g()},a.bandwidth=function(){return n},a.step=function(){return e},a.round=function(e){return arguments.length?(d=!!e,g()):d},a.padding=function(e){return arguments.length?(p=Math.min(1,m=+e),g()):p},a.paddingInner=function(e){return arguments.length?(p=Math.min(1,e),g()):p},a.paddingOuter=function(e){return arguments.length?(m=+e,g()):m},a.align=function(e){return arguments.length?(f=Math.max(0,Math.min(1,e)),g()):f},a.copy=function(){return u(i(),[s,l]).round(d).paddingInner(p).paddingOuter(m).align(f)},o.apply(g(),arguments)}function d(e){var t=e.copy;return e.padding=e.paddingOuter,delete e.paddingInner,delete e.paddingOuter,e.copy=function(){return d(t())},e}function p(e){return+e}var m=[0,1];function f(e){return e}function g(e,t){return(t-=e=+e)?function(n){return(n-e)/t}:(n=isNaN(t)?NaN:.5,function(){return n});var n}function b(e,t,n){var a=e[0],i=e[1],r=t[0],o=t[1];return i<a?(a=g(i,a),r=n(o,r)):(a=g(a,i),r=n(r,o)),function(e){return r(a(e))}}function y(e,n,a){var i=Math.min(e.length,n.length)-1,r=new Array(i),o=new Array(i),s=-1;for(e[i]<e[0]&&(e=e.slice().reverse(),n=n.slice().reverse());++s<i;)r[s]=g(e[s],e[s+1]),o[s]=a(n[s],n[s+1]);return function(n){var a=t.bisect(e,n,1,i)-1;return o[a](r[a](n))}}function h(e,t){return t.domain(e.domain()).range(e.range()).interpolate(e.interpolate()).clamp(e.clamp()).unknown(e.unknown())}function v(){var e,t,a,i,r,o,s=m,l=m,c=n.interpolate,u=f;function d(){var e,t,n,a=Math.min(s.length,l.length);return u!==f&&(e=s[0],t=s[a-1],e>t&&(n=e,e=t,t=n),u=function(n){return Math.max(e,Math.min(t,n))}),i=a>2?y:b,r=o=null,g}function g(t){return null==t||isNaN(t=+t)?a:(r||(r=i(s.map(e),l,c)))(e(u(t)))}return g.invert=function(a){return u(t((o||(o=i(l,s.map(e),n.interpolateNumber)))(a)))},g.domain=function(e){return arguments.length?(s=Array.from(e,p),d()):s.slice()},g.range=function(e){return arguments.length?(l=Array.from(e),d()):l.slice()},g.rangeRound=function(e){return l=Array.from(e),c=n.interpolateRound,d()},g.clamp=function(e){return arguments.length?(u=!!e||f,d()):u!==f},g.interpolate=function(e){return arguments.length?(c=e,d()):c},g.unknown=function(e){return arguments.length?(a=e,g):a},function(n,a){return e=n,t=a,d()}}function E(){return v()(f,f)}function x(e,n,i,r){var o,s=t.tickStep(e,n,i);switch((r=a.formatSpecifier(null==r?",f":r)).type){case"s":var l=Math.max(Math.abs(e),Math.abs(n));return null!=r.precision||isNaN(o=a.precisionPrefix(s,l))||(r.precision=o),a.formatPrefix(r,l);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(o=a.precisionRound(s,Math.max(Math.abs(e),Math.abs(n))))||(r.precision=o-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(o=a.precisionFixed(s))||(r.precision=o-2*("%"===r.type))}return a.format(r)}function j(e){var n=e.domain;return e.ticks=function(e){var a=n();return t.ticks(a[0],a[a.length-1],null==e?10:e)},e.tickFormat=function(e,t){var a=n();return x(a[0],a[a.length-1],null==e?10:e,t)},e.nice=function(a){null==a&&(a=10);var i,r,o=n(),s=0,l=o.length-1,c=o[s],u=o[l],d=10;for(u<c&&(r=c,c=u,u=r,r=s,s=l,l=r);d-- >0;){if((r=t.tickIncrement(c,u,a))===i)return o[s]=c,o[l]=u,n(o);if(r>0)c=Math.floor(c/r)*r,u=Math.ceil(u/r)*r;else{if(!(r<0))break;c=Math.ceil(c*r)/r,u=Math.floor(u*r)/r}i=r}return e},e}function O(e,t){var n,a=0,i=(e=e.slice()).length-1,r=e[a],o=e[i];return o<r&&(n=a,a=i,i=n,n=r,r=o,o=n),e[a]=t.floor(r),e[i]=t.ceil(o),e}function S(e){return Math.log(e)}function k(e){return Math.exp(e)}function w(e){return-Math.log(-e)}function I(e){return-Math.exp(-e)}function T(e){return isFinite(e)?+("1e"+e):e<0?0:e}function C(e){return function(t){return-e(-t)}}function M(e){var n,i,r=e(S,k),o=r.domain,s=10;function l(){return n=function(e){return e===Math.E?Math.log:10===e&&Math.log10||2===e&&Math.log2||(e=Math.log(e),function(t){return Math.log(t)/e})}(s),i=function(e){return 10===e?T:e===Math.E?Math.exp:function(t){return Math.pow(e,t)}}(s),o()[0]<0?(n=C(n),i=C(i),e(w,I)):e(S,k),r}return r.base=function(e){return arguments.length?(s=+e,l()):s},r.domain=function(e){return arguments.length?(o(e),l()):o()},r.ticks=function(e){var a,r=o(),l=r[0],c=r[r.length-1];(a=c<l)&&(m=l,l=c,c=m);var u,d,p,m=n(l),f=n(c),g=null==e?10:+e,b=[];if(!(s%1)&&f-m<g){if(m=Math.floor(m),f=Math.ceil(f),l>0){for(;m<=f;++m)for(d=1,u=i(m);d<s;++d)if(!((p=u*d)<l)){if(p>c)break;b.push(p)}}else for(;m<=f;++m)for(d=s-1,u=i(m);d>=1;--d)if(!((p=u*d)<l)){if(p>c)break;b.push(p)}2*b.length<g&&(b=t.ticks(l,c,g))}else b=t.ticks(m,f,Math.min(f-m,g)).map(i);return a?b.reverse():b},r.tickFormat=function(e,t){if(null==t&&(t=10===s?".0e":","),"function"!=typeof t&&(t=a.format(t)),e===1/0)return t;null==e&&(e=10);var o=Math.max(1,s*e/r.ticks().length);return function(e){var a=e/i(Math.round(n(e)));return a*s<s-.5&&(a*=s),a<=o?t(e):""}},r.nice=function(){return o(O(o(),{floor:function(e){return i(Math.floor(n(e)))},ceil:function(e){return i(Math.ceil(n(e)))}}))},r}function A(e){return function(t){return Math.sign(t)*Math.log1p(Math.abs(t/e))}}function _(e){return function(t){return Math.sign(t)*Math.expm1(Math.abs(t))*e}}function F(e){var t=1,n=e(A(t),_(t));return n.constant=function(n){return arguments.length?e(A(t=+n),_(t)):t},j(n)}function D(e){return function(t){return t<0?-Math.pow(-t,e):Math.pow(t,e)}}function N(e){return e<0?-Math.sqrt(-e):Math.sqrt(e)}function P(e){return e<0?-e*e:e*e}function R(e){var t=e(f,f),n=1;return t.exponent=function(t){return arguments.length?1===(n=+t)?e(f,f):.5===n?e(N,P):e(D(n),D(1/n)):n},j(t)}function L(){var e=R(v());return e.copy=function(){return h(e,L()).exponent(e.exponent())},o.apply(e,arguments),e}function q(e){return Math.sign(e)*e*e}function B(e){return new Date(e)}function z(e){return e instanceof Date?+e:+new Date(+e)}function $(e,t,n,a,i,r,o,s,l,c){var u=E(),d=u.invert,p=u.domain,m=c(".%L"),f=c(":%S"),g=c("%I:%M"),b=c("%I %p"),y=c("%a %d"),v=c("%b %d"),x=c("%B"),j=c("%Y");function S(e){return(l(e)<e?m:s(e)<e?f:o(e)<e?g:r(e)<e?b:a(e)<e?i(e)<e?y:v:n(e)<e?x:j)(e)}return u.invert=function(e){return new Date(d(e))},u.domain=function(e){return arguments.length?p(Array.from(e,z)):p().map(B)},u.ticks=function(t){var n=p();return e(n[0],n[n.length-1],null==t?10:t)},u.tickFormat=function(e,t){return null==t?S:c(t)},u.nice=function(e){var n=p();return e&&"function"==typeof e.range||(e=t(n[0],n[n.length-1],null==e?10:e)),e?p(O(n,e)):u},u.copy=function(){return h(u,$(e,t,n,a,i,r,o,s,l,c))},u}function V(){var e,t,a,i,r,o=0,s=1,l=f,c=!1;function u(t){return null==t||isNaN(t=+t)?r:l(0===a?.5:(t=(i(t)-e)*a,c?Math.max(0,Math.min(1,t)):t))}function d(e){return function(t){var n,a;return arguments.length?([n,a]=t,l=e(n,a),u):[l(0),l(1)]}}return u.domain=function(n){return arguments.length?([o,s]=n,e=i(o=+o),t=i(s=+s),a=e===t?0:1/(t-e),u):[o,s]},u.clamp=function(e){return arguments.length?(c=!!e,u):c},u.interpolator=function(e){return arguments.length?(l=e,u):l},u.range=d(n.interpolate),u.rangeRound=d(n.interpolateRound),u.unknown=function(e){return arguments.length?(r=e,u):r},function(n){return i=n,e=n(o),t=n(s),a=e===t?0:1/(t-e),u}}function U(e,t){return t.domain(e.domain()).interpolator(e.interpolator()).clamp(e.clamp()).unknown(e.unknown())}function G(){var e=R(V());return e.copy=function(){return U(e,G()).exponent(e.exponent())},s.apply(e,arguments)}function H(){var e,t,a,i,r,o,s,l=0,c=.5,u=1,d=1,p=f,m=!1;function g(e){return isNaN(e=+e)?s:(e=.5+((e=+o(e))-t)*(d*e<d*t?i:r),p(m?Math.max(0,Math.min(1,e)):e))}function b(e){return function(t){var a,i,r;return arguments.length?([a,i,r]=t,p=n.piecewise(e,[a,i,r]),g):[p(0),p(.5),p(1)]}}return g.domain=function(n){return arguments.length?([l,c,u]=n,e=o(l=+l),t=o(c=+c),a=o(u=+u),i=e===t?0:.5/(t-e),r=t===a?0:.5/(a-t),d=t<e?-1:1,g):[l,c,u]},g.clamp=function(e){return arguments.length?(m=!!e,g):m},g.interpolator=function(e){return arguments.length?(p=e,g):p},g.range=b(n.interpolate),g.rangeRound=b(n.interpolateRound),g.unknown=function(e){return arguments.length?(s=e,g):s},function(n){return o=n,e=n(l),t=n(c),a=n(u),i=e===t?0:.5/(t-e),r=t===a?0:.5/(a-t),d=t<e?-1:1,g}}function W(){var e=R(H());return e.copy=function(){return U(e,W()).exponent(e.exponent())},s.apply(e,arguments)}e.scaleBand=u,e.scaleDiverging=function e(){var t=j(H()(f));return t.copy=function(){return U(t,e())},s.apply(t,arguments)},e.scaleDivergingLog=function e(){var t=M(H()).domain([.1,1,10]);return t.copy=function(){return U(t,e()).base(t.base())},s.apply(t,arguments)},e.scaleDivergingPow=W,e.scaleDivergingSqrt=function(){return W.apply(null,arguments).exponent(.5)},e.scaleDivergingSymlog=function e(){var t=F(H());return t.copy=function(){return U(t,e()).constant(t.constant())},s.apply(t,arguments)},e.scaleIdentity=function e(t){var n;function a(e){return null==e||isNaN(e=+e)?n:e}return a.invert=a,a.domain=a.range=function(e){return arguments.length?(t=Array.from(e,p),a):t.slice()},a.unknown=function(e){return arguments.length?(n=e,a):n},a.copy=function(){return e(t).unknown(n)},t=arguments.length?Array.from(t,p):[0,1],j(a)},e.scaleImplicit=l,e.scaleLinear=function e(){var t=E();return t.copy=function(){return h(t,e())},o.apply(t,arguments),j(t)},e.scaleLog=function e(){var t=M(v()).domain([1,10]);return t.copy=function(){return h(t,e()).base(t.base())},o.apply(t,arguments),t},e.scaleOrdinal=c,e.scalePoint=function(){return d(u.apply(null,arguments).paddingInner(1))},e.scalePow=L,e.scaleQuantile=function e(){var n,a=[],i=[],r=[];function s(){var e=0,n=Math.max(1,i.length);for(r=new Array(n-1);++e<n;)r[e-1]=t.quantileSorted(a,e/n);return l}function l(e){return null==e||isNaN(e=+e)?n:i[t.bisect(r,e)]}return l.invertExtent=function(e){var t=i.indexOf(e);return t<0?[NaN,NaN]:[t>0?r[t-1]:a[0],t<r.length?r[t]:a[a.length-1]]},l.domain=function(e){if(!arguments.length)return a.slice();a=[];for(let t of e)null==t||isNaN(t=+t)||a.push(t);return a.sort(t.ascending),s()},l.range=function(e){return arguments.length?(i=Array.from(e),s()):i.slice()},l.unknown=function(e){return arguments.length?(n=e,l):n},l.quantiles=function(){return r.slice()},l.copy=function(){return e().domain(a).range(i).unknown(n)},o.apply(l,arguments)},e.scaleQuantize=function e(){var n,a=0,i=1,r=1,s=[.5],l=[0,1];function c(e){return null!=e&&e<=e?l[t.bisect(s,e,0,r)]:n}function u(){var e=-1;for(s=new Array(r);++e<r;)s[e]=((e+1)*i-(e-r)*a)/(r+1);return c}return c.domain=function(e){return arguments.length?([a,i]=e,a=+a,i=+i,u()):[a,i]},c.range=function(e){return arguments.length?(r=(l=Array.from(e)).length-1,u()):l.slice()},c.invertExtent=function(e){var t=l.indexOf(e);return t<0?[NaN,NaN]:t<1?[a,s[0]]:t>=r?[s[r-1],i]:[s[t-1],s[t]]},c.unknown=function(e){return arguments.length?(n=e,c):c},c.thresholds=function(){return s.slice()},c.copy=function(){return e().domain([a,i]).range(l).unknown(n)},o.apply(j(c),arguments)},e.scaleRadial=function e(){var t,n=E(),a=[0,1],i=!1;function r(e){var a=function(e){return Math.sign(e)*Math.sqrt(Math.abs(e))}(n(e));return isNaN(a)?t:i?Math.round(a):a}return r.invert=function(e){return n.invert(q(e))},r.domain=function(e){return arguments.length?(n.domain(e),r):n.domain()},r.range=function(e){return arguments.length?(n.range((a=Array.from(e,p)).map(q)),r):a.slice()},r.rangeRound=function(e){return r.range(e).round(!0)},r.round=function(e){return arguments.length?(i=!!e,r):i},r.clamp=function(e){return arguments.length?(n.clamp(e),r):n.clamp()},r.unknown=function(e){return arguments.length?(t=e,r):t},r.copy=function(){return e(n.domain(),a).round(i).clamp(n.clamp()).unknown(t)},o.apply(r,arguments),j(r)},e.scaleSequential=function e(){var t=j(V()(f));return t.copy=function(){return U(t,e())},s.apply(t,arguments)},e.scaleSequentialLog=function e(){var t=M(V()).domain([1,10]);return t.copy=function(){return U(t,e()).base(t.base())},s.apply(t,arguments)},e.scaleSequentialPow=G,e.scaleSequentialQuantile=function e(){var n=[],a=f;function i(e){if(null!=e&&!isNaN(e=+e))return a((t.bisect(n,e,1)-1)/(n.length-1))}return i.domain=function(e){if(!arguments.length)return n.slice();n=[];for(let t of e)null==t||isNaN(t=+t)||n.push(t);return n.sort(t.ascending),i},i.interpolator=function(e){return arguments.length?(a=e,i):a},i.range=function(){return n.map(((e,t)=>a(t/(n.length-1))))},i.quantiles=function(e){return Array.from({length:e+1},((a,i)=>t.quantile(n,i/e)))},i.copy=function(){return e(a).domain(n)},s.apply(i,arguments)},e.scaleSequentialSqrt=function(){return G.apply(null,arguments).exponent(.5)},e.scaleSequentialSymlog=function e(){var t=F(V());return t.copy=function(){return U(t,e()).constant(t.constant())},s.apply(t,arguments)},e.scaleSqrt=function(){return L.apply(null,arguments).exponent(.5)},e.scaleSymlog=function e(){var t=F(v());return t.copy=function(){return h(t,e()).constant(t.constant())},o.apply(t,arguments)},e.scaleThreshold=function e(){var n,a=[.5],i=[0,1],r=1;function s(e){return null!=e&&e<=e?i[t.bisect(a,e,0,r)]:n}return s.domain=function(e){return arguments.length?(a=Array.from(e),r=Math.min(a.length,i.length-1),s):a.slice()},s.range=function(e){return arguments.length?(i=Array.from(e),r=Math.min(a.length,i.length-1),s):i.slice()},s.invertExtent=function(e){var t=i.indexOf(e);return[a[t-1],a[t]]},s.unknown=function(e){return arguments.length?(n=e,s):n},s.copy=function(){return e().domain(a).range(i).unknown(n)},o.apply(s,arguments)},e.scaleTime=function(){return o.apply($(i.timeTicks,i.timeTickInterval,i.timeYear,i.timeMonth,i.timeWeek,i.timeDay,i.timeHour,i.timeMinute,i.timeSecond,r.timeFormat).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)},e.scaleUtc=function(){return o.apply($(i.utcTicks,i.utcTickInterval,i.utcYear,i.utcMonth,i.utcWeek,i.utcDay,i.utcHour,i.utcMinute,i.utcSecond,r.utcFormat).domain([Date.UTC(2e3,0,1),Date.UTC(2e3,0,2)]),arguments)},e.tickFormat=x,Object.defineProperty(e,"__esModule",{value:!0})}(t,n(816),n(1276),n(1278),n(817),n(1279))},function(e,t,n){!function(e,t){"use strict";function n(e,t,n,a,i){var r=e*e,o=r*e;return((1-3*e+3*r-o)*t+(4-6*r+3*o)*n+(1+3*e+3*r-3*o)*a+o*i)/6}function a(e){var t=e.length-1;return function(a){var i=a<=0?a=0:a>=1?(a=1,t-1):Math.floor(a*t),r=e[i],o=e[i+1],s=i>0?e[i-1]:2*r-o,l=i<t-1?e[i+2]:2*o-r;return n((a-i/t)*t,s,r,o,l)}}function i(e){var t=e.length;return function(a){var i=Math.floor(((a%=1)<0?++a:a)*t),r=e[(i+t-1)%t],o=e[i%t],s=e[(i+1)%t],l=e[(i+2)%t];return n((a-i/t)*t,r,o,s,l)}}var r=e=>()=>e;function o(e,t){return function(n){return e+n*t}}function s(e,t){var n=t-e;return n?o(e,n>180||n<-180?n-360*Math.round(n/360):n):r(isNaN(e)?t:e)}function l(e){return 1==(e=+e)?c:function(t,n){return n-t?function(e,t,n){return e=Math.pow(e,n),t=Math.pow(t,n)-e,n=1/n,function(a){return Math.pow(e+a*t,n)}}(t,n,e):r(isNaN(t)?n:t)}}function c(e,t){var n=t-e;return n?o(e,n):r(isNaN(e)?t:e)}var u=function e(n){var a=l(n);function i(e,n){var i=a((e=t.rgb(e)).r,(n=t.rgb(n)).r),r=a(e.g,n.g),o=a(e.b,n.b),s=c(e.opacity,n.opacity);return function(t){return e.r=i(t),e.g=r(t),e.b=o(t),e.opacity=s(t),e+""}}return i.gamma=e,i}(1);function d(e){return function(n){var a,i,r=n.length,o=new Array(r),s=new Array(r),l=new Array(r);for(a=0;a<r;++a)i=t.rgb(n[a]),o[a]=i.r||0,s[a]=i.g||0,l[a]=i.b||0;return o=e(o),s=e(s),l=e(l),i.opacity=1,function(e){return i.r=o(e),i.g=s(e),i.b=l(e),i+""}}}var p=d(a),m=d(i);function f(e,t){t||(t=[]);var n,a=e?Math.min(t.length,e.length):0,i=t.slice();return function(r){for(n=0;n<a;++n)i[n]=e[n]*(1-r)+t[n]*r;return i}}function g(e){return ArrayBuffer.isView(e)&&!(e instanceof DataView)}function b(e,t){var n,a=t?t.length:0,i=e?Math.min(a,e.length):0,r=new Array(i),o=new Array(a);for(n=0;n<i;++n)r[n]=O(e[n],t[n]);for(;n<a;++n)o[n]=t[n];return function(e){for(n=0;n<i;++n)o[n]=r[n](e);return o}}function y(e,t){var n=new Date;return e=+e,t=+t,function(a){return n.setTime(e*(1-a)+t*a),n}}function h(e,t){return e=+e,t=+t,function(n){return e*(1-n)+t*n}}function v(e,t){var n,a={},i={};for(n in null!==e&&"object"==typeof e||(e={}),null!==t&&"object"==typeof t||(t={}),t)n in e?a[n]=O(e[n],t[n]):i[n]=t[n];return function(e){for(n in a)i[n]=a[n](e);return i}}var E=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,x=new RegExp(E.source,"g");function j(e,t){var n,a,i,r=E.lastIndex=x.lastIndex=0,o=-1,s=[],l=[];for(e+="",t+="";(n=E.exec(e))&&(a=x.exec(t));)(i=a.index)>r&&(i=t.slice(r,i),s[o]?s[o]+=i:s[++o]=i),(n=n[0])===(a=a[0])?s[o]?s[o]+=a:s[++o]=a:(s[++o]=null,l.push({i:o,x:h(n,a)})),r=x.lastIndex;return r<t.length&&(i=t.slice(r),s[o]?s[o]+=i:s[++o]=i),s.length<2?l[0]?function(e){return function(t){return e(t)+""}}(l[0].x):function(e){return function(){return e}}(t):(t=l.length,function(e){for(var n,a=0;a<t;++a)s[(n=l[a]).i]=n.x(e);return s.join("")})}function O(e,n){var a,i=typeof n;return null==n||"boolean"===i?r(n):("number"===i?h:"string"===i?(a=t.color(n))?(n=a,u):j:n instanceof t.color?u:n instanceof Date?y:g(n)?f:Array.isArray(n)?b:"function"!=typeof n.valueOf&&"function"!=typeof n.toString||isNaN(n)?v:h)(e,n)}var S,k=180/Math.PI,w={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function I(e,t,n,a,i,r){var o,s,l;return(o=Math.sqrt(e*e+t*t))&&(e/=o,t/=o),(l=e*n+t*a)&&(n-=e*l,a-=t*l),(s=Math.sqrt(n*n+a*a))&&(n/=s,a/=s,l/=s),e*a<t*n&&(e=-e,t=-t,l=-l,o=-o),{translateX:i,translateY:r,rotate:Math.atan2(t,e)*k,skewX:Math.atan(l)*k,scaleX:o,scaleY:s}}function T(e,t,n,a){function i(e){return e.length?e.pop()+" ":""}return function(r,o){var s=[],l=[];return r=e(r),o=e(o),function(e,a,i,r,o,s){if(e!==i||a!==r){var l=o.push("translate(",null,t,null,n);s.push({i:l-4,x:h(e,i)},{i:l-2,x:h(a,r)})}else(i||r)&&o.push("translate("+i+t+r+n)}(r.translateX,r.translateY,o.translateX,o.translateY,s,l),function(e,t,n,r){e!==t?(e-t>180?t+=360:t-e>180&&(e+=360),r.push({i:n.push(i(n)+"rotate(",null,a)-2,x:h(e,t)})):t&&n.push(i(n)+"rotate("+t+a)}(r.rotate,o.rotate,s,l),function(e,t,n,r){e!==t?r.push({i:n.push(i(n)+"skewX(",null,a)-2,x:h(e,t)}):t&&n.push(i(n)+"skewX("+t+a)}(r.skewX,o.skewX,s,l),function(e,t,n,a,r,o){if(e!==n||t!==a){var s=r.push(i(r)+"scale(",null,",",null,")");o.push({i:s-4,x:h(e,n)},{i:s-2,x:h(t,a)})}else 1===n&&1===a||r.push(i(r)+"scale("+n+","+a+")")}(r.scaleX,r.scaleY,o.scaleX,o.scaleY,s,l),r=o=null,function(e){for(var t,n=-1,a=l.length;++n<a;)s[(t=l[n]).i]=t.x(e);return s.join("")}}}var C=T((function(e){const t=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(e+"");return t.isIdentity?w:I(t.a,t.b,t.c,t.d,t.e,t.f)}),"px, ","px)","deg)"),M=T((function(e){return null==e?w:(S||(S=document.createElementNS("http://www.w3.org/2000/svg","g")),S.setAttribute("transform",e),(e=S.transform.baseVal.consolidate())?I((e=e.matrix).a,e.b,e.c,e.d,e.e,e.f):w)}),", ",")",")"),A=1e-12;function _(e){return((e=Math.exp(e))+1/e)/2}var F=function e(t,n,a){function i(e,i){var r,o,s=e[0],l=e[1],c=e[2],u=i[0],d=i[1],p=i[2],m=u-s,f=d-l,g=m*m+f*f;if(g<A)o=Math.log(p/c)/t,r=function(e){return[s+e*m,l+e*f,c*Math.exp(t*e*o)]};else{var b=Math.sqrt(g),y=(p*p-c*c+a*g)/(2*c*n*b),h=(p*p-c*c-a*g)/(2*p*n*b),v=Math.log(Math.sqrt(y*y+1)-y),E=Math.log(Math.sqrt(h*h+1)-h);o=(E-v)/t,r=function(e){var a,i=e*o,r=_(v),u=c/(n*b)*(r*(a=t*i+v,((a=Math.exp(2*a))-1)/(a+1))-function(e){return((e=Math.exp(e))-1/e)/2}(v));return[s+u*m,l+u*f,c*r/_(t*i+v)]}}return r.duration=1e3*o*t/Math.SQRT2,r}return i.rho=function(t){var n=Math.max(.001,+t),a=n*n;return e(n,a,a*a)},i}(Math.SQRT2,2,4);function D(e){return function(n,a){var i=e((n=t.hsl(n)).h,(a=t.hsl(a)).h),r=c(n.s,a.s),o=c(n.l,a.l),s=c(n.opacity,a.opacity);return function(e){return n.h=i(e),n.s=r(e),n.l=o(e),n.opacity=s(e),n+""}}}var N=D(s),P=D(c);function R(e){return function(n,a){var i=e((n=t.hcl(n)).h,(a=t.hcl(a)).h),r=c(n.c,a.c),o=c(n.l,a.l),s=c(n.opacity,a.opacity);return function(e){return n.h=i(e),n.c=r(e),n.l=o(e),n.opacity=s(e),n+""}}}var L=R(s),q=R(c);function B(e){return function n(a){function i(n,i){var r=e((n=t.cubehelix(n)).h,(i=t.cubehelix(i)).h),o=c(n.s,i.s),s=c(n.l,i.l),l=c(n.opacity,i.opacity);return function(e){return n.h=r(e),n.s=o(e),n.l=s(Math.pow(e,a)),n.opacity=l(e),n+""}}return a=+a,i.gamma=n,i}(1)}var z=B(s),$=B(c);e.interpolate=O,e.interpolateArray=function(e,t){return(g(t)?f:b)(e,t)},e.interpolateBasis=a,e.interpolateBasisClosed=i,e.interpolateCubehelix=z,e.interpolateCubehelixLong=$,e.interpolateDate=y,e.interpolateDiscrete=function(e){var t=e.length;return function(n){return e[Math.max(0,Math.min(t-1,Math.floor(n*t)))]}},e.interpolateHcl=L,e.interpolateHclLong=q,e.interpolateHsl=N,e.interpolateHslLong=P,e.interpolateHue=function(e,t){var n=s(+e,+t);return function(e){var t=n(e);return t-360*Math.floor(t/360)}},e.interpolateLab=function(e,n){var a=c((e=t.lab(e)).l,(n=t.lab(n)).l),i=c(e.a,n.a),r=c(e.b,n.b),o=c(e.opacity,n.opacity);return function(t){return e.l=a(t),e.a=i(t),e.b=r(t),e.opacity=o(t),e+""}},e.interpolateNumber=h,e.interpolateNumberArray=f,e.interpolateObject=v,e.interpolateRgb=u,e.interpolateRgbBasis=p,e.interpolateRgbBasisClosed=m,e.interpolateRound=function(e,t){return e=+e,t=+t,function(n){return Math.round(e*(1-n)+t*n)}},e.interpolateString=j,e.interpolateTransformCss=C,e.interpolateTransformSvg=M,e.interpolateZoom=F,e.piecewise=function(e,t){void 0===t&&(t=e,e=O);for(var n=0,a=t.length-1,i=t[0],r=new Array(a<0?0:a);n<a;)r[n]=e(i,i=t[++n]);return function(e){var t=Math.max(0,Math.min(a-1,Math.floor(e*=a)));return r[t](e-t)}},e.quantize=function(e,t){for(var n=new Array(t),a=0;a<t;++a)n[a]=e(a/(t-1));return n},Object.defineProperty(e,"__esModule",{value:!0})}(t,n(1277))},function(e,t,n){!function(e){"use strict";function t(e,t,n){e.prototype=t.prototype=n,n.constructor=e}function n(e,t){var n=Object.create(e.prototype);for(var a in t)n[a]=t[a];return n}function a(){}var i=.7,r=1/i,o="\\s*([+-]?\\d+)\\s*",s="\\s*([+-]?\\d*\\.?\\d+(?:[eE][+-]?\\d+)?)\\s*",l="\\s*([+-]?\\d*\\.?\\d+(?:[eE][+-]?\\d+)?)%\\s*",c=/^#([0-9a-f]{3,8})$/,u=new RegExp("^rgb\\("+[o,o,o]+"\\)$"),d=new RegExp("^rgb\\("+[l,l,l]+"\\)$"),p=new RegExp("^rgba\\("+[o,o,o,s]+"\\)$"),m=new RegExp("^rgba\\("+[l,l,l,s]+"\\)$"),f=new RegExp("^hsl\\("+[s,l,l]+"\\)$"),g=new RegExp("^hsla\\("+[s,l,l,s]+"\\)$"),b={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function y(){return this.rgb().formatHex()}function h(){return this.rgb().formatRgb()}function v(e){var t,n;return e=(e+"").trim().toLowerCase(),(t=c.exec(e))?(n=t[1].length,t=parseInt(t[1],16),6===n?E(t):3===n?new S(t>>8&15|t>>4&240,t>>4&15|240&t,(15&t)<<4|15&t,1):8===n?x(t>>24&255,t>>16&255,t>>8&255,(255&t)/255):4===n?x(t>>12&15|t>>8&240,t>>8&15|t>>4&240,t>>4&15|240&t,((15&t)<<4|15&t)/255):null):(t=u.exec(e))?new S(t[1],t[2],t[3],1):(t=d.exec(e))?new S(255*t[1]/100,255*t[2]/100,255*t[3]/100,1):(t=p.exec(e))?x(t[1],t[2],t[3],t[4]):(t=m.exec(e))?x(255*t[1]/100,255*t[2]/100,255*t[3]/100,t[4]):(t=f.exec(e))?T(t[1],t[2]/100,t[3]/100,1):(t=g.exec(e))?T(t[1],t[2]/100,t[3]/100,t[4]):b.hasOwnProperty(e)?E(b[e]):"transparent"===e?new S(NaN,NaN,NaN,0):null}function E(e){return new S(e>>16&255,e>>8&255,255&e,1)}function x(e,t,n,a){return a<=0&&(e=t=n=NaN),new S(e,t,n,a)}function j(e){return e instanceof a||(e=v(e)),e?new S((e=e.rgb()).r,e.g,e.b,e.opacity):new S}function O(e,t,n,a){return 1===arguments.length?j(e):new S(e,t,n,null==a?1:a)}function S(e,t,n,a){this.r=+e,this.g=+t,this.b=+n,this.opacity=+a}function k(){return"#"+I(this.r)+I(this.g)+I(this.b)}function w(){var e=this.opacity;return(1===(e=isNaN(e)?1:Math.max(0,Math.min(1,e)))?"rgb(":"rgba(")+Math.max(0,Math.min(255,Math.round(this.r)||0))+", "+Math.max(0,Math.min(255,Math.round(this.g)||0))+", "+Math.max(0,Math.min(255,Math.round(this.b)||0))+(1===e?")":", "+e+")")}function I(e){return((e=Math.max(0,Math.min(255,Math.round(e)||0)))<16?"0":"")+e.toString(16)}function T(e,t,n,a){return a<=0?e=t=n=NaN:n<=0||n>=1?e=t=NaN:t<=0&&(e=NaN),new A(e,t,n,a)}function C(e){if(e instanceof A)return new A(e.h,e.s,e.l,e.opacity);if(e instanceof a||(e=v(e)),!e)return new A;if(e instanceof A)return e;var t=(e=e.rgb()).r/255,n=e.g/255,i=e.b/255,r=Math.min(t,n,i),o=Math.max(t,n,i),s=NaN,l=o-r,c=(o+r)/2;return l?(s=t===o?(n-i)/l+6*(n<i):n===o?(i-t)/l+2:(t-n)/l+4,l/=c<.5?o+r:2-o-r,s*=60):l=c>0&&c<1?0:s,new A(s,l,c,e.opacity)}function M(e,t,n,a){return 1===arguments.length?C(e):new A(e,t,n,null==a?1:a)}function A(e,t,n,a){this.h=+e,this.s=+t,this.l=+n,this.opacity=+a}function _(e,t,n){return 255*(e<60?t+(n-t)*e/60:e<180?n:e<240?t+(n-t)*(240-e)/60:t)}t(a,v,{copy:function(e){return Object.assign(new this.constructor,this,e)},displayable:function(){return this.rgb().displayable()},hex:y,formatHex:y,formatHsl:function(){return C(this).formatHsl()},formatRgb:h,toString:h}),t(S,O,n(a,{brighter:function(e){return e=null==e?r:Math.pow(r,e),new S(this.r*e,this.g*e,this.b*e,this.opacity)},darker:function(e){return e=null==e?i:Math.pow(i,e),new S(this.r*e,this.g*e,this.b*e,this.opacity)},rgb:function(){return this},displayable:function(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:k,formatHex:k,formatRgb:w,toString:w})),t(A,M,n(a,{brighter:function(e){return e=null==e?r:Math.pow(r,e),new A(this.h,this.s,this.l*e,this.opacity)},darker:function(e){return e=null==e?i:Math.pow(i,e),new A(this.h,this.s,this.l*e,this.opacity)},rgb:function(){var e=this.h%360+360*(this.h<0),t=isNaN(e)||isNaN(this.s)?0:this.s,n=this.l,a=n+(n<.5?n:1-n)*t,i=2*n-a;return new S(_(e>=240?e-240:e+120,i,a),_(e,i,a),_(e<120?e+240:e-120,i,a),this.opacity)},displayable:function(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl:function(){var e=this.opacity;return(1===(e=isNaN(e)?1:Math.max(0,Math.min(1,e)))?"hsl(":"hsla(")+(this.h||0)+", "+100*(this.s||0)+"%, "+100*(this.l||0)+"%"+(1===e?")":", "+e+")")}}));const F=Math.PI/180,D=180/Math.PI,N=.96422,P=1,R=.82521,L=4/29,q=6/29,B=3*q*q,z=q*q*q;function $(e){if(e instanceof U)return new U(e.l,e.a,e.b,e.opacity);if(e instanceof X)return J(e);e instanceof S||(e=j(e));var t,n,a=Q(e.r),i=Q(e.g),r=Q(e.b),o=G((.2225045*a+.7168786*i+.0606169*r)/P);return a===i&&i===r?t=n=o:(t=G((.4360747*a+.3850649*i+.1430804*r)/N),n=G((.0139322*a+.0971045*i+.7141733*r)/R)),new U(116*o-16,500*(t-o),200*(o-n),e.opacity)}function V(e,t,n,a){return 1===arguments.length?$(e):new U(e,t,n,null==a?1:a)}function U(e,t,n,a){this.l=+e,this.a=+t,this.b=+n,this.opacity=+a}function G(e){return e>z?Math.pow(e,1/3):e/B+L}function H(e){return e>q?e*e*e:B*(e-L)}function W(e){return 255*(e<=.0031308?12.92*e:1.055*Math.pow(e,1/2.4)-.055)}function Q(e){return(e/=255)<=.04045?e/12.92:Math.pow((e+.055)/1.055,2.4)}function Y(e){if(e instanceof X)return new X(e.h,e.c,e.l,e.opacity);if(e instanceof U||(e=$(e)),0===e.a&&0===e.b)return new X(NaN,0<e.l&&e.l<100?0:NaN,e.l,e.opacity);var t=Math.atan2(e.b,e.a)*D;return new X(t<0?t+360:t,Math.sqrt(e.a*e.a+e.b*e.b),e.l,e.opacity)}function K(e,t,n,a){return 1===arguments.length?Y(e):new X(e,t,n,null==a?1:a)}function X(e,t,n,a){this.h=+e,this.c=+t,this.l=+n,this.opacity=+a}function J(e){if(isNaN(e.h))return new U(e.l,0,0,e.opacity);var t=e.h*F;return new U(e.l,Math.cos(t)*e.c,Math.sin(t)*e.c,e.opacity)}t(U,V,n(a,{brighter:function(e){return new U(this.l+18*(null==e?1:e),this.a,this.b,this.opacity)},darker:function(e){return new U(this.l-18*(null==e?1:e),this.a,this.b,this.opacity)},rgb:function(){var e=(this.l+16)/116,t=isNaN(this.a)?e:e+this.a/500,n=isNaN(this.b)?e:e-this.b/200;return new S(W(3.1338561*(t=N*H(t))-1.6168667*(e=P*H(e))-.4906146*(n=R*H(n))),W(-.9787684*t+1.9161415*e+.033454*n),W(.0719453*t-.2289914*e+1.4052427*n),this.opacity)}})),t(X,K,n(a,{brighter:function(e){return new X(this.h,this.c,this.l+18*(null==e?1:e),this.opacity)},darker:function(e){return new X(this.h,this.c,this.l-18*(null==e?1:e),this.opacity)},rgb:function(){return J(this).rgb()}}));var Z=-.14861,ee=1.78277,te=-.29227,ne=-.90649,ae=1.97294,ie=ae*ne,re=ae*ee,oe=ee*te-ne*Z;function se(e,t,n,a){return 1===arguments.length?function(e){if(e instanceof le)return new le(e.h,e.s,e.l,e.opacity);e instanceof S||(e=j(e));var t=e.r/255,n=e.g/255,a=e.b/255,i=(oe*a+ie*t-re*n)/(oe+ie-re),r=a-i,o=(ae*(n-i)-te*r)/ne,s=Math.sqrt(o*o+r*r)/(ae*i*(1-i)),l=s?Math.atan2(o,r)*D-120:NaN;return new le(l<0?l+360:l,s,i,e.opacity)}(e):new le(e,t,n,null==a?1:a)}function le(e,t,n,a){this.h=+e,this.s=+t,this.l=+n,this.opacity=+a}t(le,se,n(a,{brighter:function(e){return e=null==e?r:Math.pow(r,e),new le(this.h,this.s,this.l*e,this.opacity)},darker:function(e){return e=null==e?i:Math.pow(i,e),new le(this.h,this.s,this.l*e,this.opacity)},rgb:function(){var e=isNaN(this.h)?0:(this.h+120)*F,t=+this.l,n=isNaN(this.s)?0:this.s*t*(1-t),a=Math.cos(e),i=Math.sin(e);return new S(255*(t+n*(Z*a+ee*i)),255*(t+n*(te*a+ne*i)),255*(t+n*(ae*a)),this.opacity)}})),e.color=v,e.cubehelix=se,e.gray=function(e,t){return new U(e,0,0,null==t?1:t)},e.hcl=K,e.hsl=M,e.lab=V,e.lch=function(e,t,n,a){return 1===arguments.length?Y(e):new X(n,t,e,null==a?1:a)},e.rgb=O,Object.defineProperty(e,"__esModule",{value:!0})}(t)},function(e,t,n){!function(e){"use strict";function t(e,t){if((n=(e=t?e.toExponential(t-1):e.toExponential()).indexOf("e"))<0)return null;var n,a=e.slice(0,n);return[a.length>1?a[0]+a.slice(2):a,+e.slice(n+1)]}function n(e){return(e=t(Math.abs(e)))?e[1]:NaN}var a,i=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function r(e){if(!(t=i.exec(e)))throw new Error("invalid format: "+e);var t;return new o({fill:t[1],align:t[2],sign:t[3],symbol:t[4],zero:t[5],width:t[6],comma:t[7],precision:t[8]&&t[8].slice(1),trim:t[9],type:t[10]})}function o(e){this.fill=void 0===e.fill?" ":e.fill+"",this.align=void 0===e.align?">":e.align+"",this.sign=void 0===e.sign?"-":e.sign+"",this.symbol=void 0===e.symbol?"":e.symbol+"",this.zero=!!e.zero,this.width=void 0===e.width?void 0:+e.width,this.comma=!!e.comma,this.precision=void 0===e.precision?void 0:+e.precision,this.trim=!!e.trim,this.type=void 0===e.type?"":e.type+""}function s(e,n){var a=t(e,n);if(!a)return e+"";var i=a[0],r=a[1];return r<0?"0."+new Array(-r).join("0")+i:i.length>r+1?i.slice(0,r+1)+"."+i.slice(r+1):i+new Array(r-i.length+2).join("0")}r.prototype=o.prototype,o.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};var l={"%":(e,t)=>(100*e).toFixed(t),b:e=>Math.round(e).toString(2),c:e=>e+"",d:function(e){return Math.abs(e=Math.round(e))>=1e21?e.toLocaleString("en").replace(/,/g,""):e.toString(10)},e:(e,t)=>e.toExponential(t),f:(e,t)=>e.toFixed(t),g:(e,t)=>e.toPrecision(t),o:e=>Math.round(e).toString(8),p:(e,t)=>s(100*e,t),r:s,s:function(e,n){var i=t(e,n);if(!i)return e+"";var r=i[0],o=i[1],s=o-(a=3*Math.max(-8,Math.min(8,Math.floor(o/3))))+1,l=r.length;return s===l?r:s>l?r+new Array(s-l+1).join("0"):s>0?r.slice(0,s)+"."+r.slice(s):"0."+new Array(1-s).join("0")+t(e,Math.max(0,n+s-1))[0]},X:e=>Math.round(e).toString(16).toUpperCase(),x:e=>Math.round(e).toString(16)};function c(e){return e}var u,d=Array.prototype.map,p=["y","z","a","f","p","n","µ","m","","k","M","G","T","P","E","Z","Y"];function m(e){var t,i,o=void 0===e.grouping||void 0===e.thousands?c:(t=d.call(e.grouping,Number),i=e.thousands+"",function(e,n){for(var a=e.length,r=[],o=0,s=t[0],l=0;a>0&&s>0&&(l+s+1>n&&(s=Math.max(1,n-l)),r.push(e.substring(a-=s,a+s)),!((l+=s+1)>n));)s=t[o=(o+1)%t.length];return r.reverse().join(i)}),s=void 0===e.currency?"":e.currency[0]+"",u=void 0===e.currency?"":e.currency[1]+"",m=void 0===e.decimal?".":e.decimal+"",f=void 0===e.numerals?c:function(e){return function(t){return t.replace(/[0-9]/g,(function(t){return e[+t]}))}}(d.call(e.numerals,String)),g=void 0===e.percent?"%":e.percent+"",b=void 0===e.minus?"−":e.minus+"",y=void 0===e.nan?"NaN":e.nan+"";function h(e){var t=(e=r(e)).fill,n=e.align,i=e.sign,c=e.symbol,d=e.zero,h=e.width,v=e.comma,E=e.precision,x=e.trim,j=e.type;"n"===j?(v=!0,j="g"):l[j]||(void 0===E&&(E=12),x=!0,j="g"),(d||"0"===t&&"="===n)&&(d=!0,t="0",n="=");var O="$"===c?s:"#"===c&&/[boxX]/.test(j)?"0"+j.toLowerCase():"",S="$"===c?u:/[%p]/.test(j)?g:"",k=l[j],w=/[defgprs%]/.test(j);function I(e){var r,s,l,c=O,u=S;if("c"===j)u=k(e)+u,e="";else{var g=(e=+e)<0||1/e<0;if(e=isNaN(e)?y:k(Math.abs(e),E),x&&(e=function(e){e:for(var t,n=e.length,a=1,i=-1;a<n;++a)switch(e[a]){case".":i=t=a;break;case"0":0===i&&(i=a),t=a;break;default:if(!+e[a])break e;i>0&&(i=0)}return i>0?e.slice(0,i)+e.slice(t+1):e}(e)),g&&0==+e&&"+"!==i&&(g=!1),c=(g?"("===i?i:b:"-"===i||"("===i?"":i)+c,u=("s"===j?p[8+a/3]:"")+u+(g&&"("===i?")":""),w)for(r=-1,s=e.length;++r<s;)if(48>(l=e.charCodeAt(r))||l>57){u=(46===l?m+e.slice(r+1):e.slice(r))+u,e=e.slice(0,r);break}}v&&!d&&(e=o(e,1/0));var I=c.length+e.length+u.length,T=I<h?new Array(h-I+1).join(t):"";switch(v&&d&&(e=o(T+e,T.length?h-u.length:1/0),T=""),n){case"<":e=c+e+u+T;break;case"=":e=c+T+e+u;break;case"^":e=T.slice(0,I=T.length>>1)+c+e+u+T.slice(I);break;default:e=T+c+e+u}return f(e)}return E=void 0===E?6:/[gprs]/.test(j)?Math.max(1,Math.min(21,E)):Math.max(0,Math.min(20,E)),I.toString=function(){return e+""},I}return{format:h,formatPrefix:function(e,t){var a=h(((e=r(e)).type="f",e)),i=3*Math.max(-8,Math.min(8,Math.floor(n(t)/3))),o=Math.pow(10,-i),s=p[8+i/3];return function(e){return a(o*e)+s}}}}function f(t){return u=m(t),e.format=u.format,e.formatPrefix=u.formatPrefix,u}f({thousands:",",grouping:[3],currency:["$",""]}),e.FormatSpecifier=o,e.formatDefaultLocale=f,e.formatLocale=m,e.formatSpecifier=r,e.precisionFixed=function(e){return Math.max(0,-n(Math.abs(e)))},e.precisionPrefix=function(e,t){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(n(t)/3)))-n(Math.abs(e)))},e.precisionRound=function(e,t){return e=Math.abs(e),t=Math.abs(t)-e,Math.max(0,n(t)-n(e))+1},Object.defineProperty(e,"__esModule",{value:!0})}(t)},function(e,t,n){!function(e,t){"use strict";function n(e){if(0<=e.y&&e.y<100){var t=new Date(-1,e.m,e.d,e.H,e.M,e.S,e.L);return t.setFullYear(e.y),t}return new Date(e.y,e.m,e.d,e.H,e.M,e.S,e.L)}function a(e){if(0<=e.y&&e.y<100){var t=new Date(Date.UTC(-1,e.m,e.d,e.H,e.M,e.S,e.L));return t.setUTCFullYear(e.y),t}return new Date(Date.UTC(e.y,e.m,e.d,e.H,e.M,e.S,e.L))}function i(e,t,n){return{y:e,m:t,d:n,H:0,M:0,S:0,L:0}}function r(e){var r=e.dateTime,o=e.date,l=e.time,c=e.periods,u=e.days,d=e.shortDays,p=e.months,H=e.shortMonths,pe=m(c),Se=f(c),ke=m(u),we=f(u),Ie=m(d),Te=f(d),Ce=m(p),Me=f(p),Ae=m(H),_e=f(H),Fe={a:function(e){return d[e.getDay()]},A:function(e){return u[e.getDay()]},b:function(e){return H[e.getMonth()]},B:function(e){return p[e.getMonth()]},c:null,d:N,e:N,f:B,g:X,G:Z,H:P,I:R,j:L,L:q,m:z,M:$,p:function(e){return c[+(e.getHours()>=12)]},q:function(e){return 1+~~(e.getMonth()/3)},Q:je,s:Oe,S:V,u:U,U:G,V:W,w:Q,W:Y,x:null,X:null,y:K,Y:J,Z:ee,"%":xe},De={a:function(e){return d[e.getUTCDay()]},A:function(e){return u[e.getUTCDay()]},b:function(e){return H[e.getUTCMonth()]},B:function(e){return p[e.getUTCMonth()]},c:null,d:te,e:te,f:oe,g:ye,G:ve,H:ne,I:ae,j:ie,L:re,m:se,M:le,p:function(e){return c[+(e.getUTCHours()>=12)]},q:function(e){return 1+~~(e.getUTCMonth()/3)},Q:je,s:Oe,S:ce,u:ue,U:de,V:me,w:fe,W:ge,x:null,X:null,y:be,Y:he,Z:Ee,"%":xe},Ne={a:function(e,t,n){var a=Ie.exec(t.slice(n));return a?(e.w=Te.get(a[0].toLowerCase()),n+a[0].length):-1},A:function(e,t,n){var a=ke.exec(t.slice(n));return a?(e.w=we.get(a[0].toLowerCase()),n+a[0].length):-1},b:function(e,t,n){var a=Ae.exec(t.slice(n));return a?(e.m=_e.get(a[0].toLowerCase()),n+a[0].length):-1},B:function(e,t,n){var a=Ce.exec(t.slice(n));return a?(e.m=Me.get(a[0].toLowerCase()),n+a[0].length):-1},c:function(e,t,n){return Le(e,r,t,n)},d:k,e:k,f:A,g:x,G:E,H:I,I:I,j:w,L:M,m:S,M:T,p:function(e,t,n){var a=pe.exec(t.slice(n));return a?(e.p=Se.get(a[0].toLowerCase()),n+a[0].length):-1},q:O,Q:F,s:D,S:C,u:b,U:y,V:h,w:g,W:v,x:function(e,t,n){return Le(e,o,t,n)},X:function(e,t,n){return Le(e,l,t,n)},y:x,Y:E,Z:j,"%":_};function Pe(e,t){return function(n){var a,i,r,o=[],l=-1,c=0,u=e.length;for(n instanceof Date||(n=new Date(+n));++l<u;)37===e.charCodeAt(l)&&(o.push(e.slice(c,l)),null!=(i=s[a=e.charAt(++l)])?a=e.charAt(++l):i="e"===a?" ":"0",(r=t[a])&&(a=r(n,i)),o.push(a),c=l+1);return o.push(e.slice(c,l)),o.join("")}}function Re(e,r){return function(o){var s,l,c=i(1900,void 0,1);if(Le(c,e,o+="",0)!=o.length)return null;if("Q"in c)return new Date(c.Q);if("s"in c)return new Date(1e3*c.s+("L"in c?c.L:0));if(r&&!("Z"in c)&&(c.Z=0),"p"in c&&(c.H=c.H%12+12*c.p),void 0===c.m&&(c.m="q"in c?c.q:0),"V"in c){if(c.V<1||c.V>53)return null;"w"in c||(c.w=1),"Z"in c?(l=(s=a(i(c.y,0,1))).getUTCDay(),s=l>4||0===l?t.utcMonday.ceil(s):t.utcMonday(s),s=t.utcDay.offset(s,7*(c.V-1)),c.y=s.getUTCFullYear(),c.m=s.getUTCMonth(),c.d=s.getUTCDate()+(c.w+6)%7):(l=(s=n(i(c.y,0,1))).getDay(),s=l>4||0===l?t.timeMonday.ceil(s):t.timeMonday(s),s=t.timeDay.offset(s,7*(c.V-1)),c.y=s.getFullYear(),c.m=s.getMonth(),c.d=s.getDate()+(c.w+6)%7)}else("W"in c||"U"in c)&&("w"in c||(c.w="u"in c?c.u%7:"W"in c?1:0),l="Z"in c?a(i(c.y,0,1)).getUTCDay():n(i(c.y,0,1)).getDay(),c.m=0,c.d="W"in c?(c.w+6)%7+7*c.W-(l+5)%7:c.w+7*c.U-(l+6)%7);return"Z"in c?(c.H+=c.Z/100|0,c.M+=c.Z%100,a(c)):n(c)}}function Le(e,t,n,a){for(var i,r,o=0,l=t.length,c=n.length;o<l;){if(a>=c)return-1;if(37===(i=t.charCodeAt(o++))){if(i=t.charAt(o++),!(r=Ne[i in s?t.charAt(o++):i])||(a=r(e,n,a))<0)return-1}else if(i!=n.charCodeAt(a++))return-1}return a}return Fe.x=Pe(o,Fe),Fe.X=Pe(l,Fe),Fe.c=Pe(r,Fe),De.x=Pe(o,De),De.X=Pe(l,De),De.c=Pe(r,De),{format:function(e){var t=Pe(e+="",Fe);return t.toString=function(){return e},t},parse:function(e){var t=Re(e+="",!1);return t.toString=function(){return e},t},utcFormat:function(e){var t=Pe(e+="",De);return t.toString=function(){return e},t},utcParse:function(e){var t=Re(e+="",!0);return t.toString=function(){return e},t}}}var o,s={"-":"",_:" ",0:"0"},l=/^\s*\d+/,c=/^%/,u=/[\\^$*+?|[\]().{}]/g;function d(e,t,n){var a=e<0?"-":"",i=(a?-e:e)+"",r=i.length;return a+(r<n?new Array(n-r+1).join(t)+i:i)}function p(e){return e.replace(u,"\\$&")}function m(e){return new RegExp("^(?:"+e.map(p).join("|")+")","i")}function f(e){return new Map(e.map(((e,t)=>[e.toLowerCase(),t])))}function g(e,t,n){var a=l.exec(t.slice(n,n+1));return a?(e.w=+a[0],n+a[0].length):-1}function b(e,t,n){var a=l.exec(t.slice(n,n+1));return a?(e.u=+a[0],n+a[0].length):-1}function y(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.U=+a[0],n+a[0].length):-1}function h(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.V=+a[0],n+a[0].length):-1}function v(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.W=+a[0],n+a[0].length):-1}function E(e,t,n){var a=l.exec(t.slice(n,n+4));return a?(e.y=+a[0],n+a[0].length):-1}function x(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.y=+a[0]+(+a[0]>68?1900:2e3),n+a[0].length):-1}function j(e,t,n){var a=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(t.slice(n,n+6));return a?(e.Z=a[1]?0:-(a[2]+(a[3]||"00")),n+a[0].length):-1}function O(e,t,n){var a=l.exec(t.slice(n,n+1));return a?(e.q=3*a[0]-3,n+a[0].length):-1}function S(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.m=a[0]-1,n+a[0].length):-1}function k(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.d=+a[0],n+a[0].length):-1}function w(e,t,n){var a=l.exec(t.slice(n,n+3));return a?(e.m=0,e.d=+a[0],n+a[0].length):-1}function I(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.H=+a[0],n+a[0].length):-1}function T(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.M=+a[0],n+a[0].length):-1}function C(e,t,n){var a=l.exec(t.slice(n,n+2));return a?(e.S=+a[0],n+a[0].length):-1}function M(e,t,n){var a=l.exec(t.slice(n,n+3));return a?(e.L=+a[0],n+a[0].length):-1}function A(e,t,n){var a=l.exec(t.slice(n,n+6));return a?(e.L=Math.floor(a[0]/1e3),n+a[0].length):-1}function _(e,t,n){var a=c.exec(t.slice(n,n+1));return a?n+a[0].length:-1}function F(e,t,n){var a=l.exec(t.slice(n));return a?(e.Q=+a[0],n+a[0].length):-1}function D(e,t,n){var a=l.exec(t.slice(n));return a?(e.s=+a[0],n+a[0].length):-1}function N(e,t){return d(e.getDate(),t,2)}function P(e,t){return d(e.getHours(),t,2)}function R(e,t){return d(e.getHours()%12||12,t,2)}function L(e,n){return d(1+t.timeDay.count(t.timeYear(e),e),n,3)}function q(e,t){return d(e.getMilliseconds(),t,3)}function B(e,t){return q(e,t)+"000"}function z(e,t){return d(e.getMonth()+1,t,2)}function $(e,t){return d(e.getMinutes(),t,2)}function V(e,t){return d(e.getSeconds(),t,2)}function U(e){var t=e.getDay();return 0===t?7:t}function G(e,n){return d(t.timeSunday.count(t.timeYear(e)-1,e),n,2)}function H(e){var n=e.getDay();return n>=4||0===n?t.timeThursday(e):t.timeThursday.ceil(e)}function W(e,n){return e=H(e),d(t.timeThursday.count(t.timeYear(e),e)+(4===t.timeYear(e).getDay()),n,2)}function Q(e){return e.getDay()}function Y(e,n){return d(t.timeMonday.count(t.timeYear(e)-1,e),n,2)}function K(e,t){return d(e.getFullYear()%100,t,2)}function X(e,t){return d((e=H(e)).getFullYear()%100,t,2)}function J(e,t){return d(e.getFullYear()%1e4,t,4)}function Z(e,n){var a=e.getDay();return d((e=a>=4||0===a?t.timeThursday(e):t.timeThursday.ceil(e)).getFullYear()%1e4,n,4)}function ee(e){var t=e.getTimezoneOffset();return(t>0?"-":(t*=-1,"+"))+d(t/60|0,"0",2)+d(t%60,"0",2)}function te(e,t){return d(e.getUTCDate(),t,2)}function ne(e,t){return d(e.getUTCHours(),t,2)}function ae(e,t){return d(e.getUTCHours()%12||12,t,2)}function ie(e,n){return d(1+t.utcDay.count(t.utcYear(e),e),n,3)}function re(e,t){return d(e.getUTCMilliseconds(),t,3)}function oe(e,t){return re(e,t)+"000"}function se(e,t){return d(e.getUTCMonth()+1,t,2)}function le(e,t){return d(e.getUTCMinutes(),t,2)}function ce(e,t){return d(e.getUTCSeconds(),t,2)}function ue(e){var t=e.getUTCDay();return 0===t?7:t}function de(e,n){return d(t.utcSunday.count(t.utcYear(e)-1,e),n,2)}function pe(e){var n=e.getUTCDay();return n>=4||0===n?t.utcThursday(e):t.utcThursday.ceil(e)}function me(e,n){return e=pe(e),d(t.utcThursday.count(t.utcYear(e),e)+(4===t.utcYear(e).getUTCDay()),n,2)}function fe(e){return e.getUTCDay()}function ge(e,n){return d(t.utcMonday.count(t.utcYear(e)-1,e),n,2)}function be(e,t){return d(e.getUTCFullYear()%100,t,2)}function ye(e,t){return d((e=pe(e)).getUTCFullYear()%100,t,2)}function he(e,t){return d(e.getUTCFullYear()%1e4,t,4)}function ve(e,n){var a=e.getUTCDay();return d((e=a>=4||0===a?t.utcThursday(e):t.utcThursday.ceil(e)).getUTCFullYear()%1e4,n,4)}function Ee(){return"+0000"}function xe(){return"%"}function je(e){return+e}function Oe(e){return Math.floor(+e/1e3)}function Se(t){return o=r(t),e.timeFormat=o.format,e.timeParse=o.parse,e.utcFormat=o.utcFormat,e.utcParse=o.utcParse,o}Se({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});var ke="%Y-%m-%dT%H:%M:%S.%LZ";var we=Date.prototype.toISOString?function(e){return e.toISOString()}:e.utcFormat(ke);var Ie=+new Date("2000-01-01T00:00:00.000Z")?function(e){var t=new Date(e);return isNaN(t)?null:t}:e.utcParse(ke);e.isoFormat=we,e.isoParse=Ie,e.timeFormatDefaultLocale=Se,e.timeFormatLocale=r,Object.defineProperty(e,"__esModule",{value:!0})}(t,n(817))},function(e,t,n){"use strict";var a=n(1281),i=n(1282).remove,r={},o={},s={},l={},c={};function u(e){return String("000"+(e||"")).slice(-3)}function d(e){return s[e]}function p(e){return o[e]}function m(e){var t=u(e);return p(l[t])}function f(e){var t=u(e);return l[t]}function g(e){if("string"==typeof e){if(/^[0-9]*$/.test(e))return f(e);if(2===e.length)return e.toUpperCase();if(3===e.length)return d(e.toUpperCase())}if("number"==typeof e)return f(e)}a.forEach((function(e){var t=e;o[t[0]]=t[1],s[t[1]]=t[0],l[t[2]]=t[0],c[t[0]]=t[2]})),t.registerLocale=function(e){if(!e.locale)throw new TypeError("Missing localeData.locale");if(!e.countries)throw new TypeError("Missing localeData.countries");r[e.locale]=e.countries},t.alpha3ToAlpha2=d,t.alpha2ToAlpha3=p,t.alpha3ToNumeric=function(e){return c[d(e)]},t.alpha2ToNumeric=function(e){return c[e]},t.numericToAlpha3=m,t.numericToAlpha2=f,t.toAlpha3=function(e){if("string"==typeof e){if(/^[0-9]*$/.test(e))return m(e);if(2===e.length)return p(e.toUpperCase());if(3===e.length)return e.toUpperCase()}if("number"==typeof e)return m(e)},t.toAlpha2=g,t.getName=function(e,t){try{return r[t.toLowerCase()][g(e)]}catch(e){return}},t.getNames=function(e){var t=r[e.toLowerCase()];return void 0===t?{}:t},t.getAlpha2Code=function(e,t){try{var n,a=r[t.toLowerCase()];for(n in a)if(a.hasOwnProperty(n)&&a[n].toLowerCase()===e.toLowerCase())return n;return}catch(e){return}},t.getSimpleAlpha2Code=function(e,t){try{var n,a=r[t.toLowerCase()];for(n in a)if(a.hasOwnProperty(n)&&i(a[n].toLowerCase())===i(e.toLowerCase()))return n;return}catch(e){return}},t.getAlpha2Codes=function(){return o},t.getAlpha3Code=function(e,t){var n=this.getAlpha2Code(e,t);return n?this.toAlpha3(n):void 0},t.getSimpleAlpha3Code=function(e,t){var n=this.getSimpleAlpha2Code(e,t);return n?this.toAlpha3(n):void 0},t.getAlpha3Codes=function(){return s},t.getNumericCodes=function(){return l},t.langs=function(){return Object.keys(r)},t.isValid=function(e){if(!e)return!1;var t=e.toString().toUpperCase();return s.hasOwnProperty(t)||o.hasOwnProperty(t)||l.hasOwnProperty(t)}},function(e){e.exports=JSON.parse('[["AF","AFG","004","ISO 3166-2:AF"],["AX","ALA","248","ISO 3166-2:AX"],["AL","ALB","008","ISO 3166-2:AL"],["DZ","DZA","012","ISO 3166-2:DZ"],["AS","ASM","016","ISO 3166-2:AS"],["AD","AND","020","ISO 3166-2:AD"],["AO","AGO","024","ISO 3166-2:AO"],["AI","AIA","660","ISO 3166-2:AI"],["AQ","ATA","010","ISO 3166-2:AQ"],["AG","ATG","028","ISO 3166-2:AG"],["AR","ARG","032","ISO 3166-2:AR"],["AM","ARM","051","ISO 3166-2:AM"],["AW","ABW","533","ISO 3166-2:AW"],["AU","AUS","036","ISO 3166-2:AU"],["AT","AUT","040","ISO 3166-2:AT"],["AZ","AZE","031","ISO 3166-2:AZ"],["BS","BHS","044","ISO 3166-2:BS"],["BH","BHR","048","ISO 3166-2:BH"],["BD","BGD","050","ISO 3166-2:BD"],["BB","BRB","052","ISO 3166-2:BB"],["BY","BLR","112","ISO 3166-2:BY"],["BE","BEL","056","ISO 3166-2:BE"],["BZ","BLZ","084","ISO 3166-2:BZ"],["BJ","BEN","204","ISO 3166-2:BJ"],["BM","BMU","060","ISO 3166-2:BM"],["BT","BTN","064","ISO 3166-2:BT"],["BO","BOL","068","ISO 3166-2:BO"],["BQ","BES","535","ISO 3166-2:BQ"],["BA","BIH","070","ISO 3166-2:BA"],["BW","BWA","072","ISO 3166-2:BW"],["BV","BVT","074","ISO 3166-2:BV"],["BR","BRA","076","ISO 3166-2:BR"],["IO","IOT","086","ISO 3166-2:IO"],["BN","BRN","096","ISO 3166-2:BN"],["BG","BGR","100","ISO 3166-2:BG"],["BF","BFA","854","ISO 3166-2:BF"],["BI","BDI","108","ISO 3166-2:BI"],["KH","KHM","116","ISO 3166-2:KH"],["CM","CMR","120","ISO 3166-2:CM"],["CA","CAN","124","ISO 3166-2:CA"],["CV","CPV","132","ISO 3166-2:CV"],["KY","CYM","136","ISO 3166-2:KY"],["CF","CAF","140","ISO 3166-2:CF"],["TD","TCD","148","ISO 3166-2:TD"],["CL","CHL","152","ISO 3166-2:CL"],["CN","CHN","156","ISO 3166-2:CN"],["CX","CXR","162","ISO 3166-2:CX"],["CC","CCK","166","ISO 3166-2:CC"],["CO","COL","170","ISO 3166-2:CO"],["KM","COM","174","ISO 3166-2:KM"],["CG","COG","178","ISO 3166-2:CG"],["CD","COD","180","ISO 3166-2:CD"],["CK","COK","184","ISO 3166-2:CK"],["CR","CRI","188","ISO 3166-2:CR"],["CI","CIV","384","ISO 3166-2:CI"],["HR","HRV","191","ISO 3166-2:HR"],["CU","CUB","192","ISO 3166-2:CU"],["CW","CUW","531","ISO 3166-2:CW"],["CY","CYP","196","ISO 3166-2:CY"],["CZ","CZE","203","ISO 3166-2:CZ"],["DK","DNK","208","ISO 3166-2:DK"],["DJ","DJI","262","ISO 3166-2:DJ"],["DM","DMA","212","ISO 3166-2:DM"],["DO","DOM","214","ISO 3166-2:DO"],["EC","ECU","218","ISO 3166-2:EC"],["EG","EGY","818","ISO 3166-2:EG"],["SV","SLV","222","ISO 3166-2:SV"],["GQ","GNQ","226","ISO 3166-2:GQ"],["ER","ERI","232","ISO 3166-2:ER"],["EE","EST","233","ISO 3166-2:EE"],["ET","ETH","231","ISO 3166-2:ET"],["FK","FLK","238","ISO 3166-2:FK"],["FO","FRO","234","ISO 3166-2:FO"],["FJ","FJI","242","ISO 3166-2:FJ"],["FI","FIN","246","ISO 3166-2:FI"],["FR","FRA","250","ISO 3166-2:FR"],["GF","GUF","254","ISO 3166-2:GF"],["PF","PYF","258","ISO 3166-2:PF"],["TF","ATF","260","ISO 3166-2:TF"],["GA","GAB","266","ISO 3166-2:GA"],["GM","GMB","270","ISO 3166-2:GM"],["GE","GEO","268","ISO 3166-2:GE"],["DE","DEU","276","ISO 3166-2:DE"],["GH","GHA","288","ISO 3166-2:GH"],["GI","GIB","292","ISO 3166-2:GI"],["GR","GRC","300","ISO 3166-2:GR"],["GL","GRL","304","ISO 3166-2:GL"],["GD","GRD","308","ISO 3166-2:GD"],["GP","GLP","312","ISO 3166-2:GP"],["GU","GUM","316","ISO 3166-2:GU"],["GT","GTM","320","ISO 3166-2:GT"],["GG","GGY","831","ISO 3166-2:GG"],["GN","GIN","324","ISO 3166-2:GN"],["GW","GNB","624","ISO 3166-2:GW"],["GY","GUY","328","ISO 3166-2:GY"],["HT","HTI","332","ISO 3166-2:HT"],["HM","HMD","334","ISO 3166-2:HM"],["VA","VAT","336","ISO 3166-2:VA"],["HN","HND","340","ISO 3166-2:HN"],["HK","HKG","344","ISO 3166-2:HK"],["HU","HUN","348","ISO 3166-2:HU"],["IS","ISL","352","ISO 3166-2:IS"],["IN","IND","356","ISO 3166-2:IN"],["ID","IDN","360","ISO 3166-2:ID"],["IR","IRN","364","ISO 3166-2:IR"],["IQ","IRQ","368","ISO 3166-2:IQ"],["IE","IRL","372","ISO 3166-2:IE"],["IM","IMN","833","ISO 3166-2:IM"],["IL","ISR","376","ISO 3166-2:IL"],["IT","ITA","380","ISO 3166-2:IT"],["JM","JAM","388","ISO 3166-2:JM"],["JP","JPN","392","ISO 3166-2:JP"],["JE","JEY","832","ISO 3166-2:JE"],["JO","JOR","400","ISO 3166-2:JO"],["KZ","KAZ","398","ISO 3166-2:KZ"],["KE","KEN","404","ISO 3166-2:KE"],["KI","KIR","296","ISO 3166-2:KI"],["KP","PRK","408","ISO 3166-2:KP"],["KR","KOR","410","ISO 3166-2:KR"],["KW","KWT","414","ISO 3166-2:KW"],["KG","KGZ","417","ISO 3166-2:KG"],["LA","LAO","418","ISO 3166-2:LA"],["LV","LVA","428","ISO 3166-2:LV"],["LB","LBN","422","ISO 3166-2:LB"],["LS","LSO","426","ISO 3166-2:LS"],["LR","LBR","430","ISO 3166-2:LR"],["LY","LBY","434","ISO 3166-2:LY"],["LI","LIE","438","ISO 3166-2:LI"],["LT","LTU","440","ISO 3166-2:LT"],["LU","LUX","442","ISO 3166-2:LU"],["MO","MAC","446","ISO 3166-2:MO"],["MK","MKD","807","ISO 3166-2:MK"],["MG","MDG","450","ISO 3166-2:MG"],["MW","MWI","454","ISO 3166-2:MW"],["MY","MYS","458","ISO 3166-2:MY"],["MV","MDV","462","ISO 3166-2:MV"],["ML","MLI","466","ISO 3166-2:ML"],["MT","MLT","470","ISO 3166-2:MT"],["MH","MHL","584","ISO 3166-2:MH"],["MQ","MTQ","474","ISO 3166-2:MQ"],["MR","MRT","478","ISO 3166-2:MR"],["MU","MUS","480","ISO 3166-2:MU"],["YT","MYT","175","ISO 3166-2:YT"],["MX","MEX","484","ISO 3166-2:MX"],["FM","FSM","583","ISO 3166-2:FM"],["MD","MDA","498","ISO 3166-2:MD"],["MC","MCO","492","ISO 3166-2:MC"],["MN","MNG","496","ISO 3166-2:MN"],["ME","MNE","499","ISO 3166-2:ME"],["MS","MSR","500","ISO 3166-2:MS"],["MA","MAR","504","ISO 3166-2:MA"],["MZ","MOZ","508","ISO 3166-2:MZ"],["MM","MMR","104","ISO 3166-2:MM"],["NA","NAM","516","ISO 3166-2:NA"],["NR","NRU","520","ISO 3166-2:NR"],["NP","NPL","524","ISO 3166-2:NP"],["NL","NLD","528","ISO 3166-2:NL"],["NC","NCL","540","ISO 3166-2:NC"],["NZ","NZL","554","ISO 3166-2:NZ"],["NI","NIC","558","ISO 3166-2:NI"],["NE","NER","562","ISO 3166-2:NE"],["NG","NGA","566","ISO 3166-2:NG"],["NU","NIU","570","ISO 3166-2:NU"],["NF","NFK","574","ISO 3166-2:NF"],["MP","MNP","580","ISO 3166-2:MP"],["NO","NOR","578","ISO 3166-2:NO"],["OM","OMN","512","ISO 3166-2:OM"],["PK","PAK","586","ISO 3166-2:PK"],["PW","PLW","585","ISO 3166-2:PW"],["PS","PSE","275","ISO 3166-2:PS"],["PA","PAN","591","ISO 3166-2:PA"],["PG","PNG","598","ISO 3166-2:PG"],["PY","PRY","600","ISO 3166-2:PY"],["PE","PER","604","ISO 3166-2:PE"],["PH","PHL","608","ISO 3166-2:PH"],["PN","PCN","612","ISO 3166-2:PN"],["PL","POL","616","ISO 3166-2:PL"],["PT","PRT","620","ISO 3166-2:PT"],["PR","PRI","630","ISO 3166-2:PR"],["QA","QAT","634","ISO 3166-2:QA"],["RE","REU","638","ISO 3166-2:RE"],["RO","ROU","642","ISO 3166-2:RO"],["RU","RUS","643","ISO 3166-2:RU"],["RW","RWA","646","ISO 3166-2:RW"],["BL","BLM","652","ISO 3166-2:BL"],["SH","SHN","654","ISO 3166-2:SH"],["KN","KNA","659","ISO 3166-2:KN"],["LC","LCA","662","ISO 3166-2:LC"],["MF","MAF","663","ISO 3166-2:MF"],["PM","SPM","666","ISO 3166-2:PM"],["VC","VCT","670","ISO 3166-2:VC"],["WS","WSM","882","ISO 3166-2:WS"],["SM","SMR","674","ISO 3166-2:SM"],["ST","STP","678","ISO 3166-2:ST"],["SA","SAU","682","ISO 3166-2:SA"],["SN","SEN","686","ISO 3166-2:SN"],["RS","SRB","688","ISO 3166-2:RS"],["SC","SYC","690","ISO 3166-2:SC"],["SL","SLE","694","ISO 3166-2:SL"],["SG","SGP","702","ISO 3166-2:SG"],["SX","SXM","534","ISO 3166-2:SX"],["SK","SVK","703","ISO 3166-2:SK"],["SI","SVN","705","ISO 3166-2:SI"],["SB","SLB","090","ISO 3166-2:SB"],["SO","SOM","706","ISO 3166-2:SO"],["ZA","ZAF","710","ISO 3166-2:ZA"],["GS","SGS","239","ISO 3166-2:GS"],["SS","SSD","728","ISO 3166-2:SS"],["ES","ESP","724","ISO 3166-2:ES"],["LK","LKA","144","ISO 3166-2:LK"],["SD","SDN","729","ISO 3166-2:SD"],["SR","SUR","740","ISO 3166-2:SR"],["SJ","SJM","744","ISO 3166-2:SJ"],["SZ","SWZ","748","ISO 3166-2:SZ"],["SE","SWE","752","ISO 3166-2:SE"],["CH","CHE","756","ISO 3166-2:CH"],["SY","SYR","760","ISO 3166-2:SY"],["TW","TWN","158","ISO 3166-2:TW"],["TJ","TJK","762","ISO 3166-2:TJ"],["TZ","TZA","834","ISO 3166-2:TZ"],["TH","THA","764","ISO 3166-2:TH"],["TL","TLS","626","ISO 3166-2:TL"],["TG","TGO","768","ISO 3166-2:TG"],["TK","TKL","772","ISO 3166-2:TK"],["TO","TON","776","ISO 3166-2:TO"],["TT","TTO","780","ISO 3166-2:TT"],["TN","TUN","788","ISO 3166-2:TN"],["TR","TUR","792","ISO 3166-2:TR"],["TM","TKM","795","ISO 3166-2:TM"],["TC","TCA","796","ISO 3166-2:TC"],["TV","TUV","798","ISO 3166-2:TV"],["UG","UGA","800","ISO 3166-2:UG"],["UA","UKR","804","ISO 3166-2:UA"],["AE","ARE","784","ISO 3166-2:AE"],["GB","GBR","826","ISO 3166-2:GB"],["US","USA","840","ISO 3166-2:US"],["UM","UMI","581","ISO 3166-2:UM"],["UY","URY","858","ISO 3166-2:UY"],["UZ","UZB","860","ISO 3166-2:UZ"],["VU","VUT","548","ISO 3166-2:VU"],["VE","VEN","862","ISO 3166-2:VE"],["VN","VNM","704","ISO 3166-2:VN"],["VG","VGB","092","ISO 3166-2:VG"],["VI","VIR","850","ISO 3166-2:VI"],["WF","WLF","876","ISO 3166-2:WF"],["EH","ESH","732","ISO 3166-2:EH"],["YE","YEM","887","ISO 3166-2:YE"],["ZM","ZMB","894","ISO 3166-2:ZM"],["ZW","ZWE","716","ISO 3166-2:ZW"],["XK","XKX","","ISO 3166-2:XK"]]')},function(e,t){t.remove=function(e){return e.replace(/[^\u0000-\u007e]/g,(function(e){return a[e]||e}))};for(var n=[{base:" ",chars:" "},{base:"0",chars:"߀"},{base:"A",chars:"ⒶＡÀÁÂẦẤẪẨÃĀĂẰẮẴẲȦǠÄǞẢÅǺǍȀȂẠẬẶḀĄȺⱯ"},{base:"AA",chars:"Ꜳ"},{base:"AE",chars:"ÆǼǢ"},{base:"AO",chars:"Ꜵ"},{base:"AU",chars:"Ꜷ"},{base:"AV",chars:"ꜸꜺ"},{base:"AY",chars:"Ꜽ"},{base:"B",chars:"ⒷＢḂḄḆɃƁ"},{base:"C",chars:"ⒸＣꜾḈĆCĈĊČÇƇȻ"},{base:"D",chars:"ⒹＤḊĎḌḐḒḎĐƊƉᴅꝹ"},{base:"Dh",chars:"Ð"},{base:"DZ",chars:"DZDŽ"},{base:"Dz",chars:"DzDž"},{base:"E",chars:"ɛⒺＥÈÉÊỀẾỄỂẼĒḔḖĔĖËẺĚȄȆẸỆȨḜĘḘḚƐƎᴇ"},{base:"F",chars:"ꝼⒻＦḞƑꝻ"},{base:"G",chars:"ⒼＧǴĜḠĞĠǦĢǤƓꞠꝽꝾɢ"},{base:"H",chars:"ⒽＨĤḢḦȞḤḨḪĦⱧⱵꞍ"},{base:"I",chars:"ⒾＩÌÍÎĨĪĬİÏḮỈǏȈȊỊĮḬƗ"},{base:"J",chars:"ⒿＪĴɈȷ"},{base:"K",chars:"ⓀＫḰǨḲĶḴƘⱩꝀꝂꝄꞢ"},{base:"L",chars:"ⓁＬĿĹĽḶḸĻḼḺŁȽⱢⱠꝈꝆꞀ"},{base:"LJ",chars:"LJ"},{base:"Lj",chars:"Lj"},{base:"M",chars:"ⓂＭḾṀṂⱮƜϻ"},{base:"N",chars:"ꞤȠⓃＮǸŃÑṄŇṆŅṊṈƝꞐᴎ"},{base:"NJ",chars:"NJ"},{base:"Nj",chars:"Nj"},{base:"O",chars:"ⓄＯÒÓÔỒỐỖỔÕṌȬṎŌṐṒŎȮȰÖȪỎŐǑȌȎƠỜỚỠỞỢỌỘǪǬØǾƆƟꝊꝌ"},{base:"OE",chars:"Œ"},{base:"OI",chars:"Ƣ"},{base:"OO",chars:"Ꝏ"},{base:"OU",chars:"Ȣ"},{base:"P",chars:"ⓅＰṔṖƤⱣꝐꝒꝔ"},{base:"Q",chars:"ⓆＱꝖꝘɊ"},{base:"R",chars:"ⓇＲŔṘŘȐȒṚṜŖṞɌⱤꝚꞦꞂ"},{base:"S",chars:"ⓈＳẞŚṤŜṠŠṦṢṨȘŞⱾꞨꞄ"},{base:"T",chars:"ⓉＴṪŤṬȚŢṰṮŦƬƮȾꞆ"},{base:"Th",chars:"Þ"},{base:"TZ",chars:"Ꜩ"},{base:"U",chars:"ⓊＵÙÚÛŨṸŪṺŬÜǛǗǕǙỦŮŰǓȔȖƯỪỨỮỬỰỤṲŲṶṴɄ"},{base:"V",chars:"ⓋＶṼṾƲꝞɅ"},{base:"VY",chars:"Ꝡ"},{base:"W",chars:"ⓌＷẀẂŴẆẄẈⱲ"},{base:"X",chars:"ⓍＸẊẌ"},{base:"Y",chars:"ⓎＹỲÝŶỸȲẎŸỶỴƳɎỾ"},{base:"Z",chars:"ⓏＺŹẐŻŽẒẔƵȤⱿⱫꝢ"},{base:"a",chars:"ⓐａẚàáâầấẫẩãāăằắẵẳȧǡäǟảåǻǎȁȃạậặḁąⱥɐɑ"},{base:"aa",chars:"ꜳ"},{base:"ae",chars:"æǽǣ"},{base:"ao",chars:"ꜵ"},{base:"au",chars:"ꜷ"},{base:"av",chars:"ꜹꜻ"},{base:"ay",chars:"ꜽ"},{base:"b",chars:"ⓑｂḃḅḇƀƃɓƂ"},{base:"c",chars:"ｃⓒćĉċčçḉƈȼꜿↄ"},{base:"d",chars:"ⓓｄḋďḍḑḓḏđƌɖɗƋᏧԁꞪ"},{base:"dh",chars:"ð"},{base:"dz",chars:"dzdž"},{base:"e",chars:"ⓔｅèéêềếễểẽēḕḗĕėëẻěȅȇẹệȩḝęḙḛɇǝ"},{base:"f",chars:"ⓕｆḟƒ"},{base:"ff",chars:"ff"},{base:"fi",chars:"fi"},{base:"fl",chars:"fl"},{base:"ffi",chars:"ffi"},{base:"ffl",chars:"ffl"},{base:"g",chars:"ⓖｇǵĝḡğġǧģǥɠꞡꝿᵹ"},{base:"h",chars:"ⓗｈĥḣḧȟḥḩḫẖħⱨⱶɥ"},{base:"hv",chars:"ƕ"},{base:"i",chars:"ⓘｉìíîĩīĭïḯỉǐȉȋịįḭɨı"},{base:"j",chars:"ⓙｊĵǰɉ"},{base:"k",chars:"ⓚｋḱǩḳķḵƙⱪꝁꝃꝅꞣ"},{base:"l",chars:"ⓛｌŀĺľḷḹļḽḻſłƚɫⱡꝉꞁꝇɭ"},{base:"lj",chars:"lj"},{base:"m",chars:"ⓜｍḿṁṃɱɯ"},{base:"n",chars:"ⓝｎǹńñṅňṇņṋṉƞɲʼnꞑꞥлԉ"},{base:"nj",chars:"nj"},{base:"o",chars:"ⓞｏòóôồốỗổõṍȭṏōṑṓŏȯȱöȫỏőǒȍȏơờớỡởợọộǫǭøǿꝋꝍɵɔᴑ"},{base:"oe",chars:"œ"},{base:"oi",chars:"ƣ"},{base:"oo",chars:"ꝏ"},{base:"ou",chars:"ȣ"},{base:"p",chars:"ⓟｐṕṗƥᵽꝑꝓꝕρ"},{base:"q",chars:"ⓠｑɋꝗꝙ"},{base:"r",chars:"ⓡｒŕṙřȑȓṛṝŗṟɍɽꝛꞧꞃ"},{base:"s",chars:"ⓢｓśṥŝṡšṧṣṩșşȿꞩꞅẛʂ"},{base:"ss",chars:"ß"},{base:"t",chars:"ⓣｔṫẗťṭțţṱṯŧƭʈⱦꞇ"},{base:"th",chars:"þ"},{base:"tz",chars:"ꜩ"},{base:"u",chars:"ⓤｕùúûũṹūṻŭüǜǘǖǚủůűǔȕȗưừứữửựụṳųṷṵʉ"},{base:"v",chars:"ⓥｖṽṿʋꝟʌ"},{base:"vy",chars:"ꝡ"},{base:"w",chars:"ⓦｗẁẃŵẇẅẘẉⱳ"},{base:"x",chars:"ⓧｘẋẍ"},{base:"y",chars:"ⓨｙỳýŷỹȳẏÿỷẙỵƴɏỿ"},{base:"z",chars:"ⓩｚźẑżžẓẕƶȥɀⱬꝣ"}],a={},i=0;i<n.length;i+=1)for(var r=n[i].chars,o=0;o<r.length;o+=1)a[r[o]]=n[i].base;t.replacementList=n,t.diacriticsMap=a},function(e){e.exports=JSON.parse('{"locale":"en","countries":{"AF":"Afghanistan","AL":"Albania","DZ":"Algeria","AS":"American Samoa","AD":"Andorra","AO":"Angola","AI":"Anguilla","AQ":"Antarctica","AG":"Antigua and Barbuda","AR":"Argentina","AM":"Armenia","AW":"Aruba","AU":"Australia","AT":"Austria","AZ":"Azerbaijan","BS":"Bahamas","BH":"Bahrain","BD":"Bangladesh","BB":"Barbados","BY":"Belarus","BE":"Belgium","BZ":"Belize","BJ":"Benin","BM":"Bermuda","BT":"Bhutan","BO":"Bolivia","BA":"Bosnia and Herzegovina","BW":"Botswana","BV":"Bouvet Island","BR":"Brazil","IO":"British Indian Ocean Territory","BN":"Brunei Darussalam","BG":"Bulgaria","BF":"Burkina Faso","BI":"Burundi","KH":"Cambodia","CM":"Cameroon","CA":"Canada","CV":"Cape Verde","KY":"Cayman Islands","CF":"Central African Republic","TD":"Chad","CL":"Chile","CN":"China","CX":"Christmas Island","CC":"Cocos (Keeling) Islands","CO":"Colombia","KM":"Comoros","CG":"Congo","CD":"Congo, the Democratic Republic of the","CK":"Cook Islands","CR":"Costa Rica","CI":"Cote D\'Ivoire","HR":"Croatia","CU":"Cuba","CY":"Cyprus","CZ":"Czech Republic","DK":"Denmark","DJ":"Djibouti","DM":"Dominica","DO":"Dominican Republic","EC":"Ecuador","EG":"Egypt","SV":"El Salvador","GQ":"Equatorial Guinea","ER":"Eritrea","EE":"Estonia","ET":"Ethiopia","FK":"Falkland Islands (Malvinas)","FO":"Faroe Islands","FJ":"Fiji","FI":"Finland","FR":"France","GF":"French Guiana","PF":"French Polynesia","TF":"French Southern Territories","GA":"Gabon","GM":"Gambia","GE":"Georgia","DE":"Germany","GH":"Ghana","GI":"Gibraltar","GR":"Greece","GL":"Greenland","GD":"Grenada","GP":"Guadeloupe","GU":"Guam","GT":"Guatemala","GN":"Guinea","GW":"Guinea-Bissau","GY":"Guyana","HT":"Haiti","HM":"Heard Island and Mcdonald Islands","VA":"Holy See (Vatican City State)","HN":"Honduras","HK":"Hong Kong","HU":"Hungary","IS":"Iceland","IN":"India","ID":"Indonesia","IR":"Iran, Islamic Republic of","IQ":"Iraq","IE":"Ireland","IL":"Israel","IT":"Italy","JM":"Jamaica","JP":"Japan","JO":"Jordan","KZ":"Kazakhstan","KE":"Kenya","KI":"Kiribati","KP":"North Korea","KR":"South Korea","KW":"Kuwait","KG":"Kyrgyzstan","LA":"Lao People\'s Democratic Republic","LV":"Latvia","LB":"Lebanon","LS":"Lesotho","LR":"Liberia","LY":"Libya","LI":"Liechtenstein","LT":"Lithuania","LU":"Luxembourg","MO":"Macao","MG":"Madagascar","MW":"Malawi","MY":"Malaysia","MV":"Maldives","ML":"Mali","MT":"Malta","MH":"Marshall Islands","MQ":"Martinique","MR":"Mauritania","MU":"Mauritius","YT":"Mayotte","MX":"Mexico","FM":"Micronesia, Federated States of","MD":"Moldova, Republic of","MC":"Monaco","MN":"Mongolia","MS":"Montserrat","MA":"Morocco","MZ":"Mozambique","MM":"Myanmar","NA":"Namibia","NR":"Nauru","NP":"Nepal","NL":"Netherlands","NC":"New Caledonia","NZ":"New Zealand","NI":"Nicaragua","NE":"Niger","NG":"Nigeria","NU":"Niue","NF":"Norfolk Island","MK":"North Macedonia, Republic of","MP":"Northern Mariana Islands","NO":"Norway","OM":"Oman","PK":"Pakistan","PW":"Palau","PS":"Palestinian Territory, Occupied","PA":"Panama","PG":"Papua New Guinea","PY":"Paraguay","PE":"Peru","PH":"Philippines","PN":"Pitcairn","PL":"Poland","PT":"Portugal","PR":"Puerto Rico","QA":"Qatar","RE":"Reunion","RO":"Romania","RU":"Russian Federation","RW":"Rwanda","SH":"Saint Helena","KN":"Saint Kitts and Nevis","LC":"Saint Lucia","PM":"Saint Pierre and Miquelon","VC":"Saint Vincent and the Grenadines","WS":"Samoa","SM":"San Marino","ST":"Sao Tome and Principe","SA":"Saudi Arabia","SN":"Senegal","SC":"Seychelles","SL":"Sierra Leone","SG":"Singapore","SK":"Slovakia","SI":"Slovenia","SB":"Solomon Islands","SO":"Somalia","ZA":"South Africa","GS":"South Georgia and the South Sandwich Islands","ES":"Spain","LK":"Sri Lanka","SD":"Sudan","SR":"Suriname","SJ":"Svalbard and Jan Mayen","SZ":"Swaziland","SE":"Sweden","CH":"Switzerland","SY":"Syrian Arab Republic","TW":"Taiwan","TJ":"Tajikistan","TZ":"Tanzania, United Republic of","TH":"Thailand","TL":"Timor-Leste","TG":"Togo","TK":"Tokelau","TO":"Tonga","TT":"Trinidad and Tobago","TN":"Tunisia","TR":"Turkey","TM":"Turkmenistan","TC":"Turks and Caicos Islands","TV":"Tuvalu","UG":"Uganda","UA":"Ukraine","AE":"United Arab Emirates","GB":"United Kingdom","US":"United States of America","UM":"United States Minor Outlying Islands","UY":"Uruguay","UZ":"Uzbekistan","VU":"Vanuatu","VE":"Venezuela","VN":"Viet Nam","VG":"Virgin Islands, British","VI":"Virgin Islands, U.S.","WF":"Wallis and Futuna","EH":"Western Sahara","YE":"Yemen","ZM":"Zambia","ZW":"Zimbabwe","AX":"Åland Islands","BQ":"Bonaire, Sint Eustatius and Saba","CW":"Curaçao","GG":"Guernsey","IM":"Isle of Man","JE":"Jersey","ME":"Montenegro","BL":"Saint Barthélemy","MF":"Saint Martin (French part)","RS":"Serbia","SX":"Sint Maarten (Dutch part)","SS":"South Sudan","XK":"Kosovo"}}')},function(e,t,n){const a=n(310),i=n(326),r=n(157),o=n(559),s=n(292),l=n(678),c=n(1285),u=n(1286),d=n(1287),p=n(1288),m=n(1289),f=n(1290),g=n(1291),b=n(192),y=n(1292),h=n(1293),v=n(577),E=n(1294),x=n(1295),j=n(462),O=n(578),S=n(836),k=n(837),w=n(489),I=n(396),T=n(838),C=n(1103),M=n(463),A=n(205),_=n(464),F=n(1299),D=n(1300),N=n(1301),P=n(1302),R=n(1303),L=n(579),q=n(1304),B=n(1305),z=n(1306),$=n(1307),V=n(1308);e.exports={parse:s,valid:l,clean:c,inc:u,diff:d,major:p,minor:m,patch:f,prerelease:g,compare:b,rcompare:y,compareLoose:h,compareBuild:v,sort:E,rsort:x,gt:j,lt:O,eq:S,neq:k,gte:w,lte:I,cmp:T,coerce:C,Comparator:M,Range:A,satisfies:_,toComparators:F,maxSatisfying:D,minSatisfying:N,minVersion:P,validRange:R,outside:L,gtr:q,ltr:B,intersects:z,simplifyRange:$,subset:V,SemVer:r,re:a.re,src:a.src,tokens:a.t,SEMVER_SPEC_VERSION:i.SEMVER_SPEC_VERSION,RELEASE_TYPES:i.RELEASE_TYPES,compareIdentifiers:o.compareIdentifiers,rcompareIdentifiers:o.rcompareIdentifiers}},function(e,t,n){const a=n(292);e.exports=(e,t)=>{const n=a(e.trim().replace(/^[=v]+/,""),t);return n?n.version:null}},function(e,t,n){const a=n(157);e.exports=(e,t,n,i,r)=>{"string"==typeof n&&(r=i,i=n,n=void 0);try{return new a(e instanceof a?e.version:e,n).inc(t,i,r).version}catch(e){return null}}},function(e,t,n){const a=n(292);e.exports=(e,t)=>{const n=a(e,null,!0),i=a(t,null,!0),r=n.compare(i);if(0===r)return null;const o=r>0,s=o?n:i,l=o?i:n,c=!!s.prerelease.length;if(l.prerelease.length&&!c)return l.patch||l.minor?s.patch?"patch":s.minor?"minor":"major":"major";const u=c?"pre":"";return n.major!==i.major?u+"major":n.minor!==i.minor?u+"minor":n.patch!==i.patch?u+"patch":"prerelease"}},function(e,t,n){const a=n(157);e.exports=(e,t)=>new a(e,t).major},function(e,t,n){const a=n(157);e.exports=(e,t)=>new a(e,t).minor},function(e,t,n){const a=n(157);e.exports=(e,t)=>new a(e,t).patch},function(e,t,n){const a=n(292);e.exports=(e,t)=>{const n=a(e,t);return n&&n.prerelease.length?n.prerelease:null}},function(e,t,n){const a=n(192);e.exports=(e,t,n)=>a(t,e,n)},function(e,t,n){const a=n(192);e.exports=(e,t)=>a(e,t,!0)},function(e,t,n){const a=n(577);e.exports=(e,t)=>e.sort(((e,n)=>a(e,n,t)))},function(e,t,n){const a=n(577);e.exports=(e,t)=>e.sort(((e,n)=>a(n,e,t)))},function(e,t,n){"use strict";const a=n(1297),i=Symbol("max"),r=Symbol("length"),o=Symbol("lengthCalculator"),s=Symbol("allowStale"),l=Symbol("maxAge"),c=Symbol("dispose"),u=Symbol("noDisposeOnSet"),d=Symbol("lruList"),p=Symbol("cache"),m=Symbol("updateAgeOnGet"),f=()=>1,g=(e,t,n)=>{const a=e[p].get(t);if(a){const t=a.value;if(b(e,t)){if(h(e,a),!e[s])return}else n&&(e[m]&&(a.value.now=Date.now()),e[d].unshiftNode(a));return t.value}},b=(e,t)=>{if(!t||!t.maxAge&&!e[l])return!1;const n=Date.now()-t.now;return t.maxAge?n>t.maxAge:e[l]&&n>e[l]},y=e=>{if(e[r]>e[i])for(let t=e[d].tail;e[r]>e[i]&&null!==t;){const n=t.prev;h(e,t),t=n}},h=(e,t)=>{if(t){const n=t.value;e[c]&&e[c](n.key,n.value),e[r]-=n.length,e[p].delete(n.key),e[d].removeNode(t)}};class Entry{constructor(e,t,n,a,i){this.key=e,this.value=t,this.length=n,this.now=a,this.maxAge=i||0}}const v=(e,t,n,a)=>{let i=n.value;b(e,i)&&(h(e,n),e[s]||(i=void 0)),i&&t.call(a,i.value,i.key,e)};e.exports=class LRUCache{constructor(e){if("number"==typeof e&&(e={max:e}),e||(e={}),e.max&&("number"!=typeof e.max||e.max<0))throw new TypeError("max must be a non-negative number");this[i]=e.max||1/0;const t=e.length||f;if(this[o]="function"!=typeof t?f:t,this[s]=e.stale||!1,e.maxAge&&"number"!=typeof e.maxAge)throw new TypeError("maxAge must be a number");this[l]=e.maxAge||0,this[c]=e.dispose,this[u]=e.noDisposeOnSet||!1,this[m]=e.updateAgeOnGet||!1,this.reset()}set max(e){if("number"!=typeof e||e<0)throw new TypeError("max must be a non-negative number");this[i]=e||1/0,y(this)}get max(){return this[i]}set allowStale(e){this[s]=!!e}get allowStale(){return this[s]}set maxAge(e){if("number"!=typeof e)throw new TypeError("maxAge must be a non-negative number");this[l]=e,y(this)}get maxAge(){return this[l]}set lengthCalculator(e){"function"!=typeof e&&(e=f),e!==this[o]&&(this[o]=e,this[r]=0,this[d].forEach((e=>{e.length=this[o](e.value,e.key),this[r]+=e.length}))),y(this)}get lengthCalculator(){return this[o]}get length(){return this[r]}get itemCount(){return this[d].length}rforEach(e,t){t=t||this;for(let n=this[d].tail;null!==n;){const a=n.prev;v(this,e,n,t),n=a}}forEach(e,t){t=t||this;for(let n=this[d].head;null!==n;){const a=n.next;v(this,e,n,t),n=a}}keys(){return this[d].toArray().map((e=>e.key))}values(){return this[d].toArray().map((e=>e.value))}reset(){this[c]&&this[d]&&this[d].length&&this[d].forEach((e=>this[c](e.key,e.value))),this[p]=new Map,this[d]=new a,this[r]=0}dump(){return this[d].map((e=>!b(this,e)&&{k:e.key,v:e.value,e:e.now+(e.maxAge||0)})).toArray().filter((e=>e))}dumpLru(){return this[d]}set(e,t,n){if((n=n||this[l])&&"number"!=typeof n)throw new TypeError("maxAge must be a number");const a=n?Date.now():0,s=this[o](t,e);if(this[p].has(e)){if(s>this[i])return h(this,this[p].get(e)),!1;const o=this[p].get(e).value;return this[c]&&(this[u]||this[c](e,o.value)),o.now=a,o.maxAge=n,o.value=t,this[r]+=s-o.length,o.length=s,this.get(e),y(this),!0}const m=new Entry(e,t,s,a,n);return m.length>this[i]?(this[c]&&this[c](e,t),!1):(this[r]+=m.length,this[d].unshift(m),this[p].set(e,this[d].head),y(this),!0)}has(e){if(!this[p].has(e))return!1;const t=this[p].get(e).value;return!b(this,t)}get(e){return g(this,e,!0)}peek(e){return g(this,e,!1)}pop(){const e=this[d].tail;return e?(h(this,e),e.value):null}del(e){h(this,this[p].get(e))}load(e){this.reset();const t=Date.now();for(let n=e.length-1;n>=0;n--){const a=e[n],i=a.e||0;if(0===i)this.set(a.k,a.v);else{const e=i-t;e>0&&this.set(a.k,a.v,e)}}}prune(){this[p].forEach(((e,t)=>g(this,t,!1)))}}},function(e,t,n){"use strict";function a(e){var t=this;if(t instanceof a||(t=new a),t.tail=null,t.head=null,t.length=0,e&&"function"==typeof e.forEach)e.forEach((function(e){t.push(e)}));else if(arguments.length>0)for(var n=0,i=arguments.length;n<i;n++)t.push(arguments[n]);return t}function i(e,t,n){var a=t===e.head?new s(n,null,t,e):new s(n,t,t.next,e);return null===a.next&&(e.tail=a),null===a.prev&&(e.head=a),e.length++,a}function r(e,t){e.tail=new s(t,e.tail,null,e),e.head||(e.head=e.tail),e.length++}function o(e,t){e.head=new s(t,null,e.head,e),e.tail||(e.tail=e.head),e.length++}function s(e,t,n,a){if(!(this instanceof s))return new s(e,t,n,a);this.list=a,this.value=e,t?(t.next=this,this.prev=t):this.prev=null,n?(n.prev=this,this.next=n):this.next=null}e.exports=a,a.Node=s,a.create=a,a.prototype.removeNode=function(e){if(e.list!==this)throw new Error("removing node which does not belong to this list");var t=e.next,n=e.prev;return t&&(t.prev=n),n&&(n.next=t),e===this.head&&(this.head=t),e===this.tail&&(this.tail=n),e.list.length--,e.next=null,e.prev=null,e.list=null,t},a.prototype.unshiftNode=function(e){if(e!==this.head){e.list&&e.list.removeNode(e);var t=this.head;e.list=this,e.next=t,t&&(t.prev=e),this.head=e,this.tail||(this.tail=e),this.length++}},a.prototype.pushNode=function(e){if(e!==this.tail){e.list&&e.list.removeNode(e);var t=this.tail;e.list=this,e.prev=t,t&&(t.next=e),this.tail=e,this.head||(this.head=e),this.length++}},a.prototype.push=function(){for(var e=0,t=arguments.length;e<t;e++)r(this,arguments[e]);return this.length},a.prototype.unshift=function(){for(var e=0,t=arguments.length;e<t;e++)o(this,arguments[e]);return this.length},a.prototype.pop=function(){if(this.tail){var e=this.tail.value;return this.tail=this.tail.prev,this.tail?this.tail.next=null:this.head=null,this.length--,e}},a.prototype.shift=function(){if(this.head){var e=this.head.value;return this.head=this.head.next,this.head?this.head.prev=null:this.tail=null,this.length--,e}},a.prototype.forEach=function(e,t){t=t||this;for(var n=this.head,a=0;null!==n;a++)e.call(t,n.value,a,this),n=n.next},a.prototype.forEachReverse=function(e,t){t=t||this;for(var n=this.tail,a=this.length-1;null!==n;a--)e.call(t,n.value,a,this),n=n.prev},a.prototype.get=function(e){for(var t=0,n=this.head;null!==n&&t<e;t++)n=n.next;if(t===e&&null!==n)return n.value},a.prototype.getReverse=function(e){for(var t=0,n=this.tail;null!==n&&t<e;t++)n=n.prev;if(t===e&&null!==n)return n.value},a.prototype.map=function(e,t){t=t||this;for(var n=new a,i=this.head;null!==i;)n.push(e.call(t,i.value,this)),i=i.next;return n},a.prototype.mapReverse=function(e,t){t=t||this;for(var n=new a,i=this.tail;null!==i;)n.push(e.call(t,i.value,this)),i=i.prev;return n},a.prototype.reduce=function(e,t){var n,a=this.head;if(arguments.length>1)n=t;else{if(!this.head)throw new TypeError("Reduce of empty list with no initial value");a=this.head.next,n=this.head.value}for(var i=0;null!==a;i++)n=e(n,a.value,i),a=a.next;return n},a.prototype.reduceReverse=function(e,t){var n,a=this.tail;if(arguments.length>1)n=t;else{if(!this.tail)throw new TypeError("Reduce of empty list with no initial value");a=this.tail.prev,n=this.tail.value}for(var i=this.length-1;null!==a;i--)n=e(n,a.value,i),a=a.prev;return n},a.prototype.toArray=function(){for(var e=new Array(this.length),t=0,n=this.head;null!==n;t++)e[t]=n.value,n=n.next;return e},a.prototype.toArrayReverse=function(){for(var e=new Array(this.length),t=0,n=this.tail;null!==n;t++)e[t]=n.value,n=n.prev;return e},a.prototype.slice=function(e,t){(t=t||this.length)<0&&(t+=this.length),(e=e||0)<0&&(e+=this.length);var n=new a;if(t<e||t<0)return n;e<0&&(e=0),t>this.length&&(t=this.length);for(var i=0,r=this.head;null!==r&&i<e;i++)r=r.next;for(;null!==r&&i<t;i++,r=r.next)n.push(r.value);return n},a.prototype.sliceReverse=function(e,t){(t=t||this.length)<0&&(t+=this.length),(e=e||0)<0&&(e+=this.length);var n=new a;if(t<e||t<0)return n;e<0&&(e=0),t>this.length&&(t=this.length);for(var i=this.length,r=this.tail;null!==r&&i>t;i--)r=r.prev;for(;null!==r&&i>e;i--,r=r.prev)n.push(r.value);return n},a.prototype.splice=function(e,t,...n){e>this.length&&(e=this.length-1),e<0&&(e=this.length+e);for(var a=0,r=this.head;null!==r&&a<e;a++)r=r.next;var o=[];for(a=0;r&&a<t;a++)o.push(r.value),r=this.removeNode(r);for(null===r&&(r=this.tail),r!==this.head&&r!==this.tail&&(r=r.prev),a=0;a<n.length;a++)r=i(this,r,n[a]);return o},a.prototype.reverse=function(){for(var e=this.head,t=this.tail,n=e;null!==n;n=n.prev){var a=n.prev;n.prev=n.next,n.next=a}return this.head=t,this.tail=e,this};try{n(1298)(a)}catch(e){}},function(e,t,n){"use strict";e.exports=function(e){e.prototype[Symbol.iterator]=function*(){for(let e=this.head;e;e=e.next)yield e.value}}},function(e,t,n){const a=n(205);e.exports=(e,t)=>new a(e,t).set.map((e=>e.map((e=>e.value)).join(" ").trim().split(" ")))},function(e,t,n){const a=n(157),i=n(205);e.exports=(e,t,n)=>{let r=null,o=null,s=null;try{s=new i(t,n)}catch(e){return null}return e.forEach((e=>{s.test(e)&&(r&&-1!==o.compare(e)||(r=e,o=new a(r,n)))})),r}},function(e,t,n){const a=n(157),i=n(205);e.exports=(e,t,n)=>{let r=null,o=null,s=null;try{s=new i(t,n)}catch(e){return null}return e.forEach((e=>{s.test(e)&&(r&&1!==o.compare(e)||(r=e,o=new a(r,n)))})),r}},function(e,t,n){const a=n(157),i=n(205),r=n(462);e.exports=(e,t)=>{e=new i(e,t);let n=new a("0.0.0");if(e.test(n))return n;if(n=new a("0.0.0-0"),e.test(n))return n;n=null;for(let t=0;t<e.set.length;++t){const i=e.set[t];let o=null;i.forEach((e=>{const t=new a(e.semver.version);switch(e.operator){case">":0===t.prerelease.length?t.patch++:t.prerelease.push(0),t.raw=t.format();case"":case">=":o&&!r(t,o)||(o=t);break;case"<":case"<=":break;default:throw new Error(`Unexpected operation: ${e.operator}`)}})),!o||n&&!r(n,o)||(n=o)}return n&&e.test(n)?n:null}},function(e,t,n){const a=n(205);e.exports=(e,t)=>{try{return new a(e,t).range||"*"}catch(e){return null}}},function(e,t,n){const a=n(579);e.exports=(e,t,n)=>a(e,t,">",n)},function(e,t,n){const a=n(579);e.exports=(e,t,n)=>a(e,t,"<",n)},function(e,t,n){const a=n(205);e.exports=(e,t,n)=>(e=new a(e,n),t=new a(t,n),e.intersects(t,n))},function(e,t,n){const a=n(464),i=n(192);e.exports=(e,t,n)=>{const r=[];let o=null,s=null;const l=e.sort(((e,t)=>i(e,t,n)));for(const e of l)a(e,t,n)?(s=e,o||(o=e)):(s&&r.push([o,s]),s=null,o=null);o&&r.push([o,null]);const c=[];for(const[e,t]of r)e===t?c.push(e):t||e!==l[0]?t?e===l[0]?c.push(`<=${t}`):c.push(`${e} - ${t}`):c.push(`>=${e}`):c.push("*");const u=c.join(" || "),d="string"==typeof t.raw?t.raw:String(t);return u.length<d.length?u:t}},function(e,t,n){const a=n(205),i=n(463),{ANY:r}=i,o=n(464),s=n(192),l=[new i(">=0.0.0-0")],c=[new i(">=0.0.0")],u=(e,t,n)=>{if(e===t)return!0;if(1===e.length&&e[0].semver===r){if(1===t.length&&t[0].semver===r)return!0;e=n.includePrerelease?l:c}if(1===t.length&&t[0].semver===r){if(n.includePrerelease)return!0;t=c}const a=new Set;let i,u,m,f,g,b,y;for(const t of e)">"===t.operator||">="===t.operator?i=d(i,t,n):"<"===t.operator||"<="===t.operator?u=p(u,t,n):a.add(t.semver);if(a.size>1)return null;if(i&&u){if(m=s(i.semver,u.semver,n),m>0)return null;if(0===m&&(">="!==i.operator||"<="!==u.operator))return null}for(const e of a){if(i&&!o(e,String(i),n))return null;if(u&&!o(e,String(u),n))return null;for(const a of t)if(!o(e,String(a),n))return!1;return!0}let h=!(!u||n.includePrerelease||!u.semver.prerelease.length)&&u.semver,v=!(!i||n.includePrerelease||!i.semver.prerelease.length)&&i.semver;h&&1===h.prerelease.length&&"<"===u.operator&&0===h.prerelease[0]&&(h=!1);for(const e of t){if(y=y||">"===e.operator||">="===e.operator,b=b||"<"===e.operator||"<="===e.operator,i)if(v&&e.semver.prerelease&&e.semver.prerelease.length&&e.semver.major===v.major&&e.semver.minor===v.minor&&e.semver.patch===v.patch&&(v=!1),">"===e.operator||">="===e.operator){if(f=d(i,e,n),f===e&&f!==i)return!1}else if(">="===i.operator&&!o(i.semver,String(e),n))return!1;if(u)if(h&&e.semver.prerelease&&e.semver.prerelease.length&&e.semver.major===h.major&&e.semver.minor===h.minor&&e.semver.patch===h.patch&&(h=!1),"<"===e.operator||"<="===e.operator){if(g=p(u,e,n),g===e&&g!==u)return!1}else if("<="===u.operator&&!o(u.semver,String(e),n))return!1;if(!e.operator&&(u||i)&&0!==m)return!1}return!(i&&b&&!u&&0!==m||u&&y&&!i&&0!==m||v||h)},d=(e,t,n)=>{if(!e)return t;const a=s(e.semver,t.semver,n);return a>0?e:a<0||">"===t.operator&&">="===e.operator?t:e},p=(e,t,n)=>{if(!e)return t;const a=s(e.semver,t.semver,n);return a<0?e:a>0||"<"===t.operator&&"<="===e.operator?t:e};e.exports=(e,t,n={})=>{if(e===t)return!0;e=new a(e,n),t=new a(t,n);let i=!1;e:for(const a of e.set){for(const e of t.set){const t=u(a,e,n);if(i=i||null!==t,t)continue e}if(i)return!1}return!0}},function(e,t,n){e.exports=n(33)(1937)},function(e,t,n){e.exports=n(33)(3704)},function(e,t,n){"use strict";e.exports=function(e){var t=this;this.Parser=function(n){return a(n,Object.assign({},t.data("settings"),e,{extensions:t.data("micromarkExtensions")||[],mdastExtensions:t.data("fromMarkdownExtensions")||[]}))}};var a=n(1312)},function(e,t,n){"use strict";e.exports=n(1313)},function(e,t,n){"use strict";e.exports=function(e,t,n){return"string"!=typeof t&&(n=t,t=void 0),function(e){var t=e||{},n=function(e,t){for(var n=-1;++n<t.length;)m(e,t[n]);return e}({canContainEols:["emphasis","fragment","heading","paragraph","strong"],enter:{autolink:b(M),autolinkProtocol:j,autolinkEmail:j,atxHeading:b(I),blockQuote:b((function(){return{type:"blockquote",children:[]}})),characterEscape:j,characterReference:j,codeFenced:b(w),codeFencedFenceInfo:y,codeFencedFenceMeta:y,codeIndented:b(w,y),codeText:b((function(){return{type:"inlineCode",value:""}}),y),codeTextData:j,data:j,codeFlowValue:j,definition:b((function(){return{type:"definition",identifier:"",label:null,title:null,url:""}})),definitionDestinationString:y,definitionLabelString:y,definitionTitleString:y,emphasis:b((function(){return{type:"emphasis",children:[]}})),hardBreakEscape:b(T),hardBreakTrailing:b(T),htmlFlow:b(C,y),htmlFlowData:j,htmlText:b(C,y),htmlTextData:j,image:b((function(){return{type:"image",title:null,url:"",alt:null}})),label:y,link:b(M),listItem:b((function(e){return{type:"listItem",spread:e._spread,checked:null,children:[]}})),listItemValue:function(e){f("expectingFirstListItemValue")&&(this.stack[this.stack.length-2].start=parseInt(this.sliceSerialize(e),10),u("expectingFirstListItemValue"))},listOrdered:b(A,(function(){u("expectingFirstListItemValue",!0)})),listUnordered:b(A),paragraph:b((function(){return{type:"paragraph",children:[]}})),reference:function(){u("referenceType","collapsed")},referenceString:y,resourceDestinationString:y,resourceTitleString:y,setextHeading:b(I),strong:b((function(){return{type:"strong",children:[]}})),thematicBreak:b((function(){return{type:"thematicBreak"}}))},exit:{atxHeading:v(),atxHeadingSequence:function(e){this.stack[this.stack.length-1].depth||(this.stack[this.stack.length-1].depth=this.sliceSerialize(e).length)},autolink:v(),autolinkEmail:function(e){O.call(this,e),this.stack[this.stack.length-1].url="mailto:"+this.sliceSerialize(e)},autolinkProtocol:function(e){O.call(this,e),this.stack[this.stack.length-1].url=this.sliceSerialize(e)},blockQuote:v(),characterEscapeValue:O,characterReferenceMarkerHexadecimal:k,characterReferenceMarkerNumeric:k,characterReferenceValue:function(e){var t,n,a=this.sliceSerialize(e),i=f("characterReferenceType");i?(t=s(a,"characterReferenceMarkerNumeric"===i?10:16),u("characterReferenceType")):t=d(a),(n=this.stack.pop()).value+=t,n.position.end=g(e.end)},codeFenced:v((function(){var e=this.resume();this.stack[this.stack.length-1].value=e.replace(/^(\r?\n|\r)|(\r?\n|\r)$/g,""),u("flowCodeInside")})),codeFencedFence:function(){f("flowCodeInside")||(this.buffer(),u("flowCodeInside",!0))},codeFencedFenceInfo:function(){var e=this.resume();this.stack[this.stack.length-1].lang=e},codeFencedFenceMeta:function(){var e=this.resume();this.stack[this.stack.length-1].meta=e},codeFlowValue:O,codeIndented:v((function(){var e=this.resume();this.stack[this.stack.length-1].value=e})),codeText:v((function(){var e=this.resume();this.stack[this.stack.length-1].value=e})),codeTextData:O,data:O,definition:v(),definitionDestinationString:function(){var e=this.resume();this.stack[this.stack.length-1].url=e},definitionLabelString:function(e){var t=this.resume();this.stack[this.stack.length-1].label=t,this.stack[this.stack.length-1].identifier=o(this.sliceSerialize(e)).toLowerCase()},definitionTitleString:function(){var e=this.resume();this.stack[this.stack.length-1].title=e},emphasis:v(),hardBreakEscape:v(S),hardBreakTrailing:v(S),htmlFlow:v((function(){var e=this.resume();this.stack[this.stack.length-1].value=e})),htmlFlowData:O,htmlText:v((function(){var e=this.resume();this.stack[this.stack.length-1].value=e})),htmlTextData:O,image:v((function(){var e=this.stack[this.stack.length-1];f("inReference")?(e.type+="Reference",e.referenceType=f("referenceType")||"shortcut",delete e.url,delete e.title):(delete e.identifier,delete e.label,delete e.referenceType),u("referenceType")})),label:function(){var e=this.stack[this.stack.length-1],t=this.resume();this.stack[this.stack.length-1].label=t,u("inReference",!0),"link"===this.stack[this.stack.length-1].type?this.stack[this.stack.length-1].children=e.children:this.stack[this.stack.length-1].alt=t},labelText:function(e){this.stack[this.stack.length-2].identifier=o(this.sliceSerialize(e)).toLowerCase()},lineEnding:function(e){var t=this.stack[this.stack.length-1];if(f("atHardBreak"))return t.children[t.children.length-1].position.end=g(e.end),void u("atHardBreak");!f("setextHeadingSlurpLineEnding")&&n.canContainEols.indexOf(t.type)>-1&&(j.call(this,e),O.call(this,e))},link:v((function(){var e=this.stack[this.stack.length-1];f("inReference")?(e.type+="Reference",e.referenceType=f("referenceType")||"shortcut",delete e.url,delete e.title):(delete e.identifier,delete e.label,delete e.referenceType),u("referenceType")})),listItem:v(),listOrdered:v(),listUnordered:v(),paragraph:v(),referenceString:function(e){var t=this.resume();this.stack[this.stack.length-1].label=t,this.stack[this.stack.length-1].identifier=o(this.sliceSerialize(e)).toLowerCase(),u("referenceType","full")},resourceDestinationString:function(){var e=this.resume();this.stack[this.stack.length-1].url=e},resourceTitleString:function(){var e=this.resume();this.stack[this.stack.length-1].title=e},resource:function(){u("inReference")},setextHeading:v((function(){u("setextHeadingSlurpLineEnding")})),setextHeadingLineSequence:function(e){this.stack[this.stack.length-1].depth=61===this.sliceSerialize(e).charCodeAt(0)?1:2},setextHeadingText:function(){u("setextHeadingSlurpLineEnding",!0)},strong:v(),thematicBreak:v()}},t.mdastExtensions||[]),l={};return function(e){for(var t,a=[{type:"root",children:[]}],o=[],s=[],l=-1,d={stack:a,tokenStack:o,config:n,enter:h,exit:E,buffer:y,resume:x,setData:u,getData:f};++l<e.length;)"listOrdered"!==e[l][1].type&&"listUnordered"!==e[l][1].type||("enter"===e[l][0]?s.push(l):l=c(e,s.pop(l),l));for(l=-1;++l<e.length;)t=n[e[l][0]],r.call(t,e[l][1].type)&&t[e[l][1].type].call(i({sliceSerialize:e[l][2].sliceSerialize},d),e[l][1]);if(o.length)throw new Error("Cannot close document, a token (`"+o[o.length-1].type+"`, "+p({start:o[o.length-1].start,end:o[o.length-1].end})+") is still open");return a[0].position={start:g(e.length?e[0][1].start:{line:1,column:1,offset:0}),end:g(e.length?e[e.length-2][1].end:{line:1,column:1,offset:0})},a[0]};function c(e,t,n){for(var a,i,r,o,s,l,c,u=t-1,d=-1,p=!1;++u<=n;)if("listUnordered"===(s=e[u])[1].type||"listOrdered"===s[1].type||"blockQuote"===s[1].type?("enter"===s[0]?d++:d--,c=void 0):"lineEndingBlank"===s[1].type?"enter"===s[0]&&(!a||c||d||l||(l=u),c=void 0):"linePrefix"===s[1].type||"listItemValue"===s[1].type||"listItemMarker"===s[1].type||"listItemPrefix"===s[1].type||"listItemPrefixWhitespace"===s[1].type||(c=void 0),!d&&"enter"===s[0]&&"listItemPrefix"===s[1].type||-1===d&&"exit"===s[0]&&("listUnordered"===s[1].type||"listOrdered"===s[1].type)){if(a){for(i=u,r=void 0;i--;)if("lineEnding"===(o=e[i])[1].type||"lineEndingBlank"===o[1].type){if("exit"===o[0])continue;r&&(e[r][1].type="lineEndingBlank",p=!0),o[1].type="lineEnding",r=i}else if("linePrefix"!==o[1].type&&"blockQuotePrefix"!==o[1].type&&"blockQuotePrefixWhitespace"!==o[1].type&&"blockQuoteMarker"!==o[1].type&&"listItemIndent"!==o[1].type)break;l&&(!r||l<r)&&(a._spread=!0),a.end=g(r?e[r][1].start:s[1].end),e.splice(r||u,0,["exit",a,s[2]]),u++,n++}"listItemPrefix"===s[1].type&&(a={type:"listItem",_spread:!1,start:g(s[1].start)},e.splice(u,0,["enter",a,s[2]]),u++,n++,l=void 0,c=!0)}return e[t][1]._spread=p,n}function u(e,t){l[e]=t}function f(e){return l[e]}function g(e){return{line:e.line,column:e.column,offset:e.offset}}function b(e,t){return function(n){h.call(this,e(n),n),t&&t.call(this,n)}}function y(){this.stack.push({type:"fragment",children:[]})}function h(e,t){return this.stack[this.stack.length-1].children.push(e),this.stack.push(e),this.tokenStack.push(t),e.position={start:g(t.start)},e}function v(e){return function(t){e&&e.call(this,t),E.call(this,t)}}function E(e){var t=this.stack.pop(),n=this.tokenStack.pop();if(!n)throw new Error("Cannot close `"+e.type+"` ("+p({start:e.start,end:e.end})+"): it’s not open");if(n.type!==e.type)throw new Error("Cannot close `"+e.type+"` ("+p({start:e.start,end:e.end})+"): a different token (`"+n.type+"`, "+p({start:n.start,end:n.end})+") is open");return t.position.end=g(e.end),t}function x(){return a(this.stack.pop())}function j(e){var t=this.stack[this.stack.length-1].children,n=t[t.length-1];n&&"text"===n.type||((n={type:"text",value:""}).position={start:g(e.start)},this.stack[this.stack.length-1].children.push(n)),this.stack.push(n)}function O(e){var t=this.stack.pop();t.value+=this.sliceSerialize(e),t.position.end=g(e.end)}function S(){u("atHardBreak",!0)}function k(e){u("characterReferenceType",e.type)}function w(){return{type:"code",lang:null,meta:null,value:""}}function I(){return{type:"heading",depth:void 0,children:[]}}function T(){return{type:"break"}}function C(){return{type:"html",value:""}}function M(){return{type:"link",title:null,url:"",children:[]}}function A(e){return{type:"list",ordered:"listOrdered"===e.type,start:null,spread:e._spread,children:[]}}}(n)(u(l(n).document().write(c()(e,t,!0))))};var a=n(1314),i=n(369),r=n(840),o=n(580),s=n(1315),l=n(1316),c=n(1355),u=n(1356),d=n(845),p=n(1357);function m(e,t){var n,a;for(n in t)a=r.call(e,n)?e[n]:e[n]={},"canContainEols"===n?e[n]=[].concat(a,t[n]):Object.assign(a,t[n])}},function(e,t,n){"use strict";function a(e){return e&&(e.value||e.alt||e.title||"children"in e&&i(e.children)||"length"in e&&i(e))||""}function i(e){for(var t=[],n=-1;++n<e.length;)t[n]=a(e[n]);return t.join("")}e.exports=a},function(e,t,n){"use strict";var a=n(465);e.exports=function(e,t){var n=parseInt(e,t);return n<9||11===n||n>13&&n<32||n>126&&n<160||n>55295&&n<57344||n>64975&&n<65008||65535==(65535&n)||65534==(65535&n)||n>1114111?"�":a(n)}},function(e,t,n){"use strict";var a=n(1317),i=n(1318),r=n(1319),o=n(843),s=n(1322),l=n(1323),c=n(581),u=n(1326);e.exports=function(e){var t={defined:[],constructs:s([u].concat(c((e||{}).extensions))),content:n(a),document:n(i),flow:n(r),string:n(o.string),text:n(o.text)};return t;function n(e){return function(n){return l(t,e,n)}}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(147),i=n(154);t.tokenize=function(e){var t,n=e.attempt(this.parser.constructs.contentInitial,(function(t){if(null!==t)return e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),i(e,n,"linePrefix");e.consume(t)}),(function(t){return e.enter("paragraph"),r(t)}));return n;function r(n){var a=e.enter("chunkText",{contentType:"text",previous:t});return t&&(t.next=a),t=a,o(n)}function o(t){return null===t?(e.exit("chunkText"),e.exit("paragraph"),void e.consume(t)):a(t)?(e.consume(t),e.exit("chunkText"),r):(e.consume(t),o)}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(147),i=n(154),r=n(466),o={tokenize:function(e,t,n){return i(e,e.attempt(this.parser.constructs.document,t,n),"linePrefix",this.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4)}},s={tokenize:function(e,t,n){return i(e,e.lazy(this.parser.constructs.flow,t,n),"linePrefix",this.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4)}};t.tokenize=function(e){var t,n,i,l=this,c=[],u=0,d={tokenize:function(e,a){var i=0;return t={},u;function u(a){return i<c.length?(l.containerState=c[i][1],e.attempt(c[i][0].continuation,d,p)(a)):n.currentConstruct&&n.currentConstruct.concrete?(t.flowContinue=!0,g(a)):(l.interrupt=n.currentConstruct&&n.currentConstruct.interruptible,l.containerState={},e.attempt(o,f,g)(a))}function d(e){return i++,l.containerState._closeFlow?f(e):u(e)}function p(t){return n.currentConstruct&&n.currentConstruct.lazy?(l.containerState={},e.attempt(o,f,e.attempt(s,f,e.check(r,f,m)))(t)):f(t)}function m(e){return i=c.length,t.lazy=!0,t.flowContinue=!0,g(e)}function f(e){return t.flowEnd=!0,g(e)}function g(e){return t.continued=i,l.interrupt=l.containerState=void 0,a(e)}},partial:!0};return p;function p(t){return u<c.length?(l.containerState=c[u][1],e.attempt(c[u][0].continuation,m,f)(t)):f(t)}function m(e){return u++,p(e)}function f(a){return t&&t.flowContinue?b(a):(l.interrupt=n&&n.currentConstruct&&n.currentConstruct.interruptible,l.containerState={},e.attempt(o,g,b)(a))}function g(e){return c.push([l.currentConstruct,l.containerState]),l.containerState=void 0,f(e)}function b(t){return null===t?(E(0,!0),void e.consume(t)):(n=n||l.parser.flow(l.now()),e.enter("chunkFlow",{contentType:"flow",previous:i,_tokenizer:n}),y(t))}function y(t){return null===t?(v(e.exit("chunkFlow")),b(t)):a(t)?(e.consume(t),v(e.exit("chunkFlow")),e.check(d,h)):(e.consume(t),y)}function h(e){return E(t.continued,t&&t.flowEnd),u=0,p(e)}function v(e){i&&(i.next=e),i=e,n.lazy=t&&t.lazy,n.defineSkip(e.start),n.write(l.sliceStream(e))}function E(t,a){var r=c.length;for(n&&a&&(n.write([null]),i=n=void 0);r-- >t;)l.containerState=c[r][1],c[r][0].exit.call(l,e);c.length=t}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(1320),i=n(154),r=n(466);t.tokenize=function(e){var t=this,n=e.attempt(r,(function(a){if(null!==a)return e.enter("lineEndingBlank"),e.consume(a),e.exit("lineEndingBlank"),t.currentConstruct=void 0,n;e.consume(a)}),e.attempt(this.parser.constructs.flowInitial,o,i(e,e.attempt(this.parser.constructs.flow,o,e.attempt(a,o)),"linePrefix")));return n;function o(a){if(null!==a)return e.enter("lineEnding"),e.consume(a),e.exit("lineEnding"),t.currentConstruct=void 0,n;e.consume(a)}}},function(e,t,n){"use strict";var a=n(147),i=n(467),r=n(842),o=n(154),s={tokenize:function(e,t){var n;return function(t){return e.enter("content"),n=e.enter("chunkContent",{contentType:"content"}),i(t)};function i(t){return null===t?r(t):a(t)?e.check(l,o,r)(t):(e.consume(t),i)}function r(n){return e.exit("chunkContent"),e.exit("content"),t(n)}function o(t){return e.consume(t),e.exit("chunkContent"),n=n.next=e.enter("chunkContent",{contentType:"content",previous:n}),i}},resolve:function(e){return r(e),e},interruptible:!0,lazy:!0},l={tokenize:function(e,t,n){var r=this;return function(t){return e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),o(e,s,"linePrefix")};function s(o){return null===o||a(o)?n(o):r.parser.constructs.disable.null.indexOf("codeIndented")>-1||i(r.events,"linePrefix")<4?e.interrupt(r.parser.constructs.flow,n,t)(o):t(o)}},partial:!0};e.exports=s},function(e,t,n){"use strict";var a=[].splice;e.exports=a},function(e,t,n){"use strict";var a=n(840),i=n(251),r=n(581);function o(e,t){var n,i,o,l;for(n in t)for(l in i=a.call(e,n)?e[n]:e[n]={},o=t[n])i[l]=s(r(o[l]),a.call(i,l)?i[l]:[])}function s(e,t){for(var n=-1,a=[];++n<e.length;)("after"===e[n].add?t:a).push(e[n]);return i(t,0,0,a),t}e.exports=function(e){for(var t={},n=-1;++n<e.length;)o(t,e[n]);return t}},function(e,t,n){"use strict";var a=n(369),i=n(147),r=n(582),o=n(251),s=n(581),l=n(583),c=n(1324),u=n(315),d=n(1325);e.exports=function(e,t,n){var p=n?u(n):{line:1,column:1,offset:0},m={},f=[],g=[],b=[],y={consume:function(e){i(e)?(p.line++,p.column=1,p.offset+=-3===e?2:1,w()):-1!==e&&(p.column++,p.offset++),p._bufferIndex<0?p._index++:(p._bufferIndex++,p._bufferIndex===g[p._index].length&&(p._bufferIndex=-1,p._index++)),h.previous=e},enter:function(e,t){var n=t||{};return n.type=e,n.start=x(),h.events.push(["enter",n,h]),b.push(n),n},exit:function(e){var t=b.pop();return t.end=x(),h.events.push(["exit",t,h]),t},attempt:S((function(e,t){k(e,t.from)})),check:S(O),interrupt:S(O,{interrupt:!0}),lazy:S(O,{lazy:!0})},h={previous:null,events:[],parser:e,sliceStream:E,sliceSerialize:function(e){return c(E(e))},now:x,defineSkip:function(e){m[e.line]=e.column,w()},write:function(e){return g=r(g,e),function(){for(var e,t;p._index<g.length;)if("string"==typeof(t=g[p._index]))for(e=p._index,p._bufferIndex<0&&(p._bufferIndex=0);p._index===e&&p._bufferIndex<t.length;)j(t.charCodeAt(p._bufferIndex));else j(t)}(),null!==g[g.length-1]?[]:(k(t,0),h.events=l(f,h.events,h),h.events)}},v=t.tokenize.call(h,y);return t.resolveAll&&f.push(t),p._index=0,p._bufferIndex=-1,h;function E(e){return d(g,e)}function x(){return u(p)}function j(e){v=v(e)}function O(e,t){t.restore()}function S(e,t){return function(n,i,r){var o,l,c,u;return n.tokenize||"length"in n?d(s(n)):function(e){return e in n||null in n?d(n.null?s(n[e]).concat(s(n.null)):n[e])(e):r(e)};function d(e){return o=e,m(e[l=0])}function m(e){return function(n){var i,r,o,s,l;return i=x(),r=h.previous,o=h.currentConstruct,s=h.events.length,l=Array.from(b),u={restore:function(){p=i,h.previous=r,h.currentConstruct=o,h.events.length=s,b=l,w()},from:s},c=e,e.partial||(h.currentConstruct=e),e.name&&h.parser.constructs.disable.null.indexOf(e.name)>-1?g():e.tokenize.call(t?a({},h,t):h,y,f,g)(n)}}function f(t){return e(c,u),i}function g(e){return u.restore(),++l<o.length?m(o[l]):r}}}function k(e,t){e.resolveAll&&f.indexOf(e)<0&&f.push(e),e.resolve&&o(h.events,t,h.events.length-t,e.resolve(h.events.slice(t),h)),e.resolveTo&&(h.events=e.resolveTo(h.events,h))}function w(){p.line in m&&p.column<2&&(p.column=m[p.line],p.offset+=m[p.line]-1)}}},function(e,t,n){"use strict";var a=n(465);e.exports=function(e){for(var t,n,i,r=-1,o=[];++r<e.length;){if("string"==typeof(t=e[r]))n=t;else if(-5===t)n="\r";else if(-4===t)n="\n";else if(-3===t)n="\r\n";else if(-2===t)n="\t";else if(-1===t){if(i)continue;n=" "}else n=a(t);i=-2===t,o.push(n)}return o.join("")}},function(e,t,n){"use strict";e.exports=function(e,t){var n,a=t.start._index,i=t.start._bufferIndex,r=t.end._index,o=t.end._bufferIndex;return a===r?n=[e[a].slice(i,o)]:(n=e.slice(a,r),i>-1&&(n[0]=n[0].slice(i)),o>0&&n.push(e[r].slice(0,o))),n}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(843),i=n(1327),r=n(1333),o=n(1335),s=n(1336),l=n(1338),c=n(1340),u=n(1341),d=n(1342),p=n(1343),m=n(1344),f=n(1345),g=n(1346),b=n(1349),y=n(585),h=n(1350),v=n(1351),E=n(1352),x=n(1353),j=n(1354),O=n(851),S={42:x,43:x,45:x,48:x,49:x,50:x,51:x,52:x,53:x,54:x,55:x,56:x,57:x,62:o},k={91:p},w={"-2":u,"-1":u,32:u},I={35:f,42:O,45:[j,O],60:g,61:j,95:O,96:c,126:c},T={38:l,92:s},C={"-5":E,"-4":E,"-3":E,33:h,38:l,42:i,60:[r,b],91:v,92:[m,s],93:y,95:i,96:d},M={null:[i,a.resolver]};t.contentInitial=k,t.disable={null:[]},t.document=S,t.flow=I,t.flowInitial=w,t.insideSpan=M,t.string=T,t.text=C},function(e,t,n){"use strict";var a=n(582),i=n(251),r=n(1328),o=n(1332),s=n(583),l=n(315),c={name:"attention",tokenize:function(e,t){var n,a=r(this.previous);return function(t){return e.enter("attentionSequence"),n=t,i(t)};function i(o){var s,l,c,u;return o===n?(e.consume(o),i):(s=e.exit("attentionSequence"),c=!(l=r(o))||2===l&&a,u=!a||2===a&&l,s._open=42===n?c:c&&(a||!u),s._close=42===n?u:u&&(l||!c),t(o))}},resolveAll:function(e,t){for(var n,r,c,u,d,p,m,f,g=-1;++g<e.length;)if("enter"===e[g][0]&&"attentionSequence"===e[g][1].type&&e[g][1]._close)for(n=g;n--;)if("exit"===e[n][0]&&"attentionSequence"===e[n][1].type&&e[n][1]._open&&t.sliceSerialize(e[n][1]).charCodeAt(0)===t.sliceSerialize(e[g][1]).charCodeAt(0)){if((e[n][1]._close||e[g][1]._open)&&(e[g][1].end.offset-e[g][1].start.offset)%3&&!((e[n][1].end.offset-e[n][1].start.offset+e[g][1].end.offset-e[g][1].start.offset)%3))continue;u={type:(p=e[n][1].end.offset-e[n][1].start.offset>1&&e[g][1].end.offset-e[g][1].start.offset>1?2:1)>1?"strongSequence":"emphasisSequence",start:o(l(e[n][1].end),-p),end:l(e[n][1].end)},d={type:p>1?"strongSequence":"emphasisSequence",start:l(e[g][1].start),end:o(l(e[g][1].start),p)},c={type:p>1?"strongText":"emphasisText",start:l(e[n][1].end),end:l(e[g][1].start)},r={type:p>1?"strong":"emphasis",start:l(u.start),end:l(d.end)},e[n][1].end=l(u.start),e[g][1].start=l(d.end),m=[],e[n][1].end.offset-e[n][1].start.offset&&(m=a(m,[["enter",e[n][1],t],["exit",e[n][1],t]])),m=a(m,[["enter",r,t],["enter",u,t],["exit",u,t],["enter",c,t]]),m=a(m,s(t.parser.constructs.insideSpan.null,e.slice(n+1,g),t)),m=a(m,[["exit",c,t],["enter",d,t],["exit",d,t],["exit",r,t]]),e[g][1].end.offset-e[g][1].start.offset?(f=2,m=a(m,[["enter",e[g][1],t],["exit",e[g][1],t]])):f=0,i(e,n-1,g-n+3,m),g=n+m.length-f-2;break}for(g=-1;++g<e.length;)"attentionSequence"===e[g][1].type&&(e[g][1].type="data");return e}};e.exports=c},function(e,t,n){"use strict";var a=n(252),i=n(1329),r=n(1331);e.exports=function(e){return null===e||a(e)||r(e)?1:i(e)?2:void 0}},function(e,t,n){"use strict";var a=n(1330),i=n(253)(a);e.exports=i},function(e,t,n){"use strict";e.exports=/[!-\/:-@\[-`\{-~\xA1\xA7\xAB\xB6\xB7\xBB\xBF\u037E\u0387\u055A-\u055F\u0589\u058A\u05BE\u05C0\u05C3\u05C6\u05F3\u05F4\u0609\u060A\u060C\u060D\u061B\u061E\u061F\u066A-\u066D\u06D4\u0700-\u070D\u07F7-\u07F9\u0830-\u083E\u085E\u0964\u0965\u0970\u09FD\u0A76\u0AF0\u0C77\u0C84\u0DF4\u0E4F\u0E5A\u0E5B\u0F04-\u0F12\u0F14\u0F3A-\u0F3D\u0F85\u0FD0-\u0FD4\u0FD9\u0FDA\u104A-\u104F\u10FB\u1360-\u1368\u1400\u166E\u169B\u169C\u16EB-\u16ED\u1735\u1736\u17D4-\u17D6\u17D8-\u17DA\u1800-\u180A\u1944\u1945\u1A1E\u1A1F\u1AA0-\u1AA6\u1AA8-\u1AAD\u1B5A-\u1B60\u1BFC-\u1BFF\u1C3B-\u1C3F\u1C7E\u1C7F\u1CC0-\u1CC7\u1CD3\u2010-\u2027\u2030-\u2043\u2045-\u2051\u2053-\u205E\u207D\u207E\u208D\u208E\u2308-\u230B\u2329\u232A\u2768-\u2775\u27C5\u27C6\u27E6-\u27EF\u2983-\u2998\u29D8-\u29DB\u29FC\u29FD\u2CF9-\u2CFC\u2CFE\u2CFF\u2D70\u2E00-\u2E2E\u2E30-\u2E4F\u2E52\u3001-\u3003\u3008-\u3011\u3014-\u301F\u3030\u303D\u30A0\u30FB\uA4FE\uA4FF\uA60D-\uA60F\uA673\uA67E\uA6F2-\uA6F7\uA874-\uA877\uA8CE\uA8CF\uA8F8-\uA8FA\uA8FC\uA92E\uA92F\uA95F\uA9C1-\uA9CD\uA9DE\uA9DF\uAA5C-\uAA5F\uAADE\uAADF\uAAF0\uAAF1\uABEB\uFD3E\uFD3F\uFE10-\uFE19\uFE30-\uFE52\uFE54-\uFE61\uFE63\uFE68\uFE6A\uFE6B\uFF01-\uFF03\uFF05-\uFF0A\uFF0C-\uFF0F\uFF1A\uFF1B\uFF1F\uFF20\uFF3B-\uFF3D\uFF3F\uFF5B\uFF5D\uFF5F-\uFF65]/},function(e,t,n){"use strict";var a=n(253)(/\s/);e.exports=a},function(e,t,n){"use strict";e.exports=function(e,t){return e.column+=t,e.offset+=t,e._bufferIndex+=t,e}},function(e,t,n){"use strict";var a=n(584),i=n(468),r=n(1334),o=n(844),s={name:"autolink",tokenize:function(e,t,n){var s=1;return function(t){return e.enter("autolink"),e.enter("autolinkMarker"),e.consume(t),e.exit("autolinkMarker"),e.enter("autolinkProtocol"),l};function l(t){return a(t)?(e.consume(t),c):r(t)?p(t):n(t)}function c(e){return 43===e||45===e||46===e||i(e)?u(e):p(e)}function u(t){return 58===t?(e.consume(t),d):(43===t||45===t||46===t||i(t))&&s++<32?(e.consume(t),u):p(t)}function d(t){return 62===t?(e.exit("autolinkProtocol"),b(t)):32===t||60===t||o(t)?n(t):(e.consume(t),d)}function p(t){return 64===t?(e.consume(t),s=0,m):r(t)?(e.consume(t),p):n(t)}function m(e){return i(e)?f(e):n(e)}function f(t){return 46===t?(e.consume(t),s=0,m):62===t?(e.exit("autolinkProtocol").type="autolinkEmail",b(t)):g(t)}function g(t){return(45===t||i(t))&&s++<63?(e.consume(t),45===t?g:f):n(t)}function b(n){return e.enter("autolinkMarker"),e.consume(n),e.exit("autolinkMarker"),e.exit("autolink"),t}}};e.exports=s},function(e,t,n){"use strict";var a=n(253)(/[#-'*+\--9=?A-Z^-~]/);e.exports=a},function(e,t,n){"use strict";var a=n(237),i=n(154),r={name:"blockQuote",tokenize:function(e,t,n){var i=this;return function(t){return 62===t?(i.containerState.open||(e.enter("blockQuote",{_container:!0}),i.containerState.open=!0),e.enter("blockQuotePrefix"),e.enter("blockQuoteMarker"),e.consume(t),e.exit("blockQuoteMarker"),r):n(t)};function r(n){return a(n)?(e.enter("blockQuotePrefixWhitespace"),e.consume(n),e.exit("blockQuotePrefixWhitespace"),e.exit("blockQuotePrefix"),t):(e.exit("blockQuotePrefix"),t(n))}},continuation:{tokenize:function(e,t,n){return i(e,e.attempt(r,t,n),"linePrefix",this.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4)}},exit:function(e){e.exit("blockQuote")}};e.exports=r},function(e,t,n){"use strict";var a=n(1337),i={name:"characterEscape",tokenize:function(e,t,n){return function(t){return e.enter("characterEscape"),e.enter("escapeMarker"),e.consume(t),e.exit("escapeMarker"),i};function i(i){return a(i)?(e.enter("characterEscapeValue"),e.consume(i),e.exit("characterEscapeValue"),e.exit("characterEscape"),t):n(i)}}};e.exports=i},function(e,t,n){"use strict";var a=n(253)(/[!-/:-@[-`{-~]/);e.exports=a},function(e,t,n){"use strict";var a=n(845),i=n(468),r=n(846),o=n(1339);function s(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var l=s(a),c={name:"characterReference",tokenize:function(e,t,n){var a,s,c=this,u=0;return function(t){return e.enter("characterReference"),e.enter("characterReferenceMarker"),e.consume(t),e.exit("characterReferenceMarker"),d};function d(t){return 35===t?(e.enter("characterReferenceMarkerNumeric"),e.consume(t),e.exit("characterReferenceMarkerNumeric"),p):(e.enter("characterReferenceValue"),a=31,s=i,m(t))}function p(t){return 88===t||120===t?(e.enter("characterReferenceMarkerHexadecimal"),e.consume(t),e.exit("characterReferenceMarkerHexadecimal"),e.enter("characterReferenceValue"),a=6,s=o,m):(e.enter("characterReferenceValue"),a=7,s=r,m(t))}function m(r){var o;return 59===r&&u?(o=e.exit("characterReferenceValue"),s!==i||l.default(c.sliceSerialize(o))?(e.enter("characterReferenceMarker"),e.consume(r),e.exit("characterReferenceMarker"),e.exit("characterReference"),t):n(r)):s(r)&&u++<a?(e.consume(r),m):n(r)}}};e.exports=c},function(e,t,n){"use strict";var a=n(253)(/[\dA-Fa-f]/);e.exports=a},function(e,t,n){"use strict";var a=n(147),i=n(252),r=n(467),o=n(154),s={name:"codeFenced",tokenize:function(e,t,n){var s,l=this,c={tokenize:function(e,t,n){var i=0;return o(e,(function(t){return e.enter("codeFencedFence"),e.enter("codeFencedFenceSequence"),r(t)}),"linePrefix",this.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4);function r(t){return t===s?(e.consume(t),i++,r):i<d?n(t):(e.exit("codeFencedFenceSequence"),o(e,l,"whitespace")(t))}function l(i){return null===i||a(i)?(e.exit("codeFencedFence"),t(i)):n(i)}},partial:!0},u=r(this.events,"linePrefix"),d=0;return function(t){return e.enter("codeFenced"),e.enter("codeFencedFence"),e.enter("codeFencedFenceSequence"),s=t,p(t)};function p(t){return t===s?(e.consume(t),d++,p):(e.exit("codeFencedFenceSequence"),d<3?n(t):o(e,m,"whitespace")(t))}function m(t){return null===t||a(t)?y(t):(e.enter("codeFencedFenceInfo"),e.enter("chunkString",{contentType:"string"}),f(t))}function f(t){return null===t||i(t)?(e.exit("chunkString"),e.exit("codeFencedFenceInfo"),o(e,g,"whitespace")(t)):96===t&&t===s?n(t):(e.consume(t),f)}function g(t){return null===t||a(t)?y(t):(e.enter("codeFencedFenceMeta"),e.enter("chunkString",{contentType:"string"}),b(t))}function b(t){return null===t||a(t)?(e.exit("chunkString"),e.exit("codeFencedFenceMeta"),y(t)):96===t&&t===s?n(t):(e.consume(t),b)}function y(n){return e.exit("codeFencedFence"),l.interrupt?t(n):h(n)}function h(t){return null===t?E(t):a(t)?(e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),e.attempt(c,E,u?o(e,h,"linePrefix",u+1):h)):(e.enter("codeFlowValue"),v(t))}function v(t){return null===t||a(t)?(e.exit("codeFlowValue"),h(t)):(e.consume(t),v)}function E(n){return e.exit("codeFenced"),t(n)}},concrete:!0};e.exports=s},function(e,t,n){"use strict";var a=n(147),i=n(251),r=n(467),o=n(154),s={name:"codeIndented",tokenize:function(e,t,n){return e.attempt(l,i,n);function i(n){return null===n?t(n):a(n)?e.attempt(l,i,t)(n):(e.enter("codeFlowValue"),r(n))}function r(t){return null===t||a(t)?(e.exit("codeFlowValue"),i(t)):(e.consume(t),r)}},resolve:function(e,t){var n={type:"codeIndented",start:e[0][1].start,end:e[e.length-1][1].end};return i(e,0,0,[["enter",n,t]]),i(e,e.length,0,[["exit",n,t]]),e}},l={tokenize:function(e,t,n){var i=this;return o(e,(function s(l){return a(l)?(e.enter("lineEnding"),e.consume(l),e.exit("lineEnding"),o(e,s,"linePrefix",5)):r(i.events,"linePrefix")<4?n(l):t(l)}),"linePrefix",5)},partial:!0};e.exports=s},function(e,t,n){"use strict";var a=n(147),i={name:"codeText",tokenize:function(e,t,n){var i,r,o=0;return function(t){return e.enter("codeText"),e.enter("codeTextSequence"),s(t)};function s(t){return 96===t?(e.consume(t),o++,s):(e.exit("codeTextSequence"),l(t))}function l(t){return null===t?n(t):96===t?(r=e.enter("codeTextSequence"),i=0,u(t)):32===t?(e.enter("space"),e.consume(t),e.exit("space"),l):a(t)?(e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),l):(e.enter("codeTextData"),c(t))}function c(t){return null===t||32===t||96===t||a(t)?(e.exit("codeTextData"),l(t)):(e.consume(t),c)}function u(n){return 96===n?(e.consume(n),i++,u):i===o?(e.exit("codeTextSequence"),e.exit("codeText"),t(n)):(r.type="codeTextData",c(n))}},resolve:function(e){var t,n,a=e.length-4,i=3;if(!("lineEnding"!==e[i][1].type&&"space"!==e[i][1].type||"lineEnding"!==e[a][1].type&&"space"!==e[a][1].type))for(t=i;++t<a;)if("codeTextData"===e[t][1].type){e[a][1].type=e[i][1].type="codeTextPadding",i+=2,a-=2;break}for(t=i-1,a++;++t<=a;)void 0===n?t!==a&&"lineEnding"!==e[t][1].type&&(n=t):t!==a&&"lineEnding"!==e[t][1].type||(e[n][1].type="codeTextData",t!==n+2&&(e[n][1].end=e[t-1][1].end,e.splice(n+2,t-n-2),a-=t-n-2,t=n+2),n=void 0);return e},previous:function(e){return 96!==e||"characterEscape"===this.events[this.events.length-1][1].type}};e.exports=i},function(e,t,n){"use strict";var a=n(147),i=n(252),r=n(580),o=n(847),s=n(848),l=n(154),c=n(849),u=n(850),d={name:"definition",tokenize:function(e,t,n){var i,u=this;return function(t){return e.enter("definition"),s.call(u,e,d,n,"definitionLabel","definitionLabelMarker","definitionLabelString")(t)};function d(t){return i=r(u.sliceSerialize(u.events[u.events.length-1][1]).slice(1,-1)),58===t?(e.enter("definitionMarker"),e.consume(t),e.exit("definitionMarker"),c(e,o(e,e.attempt(p,l(e,m,"whitespace"),l(e,m,"whitespace")),n,"definitionDestination","definitionDestinationLiteral","definitionDestinationLiteralMarker","definitionDestinationRaw","definitionDestinationString"))):n(t)}function m(r){return null===r||a(r)?(e.exit("definition"),u.parser.defined.indexOf(i)<0&&u.parser.defined.push(i),t(r)):n(r)}}},p={tokenize:function(e,t,n){return function(t){return i(t)?c(e,r)(t):n(t)};function r(t){return 34===t||39===t||40===t?u(e,l(e,o,"whitespace"),n,"definitionTitle","definitionTitleMarker","definitionTitleString")(t):n(t)}function o(e){return null===e||a(e)?t(e):n(e)}},partial:!0};e.exports=d},function(e,t,n){"use strict";var a=n(147),i={name:"hardBreakEscape",tokenize:function(e,t,n){return function(t){return e.enter("hardBreakEscape"),e.enter("escapeMarker"),e.consume(t),i};function i(i){return a(i)?(e.exit("escapeMarker"),e.exit("hardBreakEscape"),t(i)):n(i)}}};e.exports=i},function(e,t,n){"use strict";var a=n(147),i=n(252),r=n(237),o=n(251),s=n(154),l={name:"headingAtx",tokenize:function(e,t,n){var o=this,l=0;return function(t){return e.enter("atxHeading"),e.enter("atxHeadingSequence"),c(t)};function c(a){return 35===a&&l++<6?(e.consume(a),c):null===a||i(a)?(e.exit("atxHeadingSequence"),o.interrupt?t(a):u(a)):n(a)}function u(n){return 35===n?(e.enter("atxHeadingSequence"),d(n)):null===n||a(n)?(e.exit("atxHeading"),t(n)):r(n)?s(e,u,"whitespace")(n):(e.enter("atxHeadingText"),p(n))}function d(t){return 35===t?(e.consume(t),d):(e.exit("atxHeadingSequence"),u(t))}function p(t){return null===t||35===t||i(t)?(e.exit("atxHeadingText"),u(t)):(e.consume(t),p)}},resolve:function(e,t){var n,a,i=e.length-2,r=3;return"whitespace"===e[r][1].type&&(r+=2),i-2>r&&"whitespace"===e[i][1].type&&(i-=2),"atxHeadingSequence"===e[i][1].type&&(r===i-1||i-4>r&&"whitespace"===e[i-2][1].type)&&(i-=r+1===i?2:4),i>r&&(n={type:"atxHeadingText",start:e[r][1].start,end:e[i][1].end},a={type:"chunkText",start:e[r][1].start,end:e[i][1].end,contentType:"text"},o(e,r,i-r+1,[["enter",n,t],["enter",a,t],["exit",a,t],["exit",n,t]])),e}};e.exports=l},function(e,t,n){"use strict";var a=n(584),i=n(468),r=n(147),o=n(252),s=n(237),l=n(465),c=n(1347),u=n(1348),d=n(466),p={name:"htmlFlow",tokenize:function(e,t,n){var d,p,f,g,b,y=this;return function(t){return e.enter("htmlFlow"),e.enter("htmlFlowData"),e.consume(t),h};function h(i){return 33===i?(e.consume(i),v):47===i?(e.consume(i),j):63===i?(e.consume(i),d=3,y.interrupt?t:$):a(i)?(e.consume(i),f=l(i),p=!0,O):n(i)}function v(i){return 45===i?(e.consume(i),d=2,E):91===i?(e.consume(i),d=5,f="CDATA[",g=0,x):a(i)?(e.consume(i),d=4,y.interrupt?t:$):n(i)}function E(a){return 45===a?(e.consume(a),y.interrupt?t:$):n(a)}function x(a){return a===f.charCodeAt(g++)?(e.consume(a),g===f.length?y.interrupt?t:N:x):n(a)}function j(t){return a(t)?(e.consume(t),f=l(t),O):n(t)}function O(a){return null===a||47===a||62===a||o(a)?47!==a&&p&&u.indexOf(f.toLowerCase())>-1?(d=1,y.interrupt?t(a):N(a)):c.indexOf(f.toLowerCase())>-1?(d=6,47===a?(e.consume(a),S):y.interrupt?t(a):N(a)):(d=7,y.interrupt?n(a):p?w(a):k(a)):45===a||i(a)?(e.consume(a),f+=l(a),O):n(a)}function S(a){return 62===a?(e.consume(a),y.interrupt?t:N):n(a)}function k(t){return s(t)?(e.consume(t),k):F(t)}function w(t){return 47===t?(e.consume(t),F):58===t||95===t||a(t)?(e.consume(t),I):s(t)?(e.consume(t),w):F(t)}function I(t){return 45===t||46===t||58===t||95===t||i(t)?(e.consume(t),I):T(t)}function T(t){return 61===t?(e.consume(t),C):s(t)?(e.consume(t),T):w(t)}function C(t){return null===t||60===t||61===t||62===t||96===t?n(t):34===t||39===t?(e.consume(t),b=t,M):s(t)?(e.consume(t),C):(b=void 0,A(t))}function M(t){return t===b?(e.consume(t),_):null===t||r(t)?n(t):(e.consume(t),M)}function A(t){return null===t||34===t||39===t||60===t||61===t||62===t||96===t||o(t)?T(t):(e.consume(t),A)}function _(e){return 47===e||62===e||s(e)?w(e):n(e)}function F(t){return 62===t?(e.consume(t),D):n(t)}function D(t){return s(t)?(e.consume(t),D):null===t||r(t)?N(t):n(t)}function N(t){return 45===t&&2===d?(e.consume(t),L):60===t&&1===d?(e.consume(t),q):62===t&&4===d?(e.consume(t),V):63===t&&3===d?(e.consume(t),$):93===t&&5===d?(e.consume(t),z):!r(t)||6!==d&&7!==d?null===t||r(t)?P(t):(e.consume(t),N):e.check(m,V,P)(t)}function P(t){return e.exit("htmlFlowData"),R(t)}function R(t){return null===t?U(t):r(t)?(e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),R):(e.enter("htmlFlowData"),N(t))}function L(t){return 45===t?(e.consume(t),$):N(t)}function q(t){return 47===t?(e.consume(t),f="",B):N(t)}function B(t){return 62===t&&u.indexOf(f.toLowerCase())>-1?(e.consume(t),V):a(t)&&f.length<8?(e.consume(t),f+=l(t),B):N(t)}function z(t){return 93===t?(e.consume(t),$):N(t)}function $(t){return 62===t?(e.consume(t),V):N(t)}function V(t){return null===t||r(t)?(e.exit("htmlFlowData"),U(t)):(e.consume(t),V)}function U(n){return e.exit("htmlFlow"),t(n)}},resolveTo:function(e){for(var t=e.length;t--&&("enter"!==e[t][0]||"htmlFlow"!==e[t][1].type););return t>1&&"linePrefix"===e[t-2][1].type&&(e[t][1].start=e[t-2][1].start,e[t+1][1].start=e[t-2][1].start,e.splice(t-2,2)),e},concrete:!0},m={tokenize:function(e,t,n){return function(a){return e.exit("htmlFlowData"),e.enter("lineEndingBlank"),e.consume(a),e.exit("lineEndingBlank"),e.attempt(d,t,n)}},partial:!0};e.exports=p},function(e,t,n){"use strict";e.exports=["address","article","aside","base","basefont","blockquote","body","caption","center","col","colgroup","dd","details","dialog","dir","div","dl","dt","fieldset","figcaption","figure","footer","form","frame","frameset","h1","h2","h3","h4","h5","h6","head","header","hr","html","iframe","legend","li","link","main","menu","menuitem","nav","noframes","ol","optgroup","option","p","param","section","source","summary","table","tbody","td","tfoot","th","thead","title","tr","track","ul"]},function(e,t,n){"use strict";e.exports=["pre","script","style","textarea"]},function(e,t,n){"use strict";var a=n(584),i=n(468),r=n(147),o=n(252),s=n(237),l=n(154),c={name:"htmlText",tokenize:function(e,t,n){var c,u,d,p,m=this;return function(t){return e.enter("htmlText"),e.enter("htmlTextData"),e.consume(t),f};function f(t){return 33===t?(e.consume(t),g):47===t?(e.consume(t),T):63===t?(e.consume(t),w):a(t)?(e.consume(t),A):n(t)}function g(t){return 45===t?(e.consume(t),b):91===t?(e.consume(t),u="CDATA[",d=0,x):a(t)?(e.consume(t),k):n(t)}function b(t){return 45===t?(e.consume(t),y):n(t)}function y(t){return null===t||62===t?n(t):45===t?(e.consume(t),h):v(t)}function h(e){return null===e||62===e?n(e):v(e)}function v(t){return null===t?n(t):45===t?(e.consume(t),E):r(t)?(p=v,q(t)):(e.consume(t),v)}function E(t){return 45===t?(e.consume(t),z):v(t)}function x(t){return t===u.charCodeAt(d++)?(e.consume(t),d===u.length?j:x):n(t)}function j(t){return null===t?n(t):93===t?(e.consume(t),O):r(t)?(p=j,q(t)):(e.consume(t),j)}function O(t){return 93===t?(e.consume(t),S):j(t)}function S(t){return 62===t?z(t):93===t?(e.consume(t),S):j(t)}function k(t){return null===t||62===t?z(t):r(t)?(p=k,q(t)):(e.consume(t),k)}function w(t){return null===t?n(t):63===t?(e.consume(t),I):r(t)?(p=w,q(t)):(e.consume(t),w)}function I(e){return 62===e?z(e):w(e)}function T(t){return a(t)?(e.consume(t),C):n(t)}function C(t){return 45===t||i(t)?(e.consume(t),C):M(t)}function M(t){return r(t)?(p=M,q(t)):s(t)?(e.consume(t),M):z(t)}function A(t){return 45===t||i(t)?(e.consume(t),A):47===t||62===t||o(t)?_(t):n(t)}function _(t){return 47===t?(e.consume(t),z):58===t||95===t||a(t)?(e.consume(t),F):r(t)?(p=_,q(t)):s(t)?(e.consume(t),_):z(t)}function F(t){return 45===t||46===t||58===t||95===t||i(t)?(e.consume(t),F):D(t)}function D(t){return 61===t?(e.consume(t),N):r(t)?(p=D,q(t)):s(t)?(e.consume(t),D):_(t)}function N(t){return null===t||60===t||61===t||62===t||96===t?n(t):34===t||39===t?(e.consume(t),c=t,P):r(t)?(p=N,q(t)):s(t)?(e.consume(t),N):(e.consume(t),c=void 0,L)}function P(t){return t===c?(e.consume(t),R):null===t?n(t):r(t)?(p=P,q(t)):(e.consume(t),P)}function R(e){return 62===e||47===e||o(e)?_(e):n(e)}function L(t){return null===t||34===t||39===t||60===t||61===t||96===t?n(t):62===t||o(t)?_(t):(e.consume(t),L)}function q(t){return e.exit("htmlTextData"),e.enter("lineEnding"),e.consume(t),e.exit("lineEnding"),l(e,B,"linePrefix",m.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4)}function B(t){return e.enter("htmlTextData"),p(t)}function z(a){return 62===a?(e.consume(a),e.exit("htmlTextData"),e.exit("htmlText"),t):n(a)}}};e.exports=c},function(e,t,n){"use strict";var a={name:"labelStartImage",tokenize:function(e,t,n){var a=this;return function(t){return e.enter("labelImage"),e.enter("labelImageMarker"),e.consume(t),e.exit("labelImageMarker"),i};function i(t){return 91===t?(e.enter("labelMarker"),e.consume(t),e.exit("labelMarker"),e.exit("labelImage"),r):n(t)}function r(e){return 94===e&&"_hiddenFootnoteSupport"in a.parser.constructs?n(e):t(e)}},resolveAll:n(585).resolveAll};e.exports=a},function(e,t,n){"use strict";var a={name:"labelStartLink",tokenize:function(e,t,n){var a=this;return function(t){return e.enter("labelLink"),e.enter("labelMarker"),e.consume(t),e.exit("labelMarker"),e.exit("labelLink"),i};function i(e){return 94===e&&"_hiddenFootnoteSupport"in a.parser.constructs?n(e):t(e)}},resolveAll:n(585).resolveAll};e.exports=a},function(e,t,n){"use strict";var a=n(154),i={name:"lineEnding",tokenize:function(e,t){return function(n){return e.enter("lineEnding"),e.consume(n),e.exit("lineEnding"),a(e,t,"linePrefix")}}};e.exports=i},function(e,t,n){"use strict";var a=n(846),i=n(237),r=n(467),o=n(841),s=n(154),l=n(466),c=n(851),u={name:"list",tokenize:function(e,t,n){var s=this,u=r(s.events,"linePrefix"),p=0;return function(t){var i=s.containerState.type||(42===t||43===t||45===t?"listUnordered":"listOrdered");if("listUnordered"===i?!s.containerState.marker||t===s.containerState.marker:a(t)){if(s.containerState.type||(s.containerState.type=i,e.enter(i,{_container:!0})),"listUnordered"===i)return e.enter("listItemPrefix"),42===t||45===t?e.check(c,n,f)(t):f(t);if(!s.interrupt||49===t)return e.enter("listItemPrefix"),e.enter("listItemValue"),m(t)}return n(t)};function m(t){return a(t)&&++p<10?(e.consume(t),m):(!s.interrupt||p<2)&&(s.containerState.marker?t===s.containerState.marker:41===t||46===t)?(e.exit("listItemValue"),f(t)):n(t)}function f(t){return e.enter("listItemMarker"),e.consume(t),e.exit("listItemMarker"),s.containerState.marker=s.containerState.marker||t,e.check(l,s.interrupt?n:g,e.attempt(d,y,b))}function g(e){return s.containerState.initialBlankLine=!0,u++,y(e)}function b(t){return i(t)?(e.enter("listItemPrefixWhitespace"),e.consume(t),e.exit("listItemPrefixWhitespace"),y):n(t)}function y(n){return s.containerState.size=u+o(s.sliceStream(e.exit("listItemPrefix"))),t(n)}},continuation:{tokenize:function(e,t,n){var a=this;return a.containerState._closeFlow=void 0,e.check(l,(function(n){return a.containerState.furtherBlankLines=a.containerState.furtherBlankLines||a.containerState.initialBlankLine,s(e,t,"listItemIndent",a.containerState.size+1)(n)}),(function(n){return a.containerState.furtherBlankLines||!i(n)?(a.containerState.furtherBlankLines=a.containerState.initialBlankLine=void 0,r(n)):(a.containerState.furtherBlankLines=a.containerState.initialBlankLine=void 0,e.attempt(p,t,r)(n))}));function r(i){return a.containerState._closeFlow=!0,a.interrupt=void 0,s(e,e.attempt(u,t,n),"linePrefix",a.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:4)(i)}}},exit:function(e){e.exit(this.containerState.type)}},d={tokenize:function(e,t,n){var a=this;return s(e,(function(e){return i(e)||!r(a.events,"listItemPrefixWhitespace")?n(e):t(e)}),"listItemPrefixWhitespace",a.parser.constructs.disable.null.indexOf("codeIndented")>-1?void 0:5)},partial:!0},p={tokenize:function(e,t,n){var a=this;return s(e,(function(e){return r(a.events,"listItemIndent")===a.containerState.size?t(e):n(e)}),"listItemIndent",a.containerState.size+1)},partial:!0};e.exports=u},function(e,t,n){"use strict";var a=n(147),i=n(315),r=n(154),o={name:"setextUnderline",tokenize:function(e,t,n){for(var i,o,s=this,l=s.events.length;l--;)if("lineEnding"!==s.events[l][1].type&&"linePrefix"!==s.events[l][1].type&&"content"!==s.events[l][1].type){o="paragraph"===s.events[l][1].type;break}return function(t){return s.lazy||!s.interrupt&&!o?n(t):(e.enter("setextHeadingLine"),e.enter("setextHeadingLineSequence"),i=t,c(t))};function c(t){return t===i?(e.consume(t),c):(e.exit("setextHeadingLineSequence"),r(e,u,"lineSuffix")(t))}function u(i){return null===i||a(i)?(e.exit("setextHeadingLine"),t(i)):n(i)}},resolveTo:function(e,t){for(var n,a,r,o,s=e.length;s--;)if("enter"===e[s][0]){if("content"===e[s][1].type){n=s;break}"paragraph"===e[s][1].type&&(a=s)}else"content"===e[s][1].type&&e.splice(s,1),r||"definition"!==e[s][1].type||(r=s);return o={type:"setextHeading",start:i(e[a][1].start),end:i(e[e.length-1][1].end)},e[a][1].type="setextHeadingText",r?(e.splice(a,0,["enter",o,t]),e.splice(r+1,0,["exit",e[n][1],t]),e[n][1].end=i(e[r][1].end)):e[n][1]=o,e.push(["exit",o,t]),e}};e.exports=o},function(e,t,n){"use strict";var a=/[\0\t\n\r]/g;e.exports=function(){var e,t=!0,n=1,i="";return function(r,o,s){var l,c,u,d,p,m=[];for(r=i+r.toString(o),u=0,i="",t&&(65279===r.charCodeAt(0)&&u++,t=void 0);u<r.length;){if(a.lastIndex=u,d=(l=a.exec(r))?l.index:r.length,p=r.charCodeAt(d),!l){i=r.slice(u);break}if(10===p&&u===d&&e)m.push(-3),e=void 0;else if(e&&(m.push(-5),e=void 0),u<d&&(m.push(r.slice(u,d)),n+=d-u),0===p)m.push(65533),n++;else if(9===p)for(c=4*Math.ceil(n/4),m.push(-2);n++<c;)m.push(-1);else 10===p?(m.push(-4),n=1):(e=!0,n=1);u=d+1}return s&&(e&&m.push(-5),i&&m.push(i),m.push(null)),m}}},function(e,t,n){"use strict";var a=n(842);e.exports=function(e){for(;!a(e););return e}},function(e,t,n){e.exports=n(33)(3706)},function(e,t,n){e.exports=n(33)(2050)},function(e,t,n){e.exports=n(33)(1622)},function(e,t,n){const a=n(1361);e.exports=function(e){if(e.allowedElements&&e.disallowedElements)throw new TypeError("Only one of `allowedElements` and `disallowedElements` should be defined");if(e.allowedElements||e.disallowedElements||e.allowElement)return e=>{a(e,"element",t)};function t(t,n,a){const i=t,r=a;let o;if(e.allowedElements?o=!e.allowedElements.includes(i.tagName):e.disallowedElements&&(o=e.disallowedElements.includes(i.tagName)),!o&&e.allowElement&&"number"==typeof n&&(o=!e.allowElement(i,n,r)),o&&"number"==typeof n)return e.unwrapDisallowed&&i.children?r.children.splice(n,1,...i.children):r.children.splice(n,1),n}}},function(e,t,n){e.exports=n(33)(362)},function(e,t){const n=["http","https","mailto","tel"];e.exports=function(e){const t=(e||"").trim(),a=t.charAt(0);if("#"===a||"/"===a)return t;const i=t.indexOf(":");if(-1===i)return t;let r=-1;for(;++r<n.length;){const e=n[r];if(i===e.length&&t.slice(0,e.length).toLowerCase()===e)return t}return r=t.indexOf("?"),-1!==r&&i>r?t:(r=t.indexOf("#"),-1!==r&&i>r?t:"javascript:void(0)")}},function(e,t,n){"use strict";const a=n(2),i=n(1400),r=n(1364),o=n(1365),s=n(1366),l=n(1367),c=n(1368),u=n(1369);t.hastToReact=f,t.hastChildrenToReact=m;const d={}.hasOwnProperty,p=new Set(["table","thead","tbody","tfoot","tr"]);function m(e,t){const n=[];let a,i=-1;for(;++i<t.children.length;)a=t.children[i],"element"===a.type?n.push(f(e,a,i,t)):"text"===a.type?"element"===t.type&&p.has(t.tagName)&&"\n"===a.value||n.push(a.value):"raw"!==a.type||e.options.skipHtml||n.push(a.value);return n}function f(e,t,n,o){const s=e.options,l=e.schema,c=t.tagName,u={};let p,f=l;if("html"===l.space&&"svg"===c&&(f=r,e.schema=f),t.properties)for(p in t.properties)d.call(t.properties,p)&&b(u,p,t.properties[p],e);"ol"!==c&&"ul"!==c||e.listDepth++;const y=m(e,t);"ol"!==c&&"ul"!==c||e.listDepth--,e.schema=l;const h=t.position||{start:{line:null,column:null,offset:null},end:{line:null,column:null,offset:null}},v=s.components&&d.call(s.components,c)?s.components[c]:c,E="string"==typeof v||v===a.Fragment;if(!i.isValidElementType(v))throw new TypeError(`Component for name \`${c}\` not defined or is not renderable`);if(u.key=[c,h.start.line,h.start.column,n].join("-"),"a"===c&&s.linkTarget&&(u.target="function"==typeof s.linkTarget?s.linkTarget(u.href,t.children,u.title):s.linkTarget),"a"===c&&s.transformLinkUri&&(u.href=s.transformLinkUri(u.href,t.children,u.title)),E||"code"!==c||"element"!==o.type||"pre"===o.tagName||(u.inline=!0),E||"h1"!==c&&"h2"!==c&&"h3"!==c&&"h4"!==c&&"h5"!==c&&"h6"!==c||(u.level=parseInt(c.charAt(1),10)),"img"===c&&s.transformImageUri&&(u.src=s.transformImageUri(u.src,u.alt,u.title)),!E&&"li"===c&&"element"===o.type){const e=function(e){let t=-1;for(;++t<e.children.length;){const n=e.children[t];if("element"===n.type&&"input"===n.tagName)return n}return null}(t);u.checked=e&&e.properties?Boolean(e.properties.checked):null,u.index=g(o,t),u.ordered="ol"===o.tagName}var x;return E||"ol"!==c&&"ul"!==c||(u.ordered="ol"===c,u.depth=e.listDepth),"td"!==c&&"th"!==c||(u.align&&(u.style||(u.style={}),u.style.textAlign=u.align,delete u.align),E||(u.isHeader="th"===c)),E||"tr"!==c||"element"!==o.type||(u.isHeader=Boolean("thead"===o.tagName)),s.sourcePos&&(u["data-sourcepos"]=[(x=h).start.line,":",x.start.column,"-",x.end.line,":",x.end.column].map((e=>String(e))).join("")),!E&&s.rawSourcePos&&(u.sourcePosition=t.position),!E&&s.includeElementIndex&&(u.index=g(o,t),u.siblingCount=g(o)),E||(u.node=t),y.length>0?a.createElement(v,u,y):a.createElement(v,u)}function g(e,t){let n=-1,a=0;for(;++n<e.children.length&&e.children[n]!==t;)"element"===e.children[n].type&&a++;return a}function b(e,t,n,a){const i=o(a.schema,t);let r=n;null!=r&&r==r&&(r&&"object"==typeof r&&"length"in r&&(r=(i.commaSeparated?c:l).stringify(r)),"style"===i.property&&"string"==typeof r&&(r=function(e){const t={};try{u(e,(function(e,n){const a="-ms-"===e.slice(0,4)?`ms-${e.slice(4)}`:e;t[a.replace(/-([a-z])/g,y)]=n}))}catch(e){}return t}(r)),i.space&&i.property?e[d.call(s,i.property)?s[i.property]:i.property]=r:i.attribute&&(e[i.attribute]=r))}function y(e,t){return t.toUpperCase()}},function(e,t,n){e.exports=n(33)(3768)},function(e,t,n){e.exports=n(33)(1633)},function(e,t,n){e.exports=n(33)(3770)},function(e,t,n){e.exports=n(33)(1634)},function(e,t,n){e.exports=n(33)(1635)},function(e,t,n){e.exports=n(33)(3771)},function(e,t,n){e.exports=n(33)(2046)},function(e,t,n){switch(window.__kbnThemeTag__){case"v8dark":return n(1372);case"v8light":return n(1374)}},function(e,t,n){var a=n(256),i=n(1373);"string"==typeof(i=i.__esModule?i.default:i)&&(i=[[e.i,i,""]]);a(i,{insert:"head",singleton:!1}),e.exports=i.locals||{}},function(e,t,n){(t=n(257)(!1)).push([e.i,".kbnOverlayMountWrapper{display:flex;flex-direction:column;height:100%;overflow:hidden}",""]),e.exports=t},function(e,t,n){var a=n(256),i=n(1375);"string"==typeof(i=i.__esModule?i.default:i)&&(i=[[e.i,i,""]]);a(i,{insert:"head",singleton:!1}),e.exports=i.locals||{}},function(e,t,n){(t=n(257)(!1)).push([e.i,".kbnOverlayMountWrapper{display:flex;flex-direction:column;height:100%;overflow:hidden}",""]),e.exports=t},function(e,t,n){var a;e.exports=function e(t,n,i){function r(s,l){if(!n[s]){if(!t[s]){if(!l&&"function"==typeof a&&a)return a(s,!0);if(o)return o(s,!0);throw new Error("Cannot find module '"+s+"'")}var c=n[s]={exports:{}};t[s][0].call(c.exports,(function(e){return r(t[s][1][e]||e)}),c,c.exports,e,t,n,i)}return n[s].exports}for(var o="function"==typeof a&&a,s=0;s<i.length;s++)r(i[s]);return r}({1:[function(e,t,n){(function(a,i,r,o,s,l,c,u,d){"use strict";function p(e,t){return function(e,t){var n;if(void 0===(n="passthrough"!==t.algorithm?y.createHash(t.algorithm):new b).write&&(n.write=n.update,n.end=n.update),g(t,n).dispatch(e),n.update||n.end(""),n.digest)return n.digest("buffer"===t.encoding?void 0:t.encoding);var a=n.read();return"buffer"===t.encoding?a:a.toString(t.encoding)}(e,t=m(e,t))}function m(e,t){if((t=t||{}).algorithm=t.algorithm||"sha1",t.encoding=t.encoding||"hex",t.excludeValues=!!t.excludeValues,t.algorithm=t.algorithm.toLowerCase(),t.encoding=t.encoding.toLowerCase(),t.ignoreUnknown=!0===t.ignoreUnknown,t.respectType=!1!==t.respectType,t.respectFunctionNames=!1!==t.respectFunctionNames,t.respectFunctionProperties=!1!==t.respectFunctionProperties,t.unorderedArrays=!0===t.unorderedArrays,t.unorderedSets=!1!==t.unorderedSets,t.unorderedObjects=!1!==t.unorderedObjects,t.replacer=t.replacer||void 0,t.excludeKeys=t.excludeKeys||void 0,void 0===e)throw new Error("Object argument required.");for(var n=0;n<h.length;++n)h[n].toLowerCase()===t.algorithm.toLowerCase()&&(t.algorithm=h[n]);if(-1===h.indexOf(t.algorithm))throw new Error('Algorithm "'+t.algorithm+'"  not supported. supported values: '+h.join(", "));if(-1===v.indexOf(t.encoding)&&"passthrough"!==t.algorithm)throw new Error('Encoding "'+t.encoding+'"  not supported. supported values: '+v.join(", "));return t}function f(e){return"function"==typeof e&&null!=/^function\s+\w*\s*\(\s*\)\s*{\s+\[native code\]\s+}$/i.exec(Function.prototype.toString.call(e))}function g(e,t,n){n=n||[];var a=function(e){return t.update?t.update(e,"utf8"):t.write(e,"utf8")};return{dispatch:function(t){e.replacer&&(t=e.replacer(t));var n=typeof t;return null===t&&(n="null"),this["_"+n](t)},_object:function(t){var i=Object.prototype.toString.call(t),o=/\[object (.*)\]/i.exec(i);o=(o=o?o[1]:"unknown:["+i+"]").toLowerCase();var s;if((s=n.indexOf(t))>=0)return this.dispatch("[CIRCULAR:"+s+"]");if(n.push(t),void 0!==r&&r.isBuffer&&r.isBuffer(t))return a("buffer:"),a(t);if("object"===o||"function"===o){var l=Object.keys(t);e.unorderedObjects&&(l=l.sort()),!1===e.respectType||f(t)||l.splice(0,0,"prototype","__proto__","constructor"),e.excludeKeys&&(l=l.filter((function(t){return!e.excludeKeys(t)}))),a("object:"+l.length+":");var c=this;return l.forEach((function(n){c.dispatch(n),a(":"),e.excludeValues||c.dispatch(t[n]),a(",")}))}if(!this["_"+o]){if(e.ignoreUnknown)return a("["+o+"]");throw new Error('Unknown object type "'+o+'"')}this["_"+o](t)},_array:function(t,i){i=void 0!==i?i:!1!==e.unorderedArrays;var r=this;if(a("array:"+t.length+":"),!i||t.length<=1)return t.forEach((function(e){return r.dispatch(e)}));var o=[],s=t.map((function(t){var a=new b,i=n.slice();return g(e,a,i).dispatch(t),o=o.concat(i.slice(n.length)),a.read().toString()}));return n=n.concat(o),s.sort(),this._array(s,!1)},_date:function(e){return a("date:"+e.toJSON())},_symbol:function(e){return a("symbol:"+e.toString())},_error:function(e){return a("error:"+e.toString())},_boolean:function(e){return a("bool:"+e.toString())},_string:function(e){a("string:"+e.length+":"),a(e.toString())},_function:function(t){a("fn:"),f(t)?this.dispatch("[native]"):this.dispatch(t.toString()),!1!==e.respectFunctionNames&&this.dispatch("function-name:"+String(t.name)),e.respectFunctionProperties&&this._object(t)},_number:function(e){return a("number:"+e.toString())},_xml:function(e){return a("xml:"+e.toString())},_null:function(){return a("Null")},_undefined:function(){return a("Undefined")},_regexp:function(e){return a("regex:"+e.toString())},_uint8array:function(e){return a("uint8array:"),this.dispatch(Array.prototype.slice.call(e))},_uint8clampedarray:function(e){return a("uint8clampedarray:"),this.dispatch(Array.prototype.slice.call(e))},_int8array:function(e){return a("uint8array:"),this.dispatch(Array.prototype.slice.call(e))},_uint16array:function(e){return a("uint16array:"),this.dispatch(Array.prototype.slice.call(e))},_int16array:function(e){return a("uint16array:"),this.dispatch(Array.prototype.slice.call(e))},_uint32array:function(e){return a("uint32array:"),this.dispatch(Array.prototype.slice.call(e))},_int32array:function(e){return a("uint32array:"),this.dispatch(Array.prototype.slice.call(e))},_float32array:function(e){return a("float32array:"),this.dispatch(Array.prototype.slice.call(e))},_float64array:function(e){return a("float64array:"),this.dispatch(Array.prototype.slice.call(e))},_arraybuffer:function(e){return a("arraybuffer:"),this.dispatch(new Uint8Array(e))},_url:function(e){return a("url:"+e.toString())},_map:function(t){a("map:");var n=Array.from(t);return this._array(n,!1!==e.unorderedSets)},_set:function(t){a("set:");var n=Array.from(t);return this._array(n,!1!==e.unorderedSets)},_blob:function(){if(e.ignoreUnknown)return a("[blob]");throw Error('Hashing Blob objects is currently not supported\n(see https://github.com/puleos/object-hash/issues/26)\nUse "options.replacer" or "options.ignoreUnknown"\n')},_domwindow:function(){return a("domwindow")},_process:function(){return a("process")},_timer:function(){return a("timer")},_pipe:function(){return a("pipe")},_tcp:function(){return a("tcp")},_udp:function(){return a("udp")},_tty:function(){return a("tty")},_statwatcher:function(){return a("statwatcher")},_securecontext:function(){return a("securecontext")},_connection:function(){return a("connection")},_zlib:function(){return a("zlib")},_context:function(){return a("context")},_nodescript:function(){return a("nodescript")},_httpparser:function(){return a("httpparser")},_dataview:function(){return a("dataview")},_signal:function(){return a("signal")},_fsevent:function(){return a("fsevent")},_tlswrap:function(){return a("tlswrap")}}}function b(){return{buf:"",write:function(e){this.buf+=e},end:function(e){this.buf+=e},read:function(){return this.buf}}}var y=e("crypto");(n=t.exports=p).sha1=function(e){return p(e)},n.keys=function(e){return p(e,{excludeValues:!0,algorithm:"sha1",encoding:"hex"})},n.MD5=function(e){return p(e,{algorithm:"md5",encoding:"hex"})},n.keysMD5=function(e){return p(e,{algorithm:"md5",encoding:"hex",excludeValues:!0})};var h=y.getHashes?y.getHashes().slice():["sha1","md5"];h.push("passthrough");var v=["buffer","hex","binary","base64"];n.writeToStream=function(e,t,n){return void 0===n&&(n=t,t={}),g(t=m(e,t),n).dispatch(e)}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/fake_e8180ef5.js","/")},{buffer:3,crypto:5,lYpoI2:10}],2:[function(e,t,n){(function(e,t,a,i,r,o,s,l,c){var u="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";!function(e){"use strict";function t(e){var t=e.charCodeAt(0);return t===a||t===l?62:t===i||t===c?63:t<r?-1:t<r+10?t-r+26+26:t<s+26?t-s:t<o+26?t-o+26:void 0}var n="undefined"!=typeof Uint8Array?Uint8Array:Array,a="+".charCodeAt(0),i="/".charCodeAt(0),r="0".charCodeAt(0),o="a".charCodeAt(0),s="A".charCodeAt(0),l="-".charCodeAt(0),c="_".charCodeAt(0);e.toByteArray=function(e){function a(e){c[d++]=e}var i,r,o,s,l,c;if(e.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var u=e.length;l="="===e.charAt(u-2)?2:"="===e.charAt(u-1)?1:0,c=new n(3*e.length/4-l),o=l>0?e.length-4:e.length;var d=0;for(i=0,r=0;i<o;i+=4,r+=3)a((16711680&(s=t(e.charAt(i))<<18|t(e.charAt(i+1))<<12|t(e.charAt(i+2))<<6|t(e.charAt(i+3))))>>16),a((65280&s)>>8),a(255&s);return 2===l?a(255&(s=t(e.charAt(i))<<2|t(e.charAt(i+1))>>4)):1===l&&(a((s=t(e.charAt(i))<<10|t(e.charAt(i+1))<<4|t(e.charAt(i+2))>>2)>>8&255),a(255&s)),c},e.fromByteArray=function(e){function t(e){return u.charAt(e)}function n(e){return t(e>>18&63)+t(e>>12&63)+t(e>>6&63)+t(63&e)}var a,i,r,o=e.length%3,s="";for(a=0,r=e.length-o;a<r;a+=3)s+=n(i=(e[a]<<16)+(e[a+1]<<8)+e[a+2]);switch(o){case 1:s+=t((i=e[e.length-1])>>2),s+=t(i<<4&63),s+="==";break;case 2:s+=t((i=(e[e.length-2]<<8)+e[e.length-1])>>10),s+=t(i>>4&63),s+=t(i<<2&63),s+="="}return s}}(void 0===n?this.base64js={}:n)}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/base64-js/lib/b64.js","/node_modules/gulp-browserify/node_modules/base64-js/lib")},{buffer:3,lYpoI2:10}],3:[function(e,t,n){(function(t,a,i,r,o,s,l,c,u){function i(e,t,n){if(!(this instanceof i))return new i(e,t,n);var a,r,o,s=typeof e;if("base64"===t&&"string"===s)for(e=function(e){return e.trim?e.trim():e.replace(/^\s+|\s+$/g,"")}(e);e.length%4!=0;)e+="=";if("number"===s)a=M(e);else if("string"===s)a=i.byteLength(e,t);else{if("object"!==s)throw new Error("First argument needs to be a number, array or string.");a=M(e.length)}if(i._useTypedArrays?r=i._augment(new Uint8Array(a)):((r=this).length=a,r._isBuffer=!0),i._useTypedArrays&&"number"==typeof e.byteLength)r._set(e);else if(function(e){return A(e)||i.isBuffer(e)||e&&"object"==typeof e&&"number"==typeof e.length}(e))for(o=0;o<a;o++)i.isBuffer(e)?r[o]=e.readUInt8(o):r[o]=e[o];else if("string"===s)r.write(e,0,t);else if("number"===s&&!i._useTypedArrays&&!n)for(o=0;o<a;o++)r[o]=0;return r}function d(e,t,n,a){n=Number(n)||0;var r=e.length-n;a?(a=Number(a))>r&&(a=r):a=r;var o=t.length;B(o%2==0,"Invalid hex string"),a>o/2&&(a=o/2);for(var s=0;s<a;s++){var l=parseInt(t.substr(2*s,2),16);B(!isNaN(l),"Invalid hex string"),e[n+s]=l}return i._charsWritten=2*s,s}function p(e,t,n,a){return i._charsWritten=N(F(t),e,n,a)}function m(e,t,n,a){return i._charsWritten=N(function(e){for(var t=[],n=0;n<e.length;n++)t.push(255&e.charCodeAt(n));return t}(t),e,n,a)}function f(e,t,n,a){return i._charsWritten=N(D(t),e,n,a)}function g(e,t,n,a){return i._charsWritten=N(function(e){for(var t,n,a,i=[],r=0;r<e.length;r++)n=(t=e.charCodeAt(r))>>8,a=t%256,i.push(a),i.push(n);return i}(t),e,n,a)}function b(e,t,n){var a="";n=Math.min(e.length,n);for(var i=t;i<n;i++)a+=String.fromCharCode(e[i]);return a}function y(e,t,n,a){a||(B("boolean"==typeof n,"missing or invalid endian"),B(null!=t,"missing offset"),B(t+1<e.length,"Trying to read beyond buffer length"));var i,r=e.length;if(!(t>=r))return n?(i=e[t],t+1<r&&(i|=e[t+1]<<8)):(i=e[t]<<8,t+1<r&&(i|=e[t+1])),i}function h(e,t,n,a){a||(B("boolean"==typeof n,"missing or invalid endian"),B(null!=t,"missing offset"),B(t+3<e.length,"Trying to read beyond buffer length"));var i,r=e.length;if(!(t>=r))return n?(t+2<r&&(i=e[t+2]<<16),t+1<r&&(i|=e[t+1]<<8),i|=e[t],t+3<r&&(i+=e[t+3]<<24>>>0)):(t+1<r&&(i=e[t+1]<<16),t+2<r&&(i|=e[t+2]<<8),t+3<r&&(i|=e[t+3]),i+=e[t]<<24>>>0),i}function v(e,t,n,a){if(a||(B("boolean"==typeof n,"missing or invalid endian"),B(null!=t,"missing offset"),B(t+1<e.length,"Trying to read beyond buffer length")),!(t>=e.length)){var i=y(e,t,n,!0);return 32768&i?-1*(65535-i+1):i}}function E(e,t,n,a){if(a||(B("boolean"==typeof n,"missing or invalid endian"),B(null!=t,"missing offset"),B(t+3<e.length,"Trying to read beyond buffer length")),!(t>=e.length)){var i=h(e,t,n,!0);return 2147483648&i?-1*(4294967295-i+1):i}}function x(e,t,n,a){return a||(B("boolean"==typeof n,"missing or invalid endian"),B(t+3<e.length,"Trying to read beyond buffer length")),$.read(e,t,n,23,4)}function j(e,t,n,a){return a||(B("boolean"==typeof n,"missing or invalid endian"),B(t+7<e.length,"Trying to read beyond buffer length")),$.read(e,t,n,52,8)}function O(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+1<e.length,"trying to write beyond buffer length"),R(t,65535));var r=e.length;if(!(n>=r))for(var o=0,s=Math.min(r-n,2);o<s;o++)e[n+o]=(t&255<<8*(a?o:1-o))>>>8*(a?o:1-o)}function S(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+3<e.length,"trying to write beyond buffer length"),R(t,4294967295));var r=e.length;if(!(n>=r))for(var o=0,s=Math.min(r-n,4);o<s;o++)e[n+o]=t>>>8*(a?o:3-o)&255}function k(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+1<e.length,"Trying to write beyond buffer length"),L(t,32767,-32768)),n>=e.length||O(e,t>=0?t:65535+t+1,n,a,i)}function w(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+3<e.length,"Trying to write beyond buffer length"),L(t,2147483647,-2147483648)),n>=e.length||S(e,t>=0?t:4294967295+t+1,n,a,i)}function I(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+3<e.length,"Trying to write beyond buffer length"),q(t,34028234663852886e22,-34028234663852886e22)),n>=e.length||$.write(e,t,n,a,23,4)}function T(e,t,n,a,i){i||(B(null!=t,"missing value"),B("boolean"==typeof a,"missing or invalid endian"),B(null!=n,"missing offset"),B(n+7<e.length,"Trying to write beyond buffer length"),q(t,17976931348623157e292,-17976931348623157e292)),n>=e.length||$.write(e,t,n,a,52,8)}function C(e,t,n){return"number"!=typeof e?n:(e=~~e)>=t?t:e>=0||(e+=t)>=0?e:0}function M(e){return(e=~~Math.ceil(+e))<0?0:e}function A(e){return(Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)})(e)}function _(e){return e<16?"0"+e.toString(16):e.toString(16)}function F(e){for(var t=[],n=0;n<e.length;n++){var a=e.charCodeAt(n);if(a<=127)t.push(e.charCodeAt(n));else{var i=n;a>=55296&&a<=57343&&n++;for(var r=encodeURIComponent(e.slice(i,n+1)).substr(1).split("%"),o=0;o<r.length;o++)t.push(parseInt(r[o],16))}}return t}function D(e){return z.toByteArray(e)}function N(e,t,n,a){for(var i=0;i<a&&!(i+n>=t.length||i>=e.length);i++)t[i+n]=e[i];return i}function P(e){try{return decodeURIComponent(e)}catch(e){return String.fromCharCode(65533)}}function R(e,t){B("number"==typeof e,"cannot write a non-number as a number"),B(e>=0,"specified a negative value for writing an unsigned value"),B(e<=t,"value is larger than maximum value for type"),B(Math.floor(e)===e,"value has a fractional component")}function L(e,t,n){B("number"==typeof e,"cannot write a non-number as a number"),B(e<=t,"value larger than maximum allowed value"),B(e>=n,"value smaller than minimum allowed value"),B(Math.floor(e)===e,"value has a fractional component")}function q(e,t,n){B("number"==typeof e,"cannot write a non-number as a number"),B(e<=t,"value larger than maximum allowed value"),B(e>=n,"value smaller than minimum allowed value")}function B(e,t){if(!e)throw new Error(t||"Failed assertion")}var z=e("base64-js"),$=e("ieee754");n.Buffer=i,n.SlowBuffer=i,n.INSPECT_MAX_BYTES=50,i.poolSize=8192,i._useTypedArrays=function(){try{var e=new ArrayBuffer(0),t=new Uint8Array(e);return t.foo=function(){return 42},42===t.foo()&&"function"==typeof t.subarray}catch(e){return!1}}(),i.isEncoding=function(e){switch(String(e).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"binary":case"base64":case"raw":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}},i.isBuffer=function(e){return!(null==e||!e._isBuffer)},i.byteLength=function(e,t){var n;switch(e+="",t||"utf8"){case"hex":n=e.length/2;break;case"utf8":case"utf-8":n=F(e).length;break;case"ascii":case"binary":case"raw":n=e.length;break;case"base64":n=D(e).length;break;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":n=2*e.length;break;default:throw new Error("Unknown encoding")}return n},i.concat=function(e,t){if(B(A(e),"Usage: Buffer.concat(list, [totalLength])\nlist should be an Array."),0===e.length)return new i(0);if(1===e.length)return e[0];var n;if("number"!=typeof t)for(t=0,n=0;n<e.length;n++)t+=e[n].length;var a=new i(t),r=0;for(n=0;n<e.length;n++){var o=e[n];o.copy(a,r),r+=o.length}return a},i.prototype.write=function(e,t,n,a){if(isFinite(t))isFinite(n)||(a=n,n=void 0);else{var i=a;a=t,t=n,n=i}t=Number(t)||0;var r,o=this.length-t;switch(n?(n=Number(n))>o&&(n=o):n=o,a=String(a||"utf8").toLowerCase()){case"hex":r=d(this,e,t,n);break;case"utf8":case"utf-8":r=p(this,e,t,n);break;case"ascii":r=m(this,e,t,n);break;case"binary":r=function(e,t,n,a){return m(e,t,n,a)}(this,e,t,n);break;case"base64":r=f(this,e,t,n);break;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":r=g(this,e,t,n);break;default:throw new Error("Unknown encoding")}return r},i.prototype.toString=function(e,t,n){var a,i=this;if(e=String(e||"utf8").toLowerCase(),t=Number(t)||0,(n=void 0!==n?Number(n):n=i.length)===t)return"";switch(e){case"hex":a=function(e,t,n){var a=e.length;(!t||t<0)&&(t=0),(!n||n<0||n>a)&&(n=a);for(var i="",r=t;r<n;r++)i+=_(e[r]);return i}(i,t,n);break;case"utf8":case"utf-8":a=function(e,t,n){var a="",i="";n=Math.min(e.length,n);for(var r=t;r<n;r++)e[r]<=127?(a+=P(i)+String.fromCharCode(e[r]),i=""):i+="%"+e[r].toString(16);return a+P(i)}(i,t,n);break;case"ascii":a=b(i,t,n);break;case"binary":a=function(e,t,n){return b(e,t,n)}(i,t,n);break;case"base64":a=function(e,t,n){return 0===t&&n===e.length?z.fromByteArray(e):z.fromByteArray(e.slice(t,n))}(i,t,n);break;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":a=function(e,t,n){for(var a=e.slice(t,n),i="",r=0;r<a.length;r+=2)i+=String.fromCharCode(a[r]+256*a[r+1]);return i}(i,t,n);break;default:throw new Error("Unknown encoding")}return a},i.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}},i.prototype.copy=function(e,t,n,a){var r=this;if(n||(n=0),a||0===a||(a=this.length),t||(t=0),a!==n&&0!==e.length&&0!==r.length){B(a>=n,"sourceEnd < sourceStart"),B(t>=0&&t<e.length,"targetStart out of bounds"),B(n>=0&&n<r.length,"sourceStart out of bounds"),B(a>=0&&a<=r.length,"sourceEnd out of bounds"),a>this.length&&(a=this.length),e.length-t<a-n&&(a=e.length-t+n);var o=a-n;if(o<100||!i._useTypedArrays)for(var s=0;s<o;s++)e[s+t]=this[s+n];else e._set(this.subarray(n,n+o),t)}},i.prototype.slice=function(e,t){var n=this.length;if(e=C(e,n,0),t=C(t,n,n),i._useTypedArrays)return i._augment(this.subarray(e,t));for(var a=t-e,r=new i(a,void 0,!0),o=0;o<a;o++)r[o]=this[o+e];return r},i.prototype.get=function(e){return console.log(".get() is deprecated. Access using array indexes instead."),this.readUInt8(e)},i.prototype.set=function(e,t){return console.log(".set() is deprecated. Access using array indexes instead."),this.writeUInt8(e,t)},i.prototype.readUInt8=function(e,t){if(t||(B(null!=e,"missing offset"),B(e<this.length,"Trying to read beyond buffer length")),!(e>=this.length))return this[e]},i.prototype.readUInt16LE=function(e,t){return y(this,e,!0,t)},i.prototype.readUInt16BE=function(e,t){return y(this,e,!1,t)},i.prototype.readUInt32LE=function(e,t){return h(this,e,!0,t)},i.prototype.readUInt32BE=function(e,t){return h(this,e,!1,t)},i.prototype.readInt8=function(e,t){if(t||(B(null!=e,"missing offset"),B(e<this.length,"Trying to read beyond buffer length")),!(e>=this.length))return 128&this[e]?-1*(255-this[e]+1):this[e]},i.prototype.readInt16LE=function(e,t){return v(this,e,!0,t)},i.prototype.readInt16BE=function(e,t){return v(this,e,!1,t)},i.prototype.readInt32LE=function(e,t){return E(this,e,!0,t)},i.prototype.readInt32BE=function(e,t){return E(this,e,!1,t)},i.prototype.readFloatLE=function(e,t){return x(this,e,!0,t)},i.prototype.readFloatBE=function(e,t){return x(this,e,!1,t)},i.prototype.readDoubleLE=function(e,t){return j(this,e,!0,t)},i.prototype.readDoubleBE=function(e,t){return j(this,e,!1,t)},i.prototype.writeUInt8=function(e,t,n){n||(B(null!=e,"missing value"),B(null!=t,"missing offset"),B(t<this.length,"trying to write beyond buffer length"),R(e,255)),t>=this.length||(this[t]=e)},i.prototype.writeUInt16LE=function(e,t,n){O(this,e,t,!0,n)},i.prototype.writeUInt16BE=function(e,t,n){O(this,e,t,!1,n)},i.prototype.writeUInt32LE=function(e,t,n){S(this,e,t,!0,n)},i.prototype.writeUInt32BE=function(e,t,n){S(this,e,t,!1,n)},i.prototype.writeInt8=function(e,t,n){n||(B(null!=e,"missing value"),B(null!=t,"missing offset"),B(t<this.length,"Trying to write beyond buffer length"),L(e,127,-128)),t>=this.length||(e>=0?this.writeUInt8(e,t,n):this.writeUInt8(255+e+1,t,n))},i.prototype.writeInt16LE=function(e,t,n){k(this,e,t,!0,n)},i.prototype.writeInt16BE=function(e,t,n){k(this,e,t,!1,n)},i.prototype.writeInt32LE=function(e,t,n){w(this,e,t,!0,n)},i.prototype.writeInt32BE=function(e,t,n){w(this,e,t,!1,n)},i.prototype.writeFloatLE=function(e,t,n){I(this,e,t,!0,n)},i.prototype.writeFloatBE=function(e,t,n){I(this,e,t,!1,n)},i.prototype.writeDoubleLE=function(e,t,n){T(this,e,t,!0,n)},i.prototype.writeDoubleBE=function(e,t,n){T(this,e,t,!1,n)},i.prototype.fill=function(e,t,n){if(e||(e=0),t||(t=0),n||(n=this.length),"string"==typeof e&&(e=e.charCodeAt(0)),B("number"==typeof e&&!isNaN(e),"value is not a number"),B(n>=t,"end < start"),n!==t&&0!==this.length){B(t>=0&&t<this.length,"start out of bounds"),B(n>=0&&n<=this.length,"end out of bounds");for(var a=t;a<n;a++)this[a]=e}},i.prototype.inspect=function(){for(var e=[],t=this.length,a=0;a<t;a++)if(e[a]=_(this[a]),a===n.INSPECT_MAX_BYTES){e[a+1]="...";break}return"<Buffer "+e.join(" ")+">"},i.prototype.toArrayBuffer=function(){if("undefined"!=typeof Uint8Array){if(i._useTypedArrays)return new i(this).buffer;for(var e=new Uint8Array(this.length),t=0,n=e.length;t<n;t+=1)e[t]=this[t];return e.buffer}throw new Error("Buffer.toArrayBuffer not supported in this browser")};var V=i.prototype;i._augment=function(e){return e._isBuffer=!0,e._get=e.get,e._set=e.set,e.get=V.get,e.set=V.set,e.write=V.write,e.toString=V.toString,e.toLocaleString=V.toString,e.toJSON=V.toJSON,e.copy=V.copy,e.slice=V.slice,e.readUInt8=V.readUInt8,e.readUInt16LE=V.readUInt16LE,e.readUInt16BE=V.readUInt16BE,e.readUInt32LE=V.readUInt32LE,e.readUInt32BE=V.readUInt32BE,e.readInt8=V.readInt8,e.readInt16LE=V.readInt16LE,e.readInt16BE=V.readInt16BE,e.readInt32LE=V.readInt32LE,e.readInt32BE=V.readInt32BE,e.readFloatLE=V.readFloatLE,e.readFloatBE=V.readFloatBE,e.readDoubleLE=V.readDoubleLE,e.readDoubleBE=V.readDoubleBE,e.writeUInt8=V.writeUInt8,e.writeUInt16LE=V.writeUInt16LE,e.writeUInt16BE=V.writeUInt16BE,e.writeUInt32LE=V.writeUInt32LE,e.writeUInt32BE=V.writeUInt32BE,e.writeInt8=V.writeInt8,e.writeInt16LE=V.writeInt16LE,e.writeInt16BE=V.writeInt16BE,e.writeInt32LE=V.writeInt32LE,e.writeInt32BE=V.writeInt32BE,e.writeFloatLE=V.writeFloatLE,e.writeFloatBE=V.writeFloatBE,e.writeDoubleLE=V.writeDoubleLE,e.writeDoubleBE=V.writeDoubleBE,e.fill=V.fill,e.inspect=V.inspect,e.toArrayBuffer=V.toArrayBuffer,e}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/buffer/index.js","/node_modules/gulp-browserify/node_modules/buffer")},{"base64-js":2,buffer:3,ieee754:11,lYpoI2:10}],4:[function(e,t,n){(function(n,a,i,r,o,s,l,c,u){i=e("buffer").Buffer;var d=4,p=new i(d);p.fill(0);var m=8;t.exports={hash:function(e,t,n,a){return i.isBuffer(e)||(e=new i(e)),function(e,t,n){for(var a=new i(t),r=n?a.writeInt32BE:a.writeInt32LE,o=0;o<e.length;o++)r.call(a,e[o],4*o,!0);return a}(t(function(e,t){if(e.length%d!=0){var n=e.length+(d-e.length%d);e=i.concat([e,p],n)}for(var a=[],r=t?e.readInt32BE:e.readInt32LE,o=0;o<e.length;o+=d)a.push(r.call(e,o));return a}(e,a),e.length*m),n,a)}}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/helpers.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{buffer:3,lYpoI2:10}],5:[function(e,t,n){(function(t,a,i,r,o,s,l,c,u){function d(e,t){var n=b[e=e||"sha1"],a=[];return n||p("algorithm:",e,"is not yet supported"),{update:function(e){return i.isBuffer(e)||(e=new i(e)),a.push(e),e.length,this},digest:function(e){var r=i.concat(a),o=t?function(e,t,n){i.isBuffer(t)||(t=new i(t)),i.isBuffer(n)||(n=new i(n)),t.length>y?t=e(t):t.length<y&&(t=i.concat([t,h],y));for(var a=new i(y),r=new i(y),o=0;o<y;o++)a[o]=54^t[o],r[o]=92^t[o];var s=e(i.concat([a,n]));return e(i.concat([r,s]))}(n,t,r):n(r);return a=null,e?o.toString(e):o}}}function p(){var e=[].slice.call(arguments).join(" ");throw new Error([e,"we accept pull requests","http://github.com/dominictarr/crypto-browserify"].join("\n"))}i=e("buffer").Buffer;var m=e("./sha"),f=e("./sha256"),g=e("./rng"),b={sha1:m,sha256:f,md5:e("./md5")},y=64,h=new i(y);h.fill(0),n.createHash=function(e){return d(e)},n.createHmac=function(e,t){return d(e,t)},n.randomBytes=function(e,t){if(!t||!t.call)return new i(g(e));try{t.call(this,void 0,new i(g(e)))}catch(e){t(e)}},function(e,t){for(var n in e)t(e[n],n)}(["createCredentials","createCipher","createCipheriv","createDecipher","createDecipheriv","createSign","createVerify","createDiffieHellman","pbkdf2"],(function(e){n[e]=function(){p("sorry,",e,"is not implemented yet")}}))}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/index.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{"./md5":6,"./rng":7,"./sha":8,"./sha256":9,buffer:3,lYpoI2:10}],6:[function(e,t,n){(function(n,a,i,r,o,s,l,c,u){function d(e,t){e[t>>5]|=128<<t%32,e[14+(t+64>>>9<<4)]=t;for(var n=1732584193,a=-271733879,i=-1732584194,r=271733878,o=0;o<e.length;o+=16){var s=n,l=a,c=i,u=r;n=m(n,a,i,r,e[o+0],7,-680876936),r=m(r,n,a,i,e[o+1],12,-389564586),i=m(i,r,n,a,e[o+2],17,606105819),a=m(a,i,r,n,e[o+3],22,-1044525330),n=m(n,a,i,r,e[o+4],7,-176418897),r=m(r,n,a,i,e[o+5],12,1200080426),i=m(i,r,n,a,e[o+6],17,-1473231341),a=m(a,i,r,n,e[o+7],22,-45705983),n=m(n,a,i,r,e[o+8],7,1770035416),r=m(r,n,a,i,e[o+9],12,-1958414417),i=m(i,r,n,a,e[o+10],17,-42063),a=m(a,i,r,n,e[o+11],22,-1990404162),n=m(n,a,i,r,e[o+12],7,1804603682),r=m(r,n,a,i,e[o+13],12,-40341101),i=m(i,r,n,a,e[o+14],17,-1502002290),n=f(n,a=m(a,i,r,n,e[o+15],22,1236535329),i,r,e[o+1],5,-165796510),r=f(r,n,a,i,e[o+6],9,-1069501632),i=f(i,r,n,a,e[o+11],14,643717713),a=f(a,i,r,n,e[o+0],20,-373897302),n=f(n,a,i,r,e[o+5],5,-701558691),r=f(r,n,a,i,e[o+10],9,38016083),i=f(i,r,n,a,e[o+15],14,-660478335),a=f(a,i,r,n,e[o+4],20,-405537848),n=f(n,a,i,r,e[o+9],5,568446438),r=f(r,n,a,i,e[o+14],9,-1019803690),i=f(i,r,n,a,e[o+3],14,-187363961),a=f(a,i,r,n,e[o+8],20,1163531501),n=f(n,a,i,r,e[o+13],5,-1444681467),r=f(r,n,a,i,e[o+2],9,-51403784),i=f(i,r,n,a,e[o+7],14,1735328473),n=g(n,a=f(a,i,r,n,e[o+12],20,-1926607734),i,r,e[o+5],4,-378558),r=g(r,n,a,i,e[o+8],11,-2022574463),i=g(i,r,n,a,e[o+11],16,1839030562),a=g(a,i,r,n,e[o+14],23,-35309556),n=g(n,a,i,r,e[o+1],4,-1530992060),r=g(r,n,a,i,e[o+4],11,1272893353),i=g(i,r,n,a,e[o+7],16,-155497632),a=g(a,i,r,n,e[o+10],23,-1094730640),n=g(n,a,i,r,e[o+13],4,681279174),r=g(r,n,a,i,e[o+0],11,-358537222),i=g(i,r,n,a,e[o+3],16,-722521979),a=g(a,i,r,n,e[o+6],23,76029189),n=g(n,a,i,r,e[o+9],4,-640364487),r=g(r,n,a,i,e[o+12],11,-421815835),i=g(i,r,n,a,e[o+15],16,530742520),n=b(n,a=g(a,i,r,n,e[o+2],23,-995338651),i,r,e[o+0],6,-198630844),r=b(r,n,a,i,e[o+7],10,1126891415),i=b(i,r,n,a,e[o+14],15,-1416354905),a=b(a,i,r,n,e[o+5],21,-57434055),n=b(n,a,i,r,e[o+12],6,1700485571),r=b(r,n,a,i,e[o+3],10,-1894986606),i=b(i,r,n,a,e[o+10],15,-1051523),a=b(a,i,r,n,e[o+1],21,-2054922799),n=b(n,a,i,r,e[o+8],6,1873313359),r=b(r,n,a,i,e[o+15],10,-30611744),i=b(i,r,n,a,e[o+6],15,-1560198380),a=b(a,i,r,n,e[o+13],21,1309151649),n=b(n,a,i,r,e[o+4],6,-145523070),r=b(r,n,a,i,e[o+11],10,-1120210379),i=b(i,r,n,a,e[o+2],15,718787259),a=b(a,i,r,n,e[o+9],21,-343485551),n=y(n,s),a=y(a,l),i=y(i,c),r=y(r,u)}return Array(n,a,i,r)}function p(e,t,n,a,i,r){return y(function(e,t){return e<<t|e>>>32-t}(y(y(t,e),y(a,r)),i),n)}function m(e,t,n,a,i,r,o){return p(t&n|~t&a,e,t,i,r,o)}function f(e,t,n,a,i,r,o){return p(t&a|n&~a,e,t,i,r,o)}function g(e,t,n,a,i,r,o){return p(t^n^a,e,t,i,r,o)}function b(e,t,n,a,i,r,o){return p(n^(t|~a),e,t,i,r,o)}function y(e,t){var n=(65535&e)+(65535&t);return(e>>16)+(t>>16)+(n>>16)<<16|65535&n}var h=e("./helpers");t.exports=function(e){return h.hash(e,d,16)}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/md5.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{"./helpers":4,buffer:3,lYpoI2:10}],7:[function(e,t,n){(function(e,n,a,i,r,o,s,l,c){!function(){var e,n;e=function(e){for(var t,n=new Array(e),a=0;a<e;a++)0==(3&a)&&(t=4294967296*Math.random()),n[a]=t>>>((3&a)<<3)&255;return n},this.crypto&&crypto.getRandomValues&&(n=function(e){var t=new Uint8Array(e);return crypto.getRandomValues(t),t}),t.exports=n||e}()}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/rng.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{buffer:3,lYpoI2:10}],8:[function(e,t,n){(function(n,a,i,r,o,s,l,c,u){function d(e,t){e[t>>5]|=128<<24-t%32,e[15+(t+64>>9<<4)]=t;for(var n=Array(80),a=1732584193,i=-271733879,r=-1732584194,o=271733878,s=-1009589776,l=0;l<e.length;l+=16){for(var c=a,u=i,d=r,b=o,y=s,h=0;h<80;h++){n[h]=h<16?e[l+h]:g(n[h-3]^n[h-8]^n[h-14]^n[h-16],1);var v=f(f(g(a,5),p(h,i,r,o)),f(f(s,n[h]),m(h)));s=o,o=r,r=g(i,30),i=a,a=v}a=f(a,c),i=f(i,u),r=f(r,d),o=f(o,b),s=f(s,y)}return Array(a,i,r,o,s)}function p(e,t,n,a){return e<20?t&n|~t&a:e<40?t^n^a:e<60?t&n|t&a|n&a:t^n^a}function m(e){return e<20?1518500249:e<40?1859775393:e<60?-1894007588:-899497514}function f(e,t){var n=(65535&e)+(65535&t);return(e>>16)+(t>>16)+(n>>16)<<16|65535&n}function g(e,t){return e<<t|e>>>32-t}var b=e("./helpers");t.exports=function(e){return b.hash(e,d,20,!0)}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/sha.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{"./helpers":4,buffer:3,lYpoI2:10}],9:[function(e,t,n){(function(n,a,i,r,o,s,l,c,u){var d=e("./helpers"),p=function(e,t){var n=(65535&e)+(65535&t);return(e>>16)+(t>>16)+(n>>16)<<16|65535&n},m=function(e,t){return e>>>t|e<<32-t},f=function(e,t){return e>>>t},g=function(e,t,n){return e&t^~e&n},b=function(e,t,n){return e&t^e&n^t&n},y=function(e){return m(e,2)^m(e,13)^m(e,22)},h=function(e){return m(e,6)^m(e,11)^m(e,25)},v=function(e){return m(e,7)^m(e,18)^f(e,3)},E=function(e){return m(e,17)^m(e,19)^f(e,10)},x=function(e,t){var n,a,i,r,o,s,l,c,u,d,m=new Array(1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298),f=new Array(1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225),x=new Array(64);e[t>>5]|=128<<24-t%32,e[15+(t+64>>9<<4)]=t;for(var j=0;j<e.length;j+=16){n=f[0],a=f[1],i=f[2],r=f[3],o=f[4],s=f[5],l=f[6],c=f[7];for(var O=0;O<64;O++)x[O]=O<16?e[O+j]:p(p(p(E(x[O-2]),x[O-7]),v(x[O-15])),x[O-16]),u=p(p(p(p(c,h(o)),g(o,s,l)),m[O]),x[O]),d=p(y(n),b(n,a,i)),c=l,l=s,s=o,o=p(r,u),r=i,i=a,a=n,n=p(u,d);f[0]=p(n,f[0]),f[1]=p(a,f[1]),f[2]=p(i,f[2]),f[3]=p(r,f[3]),f[4]=p(o,f[4]),f[5]=p(s,f[5]),f[6]=p(l,f[6]),f[7]=p(c,f[7])}return f};t.exports=function(e){return d.hash(e,x,32,!0)}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/crypto-browserify/sha256.js","/node_modules/gulp-browserify/node_modules/crypto-browserify")},{"./helpers":4,buffer:3,lYpoI2:10}],10:[function(e,t,n){(function(e,n,a,i,r,o,s,l,c){function u(){}(e=t.exports={}).nextTick=function(){var e="undefined"!=typeof window&&window.setImmediate,t="undefined"!=typeof window&&window.postMessage&&window.addEventListener;if(e)return function(e){return window.setImmediate(e)};if(t){var n=[];return window.addEventListener("message",(function(e){var t=e.source;(t===window||null===t)&&"process-tick"===e.data&&(e.stopPropagation(),n.length>0)&&n.shift()()}),!0),function(e){n.push(e),window.postMessage("process-tick","*")}}return function(e){setTimeout(e,0)}}(),e.title="browser",e.browser=!0,e.env={},e.argv=[],e.on=u,e.addListener=u,e.once=u,e.off=u,e.removeListener=u,e.removeAllListeners=u,e.emit=u,e.binding=function(e){throw new Error("process.binding is not supported")},e.cwd=function(){return"/"},e.chdir=function(e){throw new Error("process.chdir is not supported")}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/gulp-browserify/node_modules/process/browser.js","/node_modules/gulp-browserify/node_modules/process")},{buffer:3,lYpoI2:10}],11:[function(e,t,n){(function(e,t,a,i,r,o,s,l,c){n.read=function(e,t,n,a,i){var r,o,s=8*i-a-1,l=(1<<s)-1,c=l>>1,u=-7,d=n?i-1:0,p=n?-1:1,m=e[t+d];for(d+=p,r=m&(1<<-u)-1,m>>=-u,u+=s;u>0;r=256*r+e[t+d],d+=p,u-=8);for(o=r&(1<<-u)-1,r>>=-u,u+=a;u>0;o=256*o+e[t+d],d+=p,u-=8);if(0===r)r=1-c;else{if(r===l)return o?NaN:1/0*(m?-1:1);o+=Math.pow(2,a),r-=c}return(m?-1:1)*o*Math.pow(2,r-a)},n.write=function(e,t,n,a,i,r){var o,s,l,c=8*r-i-1,u=(1<<c)-1,d=u>>1,p=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,m=a?0:r-1,f=a?1:-1,g=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(s=isNaN(t)?1:0,o=u):(o=Math.floor(Math.log(t)/Math.LN2),t*(l=Math.pow(2,-o))<1&&(o--,l*=2),(t+=o+d>=1?p/l:p*Math.pow(2,1-d))*l>=2&&(o++,l/=2),o+d>=u?(s=0,o=u):o+d>=1?(s=(t*l-1)*Math.pow(2,i),o+=d):(s=t*Math.pow(2,d-1)*Math.pow(2,i),o=0));i>=8;e[n+m]=255&s,m+=f,s/=256,i-=8);for(o=o<<i|s,c+=i;c>0;e[n+m]=255&o,m+=f,o/=256,c-=8);e[n+m-f]|=128*g}}).call(this,e("lYpoI2"),"undefined"!=typeof self?self:"undefined"!=typeof window?window:{},e("buffer").Buffer,arguments[3],arguments[4],arguments[5],arguments[6],"/node_modules/ieee754/index.js","/node_modules/ieee754")},{buffer:3,lYpoI2:10}]},{},[1])(1)},,function(e,t,n){e.exports=n.p+"94cccf20036d014924e63d4d595e88e1.svg"},function(e,t,n){var a,i,r,o;
/*!
 * mustache.js - Logic-less {{mustache}} templates with JavaScript
 * http://github.com/janl/mustache.js
 */o=function(e){var t=Object.prototype.toString,n=Array.isArray||function(e){return"[object Array]"===t.call(e)};function a(e){return"function"==typeof e}function i(e){return e.replace(/[\-\[\]{}()*+?.,\\\^$|#\s]/g,"\\$&")}function r(e,t){return null!=e&&"object"==typeof e&&t in e}var o=RegExp.prototype.test,s=/\S/;var l={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;","/":"&#x2F;","`":"&#x60;","=":"&#x3D;"},c=/\s*/,u=/\s+/,d=/\s*=/,p=/\s*\}/,m=/#|\^|\/|>|\{|&|=|!/;function f(e){this.string=e,this.tail=e,this.pos=0}function g(e,t){this.view=e,this.cache={".":this.view},this.parent=t}function b(){this.cache={}}f.prototype.eos=function(){return""===this.tail},f.prototype.scan=function(e){var t=this.tail.match(e);if(!t||0!==t.index)return"";var n=t[0];return this.tail=this.tail.substring(n.length),this.pos+=n.length,n},f.prototype.scanUntil=function(e){var t,n=this.tail.search(e);switch(n){case-1:t=this.tail,this.tail="";break;case 0:t="";break;default:t=this.tail.substring(0,n),this.tail=this.tail.substring(n)}return this.pos+=t.length,t},g.prototype.push=function(e){return new g(e,this)},g.prototype.lookup=function(e){var t,n=this.cache;if(n.hasOwnProperty(e))t=n[e];else{for(var i,o,s=this,l=!1;s;){if(e.indexOf(".")>0)for(t=s.view,i=e.split("."),o=0;null!=t&&o<i.length;)o===i.length-1&&(l=r(t,i[o])),t=t[i[o++]];else t=s.view[e],l=r(s.view,e);if(l)break;s=s.parent}n[e]=t}return a(t)&&(t=t.call(this.view)),t},b.prototype.clearCache=function(){this.cache={}},b.prototype.parse=function(t,a){var r=this.cache,l=r[t];return null==l&&(l=r[t]=function(t,a){if(!t)return[];var r,l,g,b,y=[],h=[],v=[],E=!1,x=!1;function j(){if(E&&!x)for(;v.length;)delete h[v.pop()];else v=[];E=!1,x=!1}function O(e){if("string"==typeof e&&(e=e.split(u,2)),!n(e)||2!==e.length)throw new Error("Invalid tags: "+e);r=new RegExp(i(e[0])+"\\s*"),l=new RegExp("\\s*"+i(e[1])),g=new RegExp("\\s*"+i("}"+e[1]))}O(a||e.tags);for(var S,k,w,I,T,C,M=new f(t);!M.eos();){if(S=M.pos,w=M.scanUntil(r))for(var A=0,_=w.length;A<_;++A)b=I=w.charAt(A),function(e,t){return o.call(e,t)}(s,b)?x=!0:v.push(h.length),h.push(["text",I,S,S+1]),S+=1,"\n"===I&&j();if(!M.scan(r))break;if(E=!0,k=M.scan(m)||"name",M.scan(c),"="===k?(w=M.scanUntil(d),M.scan(d),M.scanUntil(l)):"{"===k?(w=M.scanUntil(g),M.scan(p),M.scanUntil(l),k="&"):w=M.scanUntil(l),!M.scan(l))throw new Error("Unclosed tag at "+M.pos);if(T=[k,w,S,M.pos],h.push(T),"#"===k||"^"===k)y.push(T);else if("/"===k){if(!(C=y.pop()))throw new Error('Unopened section "'+w+'" at '+S);if(C[1]!==w)throw new Error('Unclosed section "'+C[1]+'" at '+S)}else"name"===k||"{"===k||"&"===k?x=!0:"="===k&&O(w)}if(C=y.pop())throw new Error('Unclosed section "'+C[1]+'" at '+M.pos);return function(e){for(var t,n=[],a=n,i=[],r=0,o=e.length;r<o;++r)switch((t=e[r])[0]){case"#":case"^":a.push(t),i.push(t),a=t[4]=[];break;case"/":i.pop()[5]=t[2],a=i.length>0?i[i.length-1][4]:n;break;default:a.push(t)}return n}(function(e){for(var t,n,a=[],i=0,r=e.length;i<r;++i)(t=e[i])&&("text"===t[0]&&n&&"text"===n[0]?(n[1]+=t[1],n[3]=t[3]):(a.push(t),n=t));return a}(h))}(t,a)),l},b.prototype.render=function(e,t,n){var a=this.parse(e),i=t instanceof g?t:new g(t);return this.renderTokens(a,i,n,e)},b.prototype.renderTokens=function(e,t,n,a){for(var i,r,o,s="",l=0,c=e.length;l<c;++l)o=void 0,"#"===(r=(i=e[l])[0])?o=this.renderSection(i,t,n,a):"^"===r?o=this.renderInverted(i,t,n,a):">"===r?o=this.renderPartial(i,t,n,a):"&"===r?o=this.unescapedValue(i,t):"name"===r?o=this.escapedValue(i,t):"text"===r&&(o=this.rawValue(i)),void 0!==o&&(s+=o);return s},b.prototype.renderSection=function(e,t,i,r){var o=this,s="",l=t.lookup(e[1]);if(l){if(n(l))for(var c=0,u=l.length;c<u;++c)s+=this.renderTokens(e[4],t.push(l[c]),i,r);else if("object"==typeof l||"string"==typeof l||"number"==typeof l)s+=this.renderTokens(e[4],t.push(l),i,r);else if(a(l)){if("string"!=typeof r)throw new Error("Cannot use higher-order sections without the original template");null!=(l=l.call(t.view,r.slice(e[3],e[5]),(function(e){return o.render(e,t,i)})))&&(s+=l)}else s+=this.renderTokens(e[4],t,i,r);return s}},b.prototype.renderInverted=function(e,t,a,i){var r=t.lookup(e[1]);if(!r||n(r)&&0===r.length)return this.renderTokens(e[4],t,a,i)},b.prototype.renderPartial=function(e,t,n){if(n){var i=a(n)?n(e[1]):n[e[1]];return null!=i?this.renderTokens(this.parse(i),t,n,i):void 0}},b.prototype.unescapedValue=function(e,t){var n=t.lookup(e[1]);if(null!=n)return n},b.prototype.escapedValue=function(t,n){var a=n.lookup(t[1]);if(null!=a)return e.escape(a)},b.prototype.rawValue=function(e){return e[1]},e.name="mustache.js",e.version="2.3.2",e.tags=["{{","}}"];var y=new b;return e.clearCache=function(){return y.clearCache()},e.parse=function(e,t){return y.parse(e,t)},e.render=function(e,t,a){if("string"!=typeof e)throw new TypeError('Invalid template! Template should be a "string" but "'+(n(i=e)?"array":typeof i)+'" was given as the first argument for mustache#render(template, view, partials)');var i;return y.render(e,t,a)},e.to_html=function(t,n,i,r){var o=e.render(t,n,i);if(!a(r))return o;r(o)},e.escape=function(e){return String(e).replace(/[&<>"'`=\/]/g,(function(e){return l[e]}))},e.Scanner=f,e.Context=g,e.Writer=b,e},t&&"string"!=typeof t.nodeName?o(t):(i=[t],void 0===(r="function"==typeof(a=o)?a.apply(t,i):a)||(e.exports=r))},,,function(e,t,n){"use strict";n.d(t,"b",(function(){return ba})),n.d(t,"a",(function(){return ya}));var a=n(2),i=n.n(a),r=n(171),o=n(1069),s=n(261),l=n(144),c=n(41),u=n.n(c),d=n(40),p=(n(21),n(220)),m=n(8),f=n(952),g=n(42),b=n(247),y=n(115),h=n(165),v=n(188),E=n(906),x=n(217),j=n(289);const O=()=>{const{closeFlyout:e}=Object(r.c)(),{eventId:t,browserFields:n,dataFormattedForFieldBrowser:o,scopeId:s}=Object(l.b)(),c=Object(a.useMemo)((()=>{const e=Object(g.find)({field:v.o,category:"kibana"},o);return e&&Object(x.b)({eventId:t,contextId:s,scopeId:s,browserFields:n||{},item:e})}),[n,o,t,s]);return c&&(u=c)&&Array.isArray(u.values)?i.a.createElement(h.c,{data:{field:v.o,value:c.values[0]},mode:b.b.HOVER_RIGHT,triggerId:j.b.DEFAULT,visibleCellActions:5,sourcererScopeId:Object(y.getSourcererScopeId)(s),metadata:{scopeId:s}},i.a.createElement(E.a,{eventId:t,contextId:s,enrichedFieldInfo:c,scopeId:s,handleOnEventClosed:e})):null;var u};O.displayName="DocumentStatus";var S=n(309),k=n(476),w=n(155),I=n(1063);const T=()=>({promptContextId:void 0});var C=n(129),M=n(5);const A=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.expandDetailButton",{defaultMessage:"Expand details"}),_=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.collapseDetailButton",{defaultMessage:"Collapse details"}),F=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.headerTitle",{defaultMessage:"Event details"}),D=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.severityTitle",{defaultMessage:"Severity"}),N=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.riskScoreTitle",{defaultMessage:"Risk score"}),P=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.ruleSummaryText",{defaultMessage:"Show rule summary"}),R=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.alertReasonDetailsText",{defaultMessage:"Show full reason"}),L=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.aboutTitle",{defaultMessage:"About"}),q=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.ruleDescriptionTitle",{defaultMessage:"Rule description"}),B=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.previewRuleDetailsText",{defaultMessage:"Preview rule details"}),z=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.previewAlertReasonDetailsText",{defaultMessage:"Preview alert reason"}),$=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.documentDescriptionTitle",{defaultMessage:"Document description"}),V=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.alertReasonTitle",{defaultMessage:"Alert reason"}),U=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.documentReasonTitle",{defaultMessage:"Document reason"}),G=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.investigationSectionTitle",{defaultMessage:"Investigation"}),H=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.highlightedFieldsTitle",{defaultMessage:"Highlighted fields"}),W=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.highlightedFields.fieldColumn",{defaultMessage:"Field"}),Q=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.highlightedFields.valueColumn",{defaultMessage:"Value"}),Y=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.entitiesTitle",{defaultMessage:"Entities"}),K=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.entitiesNoDataMessage",{defaultMessage:"Host and user information are unavailable for this alert"}),X=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.threatIntelligenceTitle",{defaultMessage:"Threat intelligence"}),J=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.insightsTitle",{defaultMessage:"Insights"}),Z=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlationsTitle",{defaultMessage:"Correlations"}),ee=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.correlations.error",{defaultMessage:"No correlations data available"}),te=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.prevalenceTitle",{defaultMessage:"Prevalence"}),ne=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.prevalenceNoData",{defaultMessage:"No prevalence data available."}),ae=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab.threatIntelligence.threatMatch",{defaultMessage:"threat match detected"}),ie=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab.threatIntelligence.threatMatches",{defaultMessage:"threat matches detected"}),re=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab.threatIntelligence.threatEnrichment",{defaultMessage:"field enriched with threat intelligence"}),oe=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab.threatIntelligence.threatEnrichments",{defaultMessage:"fields enriched with threat intelligence"}),se=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab.prevalenceRowText",{defaultMessage:"is uncommon"}),le=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.visualizationsTitle",{defaultMessage:"Visualizations"}),ce=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.analyzerPreviewTitle",{defaultMessage:"Analyzer preview"}),ue=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.share",{defaultMessage:"Share Alert"}),de=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.investigationGuideTitle",{defaultMessage:"Investigation guide"}),pe=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.investigationGuideButton",{defaultMessage:"Show investigation guide"}),me=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.investigationGuideNoData",{defaultMessage:"There’s no investigation guide for this rule."}),fe=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionPreview.title",{defaultMessage:"Session viewer preview"}),ge=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionPreview.processText",{defaultMessage:"started"}),be=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionPreview.timeText",{defaultMessage:"at"}),ye=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionPreview.ruleText",{defaultMessage:"with rule"}),he=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.sessionPreview.commandText",{defaultMessage:"by"}),ve=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.responseSectionTitle",{defaultMessage:"Response"}),Ee=M.i18n.translate("xpack.securitySolution.flyout.response.empty",{defaultMessage:"There are no response actions defined for this event."}),xe=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.technicalPreviewTitle",{defaultMessage:"Technical preview"}),je=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.technicalPreviewMessage",{defaultMessage:"This functionality is in technical preview and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."});var Oe=n(329),Se=n(191),ke=n(322);const we=(ke.c,ke.a,"securitySolutionDocumentDetailsFlyoutInvestigationSection"),Ie=(ke.c,ke.a,"securitySolutionDocumentDetailsFlyoutInvestigationGuide"),Te=`${Ie}Button`,Ce=`${Ie}Loading`,Me=`${Ie}NoData`,Ae="securitySolutionDocumentDetailsFlyoutInsightsEntities",_e=`${Ae}NoData`,Fe="securitySolutionDocumentDetailsFlyoutEntitiesUserOverview",De=`${Fe}Link`,Ne=`${Fe}Domain`,Pe=`${Fe}LastSeen`,Re=`${Fe}RiskLevel`,Le="securitySolutionDocumentDetailsFlyoutEntitiesHostOverview",qe=`${Le}Link`,Be=`${Le}OsFamily`,ze=`${Le}LastSeen`,$e=`${Le}RiskLevel`,Ve="securitySolutionDocumentDetailsFlyoutTechnicalPreviewIcon",Ue="securitySolutionDocumentDetailsFlyoutInsightsThreatIntelligence",Ge="securitySolutionDocumentDetailsFlyoutInsightsCorrelations",He="securitySolutionDocumentDetailsFlyoutInsightsPrevalence",We="securitySolutionDocumentDetailsAnalyzerPreview",Qe="securitySolutionDocumentDetailsSessionPreview",Ye=(ke.c,ke.a,`${Se.A}Empty`),Ke=e=>"low"===e||"medium"===e||"high"===e||"critical"===e,Xe=Object(a.memo)((()=>{const{getFieldsData:e,scopeId:t}=Object(l.b)(),n=e(C.U);if(!n)return null;let a;if("string"==typeof n&&Ke(n))a=n;else{if(!(Array.isArray(n)&&n.length>0&&Ke(n[0])))return null;a=n[0]}return i.a.createElement(d.EuiFlexGroup,{alignItems:"center",direction:"row",gutterSize:"xs"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiTitle,{size:"xxs","data-test-subj":"securitySolutionAlertDetailsFlyoutHeaderSeverityTitle"},i.a.createElement("h5",null,`${D}:`))),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(h.c,{data:{field:C.U,value:a},mode:b.b.HOVER_RIGHT,triggerId:j.b.DEFAULT,visibleCellActions:5,sourcererScopeId:Object(y.getSourcererScopeId)(t),metadata:{scopeId:t}},i.a.createElement(Oe.a,{value:a}))))}));Xe.displayName="DocumentSeverity";const Je=Object(a.memo)((()=>{const{getFieldsData:e}=Object(l.b)(),t=e(C.q);if(!t)return null;let n;if("string"==typeof t)n=t;else{if(!(Array.isArray(t)&&t.length>0))return null;n=t[0]}return i.a.createElement(d.EuiFlexGroup,{alignItems:"center",direction:"row",gutterSize:"xs"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiTitle,{size:"xxs","data-test-subj":"securitySolutionAlertDetailsFlyoutHeaderRiskScoreTitle"},i.a.createElement("h5",null,`${N}:`))),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement("span",{"data-test-subj":"securitySolutionAlertDetailsFlyoutHeaderRiskScoreValue"},n)))}));Je.displayName="RiskScore";var Ze=n(186),et=n(132),tt=n(1383);const nt=({alertUrl:e})=>i.a.createElement(d.EuiCopy,{textToCopy:e},(t=>i.a.createElement(d.EuiButtonEmpty,{onClick:()=>{t();const n=new URLSearchParams(window.location.search),a=`${e}&${tt.a}=${n.get(tt.a)}`;Object(d.copyToClipboard)(a)},iconType:"share","data-test-subj":"securitySolutionAlertDetailsFlyoutHeaderShareButton"},ue)));nt.displayName="ShareButton";const at=Object(a.memo)((({flyoutIsExpandable:e})=>{const{dataFormattedForFieldBrowser:t,eventId:n,indexName:r}=Object(l.b)(),{isAlert:o,ruleName:s,timestamp:c}=Object(Ze.b)(t),u=Object(f.a)({_id:n,_index:r,timestamp:c}),g=o&&u,{showAssistant:b,promptContextId:y}=(({dataFormattedForFieldBrowser:e,isAlert:t})=>{const{hasAssistantPrivilege:n}=Object(S.a)(),i=n?p.j:T,r=Object(a.useCallback)((async()=>Object(k.d)(null!=e?e:[])),[e]),{promptContextId:o}=i(t?"alert":"event",t?w.e:w.i,t?Object(w.d)(w.A):Object(w.h)(w.A),r,null,t?I.a[I.b].suggestedUserPrompt:I.a[I.d].suggestedUserPrompt,t?w.f:w.j);return{showAssistant:n&&null!==o,promptContextId:o||""}})({dataFormattedForFieldBrowser:t,isAlert:o});return i.a.createElement(i.a.Fragment,null,(g||b)&&i.a.createElement(it,{direction:"row",justifyContent:"flexEnd",gutterSize:"none",$_css:e?"-44px":"-28px"},b&&i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(p.g,{conversationId:o?w.e:w.i,promptContextId:y})),g&&i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(nt,{alertUrl:u}))),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(d.EuiTitle,{size:"s"},i.a.createElement("h4",{"data-test-subj":"securitySolutionDocumentDetailsFlyoutHeaderTitle"},o&&!Object(m.isEmpty)(s)?s:F)),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(d.EuiFlexGroup,{direction:"row",gutterSize:o?"m":"none"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(O,null)),i.a.createElement(d.EuiFlexItem,{grow:!1},c&&i.a.createElement(et.c,{value:new Date(c)}))),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(d.EuiFlexGroup,{direction:"row",gutterSize:"m"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(Xe,null)),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(Je,null))))}));at.displayName="HeaderTitle";var it=u()(d.EuiFlexGroup).withConfig({displayName:"_StyledEuiFlexGroup",componentId:"sc-1o1gyrb-0"})(["margin-top:",";padding:0 25px;"],(e=>e.$_css)),rt=n(260);const ot=Object(a.memo)((()=>{const{closeLeftPanel:e,openLeftPanel:t,panels:n}=Object(r.c)(),o=null!=n.left,{eventId:s,indexName:c,scopeId:u}=Object(l.b)(),p=Object(a.useCallback)((()=>{t({id:rt.d,params:{id:s,indexName:c,scopeId:u}})}),[s,t,c,u]),m=Object(a.useCallback)((()=>e()),[e]);return o?i.a.createElement(d.EuiButtonEmpty,{iconSide:"left",onClick:m,iconType:"arrowEnd","data-test-subj":"securitySolutionDocumentDetailsFlyoutHeaderCollapseDetailButton"},_):i.a.createElement(d.EuiButtonEmpty,{iconSide:"left",onClick:p,iconType:"arrowStart","data-test-subj":"securitySolutionDocumentDetailsFlyoutHeaderExpandDetailButton"},A)}));ot.displayName="ExpandDetailButton";const st=Object(a.memo)((({flyoutIsExpandable:e,selectedTabId:t,setSelectedTabId:n,tabs:a})=>{const r=a.map(((e,a)=>i.a.createElement(d.EuiTab,{onClick:()=>{return t=e.id,n(t);var t},isSelected:e.id===t,key:a,"data-test-subj":e["data-test-subj"]},e.name)));return i.a.createElement(lt,{hasBorder:!0,$_css:e?"-24px":"0px"},e&&i.a.createElement(ct,null,i.a.createElement(ot,null)),i.a.createElement(d.EuiSpacer,{size:"xs"}),i.a.createElement(at,{flyoutIsExpandable:e}),i.a.createElement(d.EuiSpacer,{size:"m"}),i.a.createElement(ut,{size:"l",expand:!0},r))}));st.displayName="PanelHeader";var lt=u()(d.EuiFlyoutHeader).withConfig({displayName:"_StyledEuiFlyoutHeader",componentId:"sc-12lntih-0"})(["margin-bottom:",";"],(e=>e.$_css)),ct=u()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-12lntih-1"})(["margin-top:-24px;margin-left:-8px;"]),ut=u()(d.EuiTabs).withConfig({displayName:"_StyledEuiTabs",componentId:"sc-12lntih-2"})(["margin-bottom:-25px;"]);const dt=M.i18n.translate("xpack.securitySolution.flyout.documentErrorTitle",{defaultMessage:"document information"}),pt=M.i18n.translate("xpack.securitySolution.flyout.documentErrorMessage",{defaultMessage:"the document fields and values"});var mt=n(202),ft=n(930);const gt=Object(a.memo)((()=>{const{searchHit:e}=Object(l.b)();return e?i.a.createElement(ft.a,{rawEventData:e}):i.a.createElement(d.EuiEmptyPrompt,{iconType:"error",color:"danger",title:i.a.createElement("h2",null,Object(mt.g)(dt)),body:i.a.createElement("p",null,Object(mt.f)(pt)),"data-test-subj":"securitySolutionDocumentDetailsFlyoutJsonTabError"})}));gt.displayName="JsonTab";var bt=n(255);const yt=()=>{var e,t,n,o;const{openLeftPanel:s}=Object(r.c)(),{eventId:c,indexName:u,scopeId:p,searchHit:m}=Object(l.b)(),f=m?Object(bt.a)(m.fields):void 0,g=null==f||null===(e=f.kibana)||void 0===e||null===(t=e.alert)||void 0===t||null===(n=t.rule)||void 0===n||null===(o=n.parameters)||void 0===o?void 0:o[0].response_actions,b=Object(a.useCallback)((()=>{s({id:rt.d,path:{tab:rt.e},params:{id:c,indexName:u,scopeId:p}})}),[c,u,s,p]);return i.a.createElement(i.a.Fragment,null,g?i.a.createElement(d.EuiButton,{onClick:b,iconType:"documentation","data-test-subj":"securitySolutionDocumentDetailsFlyoutResponseButton"},ve):i.a.createElement("div",{"data-test-subj":Ye},Ee))};yt.displayName="ResponseButton";const ht=({expanded:e=!1})=>i.a.createElement(ke.b,{expanded:e,title:ve,"data-test-subj":"securitySolutionDocumentDetailsFlyoutResponseSection"},i.a.createElement(yt,null));ht.displayName="ResponseSection";var vt=n(1084),Et=n(282),xt=n(889),jt=n(507);const Ot=({value:e})=>{const{scopeId:t,eventId:n,indexName:o}=Object(l.b)(),{openLeftPanel:s}=Object(r.c)(),c=Object(a.useCallback)((()=>{s({id:rt.d,path:{tab:rt.b,subTab:jt.a},params:{id:n,indexName:o,scopeId:t}})}),[n,o,s,t]);return i.a.createElement(d.EuiLink,{onClick:c,"data-test-subj":"securitySolutionDocumentDetailsFlyoutHighlightedFieldsLinkedCell"},e)},St=({values:e,field:t})=>i.a.createElement(i.a.Fragment,null,null!=e&&e.map(((e,n)=>i.a.createElement(d.EuiFlexItem,{grow:!1,key:`${n}-${e}`,"data-test-subj":`${e}-securitySolutionDocumentDetailsFlyoutHighlightedFieldsCell`},t===v.g||t===v.p?i.a.createElement(Ot,{value:e}):t===v.a?i.a.createElement(xt.b,{endpointAgentId:String(null!=e?e:""),"data-test-subj":"securitySolutionDocumentDetailsFlyoutHighlightedFieldsAgentStatusCell"}):i.a.createElement("span",{"data-test-subj":"securitySolutionDocumentDetailsFlyoutHighlightedFieldsBasicCell"},e)))));var kt=n(1083);const wt=[{field:"field",name:W,"data-test-subj":"fieldCell",width:"50%"},{field:"description",name:Q,"data-test-subj":"valueCell",width:"50%",render:e=>i.a.createElement(h.c,{data:{field:e.field,value:e.values},mode:h.a.HOVER_RIGHT,triggerId:h.d.DEFAULT,visibleCellActions:5,sourcererScopeId:Object(y.getSourcererScopeId)(e.scopeId),metadata:{scopeId:e.scopeId}},i.a.createElement(St,{values:e.values,field:e.field}))}],It=()=>{var e;const{dataFormattedForFieldBrowser:t,scopeId:n}=Object(l.b)(),{ruleId:r}=Object(Ze.b)(t),{rule:o}=Object(Et.a)(r),s=Object(kt.a)({dataFormattedForFieldBrowser:t,investigationFields:null!==(e=null==o?void 0:o.investigation_fields)&&void 0!==e?e:[]}),c=Object(a.useMemo)((()=>Object(vt.b)(s,n)),[s,n]);return t&&0!==c.length?i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutHighlightedFieldsTitle"},i.a.createElement(d.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,H))),i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutHighlightedFieldsDetails"},i.a.createElement(d.EuiPanel,{hasBorder:!0,hasShadow:!1},i.a.createElement(d.EuiInMemoryTable,{items:c,columns:wt,compressed:!0})))):null};var Tt=n(1077);const Ct=()=>{const{openLeftPanel:e}=Object(r.c)(),{eventId:t,indexName:n,scopeId:o,dataFormattedForFieldBrowser:s}=Object(l.b)(),{loading:c,error:u,basicAlertData:p,ruleNote:m}=Object(Tt.a)({dataFormattedForFieldBrowser:s}),f=Object(a.useCallback)((()=>{e({id:rt.d,path:{tab:rt.c},params:{id:t,indexName:n,scopeId:o}})}),[t,n,e,o]);return!s||u?null:c?i.a.createElement(d.EuiFlexGroup,{justifyContent:"spaceAround","data-test-subj":Ce},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiLoadingSpinner,{size:"m"}))):i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},i.a.createElement(d.EuiFlexItem,{"data-test-subj":Ie},i.a.createElement(d.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,de))),i.a.createElement(d.EuiFlexItem,null,p.ruleId&&m?i.a.createElement(d.EuiButton,{onClick:f,iconType:"documentation","data-test-subj":Te},pe):i.a.createElement("div",{"data-test-subj":Me},me)))};Ct.displayName="InvestigationGuideButton";const Mt=({expanded:e=!0})=>i.a.createElement(ke.b,{expanded:e,title:G,"data-test-subj":we},i.a.createElement(Ct,null),i.a.createElement(d.EuiSpacer,{size:"m"}),i.a.createElement(It,null));Mt.displayName="InvestigationSection";var At=n(1057);const _t=()=>{const{dataFormattedForFieldBrowser:e,scopeId:t,eventId:n,indexName:o}=Object(l.b)(),{isAlert:s,ruleDescription:c,ruleName:u,ruleId:p}=Object(Ze.b)(e),{openPreviewPanel:f}=Object(r.c)(),g=Object(a.useCallback)((()=>{const e={tab:At.d};f({id:At.c,path:e,params:{id:n,indexName:o,scopeId:t,banner:{title:B,backgroundColor:"warning",textColor:"warning"},ruleId:p}})}),[n,f,o,t,p]),b=Object(a.useMemo)((()=>!Object(m.isEmpty)(u)&&!Object(m.isEmpty)(p)&&i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiButtonEmpty,{size:"s",iconType:"expand",onClick:g,iconSide:"right","data-test-subj":"securitySolutionDocumentDetailsFlyoutRuleSummaryButton"},P))),[u,g,p]);if(!e)return null;const y=c&&c.length>0;return i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutDescriptionTitle"},i.a.createElement(d.EuiTitle,{size:"xxs"},s?i.a.createElement(d.EuiFlexGroup,{justifyContent:"spaceBetween",alignItems:"center"},i.a.createElement(d.EuiFlexItem,null,i.a.createElement("h5",null,q)),b):i.a.createElement("h5",null,$))),i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutDescriptionDetails"},y?c:"-"))};_t.displayName="Description";const Ft=()=>{const{eventId:e,indexName:t,scopeId:n,dataFormattedForFieldBrowser:o,getFieldsData:c}=Object(l.b)(),{isAlert:u}=Object(Ze.b)(o),p=Object(s.a)(c(C.p)),{openPreviewPanel:m}=Object(r.c)(),f=Object(a.useCallback)((()=>{m({id:At.c,path:{tab:At.a},params:{id:e,indexName:t,scopeId:n,banner:{title:z,backgroundColor:"warning",textColor:"warning"}}})}),[e,m,t,n]),g=Object(a.useMemo)((()=>i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiButtonEmpty,{size:"s",iconType:"expand",onClick:f,iconSide:"right","data-test-subj":"securitySolutionDocumentDetailsFlyoutReasonDetailsPreviewButton"},R))),[f]);return o?i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutReasonTitle"},i.a.createElement(d.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,u?i.a.createElement(d.EuiFlexGroup,{justifyContent:"spaceBetween",alignItems:"center"},i.a.createElement(d.EuiFlexItem,null,i.a.createElement("h5",null,V)),g):U))),i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutReasonDetails"},p)):null};Ft.displayName="Reason";var Dt=n(929);const Nt=()=>{const{searchHit:e}=Object(l.b)(),t=Object(a.useMemo)((()=>Object(Dt.a)(e)),[e]);return t&&t[0]?i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionAlertDetailsFlyoutMitreAttackTitle"},i.a.createElement(d.EuiTitle,{size:"xxs"},i.a.createElement("h5",null,t[0].title))),i.a.createElement(d.EuiFlexItem,{"data-test-subj":"securitySolutionAlertDetailsFlyoutMitreAttackDetails"},t[0].description)):null};Nt.displayName="MitreAttack";const Pt=({expanded:e=!0})=>i.a.createElement(ke.b,{expanded:e,title:L,"data-test-subj":"securitySolutionDocumentDetailsFlyoutAboutSection"},i.a.createElement(_t,null),i.a.createElement(d.EuiSpacer,{size:"m"}),i.a.createElement(Ft,null),i.a.createElement(d.EuiSpacer,{size:"m"}),i.a.createElement(Nt,null));Pt.displayName="AboutSection";var Rt=n(249),Lt=n(1092),qt=n(1085),Bt=n(294);const zt=({loading:e=!1,error:t=!1,icon:n,value:a,text:r,color:o,"data-test-subj":s})=>{const l=`${s}Loading`;if(e)return i.a.createElement(d.EuiSkeletonText,{lines:1,size:"m",isLoading:e,contentAriaLabel:"Loading","data-test-subj":l});if(t)return null;const c=`${s}Icon`,u=`${s}Value`,p=`${s}Color`;return i.a.createElement(d.EuiFlexGroup,{gutterSize:"none",justifyContent:"spaceBetween",alignItems:"center"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiButtonIcon,{"data-test-subj":c,"aria-label":"entity-icon",color:"text",display:"empty",iconType:n,size:"s"})),i.a.createElement($t,{"data-test-subj":u},a&&i.a.createElement(Bt.a,{count:a})," ",r),o&&i.a.createElement(d.EuiFlexItem,{grow:!1,"data-test-subj":p},i.a.createElement(d.EuiHealth,{color:o})))};zt.displayName="InsightsSummaryRow";var $t=u()(d.EuiFlexItem).withConfig({displayName:"_StyledEuiFlexItem",componentId:"sc-d1tnhz-0"})(["word-break:break-word;display:-webkit-box;-webkit-line-clamp:1;-webkit-box-orient:vertical;overflow:hidden;"]);const Vt=({entityId:e,scopeId:t})=>{const{loading:n,error:a,dataCount:r}=Object(qt.a)({entityId:e,scopeId:t}),o=Object(mt.d)(r);return i.a.createElement(zt,{loading:n,error:a,icon:"warning",value:r,text:o,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsCorrelationsRelatedAlertsBySession",key:`correlation-row-${o}`})};Vt.displayName="RelatedAlertsBySession";var Ut=n(1091),Gt=n(1086);const Ht=({originalEventId:e,scopeId:t})=>{const{loading:n,error:a,dataCount:r}=Object(Gt.a)({originalEventId:e,scopeId:t}),o=Object(mt.c)(r);return i.a.createElement(zt,{loading:n,error:a,icon:"warning",value:r,text:o,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsCorrelationsRelatedAlertsBySameSourceEvent",key:`correlation-row-${o}`})};Ht.displayName="RelatedAlertsBySameSourceEvent";var Wt=n(1093);const Qt=({documentId:e,indices:t,scopeId:n})=>{const{loading:a,error:r,dataCount:o}=Object(Wt.a)({documentId:e,indices:t,scopeId:n}),s=Object(mt.a)(o);return i.a.createElement(zt,{loading:a,error:r,icon:"warning",value:o,text:s,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsCorrelationsRelatedAlertsByAncestry",key:`correlation-row-${s}`})};Qt.displayName="RelatedAlertsByAncestry";var Yt=n(1089),Kt=n(243);const Xt=({alertSuppressionCount:e})=>i.a.createElement(d.EuiFlexGroup,{gutterSize:"s",alignItems:"center"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(zt,{loading:!1,error:!1,icon:"layers",value:e,text:Object(mt.e)(e),"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsCorrelationsSupressedAlerts",key:"correlation-row-suppressed-alerts"})),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiBetaBadge,{label:Kt.w,size:"s",iconType:"beaker",tooltipContent:je,tooltipPosition:"bottom","data-test-subj":"securitySolutionDocumentDetailsFlyoutSupressedAlertsTechnicalPreview"})));Xt.displayName="SuppressedAlerts";var Jt=n(1090),Zt=n(1087);const en=({eventId:e})=>{const{loading:t,error:n,dataCount:a}=Object(Zt.a)({eventId:e}),r=Object(mt.b)(a);return i.a.createElement(zt,{loading:t,error:n,icon:"warning",value:a,text:r,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsightsCorrelationsRelatedCases",key:`correlation-row-${r}`})};en.displayName="RelatedCases";var tn=n(1088),nn=n(1122);const an=()=>{const{dataAsNestedObject:e,dataFormattedForFieldBrowser:t,eventId:n,indexName:o,getFieldsData:s,scopeId:c}=Object(l.b)(),{openLeftPanel:u}=Object(r.c)(),p=Object(a.useCallback)((()=>{u({id:rt.d,path:{tab:rt.b,subTab:nn.a},params:{id:n,indexName:o,scopeId:c}})}),[n,u,o,c]),{show:m,documentId:f,indices:g}=Object(Yt.a)({getFieldsData:s,dataAsNestedObject:e,dataFormattedForFieldBrowser:t}),{show:b,originalEventId:y}=Object(Ut.a)({getFieldsData:s}),{show:h,entityId:v}=Object(Lt.a)({getFieldsData:s}),E=Object(tn.a)(),{show:x,alertSuppressionCount:j}=Object(Jt.a)({getFieldsData:s}),O=m||b||h||E||x;return i.a.createElement(Rt.a,{header:{title:Z,callback:p,iconType:"arrowStart"},"data-test-subj":Ge},O?i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"none"},x&&i.a.createElement(Xt,{alertSuppressionCount:j}),E&&i.a.createElement(en,{eventId:n}),b&&y&&i.a.createElement(Ht,{originalEventId:y,scopeId:c}),h&&v&&i.a.createElement(Vt,{entityId:v,scopeId:c}),m&&f&&g&&i.a.createElement(Qt,{documentId:f,indices:g,scopeId:c})):i.a.createElement("div",{"data-test-subj":`${Ge}Error`},ee))};an.displayName="CorrelationsOverview";var rn=n(1127),on=n(1082);const sn=()=>{const{eventId:e,indexName:t,browserFields:n,dataFormattedForFieldBrowser:o,scopeId:s,investigationFields:c}=Object(l.b)(),{openLeftPanel:u}=Object(r.c)(),p=Object(a.useCallback)((()=>{u({id:rt.d,path:{tab:rt.b,subTab:on.a},params:{id:e,indexName:t,scopeId:s}})}),[e,u,t,s]),{loading:m,error:f,data:g}=Object(rn.a)({dataFormattedForFieldBrowser:o,investigationFields:c,interval:{from:"now-30d",to:"now"}}),b=Object(a.useMemo)((()=>g.filter((e=>isFinite(e.hostPrevalence)&&e.hostPrevalence>0&&e.hostPrevalence<.1))),[g]);return e&&n&&o?i.a.createElement(Rt.a,{header:{title:te,callback:p,iconType:"arrowStart"},content:{loading:m,error:f},"data-test-subj":He},i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"none"},b.length>0?b.map((e=>i.a.createElement(zt,{icon:"warning",text:`${e.field}, ${e.values} ${se}`,"data-test-subj":`${He}${e.field}`}))):i.a.createElement("div",{"data-test-subj":`${He}Error`},ne))):null};sn.displayName="PrevalenceOverview";var ln=n(336),cn=n(509),un=n(167),dn=n(1129);const pn=()=>{const{eventId:e,indexName:t,scopeId:n,dataFormattedForFieldBrowser:o}=Object(l.b)(),{openLeftPanel:s}=Object(r.c)(),c=Object(a.useCallback)((()=>{s({id:rt.d,path:{tab:rt.b,subTab:dn.a},params:{id:e,indexName:t,scopeId:n}})}),[e,s,t,n]),{loading:u,error:p,threatMatchesCount:f,threatEnrichmentsCount:g}=(({dataFormattedForFieldBrowser:e})=>{const{isAlert:t}=Object(Ze.b)(e),n=Object(a.useMemo)((()=>Object(ln.b)(e||[])),[e]),i=Object(a.useMemo)((()=>t?Object(ln.f)(e||[]).map((e=>Object(ln.g)(e))):[]),[e,t]),{result:r,loading:o}=Object(cn.c)(n),s=Object(a.useMemo)((()=>o||null==r||!r.enrichments?i:Object(ln.a)([...i,...r.enrichments])),[o,r,i]),{[un.c.IndicatorMatchRule]:l,[un.c.InvestigationTime]:c}=Object(m.groupBy)(s,"matched.type");return{loading:o,error:!e,threatMatches:l,threatMatchesCount:(l||[]).length,threatEnrichments:c,threatEnrichmentsCount:(c||[]).length}})({dataFormattedForFieldBrowser:o}),b=!e||!o||p;return i.a.createElement(Rt.a,{header:{title:X,callback:c,iconType:"arrowStart"},"data-test-subj":Ue},i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"none","data-test-subj":`${Ue}Container`},i.a.createElement(zt,{loading:u,error:b,icon:"warning",value:f,text:f<=1?ae:ie,"data-test-subj":Ue}),i.a.createElement(zt,{loading:u,error:b,icon:"warning",value:g,text:g<=1?re:oe,"data-test-subj":Ue})))};pn.displayName="ThreatIntelligenceOverview",n(180);var mn=n(393),fn=n(113),gn=n(117),bn=n(224),yn=n(168),hn=n(330),vn=n(212),En=n(116),xn=n(134),jn=n(284),On=n(663),Sn=n(926);const kn=({hostName:e})=>{const{eventId:t,indexName:n,scopeId:o}=Object(l.b)(),{openLeftPanel:s}=Object(r.c)(),c=Object(a.useCallback)((()=>{s({id:rt.d,path:{tab:rt.b,subTab:jt.a},params:{id:t,indexName:n,scopeId:o}})}),[t,s,n,o]),{from:u,to:p}=Object(xn.a)(),{selectedPatterns:m}=Object(En.d)(),f=Object(a.useMemo)((()=>({from:u,to:p})),[u,p]),b=Object(a.useMemo)((()=>e?Object(fn.D)([e]):void 0),[e]),{data:y,isAuthorized:h}=Object(jn.c)({filterQuery:b,riskEntity:fn.w.host,skip:null==e,timerange:f}),[v,{hostDetails:E}]=Object(On.b)({hostName:e,indexNames:m,startDate:u,endDate:p}),x=Object(a.useMemo)((()=>[{title:Sn.c,description:i.a.createElement(bn.a,{rowItems:Object(g.getOr)([],"host.os.family",E),attrName:"host.os.family",idPrefix:"flyout-host-entity-overview",isDraggable:!1})}]),[E]),j=Object(a.useMemo)((()=>[{title:Sn.k,description:i.a.createElement(mn.a,{indexPatterns:m,field:"host.name",value:e,type:mn.b.LAST_SEEN})}]),[e,m]),{euiTheme:O}=Object(d.useEuiTheme)(),S=Object(d.useEuiFontSize)("xs").fontSize,[k]=Object(a.useMemo)((()=>{const e=y&&y.length>0?y[0]:void 0;return[{title:i.a.createElement(i.a.Fragment,null,Sn.f,i.a.createElement(d.EuiIconTip,{title:xe,size:"m",type:"iInCircle",content:je,position:"bottom",iconProps:{className:"eui-alignTop"},"data-test-subj":Ve})),description:i.a.createElement(i.a.Fragment,null,e?i.a.createElement(vn.b,{severity:e.host.risk.calculated_level}):Object(gn.d)())}]}),[y]);return i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s","data-test-subj":Le},i.a.createElement(d.EuiFlexItem,null,i.a.createElement(d.EuiFlexGroup,{gutterSize:"m"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiIcon,{type:"storage"})),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(wn,{"data-test-subj":qe,onClick:c,$_css:S,$_css2:O.font.weight.bold},e)))),i.a.createElement(d.EuiFlexItem,null,i.a.createElement(d.EuiFlexGroup,null,i.a.createElement(d.EuiFlexItem,null,i.a.createElement(hn.a,{dataTestSubj:Be,descriptionList:x})),i.a.createElement(d.EuiFlexItem,null,h?i.a.createElement(yn.d,{"data-test-subj":$e,listItems:[k]}):i.a.createElement(hn.a,{dataTestSubj:ze,descriptionList:j})))))};kn.displayName="HostEntityOverview";var wn=u()(d.EuiLink).withConfig({displayName:"_StyledEuiLink",componentId:"sc-1176cvl-0"})(["font-size:",";font-weight:",";"],(e=>e.$_css),(e=>e.$_css2)),In=n(925),Tn=n(386);const Cn=({userName:e})=>{const{eventId:t,indexName:n,scopeId:o}=Object(l.b)(),{openLeftPanel:s}=Object(r.c)(),c=Object(a.useCallback)((()=>{s({id:rt.d,path:{tab:rt.b,subTab:jt.a},params:{id:t,indexName:n,scopeId:o}})}),[t,s,n,o]),{from:u,to:p}=Object(xn.a)(),{selectedPatterns:m}=Object(En.d)(),f=Object(a.useMemo)((()=>({from:u,to:p})),[u,p]),b=Object(a.useMemo)((()=>e?Object(fn.E)([e]):void 0),[e]),[y,{userDetails:h}]=Object(Tn.b)({endDate:p,userName:e,indexNames:m,startDate:u}),{data:v,isAuthorized:E}=Object(jn.c)({filterQuery:b,riskEntity:fn.w.user,timerange:f}),x=Object(a.useMemo)((()=>[{title:In.h,description:i.a.createElement(bn.a,{rowItems:Object(g.getOr)([],"user.domain",h),attrName:"domain",idPrefix:"flyout-user-entity-overview",isDraggable:!1})}]),[h]),j=Object(a.useMemo)((()=>[{title:In.f,description:i.a.createElement(mn.a,{indexPatterns:m,field:"user.name",value:e,type:mn.b.LAST_SEEN})}]),[e,m]),{euiTheme:O}=Object(d.useEuiTheme)(),S=Object(d.useEuiFontSize)("xs").fontSize,[k]=Object(a.useMemo)((()=>{const e=v&&v.length>0?v[0]:void 0;return[{title:i.a.createElement(i.a.Fragment,null,In.j,i.a.createElement(d.EuiIconTip,{title:xe,size:"m",type:"iInCircle",content:je,position:"bottom",iconProps:{className:"eui-alignTop"},"data-test-subj":Ve})),description:i.a.createElement(i.a.Fragment,null,e?i.a.createElement(vn.b,{severity:e.user.risk.calculated_level}):Object(gn.d)())}]}),[v]);return i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s","data-test-subj":Fe},i.a.createElement(d.EuiFlexItem,null,i.a.createElement(d.EuiFlexGroup,{gutterSize:"m"},i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(d.EuiIcon,{type:"user"})),i.a.createElement(d.EuiFlexItem,{grow:!1},i.a.createElement(Mn,{"data-test-subj":De,onClick:c,$_css:S,$_css2:O.font.weight.bold},e)))),i.a.createElement(d.EuiFlexItem,null,i.a.createElement(d.EuiFlexGroup,null,i.a.createElement(d.EuiFlexItem,null,i.a.createElement(hn.a,{dataTestSubj:Ne,descriptionList:x})),i.a.createElement(d.EuiFlexItem,null,E?i.a.createElement(yn.d,{"data-test-subj":Re,listItems:[k]}):i.a.createElement(hn.a,{dataTestSubj:Pe,descriptionList:j})))))};Cn.displayName="UserEntityOverview";var Mn=u()(d.EuiLink).withConfig({displayName:"_StyledEuiLink",componentId:"sc-rt0e8b-0"})(["font-size:",";font-weight:",";"],(e=>e.$_css),(e=>e.$_css2));const An=()=>{const{eventId:e,getFieldsData:t,indexName:n,scopeId:o}=Object(l.b)(),{openLeftPanel:c}=Object(r.c)(),u=Object(s.a)(t("host.name")),p=Object(s.a)(t("user.name")),m=Object(a.useCallback)((()=>{c({id:rt.d,path:{tab:rt.b,subTab:jt.a},params:{id:e,indexName:n,scopeId:o}})}),[e,c,n,o]);return e&&n&&o?i.a.createElement(i.a.Fragment,null,i.a.createElement(Rt.a,{header:{title:Y,callback:m,iconType:"arrowStart"},"data-test-subj":Ae},p||u?i.a.createElement(d.EuiFlexGroup,{direction:"column",gutterSize:"s"},p&&i.a.createElement(d.EuiFlexItem,null,i.a.createElement(Cn,{userName:p})),i.a.createElement(d.EuiSpacer,{size:"s"}),u&&i.a.createElement(d.EuiFlexItem,null,i.a.createElement(kn,{hostName:u}))):i.a.createElement("div",{"data-test-subj":_e},K))):null};An.displayName="EntitiesOverview";const _n=({expanded:e=!1})=>i.a.createElement(ke.b,{title:J,expanded:e,"data-test-subj":"securitySolutionDocumentDetailsFlyoutInsights"},i.a.createElement(An,null),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(pn,null),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(an,null),i.a.createElement(d.EuiSpacer,{size:"s"}),i.a.createElement(sn,null));_n.displayName="InsightsSection";var Fn=n(103),Dn=n(119),Nn=n(44),Pn=n(159),Rn=n(500),Ln=n(196),qn=n(12),Bn=n(683);const zn=(e,t,n,a,i)=>{const r=e.find((e=>e.id===t.parent));if(i===a&&r)return{id:"ancestor",label:"...",children:[n],isExpanded:!0};if(a<0||i<0||i>=a||!r)return n;const o={id:r.id,label:r.name,children:[n],isExpanded:!0};return zn(e,r,o,a,i+1)},$n=(e,t,n,a,i)=>{const r=e.filter((e=>e.parent===t.id));if(i===a&&r.length>0)return[{id:"descendant",label:"...",isExpanded:!1}];if(n<0||a<0||i<0||i>=a||!r||0===r.length)return;const o=[];return r.forEach(((t,r)=>{r<n&&o.push({id:t.id,label:t.name,children:$n(e,t,n,a,i+1),isExpanded:!1}),r===n&&o.push({id:"more-child",label:"..."})})),o};var Vn=n(366),Un=n(684);const Gn=()=>{var e;const[t,n]=Object(a.useState)({}),{dataFormattedForFieldBrowser:r,scopeId:o}=Object(l.b)(),s=Object(g.find)({category:"kibana",field:Vn.a},r),c=s&&Array.isArray(s.values)?s.values[0]:"",u=Object(g.find)({category:"kibana",field:Vn.f},r),p=null!==(e=null==u?void 0:u.values)&&void 0!==e?e:[],{statsNodes:m}=Object(Un.a)({isActiveTimeline:Object(y.isActiveTimeline)(o),documentId:c,indices:p});Object(a.useEffect)((()=>{m&&0!==m.length&&n({statsNodes:m})}),[m,n]);const f=Object(a.useMemo)((()=>{var e;return((e,t=3,n=3,a=3)=>{if(0===e.length)return[];const r=e[0],o={id:r.id,label:i.a.createElement("b",{},r.name),children:$n(e,r,t,a,0),isExpanded:!0,icon:i.a.createElement(d.EuiToken,{iconType:"tokenConstant"})};return[zn(e,r,o,n,0)]})(null!==(e=t.statsNodes)&&void 0!==e?e:[],3,3,3)}),[t.statsNodes]);return s&&u&&f&&0!==f.length?i.a.createElement("div",{"data-test-subj":We},i.a.createElement(d.EuiTreeView,{items:f,display:"compressed","aria-label":ce,showExpansionArrows:!0})):null};Gn.displayName="AnalyzerPreview";const Hn="timeline-1",Wn=()=>{const{dataAsNestedObject:e}=Object(l.b)(),t=Object(Bn.a)(e||void 0),n=Object(Fn.useDispatch)(),{startTransaction:r}=Object(Pn.b)(),{investigateInTimelineAlertClick:o}=Object(Rn.a)({ecsRowData:e}),s=Object(a.useCallback)((()=>{o(),r({name:Ln.a.OPEN_ANALYZER});const t=Object(y.getScopedActions)(Hn);t&&e&&n(t.updateGraphEventId({id:Hn,graphEventId:e._id})),n(Object(qn.setActiveTabTimeline)({id:Hn,activeTab:Dn.f.graph}))}),[e,n,o,r]);return i.a.createElement(Rt.a,{header:{title:ce,iconType:"timeline",...t&&{callback:s}},"data-test-subj":We},t?i.a.createElement(Gn,null):i.a.createElement("div",{"data-test-subj":`${We}Error`},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.analyzerPreviewError",defaultMessage:"You can only visualize events triggered by hosts configured with the Elastic Defend integration or any {sysmon} data from {winlogbeat}. Refer to {link} for more information.",values:{sysmon:i.a.createElement(d.EuiMark,null,"sysmon"),winlogbeat:i.a.createElement(d.EuiMark,null,"winlogbeat"),link:i.a.createElement(d.EuiLink,{href:"https://www.elastic.co/guide/en/security/current/visual-event-analyzer.html",target:"_blank"},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.analyzerPreviewErrorLink",defaultMessage:"Visual event analyzer"}))}})))};Wn.displayName="AnalyzerPreviewContainer";var Qn=n(17);const Yn=e=>{const t=Object(s.a)(e("process.entry_leader.user.name")),n=Object(s.a)(e("process.entry_leader.user.id"));return t||(n?"0"===n?"root":`uid: ${n}`:"unknown")};var Kn=n(1263);const Xn=({text:e,children:t})=>i.a.createElement(i.a.Fragment,null,e&&i.a.createElement(i.a.Fragment,null," ",i.a.createElement("span",null,e)," "),t),Jn=()=>{const{eventId:e,scopeId:t}=Object(l.b)(),{processName:n,userName:r,startAt:o,ruleName:c,ruleId:u,workdir:p,command:m}=(()=>{const{getFieldsData:e}=Object(l.b)();return Object(a.useMemo)((()=>({userName:Yn(e),processName:Object(s.a)(e("process.entry_leader.name")),startAt:Object(s.a)(e("process.entry_leader.start")),ruleName:Object(s.a)(e(C.D)),ruleId:Object(s.a)(e(C.S)),workdir:Object(s.a)(e("process.group_leader.working_directory")),command:Object(s.a)(e("process.command_line"))})),[e])})(),{euiTheme:f}=Object(d.useEuiTheme)(),g=Object(a.useMemo)((()=>({fontWeight:f.font.weight.bold})),[f.font.weight.bold]),b=Object(a.useMemo)((()=>n&&i.a.createElement(Xn,{text:ge},i.a.createElement("span",{style:g},n))),[g,n]),y=Object(a.useMemo)((()=>o&&i.a.createElement(Xn,{text:be},i.a.createElement(et.c,{value:new Date(o)}))),[o]),h=Object(a.useMemo)((()=>c&&u&&i.a.createElement(Xn,{text:ye},i.a.createElement(Kn.a,{contextId:t,eventId:e,fieldName:v.n,fieldType:"string",isAggregatable:!1,isDraggable:!1,linkValue:u,value:c}))),[c,u,t,e]),E=Object(a.useMemo)((()=>m&&i.a.createElement(Xn,{text:he},i.a.createElement(d.EuiCode,null,p," ",m))),[m,p]);return i.a.createElement(Zn,{"data-test-subj":Qe},i.a.createElement(Xn,null,i.a.createElement(d.EuiIcon,{type:"user"})," ",i.a.createElement("span",{style:g},r)),b,y,h,E)};var Zn=u()("div").withConfig({displayName:"_StyledDiv",componentId:"sc-1ntbke2-0"})(["line-height:1.5;"]);const ea="timeline-1",ta=()=>{const{dataAsNestedObject:e,getFieldsData:t}=Object(l.b)(),n=(({getFieldsData:e})=>{const t=Object(s.a)(e("_id")),n=Object(s.a)(e("kibana.alert.ancestors.index"))||Object(s.a)(e("_index")),a=Object(s.a)(e("process.entry_leader.entity_id")),i=Object(s.a)(e("process.entry_leader.start")),r=Object(s.a)(e("process.entity_id")),o=Object(s.a)(e("kibana.alert.original_time"))||Object(s.a)(e("timestamp"));return n&&a&&i?{index:n,sessionEntityId:a,sessionStartTime:i,...r&&{jumpToEntityId:r},...o&&{jumpToCursor:o},...t&&{investigatedAlertId:t}}:null})({getFieldsData:t}),r=Object(Qn.b)().isEnterprise(),o=n&&r,c=Object(Fn.useDispatch)(),{startTransaction:u}=Object(Pn.b)(),p=Object(y.getScopedActions)(ea),{investigateInTimelineAlertClick:m}=Object(Rn.a)({ecsRowData:e}),f=Object(a.useCallback)((()=>{m(),u({name:Ln.a.OPEN_SESSION_VIEW}),null!==n&&(c(Object(qn.setActiveTabTimeline)({id:ea,activeTab:Dn.f.session})),p&&c(p.updateSessionViewConfig({id:ea,sessionViewConfig:n})))}),[c,m,p,n,u]),{euiTheme:g}=Object(d.useEuiTheme)(),b=r?n?null:i.a.createElement("div",{"data-test-subj":`${Qe}Error`},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.sessionPreviewError",defaultMessage:"You can only view Linux session details if you’ve enabled the {setting} setting in your Elastic Defend integration policy. Refer to {link} for more information.",values:{setting:i.a.createElement(na,{$_css:g.font.weight.bold},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.sessionPreviewErrorSetting",defaultMessage:"Include session data"})),link:i.a.createElement(d.EuiLink,{href:"https://www.elastic.co/guide/en/security/current/session-view.html#enable-session-view",target:"_blank"},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.sessionPreviewErrorLink",defaultMessage:"Enable Session View data"}))}})):i.a.createElement("div",{"data-test-subj":`${Qe}UpSell`},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.sessionPreviewUpsell",defaultMessage:"This feature requires an {subscription}",values:{subscription:i.a.createElement(d.EuiLink,{href:"https://www.elastic.co/pricing/",target:"_blank"},i.a.createElement(Nn.FormattedMessage,{id:"xpack.securitySolution.flyout.documentDetails.sessionPreviewUpsellLink",defaultMessage:"Enterprise subscription"}))}}));return i.a.createElement(Rt.a,{header:{title:fe,iconType:"timeline",...o&&{callback:f}},"data-test-subj":Qe},o?i.a.createElement(Jn,null):b)};var na=u()("span").withConfig({displayName:"_StyledSpan",componentId:"sc-57k4y-0"})(["font-weight:",";"],(e=>e.$_css));const aa=({expanded:e=!1})=>i.a.createElement(ke.b,{expanded:e,title:le,"data-test-subj":"securitySolutionDocumentDetailsVisualizationsTitle"},i.a.createElement(ta,null),i.a.createElement(d.EuiSpacer,null),i.a.createElement(Wn,null));aa.displayName="VisualizationsSection";const ia=Object(a.memo)((()=>i.a.createElement(i.a.Fragment,null,i.a.createElement(Pt,null),i.a.createElement(d.EuiHorizontalRule,{margin:"l"}),i.a.createElement(Mt,null),i.a.createElement(d.EuiHorizontalRule,{margin:"l"}),i.a.createElement(aa,null),i.a.createElement(d.EuiHorizontalRule,{margin:"l"}),i.a.createElement(_n,null),i.a.createElement(d.EuiHorizontalRule,{margin:"l"}),i.a.createElement(ht,null))));ia.displayName="OverviewTab";var ra=n(142),oa=n(948);const sa=Object(a.memo)((()=>{const{browserFields:e,dataFormattedForFieldBrowser:t,eventId:n}=Object(l.b)();return e&&n&&t?i.a.createElement(oa.a,{browserFields:e,data:t,eventId:n,isDraggable:!1,timelineTabType:ra.g.query,scopeId:"alert-details-flyout",isReadOnly:!1}):i.a.createElement(d.EuiEmptyPrompt,{iconType:"error",color:"danger",title:i.a.createElement("h2",null,Object(mt.g)(dt)),body:i.a.createElement("p",null,Object(mt.f)(pt)),"data-test-subj":"securitySolutionAlertDetailsFlyoutTableTabError"})}));sa.displayName="TableTab";const la=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.overviewTab",{defaultMessage:"Overview"}),ca=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.tableTab",{defaultMessage:"Table"}),ua=M.i18n.translate("xpack.securitySolution.flyout.documentDetails.jsonTab",{defaultMessage:"JSON"}),da=[{id:"overview","data-test-subj":"securitySolutionDocumentDetailsFlyoutOverviewTab",name:la,content:i.a.createElement(ia,null)},{id:"table","data-test-subj":"securitySolutionDocumentDetailsFlyoutTableTab",name:ca,content:i.a.createElement(sa,null)},{id:"json","data-test-subj":"securitySolutionDocumentDetailsFlyoutJsonTab",name:ua,content:i.a.createElement(gt,null)}],pa=({selectedTabId:e,tabs:t})=>{const n=Object(a.useMemo)((()=>{var n;return null===(n=t.find((t=>t.id===e)))||void 0===n?void 0:n.content}),[e,t]);return i.a.createElement(d.EuiFlyoutBody,{"data-test-subj":"securitySolutionDocumentDetailsFlyoutBody"},n)};pa.displayName="PanelContent";var ma=n(867),fa=n(573);const ga=()=>{const{closeFlyout:e,openRightPanel:t}=Object(r.c)(),{eventId:n,indexName:o,dataFormattedForFieldBrowser:s,dataAsNestedObject:c,refetchFlyoutData:u,scopeId:d}=Object(l.b)(),{isHostIsolationPanelOpen:p,showHostIsolationPanel:m}=Object(fa.a)(),f=Object(a.useCallback)((e=>{m(e),t({id:"document-details-isolate-host",params:{id:n,indexName:o,scopeId:d,isolateAction:e}})}),[n,o,t,d,m]);return s&&c?i.a.createElement(ma.b,{detailsData:s,detailsEcsData:c,handleOnEventClosed:e,isHostIsolationPanelOpen:p,isReadOnly:!1,loadingEventDetails:!1,onAddIsolationStatusClick:f,scopeId:d,refetchFlyoutData:u}):null},ba="document-details-right",ya=Object(a.memo)((({path:e})=>{const{openRightPanel:t}=Object(r.c)(),{eventId:n,getFieldsData:c,indexName:u,scopeId:d}=Object(l.b)(),p=Object(s.a)(c("event.kind"))===o.a.signal,m=p?da:da.filter((e=>"overview"!==e.id)),f=Object(a.useMemo)((()=>{var t;const n=m[0].id;return e&&null!==(t=m.map((e=>e.id)).find((t=>t===e.tab)))&&void 0!==t?t:n}),[e,m]);return i.a.createElement(i.a.Fragment,null,i.a.createElement(st,{flyoutIsExpandable:p,tabs:m,selectedTabId:f,setSelectedTabId:e=>{t({id:ba,path:{tab:e},params:{id:n,indexName:u,scopeId:d}})}}),i.a.createElement(pa,{tabs:m,selectedTabId:f}),i.a.createElement(ga,null))}));ya.displayName="RightPanel"},function(e,t,n){"use strict";n.d(t,"a",(function(){return l})),n.d(t,"b",(function(){return c}));var a=n(2),i=n(56);const r="popstate";var o=n(1409),s=n.n(o);const l=n(221).a.eventFlyout,c=()=>{const e=Object(a.useRef)(null),t=Object(a.useCallback)((t=>{var n;t&&(null===(n=e.current)||void 0===n||n.openFlyout(t))}),[e]),n=((e,t,n=!0)=>{Object(a.useEffect)((()=>{const n=new URLSearchParams(window.location.search).get(e);if(!n)return;const a=Object(i.decode)(n);a&&t(a)}),[e,t]);const o=Object(a.useCallback)((t=>{const n=new URLSearchParams(window.location.search);if(t){const a=Object(i.encode)(t);n.set(e,a)}else n.delete(e);const a=n.toString(),r=a.length>0?`?${a}`:"";if(window.location.search===r)return;const o=`${window.location.pathname}${window.location.hash}${r}`;window.history.replaceState({path:o},"",o)}),[e]);return Object(a.useEffect)((()=>{const e=()=>{o(void 0)};return n&&window.addEventListener(r,e),()=>{e(),n&&window.removeEventListener(r,e)}}),[n,o]),o})(l,t),o=Object(a.useCallback)((e=>n(e?{...e,preview:s()(e.preview)}:void 0)),[n]);return[e,o]}},,,,,function(e,t,n){"use strict";n.d(t,"f",(function(){return i})),n.d(t,"g",(function(){return r})),n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"c",(function(){return c})),n.d(t,"e",(function(){return u})),n.d(t,"i",(function(){return d})),n.d(t,"h",(function(){return p}));var a=n(5);const i=a.i18n.translate("xpack.securitySolution.usersTable.title",{defaultMessage:"Users"}),r=a.i18n.translate("xpack.securitySolution.usersTable.userNameTitle",{defaultMessage:"User name"}),o=a.i18n.translate("xpack.securitySolution.usersTable.lastSeenTitle",{defaultMessage:"Last seen"}),s=a.i18n.translate("xpack.securitySolution.usersTable.domainTitle",{defaultMessage:"Domain"}),l=a.i18n.translate("xpack.securitySolution.usersTable.rows",{values:{numRows:5},defaultMessage:"{numRows} {numRows, plural, =0 {rows} =1 {row} other {rows}}"}),c=a.i18n.translate("xpack.securitySolution.usersTable.rows",{values:{numRows:10},defaultMessage:"{numRows} {numRows, plural, =0 {rows} =1 {row} other {rows}}"}),u=e=>a.i18n.translate("xpack.securitySolution.usersTable.unit",{values:{totalCount:e},defaultMessage:"{totalCount, plural, =1 {user} other {users}}"}),d=a.i18n.translate("xpack.securitySolution.usersTable.userRiskToolTip",{defaultMessage:"The user's risk score determines its risk classification. Risky users are labeled as critical or high."}),p=a.i18n.translate("xpack.securitySolution.usersTable.riskTitle",{defaultMessage:"User risk classification"})},function(e,t,n){e.exports=n(33)(1220)},,,,,,,,,,,,,,,,,,,,function(e,t,n){e.exports=n(33)(3663)},function(e,t,n){var a=n(717),i=n(715),r=n(716),o=n(258),s=n(1389),l=n(1411),c=n(1412),u=n(1413),d=Object.prototype.hasOwnProperty;e.exports=function(e){if(null==e)return!0;if(s(e)&&(o(e)||"string"==typeof e||"function"==typeof e.splice||l(e)||u(e)||r(e)))return!e.length;var t=i(e);if("[object Map]"==t||"[object Set]"==t)return!e.size;if(c(e))return!a(e).length;for(var n in e)if(d.call(e,n))return!1;return!0}},function(e,t,n){e.exports=n(33)(1216)},function(e,t,n){e.exports=n(33)(1219)},function(e,t,n){e.exports=n(33)(1610)},function(e,t,n){e.exports=n(33)(169)},,,,,function(e,t,n){"use strict";e.exports=n(1420)},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(1421);n(104),n(2),n(1115),n(21),n(406),n(405),n(1116);var i=a.default.bind();["a","abbr","address","area","article","aside","audio","b","base","bdi","bdo","big","blockquote","body","br","button","canvas","caption","cite","code","col","colgroup","data","datalist","dd","del","details","dfn","dialog","div","dl","dt","em","embed","fieldset","figcaption","figure","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","iframe","img","input","ins","kbd","keygen","label","legend","li","link","main","map","mark","marquee","menu","menuitem","meta","meter","nav","noscript","object","ol","optgroup","option","output","p","param","picture","pre","progress","q","rp","rt","ruby","s","samp","script","section","select","small","source","span","strong","style","sub","summary","sup","table","tbody","td","textarea","tfoot","th","thead","time","title","tr","track","u","ul","var","video","wbr","circle","clipPath","defs","ellipse","foreignObject","g","image","line","linearGradient","mask","path","pattern","polygon","polyline","radialGradient","rect","stop","svg","text","tspan"].forEach((function(e){i[e]=i(e)})),t.default=i},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(104),i=n(2),r=n(1115),o=n(21),s=n(406),l=n(405),c=n(1116);function u(e){return e&&e.__esModule?e:{default:e}}function d(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var a=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,a.get?a:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var p=d(i),m=u(r).default,f=function(e){return"theme"!==e},g=function(e){return"string"==typeof e&&e.charCodeAt(0)>96?m:f},b=function(e,t,n){var a;if(t){var i=t.shouldForwardProp;a=e.__emotion_forwardProp&&i?function(t){return e.__emotion_forwardProp(t)&&i(t)}:i}return"function"!=typeof a&&n&&(a=e.__emotion_forwardProp),a},y="undefined"!=typeof document,h=function(e){var t=e.cache,n=e.serialized,a=e.isStringTag;s.registerStyles(t,n,a);var i=c.useInsertionEffectAlwaysWithSyncFallback((function(){return s.insertStyles(t,n,a)}));if(!y&&void 0!==i){for(var r,o=n.name,l=n.next;void 0!==l;)o+=" "+l.name,l=l.next;return p.createElement("style",((r={})["data-emotion"]=t.key+" "+o,r.dangerouslySetInnerHTML={__html:i},r.nonce=t.sheet.nonce,r))}return null};t.default=function e(t,n){var i,r,c=t.__emotion_real===t,u=c&&t.__emotion_base||t;void 0!==n&&(i=n.label,r=n.target);var d=b(t,n,c),m=d||g(u),f=!m("as");return function(){var y=arguments,v=c&&void 0!==t.__emotion_styles?t.__emotion_styles.slice(0):[];if(void 0!==i&&v.push("label:"+i+";"),null==y[0]||void 0===y[0].raw)v.push.apply(v,y);else{v.push(y[0][0]);for(var E=y.length,x=1;x<E;x++)v.push(y[x],y[0][x])}var j=o.withEmotionCache((function(e,t,n){var a=f&&e.as||u,i="",c=[],b=e;if(null==e.theme){for(var y in b={},e)b[y]=e[y];b.theme=p.useContext(o.ThemeContext)}"string"==typeof e.className?i=s.getRegisteredStyles(t.registered,c,e.className):null!=e.className&&(i=e.className+" ");var E=l.serializeStyles(v.concat(c),t.registered,b);i+=t.key+"-"+E.name,void 0!==r&&(i+=" "+r);var x=f&&void 0===d?g(a):m,j={};for(var O in e)f&&"as"===O||x(O)&&(j[O]=e[O]);return j.className=i,j.ref=n,p.createElement(p.Fragment,null,p.createElement(h,{cache:t,serialized:E,isStringTag:"string"==typeof a}),p.createElement(a,j))}));return j.displayName=void 0!==i?i:"Styled("+("string"==typeof u?u:u.displayName||u.name||"Component")+")",j.defaultProps=t.defaultProps,j.__emotion_real=j,j.__emotion_base=u,j.__emotion_styles=v,j.__emotion_forwardProp=d,Object.defineProperty(j,"toString",{value:function(){return"."+r}}),j.withComponent=function(t,i){return e(t,a({},n,i,{shouldForwardProp:b(j,i,!0)})).apply(void 0,v)},j}}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=n(703);function i(e){return e&&e.__esModule?e:{default:e}}var r=/^((children|dangerouslySetInnerHTML|key|ref|autoFocus|defaultValue|defaultChecked|innerHTML|suppressContentEditableWarning|suppressHydrationWarning|valueLink|abbr|accept|acceptCharset|accessKey|action|allow|allowUserMedia|allowPaymentRequest|allowFullScreen|allowTransparency|alt|async|autoComplete|autoPlay|capture|cellPadding|cellSpacing|challenge|charSet|checked|cite|classID|className|cols|colSpan|content|contentEditable|contextMenu|controls|controlsList|coords|crossOrigin|data|dateTime|decoding|default|defer|dir|disabled|disablePictureInPicture|download|draggable|encType|enterKeyHint|form|formAction|formEncType|formMethod|formNoValidate|formTarget|frameBorder|headers|height|hidden|high|href|hrefLang|htmlFor|httpEquiv|id|inputMode|integrity|is|keyParams|keyType|kind|label|lang|list|loading|loop|low|marginHeight|marginWidth|max|maxLength|media|mediaGroup|method|min|minLength|multiple|muted|name|nonce|noValidate|open|optimum|pattern|placeholder|playsInline|poster|preload|profile|radioGroup|readOnly|referrerPolicy|rel|required|reversed|role|rows|rowSpan|sandbox|scope|scoped|scrolling|seamless|selected|shape|size|sizes|slot|span|spellCheck|src|srcDoc|srcLang|srcSet|start|step|style|summary|tabIndex|target|title|translate|type|useMap|value|width|wmode|wrap|about|datatype|inlist|prefix|property|resource|typeof|vocab|autoCapitalize|autoCorrect|autoSave|color|incremental|fallback|inert|itemProp|itemScope|itemType|itemID|itemRef|on|option|results|security|unselectable|accentHeight|accumulate|additive|alignmentBaseline|allowReorder|alphabetic|amplitude|arabicForm|ascent|attributeName|attributeType|autoReverse|azimuth|baseFrequency|baselineShift|baseProfile|bbox|begin|bias|by|calcMode|capHeight|clip|clipPathUnits|clipPath|clipRule|colorInterpolation|colorInterpolationFilters|colorProfile|colorRendering|contentScriptType|contentStyleType|cursor|cx|cy|d|decelerate|descent|diffuseConstant|direction|display|divisor|dominantBaseline|dur|dx|dy|edgeMode|elevation|enableBackground|end|exponent|externalResourcesRequired|fill|fillOpacity|fillRule|filter|filterRes|filterUnits|floodColor|floodOpacity|focusable|fontFamily|fontSize|fontSizeAdjust|fontStretch|fontStyle|fontVariant|fontWeight|format|from|fr|fx|fy|g1|g2|glyphName|glyphOrientationHorizontal|glyphOrientationVertical|glyphRef|gradientTransform|gradientUnits|hanging|horizAdvX|horizOriginX|ideographic|imageRendering|in|in2|intercept|k|k1|k2|k3|k4|kernelMatrix|kernelUnitLength|kerning|keyPoints|keySplines|keyTimes|lengthAdjust|letterSpacing|lightingColor|limitingConeAngle|local|markerEnd|markerMid|markerStart|markerHeight|markerUnits|markerWidth|mask|maskContentUnits|maskUnits|mathematical|mode|numOctaves|offset|opacity|operator|order|orient|orientation|origin|overflow|overlinePosition|overlineThickness|panose1|paintOrder|pathLength|patternContentUnits|patternTransform|patternUnits|pointerEvents|points|pointsAtX|pointsAtY|pointsAtZ|preserveAlpha|preserveAspectRatio|primitiveUnits|r|radius|refX|refY|renderingIntent|repeatCount|repeatDur|requiredExtensions|requiredFeatures|restart|result|rotate|rx|ry|scale|seed|shapeRendering|slope|spacing|specularConstant|specularExponent|speed|spreadMethod|startOffset|stdDeviation|stemh|stemv|stitchTiles|stopColor|stopOpacity|strikethroughPosition|strikethroughThickness|string|stroke|strokeDasharray|strokeDashoffset|strokeLinecap|strokeLinejoin|strokeMiterlimit|strokeOpacity|strokeWidth|surfaceScale|systemLanguage|tableValues|targetX|targetY|textAnchor|textDecoration|textRendering|textLength|to|transform|u1|u2|underlinePosition|underlineThickness|unicode|unicodeBidi|unicodeRange|unitsPerEm|vAlphabetic|vHanging|vIdeographic|vMathematical|values|vectorEffect|version|vertAdvY|vertOriginX|vertOriginY|viewBox|viewTarget|visibility|widths|wordSpacing|writingMode|x|xHeight|x1|x2|xChannelSelector|xlinkActuate|xlinkArcrole|xlinkHref|xlinkRole|xlinkShow|xlinkTitle|xlinkType|xmlBase|xmlns|xmlnsXlink|xmlLang|xmlSpace|y|y1|y2|yChannelSelector|z|zoomAndPan|for|class|autofocus)|(([Dd][Aa][Tt][Aa]|[Aa][Rr][Ii][Aa]|x)-.*))$/,o=i(a).default((function(e){return r.test(e)||111===e.charCodeAt(0)&&110===e.charCodeAt(1)&&e.charCodeAt(2)<91}));t.default=o},function(e,t,n){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var a=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,a.get?a:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}Object.defineProperty(t,"__esModule",{value:!0});var i=a(n(2)),r="undefined"!=typeof document,o=!!i.useInsertionEffect&&i.useInsertionEffect,s=r&&o||function(e){return e()},l=o||i.useLayoutEffect;t.useInsertionEffectAlwaysWithSyncFallback=s,t.useInsertionEffectWithLayoutFallback=l},,,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"c",(function(){return s})),n.d(t,"d",(function(){return l})),n.d(t,"e",(function(){return c})),n.d(t,"g",(function(){return u})),n.d(t,"h",(function(){return d})),n.d(t,"b",(function(){return p})),n.d(t,"f",(function(){return m}));var a=n(40),i=n(41),r=n.n(i);const o="siemEventsTable",s=r.a.div.withConfig({displayName:"FullScreenContainer",componentId:"sc-1a6qah7-0"})(["height:",";flex:1 1 auto;display:flex;width:100%;"],(({$isFullScreen:e})=>e?"100%":void 0)),l=r()(a.EuiFlexGroup).withConfig({displayName:"FullWidthFlexGroupTable",componentId:"sc-1a6qah7-1"})(["overflow:hidden;margin:0;display:",";"],(({$visible:e})=>e?"flex":"none")),c=r()(a.EuiFlexItem).withConfig({displayName:"ScrollableFlexItem",componentId:"sc-1a6qah7-2"})(["overflow:auto;"]),u=(r()(a.EuiFlexGroup).withConfig({displayName:"FullWidthFlexGroup",componentId:"sc-1a6qah7-3"})(["overflow:hidden;margin:0;min-height:490px;display:",";"],(({$visible:e=!0})=>e?"flex":"none")),r()(a.EuiFlexGroup).withConfig({displayName:"UpdatedFlexGroup",componentId:"sc-1a6qah7-4"})([""," ",";display:inline-flex;z-index:",";",""],(({$hasRightOffset:e,theme:t,position:n})=>"relative"===n?`margin-right: ${t.eui.euiSizeXS}; margin-left: `:e&&"absolute"===n?`margin-right: ${t.eui.euiSizeXL};`:`margin-right: ${t.eui.euiSizeXS};`),(({position:e})=>"absolute"===e?"position: absolute":"display: flex; justify-content:center; align-items:center"),(({theme:e})=>e.eui.euiZLevel1-3),(({$hasRightOffset:e,theme:t,position:n})=>"relative"===n?"right: 0;":e&&"absolute"===n?`right: ${t.eui.euiSizeXL};`:`right: ${t.eui.euiSizeL};`))),d=r()(a.EuiFlexItem).withConfig({displayName:"UpdatedFlexItem",componentId:"sc-1a6qah7-5"})(["",""],(({$show:e})=>e?"":"visibility: hidden;")),p=r.a.div.attrs((({className:e=""})=>({className:`securitySolutionTimeline__container ${e}`}))).withConfig({displayName:"EventsContainerLoading",componentId:"sc-1a6qah7-6"})(["position:relative;width:100%;overflow:hidden;flex:1;display:flex;flex-direction:column;"]),m=r()(a.EuiPanel).withConfig({displayName:"StyledEuiPanel",componentId:"sc-1a6qah7-7"})(["display:flex;flex-direction:column;position:relative;width:100%;",""],(({$isFullScreen:e})=>e&&"\n    border: 0;\n    box-shadow: none;\n    padding-top: 0;\n    padding-bottom: 0;\n"))},,,,,,,,,,,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var a=n(2),i=n(103),r=n(13),o=n(119),s=n(161),l=n(102),c=n(4),u=n(116),d=n(660),p=n(832),m=n(164),f=n(111),g=n(242),b=n(135),y=n(118),h=n(106),v=n(1045);const{setEventsLoading:E,setSelected:x}=o.h,j=({localFilters:e,tableId:t,from:n,to:j,scopeId:O})=>{const[S,k]=Object(a.useState)(!1),{browserFields:w,dataViewId:I,runtimeMappings:T,indexPattern:C,selectedPatterns:M}=Object(u.d)(O),A=Object(i.useDispatch)(),{uiSettings:_}=Object(l.j)().services,{filters:F,dataTable:{selectAll:D,totalCount:N,sort:P,selectedEventIds:R}=o.q}=Object(i.useSelector)((e=>Object(p.a)(e,t))),L=Object(a.useMemo)((()=>Object(r.getEsQueryConfig)(_)),[_]),q=P.map((({columnId:e,columnType:t,esTypes:n,sortDirection:a})=>({field:e,direction:a,esTypes:null!=n?n:[],type:t}))),B=Object(a.useMemo)((()=>[...e,...F]),[e,F]),z=Object(s.d)({config:L,dataProviders:[],indexPattern:C,filters:B,kqlQuery:{query:"",language:"kuery"},browserFields:w,kqlMode:"filter"}),$=Object(a.useMemo)((()=>z?z.filterQuery:""),[z]),[,,V]=Object(d.b)({dataViewId:I,endDate:j,startDate:n,id:t,fields:["_id","timestamp"],sort:q,indexNames:M,filterQuery:$,runtimeMappings:T,limit:Math.min(c.o,N),timerangeKind:"absolute"});Object(a.useEffect)((()=>{D&&N>c.o?k(!0):k(!1)}),[D,N]);const U=Object(g.a)({timelineId:y.c.active,timelineType:h.l.default}),G=Object(a.useCallback)((e=>A(f.a.updateIsLoading(e))),[A]),H=Object(a.useCallback)((({timeline:e,ruleNote:t,timeline:{filters:a}})=>{var i;U(),G({id:y.c.active,isLoading:!1}),Object(m.b)(A)({duplicate:!0,from:n,id:y.c.active,notes:[],timeline:{...e,indexNames:null!==(i=e.indexNames)&&void 0!==i?i:[],show:!0,filters:a},to:j,ruleNote:t})()}),[A,G,U,n,j]),W=Object(a.useCallback)((e=>{Object(v.b)(H,e.map((e=>e.ecs)),"KqlFilter"),A(x({id:t,isSelectAllChecked:!1,isSelected:!1,eventIds:R}))}),[A,H,R,t]),Q=Object(a.useCallback)(((e,n,a,i)=>{if(!e)return;if(n||D)return t===o.e.alertsOnAlertsPage?a(!0):A(E({id:t,isLoading:!0,eventIds:Object.keys(R)})),void V((e=>{W(e.events),t===o.e.alertsOnAlertsPage?(a(!1),i()):A(E({id:t,isLoading:!1,eventIds:Object.keys(R)}))}));W(e),i()}),[A,R,t,V,D,W]),Y=Object(a.useMemo)((()=>S?`${b.D} ( max ${c.o} )`:b.D),[S]);return Object(a.useMemo)((()=>({label:Y,key:"add-bulk-to-timeline","data-test-subj":"investigate-bulk-in-timeline",disableOnQuery:S,onClick:Q})),[S,Y,Q])}},,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return m}));var a=n(2),i=n.n(a),r=n(103),o=n(171),s=n(119),l=n(58),c=n(4),u=n(1382),d=n(877);const p=({columnHeaders:e,controlColumn:t,data:n,disabled:p,index:m,isEventViewer:f,loadingEventIds:g,onRowSelected:b,onRuleChange:y,pageRowIndex:h,rowIndex:v,selectedEventIds:E,showCheckboxes:x,tabType:j,tableId:O,setEventsLoading:S,setEventsDeleted:k,width:w,refetch:I})=>{const{data:T,ecs:C,_id:M,_index:A}=null!=n?n:{},{openFlyout:_}=Object(o.c)(),F=Object(r.useDispatch)(),[D]=Object(l.useUiSetting$)(c.lb),N=Object(a.useMemo)((()=>T&&e.map((e=>{var t;return null!==(t=Object(d.b)({data:T,fieldName:e.id}))&&void 0!==t?t:[]})).join(" ")),[e,T]),P=Object(a.useCallback)((()=>{const e={panelView:"eventDetail",params:{eventId:null!=M?M:"",indexName:null!=A?A:""}};D&&O!==s.e.rulePreview?_({right:{id:u.b,params:{id:M,indexName:A,scopeId:O}}}):F(s.h.toggleDetailPanel({...e,tabType:j,id:O}))}),[F,M,A,D,_,j,O]),R=t.rowCellRender;return T&&C&&M?i.a.createElement(i.a.Fragment,null,R&&i.a.createElement(R,{ariaRowindex:h+1,checked:Object.keys(E).includes(M),columnId:t.id||"",columnValues:N||"",data:T,"data-test-subj":"actions",disabled:p,ecsData:C,eventId:M,index:m,isEventViewer:f,loadingEventIds:g,onEventDetailsPanelOpened:P,onRowSelected:b,onRuleChange:y,rowIndex:v,showCheckboxes:x,tabType:j,timelineId:O,width:w,setEventsLoading:S,setEventsDeleted:k,refetch:I})):i.a.createElement("span",{"data-test-subj":"noData"})},m=i.a.memo(p)},,,,,,,,,,,,,,,,,function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var a=n(119),i=n(2),r=n.n(i),o=n(41),s=n.n(o),l=n(124),c=n(149),u=n(1428),d=n(40),p=n(14),m=n(5),f=n(4);const g=new p.Storage(localStorage),b=s.a.div.withConfig({displayName:"ContainerEuiSelectable",componentId:"sc-134jgj0-0"})(["width:300px;.euiSelectableListItem__text{white-space:pre-wrap !important;line-height:normal;}"]),y=m.i18n.translate("xpack.securitySolution.selector.summaryView.gridView.label",{defaultMessage:"Grid view"}),h=m.i18n.translate("xpack.securitySolution.selector.summaryView.eventRendererView.label",{defaultMessage:"Event rendered view"}),v=({viewSelected:e,onViewChange:t})=>{const[n,a]=Object(i.useState)(!1),o=Object(i.useCallback)((()=>a((e=>!e))),[]),s=Object(i.useCallback)((()=>a(!1)),[]),l=Object(i.useCallback)((e=>{var n,i;const r=e.filter((e=>"on"===e.checked));var o,s;g.set(f.f,null!==(n=null===(i=r[0])||void 0===i?void 0:i.key)&&void 0!==n?n:"gridView"),r.length>0&&t(null!==(o=null===(s=r[0])||void 0===s?void 0:s.key)&&void 0!==o?o:"gridView"),a(!1)}),[t]),c=Object(i.useMemo)((()=>r.a.createElement(d.EuiButtonEmpty,{iconType:"arrowDown",iconSide:"right",iconSize:"s",onClick:o,size:"xs",flush:"both",style:{fontWeight:"normal"}},"gridView"===e?y:h)),[o,e]),u=Object(i.useMemo)((()=>[{label:y,"data-test-subj":"gridView",key:"gridView",checked:"gridView"===e?"on":void 0,meta:[{text:m.i18n.translate("xpack.securitySolution.selector.summaryView.options.default.description",{defaultMessage:"View as tabular data with the ability to group and sort by specific fields"})}]},{label:h,"data-test-subj":"eventRenderedView",key:"eventRenderedView",checked:"eventRenderedView"===e?"on":void 0,meta:[{text:m.i18n.translate("xpack.securitySolution.selector.summaryView.options.summaryView.description",{defaultMessage:"View a rendering of the event flow for each alert"})}]}]),[e]),p=Object(i.useCallback)((e=>r.a.createElement(r.a.Fragment,null,r.a.createElement(d.EuiTitle,{size:"xxs"},r.a.createElement("h6",null,e.label)),r.a.createElement(d.EuiTextColor,{color:"subdued"},r.a.createElement("small",null,e.meta[0].text)))),[]),v=Object(i.useMemo)((()=>({rowHeight:80,showIcons:!0})),[]);return r.a.createElement(d.EuiPopover,{panelPaddingSize:"none",button:c,isOpen:n,closePopover:s},r.a.createElement(b,null,r.a.createElement(d.EuiSelectable,{options:u,onChange:l,renderOption:p,searchable:!1,height:160,listProps:v,singleSelection:!0},(e=>e))))},E=r.a.memo(v),x=s.a.span.withConfig({displayName:"TitleText",componentId:"sc-fudkl1-0"})(["margin-right:12px;"]),j=({tableView:e,loading:t,tableId:n,title:o,onViewChange:s,additionalFilters:d,hasRightOffset:p,showInspect:m=!0,position:f="absolute",additionalMenuOptions:g=[]})=>{const b="gridView"===e?"baseline":"center",y=Object(i.useMemo)((()=>r.a.createElement(x,{"data-test-subj":"title"},o)),[o]),h=Object(l.a)("tGridEventRenderedViewEnabled"),v=Object(i.useMemo)((()=>g.length?g.map(((e,n)=>r.a.createElement(u.h,{grow:!1,$show:!t,key:n},e))):null),[g,t]);return r.a.createElement(u.g,{alignItems:b,"data-test-subj":"events-viewer-updated",gutterSize:"m",component:"span",justifyContent:"flexEnd",direction:"row",$hasRightOffset:p,position:f},m?r.a.createElement(u.h,{grow:!1,$show:!t},r.a.createElement(c.b,{title:y,queryId:n})):null,r.a.createElement(u.h,{grow:!1,$show:!t},d),h&&[a.e.alertsOnRuleDetailsPage,a.e.alertsOnAlertsPage].includes(n)&&r.a.createElement(u.h,{grow:!1,$show:!t,"data-test-subj":"summary-view-selector"},r.a.createElement(E,{viewSelected:e,onViewChange:s})),v)}},,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,function(e,t,n){"use strict";n.r(t),n.d(t,"registerAlertsTableConfiguration",(function(){return be}));var a=n(119),i=n(1060);const r=e=>({onToggleColumn:t})=>({createFieldButton:Object(i.a)({sourcererScope:e,removeColumn:t,upsertColumn:e=>{t(e.id)}}).createFieldButton});var o=n(2),s=n.n(o),l=n(165),c=n(289),u=n(4),d=n(110),p=n(105),m=n(1034);const f=e=>({columns:t,data:n,dataGridRef:i})=>{var r;const s=Object(m.a)(d.SourcererScopeName.detections),f=Object(o.useMemo)((()=>n.map((e=>e.map((e=>{let t=e;if(["_id","_index"].includes(e.field)){var n;const a=null!==(n=e.value)&&void 0!==n?n:"";t={field:e.field,value:Array.isArray(a)?a:[a]}}return t}))))),[n]),g=Object(o.useMemo)((()=>a.j.getTableByIdSelector()),[]),b=null!==(r=Object(p.b)((t=>{var n;return(null!==(n=g(t,e))&&void 0!==n?n:a.q).viewMode})))&&void 0!==r?r:a.q.viewMode,y=Object(o.useMemo)((()=>({scopeId:e})),[]),h=Object(o.useMemo)((()=>{if(b!==u.Jc.eventRenderedView)return t.map((e=>{var t;return null!==(t=s(e.id))&&void 0!==t?t:{name:"",type:"",aggregatable:!1,searchable:!1}}))}),[s,t,b]),v=Object(o.useCallback)(((e,t)=>{var n,a;const i=t%f.length;return null!==(n=null===(a=f[i].find((t=>t.field===e)))||void 0===a?void 0:a.value)&&void 0!==n?n:[]}),[f]),E=e===a.e.alertsOnCasePage?[c.a.FILTER]:void 0,x=Object(l.e)({triggerId:c.b.DEFAULT,fields:h,getCellValue:v,metadata:y,dataGridRef:i,disabledActionTypes:E});return{getCellActions:Object(o.useCallback)(((e,t)=>0===x.length?[]:x[t]),[x]),visibleCellActions:3}};var g=n(8),b=n(1123),y=n(122),h=n(134),v=n(1441),E=n(49),x=n(719),j=n(410),O=n(108),S=n(159),k=n(142),w=n(5);w.i18n.translate("xpack.securitySolution.toolbar.bulkActions.clearSelectionTitle",{defaultMessage:"Clear selection"});const I=e=>w.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailed",{values:{conflicts:e},defaultMessage:"Failed to update { conflicts } {conflicts, plural, =1 {alert} other {alerts}}."}),T=(e,t)=>w.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailedDetailed",{values:{updated:e,conflicts:t},defaultMessage:"{ updated } {updated, plural, =1 {alert was} other {alerts were}} updated successfully, but { conflicts } failed to update\n         because { conflicts, plural, =1 {it was} other {they were}} already being modified."}),C=w.i18n.translate("xpack.securitySolution.bulkActions.closedAlertFailedToastMessage",{defaultMessage:"Failed to close alert(s)."}),M=w.i18n.translate("xpack.securitySolution.bulkActions.openedAlertFailedToastMessage",{defaultMessage:"Failed to open alert(s)"}),A=w.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedAlertFailedToastMessage",{defaultMessage:"Failed to mark alert(s) as acknowledged"}),_=w.i18n.translate("xpack.securitySolution.bulkActions.updateAlertStatusFailedSingleAlert",{defaultMessage:"Failed to update alert because it was already being modified."}),F=w.i18n.translate("xpack.securitySolution.bulkActions.openSelectedTitle",{defaultMessage:"Mark as open"}),D=w.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedSelectedTitle",{defaultMessage:"Mark as acknowledged"}),N=w.i18n.translate("xpack.securitySolution.bulkActions.closeSelectedTitle",{defaultMessage:"Mark as closed"});var P=n(501);const R=e=>t=>{const{from:n,to:a}=Object(h.a)(),i=function(e){return t=e,[{bool:{must:[{match_all:{}}]}},{bool:{filter:[],must:[{match_all:{}}],must_not:[]}},{bool:{filter:[],must:[{match_all:{}}]}},{bool:{must:[{match_all:{}}],must_not:[]}},{match_all:{}}].some((e=>Object(g.isEqual)(e,t)))?[]:[{meta:{negate:!1,disabled:!1,type:"custom",value:JSON.stringify(e)},query:e}];var t}(t),r=y.d.globalQuery(),s=Object(p.b)((e=>r(e))),l=Object(o.useCallback)((()=>{s.forEach((e=>e.refetch&&e.refetch()))}),[s]),c=Object(v.a)({localFilters:i,from:n,to:a,scopeId:d.SourcererScopeName.detections,tableId:e}),u=(({scopeId:e,filters:t,from:n,to:a,refetch:i})=>{const{startTransaction:r}=Object(S.b)(),{addSuccess:s,addError:l,addWarning:c}=Object(O.a)(),u=Object(o.useCallback)(((e,t,n)=>{if(t>0)c({title:I(t),text:T(e,t)});else{let t;switch(n){case"closed":a=e,t=w.i18n.translate("xpack.securitySolution.bulkActions.closedAlertSuccessToastMessage",{values:{totalAlerts:a},defaultMessage:"Successfully closed {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."});break;case"open":t=(e=>w.i18n.translate("xpack.securitySolution.bulkActions.openedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully opened {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}}."}))(e);break;case"acknowledged":t=(e=>w.i18n.translate("xpack.securitySolution.bulkActions.acknowledgedAlertSuccessToastMessage",{values:{totalAlerts:e},defaultMessage:"Successfully marked {totalAlerts} {totalAlerts, plural, =1 {alert} other {alerts}} as acknowledged."}))(e)}s({title:t})}var a}),[s,c]),d=Object(o.useCallback)(((e,t)=>{let n;switch(e){case"closed":n=C;break;case"open":n=M;break;case"acknowledged":n=A}l(t.message,{title:n})}),[l]),p=Object(o.useCallback)((e=>async(o,s,l,c,p)=>{let m,f=o.map((e=>e._id));if(s){const e=Object(P.a)(n,a);m=Object(E.buildEsQuery)(void 0,[],[...e,...t],void 0),f=void 0,r({name:x.a.BULK_QUERY_STATUS_UPDATE})}else o.length>1?r({name:x.a.BULK_STATUS_UPDATE}):r({name:x.a.STATUS_UPDATE});try{var g,b;l(!0);const t=await Object(j.a)({status:e,query:m,signalIds:f});if(l(!1),i&&i(),p(),c(),t.version_conflicts&&1===o.length)throw new Error(_);u(null!==(g=t.updated)&&void 0!==g?g:0,null!==(b=t.version_conflicts)&&void 0!==b?b:0,e)}catch(t){d(e,t)}}),[d,u,r,t,n,a,i]),m=Object(o.useCallback)((e=>({label:e===k.d?F:e===k.c?N:D,key:`${e}-alert-status`,"data-test-subj":`${e}-alert-status`,disableOnQuery:!1,onClick:p(e)})),[p]);return[k.d,k.c,k.b].map((e=>m(e)))})({scopeId:d.SourcererScopeName.detections,filters:i,from:n,to:a,tableId:e,refetch:l}),{alertTagsItems:m,alertTagsPanels:f}=Object(b.a)({refetch:l});return[{id:0,items:[...u,c,...m]},...f]};var L=n(103),q=n(923),B=n(832),z=n(1117),$=n(17),V=n(312),U=n(1484);const G=e=>()=>{const t=Object($.b)(),n=t.isEnterprise()?5:4,a=Object(o.useContext)(q.a),i=Object(o.useMemo)((()=>Object(z.a)(n)[0]),[n]),{dataTable:{columns:r,showCheckboxes:l,selectedEventIds:c,loadingEventIds:u}=Object(V.f)(t)}=Object(L.useSelector)((t=>Object(B.a)(t,e))),d=r;return{renderCustomActionsRow:Object(o.useCallback)((({rowIndex:t,cveProps:n,setIsActionLoading:r,refresh:o,clearSelection:p,ecsAlert:m,nonEcsData:f})=>{const g={_id:m._id,_index:m._index,ecs:m,data:f};return s.a.createElement(U.a,{columnId:`actions-${t}`,columnHeaders:d,controlColumn:i,data:g,disabled:!1,index:t,isDetails:n.isDetails,isExpanded:n.isExpanded,isEventViewer:!1,isExpandable:n.isExpandable,loadingEventIds:u,onRowSelected:()=>{},rowIndex:n.rowIndex,colIndex:n.colIndex,pageRowIndex:t,selectedEventIds:c,setCellProps:n.setCellProps,showCheckboxes:l,onRuleChange:null==a?void 0:a.onRuleChange,tabType:"query",tableId:e,width:0,setEventsLoading:({isLoading:e})=>{e?r&&r(e):p()},setEventsDeleted:()=>{},refetch:o})}),[d,u,l,i,c,a]),width:i.width}};var H=n(1100),W=n(735),Q=n(1101),Y=n(116),K=n(708),X=n(102),J=n(18),Z=n(1048),ee=n(1501),te=n(40),ne=n(41),ae=n.n(ne),ie=n(317),re=n(1096);const oe=ae()(te.EuiFlexGroup).withConfig({displayName:"UtilityBarFlexGroup",componentId:"sc-180vpo0-0"})(["min-width:175px;"]),se=ae()(te.EuiFlexItem).withConfig({displayName:"AdditionalFiltersItem",componentId:"sc-180vpo0-1"})(["padding:",";"],(({theme:e})=>e.eui.euiSizeS)),le=ae()(se).withConfig({displayName:"BuildingBlockContainer",componentId:"sc-180vpo0-2"})(["background:",";"],(({theme:e})=>e.eui.euiColorHighlight)),ce=({areEventsLoading:e,onShowBuildingBlockAlertsChanged:t,showBuildingBlockAlerts:n,onShowOnlyThreatIndicatorAlertsChanged:a,showOnlyThreatIndicatorAlerts:i})=>{const r=Object(o.useCallback)((e=>s.a.createElement(oe,{direction:"column",gutterSize:"none"},s.a.createElement(le,null,s.a.createElement(te.EuiCheckbox,{id:"showBuildingBlockAlertsCheckbox","aria-label":"showBuildingBlockAlerts",onChange:n=>{e(),t(n.target.checked)},checked:n,color:"text","data-test-subj":"showBuildingBlockAlertsCheckbox",label:re.b})),s.a.createElement(se,null,s.a.createElement(te.EuiCheckbox,{id:"showOnlyThreatIndicatorAlertsCheckbox","aria-label":"showOnlyThreatIndicatorAlerts",onChange:t=>{e(),a(t.target.checked)},checked:i,color:"text","data-test-subj":"showOnlyThreatIndicatorAlertsCheckbox",label:re.c})))),[t,a,n,i]);return s.a.createElement(ie.b,{dataTestSubj:"additionalFilters",disabled:e,iconType:"arrowDown",iconSide:"right",ownFocus:!0,popoverContent:r},re.a)},{changeViewMode:ue}=a.h,de=e=>()=>{var t;const n=Object(L.useDispatch)(),{services:{telemetry:i}}=Object(X.j)(),{indexPattern:r}=Object(Y.d)(d.SourcererScopeName.detections),{options:l}=null!==(t=Object(p.a)((t=>Object(Q.a)()(t,e))))&&void 0!==t?t:{options:[]},c=Object(o.useCallback)((t=>{null===J.h||void 0===J.h||Object(J.h)(J.a.CLICK,W.a.groupChanged({groupingId:e,selected:t})),i.reportAlertsGroupingChanged({groupByField:t,tableId:e})}),[i]),u=Object(o.useCallback)((t=>{t.forEach((e=>c(e))),n(Object(K.a)({activeGroups:t,tableId:e}))}),[n,c]),m=Object(H.b)({groupingId:e,onGroupChange:u,fields:r.fields,defaultGroupingOptions:l,maxGroupingLevels:3}),f=Object(o.useMemo)((()=>a.j.getTableByIdSelector()),[]),g=Object(p.b)((t=>{var n,i;return null!==(n=(null!==(i=f(t,e))&&void 0!==i?i:a.q).viewMode)&&void 0!==n?n:a.q.viewMode})),b=Object(o.useCallback)((t=>{n(ue({id:e,viewMode:t}))}),[n]),{showBuildingBlockAlerts:y,setShowBuildingBlockAlerts:h,showOnlyThreatIndicatorAlerts:v,setShowOnlyThreatIndicatorAlerts:E}=Object(Z.a)(e),x=Object(o.useMemo)((()=>s.a.createElement(ce,{areEventsLoading:!1,onShowBuildingBlockAlertsChanged:h,showBuildingBlockAlerts:y,onShowOnlyThreatIndicatorAlertsChanged:E,showOnlyThreatIndicatorAlerts:v})),[y,h,v,E]);return{right:Object(o.useMemo)((()=>s.a.createElement(ee.a,{position:"relative",tableView:g,loading:!1,tableId:e,title:"Some Title",onViewChange:b,hasRightOffset:!1,additionalFilters:x,showInspect:!1,additionalMenuOptions:null!=m?[m]:[]})),[g,b,x,m])}};var pe=n(714),me=n(1047),fe=n(734),ge=n(867);const be=(e,t)=>{var n,i;const o=Object(pe.b)(t,[a.e.alertsOnAlertsPage]),s=null!==(n=null==o||null===(i=o[a.e.alertsOnAlertsPage])||void 0===i?void 0:i.columns)&&void 0!==n?n:[],l=s.length?s:Object(me.b)(),c=()=>{const{header:e,body:t,footer:n}=Object(ge.d)();return{header:e,body:t,footer:n}},p=Object(fe.b)({scopeId:d.SourcererScopeName.detections,tableId:a.e.alertsOnAlertsPage}),m=Object(fe.b)({scopeId:d.SourcererScopeName.detections,tableId:a.e.alertsOnCasePage}),g=[{"@timestamp":{order:"desc"}}];ye(e,{id:u.e.ALERTS_PAGE,cases:{featureId:u.q,owner:[u.i],syncAlerts:!0},columns:l,getRenderCellValue:p,useActionsColumn:G(a.e.alertsOnAlertsPage),useInternalFlyout:c,useBulkActions:R(a.e.alertsOnAlertsPage),useCellActions:f(a.e.alertsOnAlertsPage),usePersistentControls:de(a.e.alertsOnAlertsPage),sort:g,useFieldBrowserOptions:r(d.SourcererScopeName.detections),showInspectButton:!0}),ye(e,{id:u.e.RULE_DETAILS,cases:{featureId:u.q,owner:[u.i],syncAlerts:!0},columns:l,getRenderCellValue:p,useActionsColumn:G(a.e.alertsOnRuleDetailsPage),useInternalFlyout:c,useBulkActions:R(a.e.alertsOnRuleDetailsPage),useCellActions:f(a.e.alertsOnRuleDetailsPage),usePersistentControls:de(a.e.alertsOnRuleDetailsPage),sort:g,useFieldBrowserOptions:r(d.SourcererScopeName.detections),showInspectButton:!0}),ye(e,{id:u.e.CASE,cases:{featureId:u.q,owner:[u.i],syncAlerts:!0},columns:l,getRenderCellValue:m,useInternalFlyout:c,useBulkActions:R(a.e.alertsOnCasePage),useCellActions:f(a.e.alertsOnCasePage),sort:g,showInspectButton:!0}),ye(e,{id:u.e.RISK_INPUTS,cases:{featureId:u.q,owner:[u.i],syncAlerts:!0},columns:l,getRenderCellValue:p,useActionsColumn:G(a.e.alertsRiskInputs),useInternalFlyout:c,useBulkActions:R(a.e.alertsRiskInputs),useCellActions:f(a.e.alertsRiskInputs),usePersistentControls:de(a.e.alertsRiskInputs),sort:g,showInspectButton:!0})},ye=(e,t)=>{e.has(t.id)||e.register(t)}}])]);