/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements. * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */ (window.securitySolution_bundle_jsonpfunction=window.securitySolution_bundle_jsonpfunction||[]).push([[45],{1670:function(e,t,a){"use strict";a.r(t),a.d(t,"EqlTabContentComponent",(function(){return de})),a.d(t,"default",(function(){return se}));var i=a(40),n=a(42),l=a(2),r=a.n(l),o=a(41),d=a.n(o),s=a(103),u=a(130),c=a.n(u),m=a(365),p=a(114),g=a(111),y=a(660),b=a(190),E=a(1493),f=a(1505),v=a(148),q=a(1535),h=a(118),O=a(312),j=a(722),w=a(378),F=a(1429),C=a(122),P=a(110),S=a(133),x=a(116),I=a(519),k=a(1542),B=a(178),T=a(302),N=a(690),Q=a(8),D=a(105),V=a(1124),L=a(750),$=a(125);const M=a(5).i18n.translate("xpack.securitySolution.timeline.EqlQueryBarLabel",{defaultMessage:"EQL query"});var _=a(139),z=a(376);const H={index:[],eqlQueryBar:{query:{query:"",language:"eql"},filters:[],saved_id:null}},R={index:{fieldsToValidateOnChange:["index","eqlQueryBar"],validations:[]},eqlQueryBar:{validations:[{validator:Object(L.a)(L.b,300)}]}},K=d()($.e).withConfig({displayName:"HiddenUseField",componentId:"sc-jqevx7-0"})(["display:none;"]),A=Object(l.memo)((({timelineId:e})=>{var t;const a=Object(s.useDispatch)(),i=Object(l.useRef)(!0),[n,o]=Object(l.useState)(!1),[d,u]=Object(l.useState)(!1),c=Object(l.useMemo)((()=>Object(_.createSelector)(z.selectTimeline,(e=>{var t;return null!==(t=null==e?void 0:e.eqlOptions)&&void 0!==t?t:{eventCategoryField:[{label:"event.category"}],tiebreakerField:[{label:""}],timestampField:[{label:"@timestamp"}],size:100,query:""}}))),[]),m=Object(D.a)((t=>c(t,e))),{loading:p,indexPattern:y,selectedPatterns:b}=Object(x.d)(P.SourcererScopeName.timeline),E={...H,index:b.sort(),eqlQueryBar:{...H.eqlQueryBar,query:{query:null!==(t=m.query)&&void 0!==t?t:"",language:"eql"}}},{form:f}=Object($.k)({defaultValue:E,options:{stripEmptyFields:!1},schema:R}),{getFields:v}=f,q=Object(l.useCallback)(((t,i)=>a(g.a.updateEqlOptions({id:e,field:t,value:i}))),[a,e]),[{eqlQueryBar:h}]=Object($.m)({form:f,watch:["eqlQueryBar"]}),O=Object(l.useRef)(""),j=Object(l.useMemo)((()=>Object(Q.isEmpty)(y.fields)?{keywordFields:[],dateFields:[],nonDateFields:[]}:{keywordFields:y.fields.filter((e=>{var t;return null===(t=e.esTypes)||void 0===t?void 0:t.includes("keyword")})).map((e=>({label:e.name}))),dateFields:y.fields.filter((e=>"date"===e.type)).map((e=>({label:e.name}))),nonDateFields:y.fields.filter((e=>"date"!==e.type)).map((e=>({label:e.name})))}),[y]);return Object(l.useEffect)((()=>{const{index:e}=v(),t=b.sort(),a=e.value.sort();Object(Q.isEqual)(a,t)||e.setValue(t)}),[v,b]),Object(l.useEffect)((()=>{const{eqlQueryBar:e}=v();var t;return i.current&&(i.current=!1,u(!0),e.setValue({...H.eqlQueryBar,query:{query:null!==(t=m.query)&&void 0!==t?t:"",language:"eql"}})),()=>{i.current=!0}}),[v,m.query]),Object(l.useEffect)((()=>{null!=h&&O.current!==h.query.query&&n&&!d&&(O.current=h.query.query,a(g.a.updateEqlOptions({id:e,field:"query",value:`${h.query.query}`})),o(!1),u(!1))}),[a,h,n,d,e]),r.a.createElement($.c,{form:f,"data-test-subj":"EqlQueryBarTimeline"},r.a.createElement(K,{key:"Index",path:"index"}),r.a.createElement($.e,{key:"EqlQueryBar",path:"eqlQueryBar",component:V.a,componentProps:{optionsData:j,optionsSelected:m,onOptionsChange:q,onValidityChange:o,onValiditingChange:u,idAria:"timelineEqlQueryBar",isDisabled:p,isLoading:p,indexPattern:y,dataTestSubj:"timelineEqlQueryBar"},config:{...R.eqlQueryBar,label:M}}))}));var G=a(1117),U=a(1445),W=a(17),J=a(652);const X=d.a.div.withConfig({displayName:"TimelineHeaderContainer",componentId:"sc-lpvn1k-0"})(["margin-top:6px;width:100%;"]);X.displayName="TimelineHeaderContainer";const Y=d()(i.EuiFlyoutHeader).withConfig({displayName:"StyledEuiFlyoutHeader",componentId:"sc-lpvn1k-1"})(["align-items:stretch;box-shadow:none;display:flex;flex-direction:column;margin-top:"," padding:0;&.euiFlyoutHeader{","}"],(({theme:e})=>e.eui.euiSizeM),(({theme:e})=>`padding: 0 ${e.eui.euiSizeM} ${e.eui.euiSizeS} ${e.eui.euiSizeS};`)),Z=d()(i.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-lpvn1k-2"})(["overflow-y:hidden;flex:1;.euiFlyoutBody__overflow{overflow:hidden;mask-image:none;}.euiFlyoutBody__overflowContent{padding:0;height:100%;display:flex;}"]),ee=d()(i.EuiFlyoutFooter).withConfig({displayName:"StyledEuiFlyoutFooter",componentId:"sc-lpvn1k-3"})(["background:none;padding:0;&.euiFlyoutFooter{","}"],(({theme:e})=>`padding: ${e.eui.euiSizeS} 0 0 0;`)),te=d()(i.EuiFlexGroup).withConfig({displayName:"FullWidthFlexGroup",componentId:"sc-lpvn1k-4"})(["margin:0;width:100%;overflow:hidden;"]),ae=d()(i.EuiFlexItem).withConfig({displayName:"ScrollableFlexItem",componentId:"sc-lpvn1k-5"})(["overflow:hidden;"]),ie=d.a.div.withConfig({displayName:"VerticalRule",componentId:"sc-lpvn1k-6"})(["width:2px;height:100%;background:",";"],(({theme:e})=>e.eui.euiColorLightShade));ie.displayName="VerticalRule";const ne=d()(i.EuiBadge).withConfig({displayName:"EventsCountBadge",componentId:"sc-lpvn1k-7"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeS)),le=[],re=[],oe=[],de=({activeTab:e,columns:t,end:a,eqlOptions:o,expandedDetail:d,timelineId:u,isLive:c,itemsPerPage:C,itemsPerPageOptions:S,onEventClosed:Q,renderCellValue:D,rowRenderers:V,showExpandedDetails:L,start:$,timerangeKind:M})=>{var _;const z=Object(s.useDispatch)(),{query:H="",...R}=o,{portalNode:K}=Object(I.c)(),{setTimelineFullScreen:de,timelineFullScreen:se}=Object(B.c)(),{browserFields:ue,dataViewId:ce,loading:me,runtimeMappings:pe,selectedPatterns:ge}=Object(x.d)(P.SourcererScopeName.timeline),ye=Object(W.b)().isEnterprise()?6:5,be=Object(n.isEmpty)(H),[Ee,{events:fe,inspect:ve,totalCount:qe,pageInfo:he,loadPage:Oe,updatedAt:je,refetch:we}]=Object(y.a)({dataViewId:ce,endDate:a,eqlOptions:R,fields:[...(Object(n.isEmpty)(t)?b.b:t).map((e=>e.id)),...O.h],filterQuery:null!=H?H:"",id:u,indexNames:ge,language:"eql",limit:C,runtimeMappings:pe,skip:!!(null==me||me||Object(n.isEmpty)($)||Object(n.isEmpty)(a)||be),startDate:$,timerangeKind:M}),Fe=Object(l.useCallback)((()=>{var e;Q({tabType:h.d.eql,id:u}),null!==(e=d[h.d.eql])&&void 0!==e&&e.panelView&&u===h.c.active&&L&&T.a.toggleExpandedDetail({})}),[Q,u,d,L]);Object(l.useEffect)((()=>{z(g.a.updateIsLoading({id:u,isLoading:Ee||me}))}),[me,u,Ee,z]);const Ce=Object(l.useMemo)((()=>Object(G.a)(ye).map((e=>({...e,headerCellRender:J.a})))),[ye]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(m.a,{node:K},qe>=0?r.a.createElement(ne,null,qe):null),r.a.createElement(q.a,{id:`${u}-${h.d.eql}`,inputId:p.a.timeline,inspect:ve,loading:Ee,refetch:we}),r.a.createElement(te,null,r.a.createElement(ae,{grow:2},r.a.createElement(Y,{"data-test-subj":`${e}-tab-flyout-header`,hasBorder:!1},r.a.createElement(i.EuiFlexGroup,{alignItems:"center",gutterSize:"s","data-test-subj":"timeline-date-picker-container"},se&&null!=de&&r.a.createElement(j.b,{fullScreen:se,setFullScreen:de}),r.a.createElement(i.EuiFlexItem,{grow:10},r.a.createElement(w.a,{width:"auto",id:p.a.timeline,timelineId:u})),r.a.createElement(i.EuiFlexItem,{grow:!1},r.a.createElement(k.a,null)),r.a.createElement(i.EuiFlexItem,{grow:1},e===h.d.eql&&r.a.createElement(U.a,{scope:P.SourcererScopeName.timeline}))),r.a.createElement(X,{"data-test-subj":"timelineHeader"},r.a.createElement(A,{timelineId:u}))),r.a.createElement(F.a,null,r.a.createElement(Z,{"data-test-subj":`${h.d.eql}-tab-flyout-body`,className:"timeline-flyout-body"},r.a.createElement(E.a,{activePage:he.activePage,browserFields:ue,data:be?le:fe,id:u,refetch:we,renderCellValue:D,rowRenderers:V,sort:re,tabType:h.d.eql,totalPages:Object(v.h)({itemsCount:qe,itemsPerPage:C}),leadingControlColumns:Ce,trailingControlColumns:oe})),r.a.createElement(ee,{"data-test-subj":`${h.d.eql}-tab-flyout-footer`,className:"timeline-flyout-footer"},!be&&r.a.createElement(f.a,{activePage:null!==(_=null==he?void 0:he.activePage)&&void 0!==_?_:0,"data-test-subj":"timeline-footer",updatedAt:je,height:f.b,id:u,isLive:c,isLoading:Ee||me,itemsCount:be?0:fe.length,itemsPerPage:C,itemsPerPageOptions:S,onChangePage:Oe,totalCount:be?0:qe})))),L&&r.a.createElement(r.a.Fragment,null,r.a.createElement(ie,null),r.a.createElement(ae,{grow:1},r.a.createElement(N.a,{browserFields:ue,runtimeMappings:pe,tabType:h.d.eql,scopeId:u,handleOnPanelClosed:Fe})))))},se=Object(s.connect)((()=>{const e=g.b.getTimelineByIdSelector(),t=C.d.getTimelineSelector();return(a,{timelineId:i})=>{var n,l;const r=null!==(n=e(a,i))&&void 0!==n?n:S.b,o=t(a),{activeTab:d,columns:s,eqlOptions:u,expandedDetail:c,itemsPerPage:m,itemsPerPageOptions:p}=r;return{activeTab:d,columns:s,eqlOptions:u,end:o.timerange.to,expandedDetail:c,timelineId:i,isLive:"interval"===o.policy.kind,itemsPerPage:m,itemsPerPageOptions:p,showExpandedDetails:!!c[h.d.eql]&&!(null===(l=c[h.d.eql])||void 0===l||!l.panelView),start:o.timerange.from,timerangeKind:o.timerange.kind}}}),(e=>({onEventClosed:t=>{e(g.a.toggleDetailPanel(t))}})))(r.a.memo(de,((e,t)=>e.activeTab===t.activeTab&&((e,t)=>e.end===t.end&&e.start===t.start&&e.timerangeKind===t.timerangeKind)(e,t)&&c()(e.eqlOptions,t.eqlOptions)&&e.isLive===t.isLive&&e.itemsPerPage===t.itemsPerPage&&e.onEventClosed===t.onEventClosed&&e.showExpandedDetails===t.showExpandedDetails&&e.timelineId===t.timelineId&&c()(e.columns,t.columns)&&c()(e.itemsPerPageOptions,t.itemsPerPageOptions))))}}]);