/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
 * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */
(window.securitySolution_bundle_jsonpfunction=window.securitySolution_bundle_jsonpfunction||[]).push([[48],{1663:function(e,t,a){"use strict";a.r(t),a.d(t,"QueryTabContentComponent",(function(){return bt})),a.d(t,"default",(function(){return ft}));var i=a(40),r=a(42),l=a(2),o=a.n(l),n=a(41),d=a.n(n),s=a(103),c=a(130),u=a.n(c),m=a(365),p=a(13),g=a(51),h=a(114),v=a(273),y=a(111),b=a(660),f=a(102),E=a(190),x=a(1493),I=a(1505),O=a(287),S=a(47),P=a(109),w=a(110),C=a(116),k=a(105),j=a(104),F=a.n(j),q=a(70);const M=d.a.div.withConfig({displayName:"ReactDndDropTarget",componentId:"sc-160stu-0"})(["transition:background-color 0.7s ease;width:100%;height:",";.flyout-overlay{.euiPanel{background-color:",";}}"," > div.timeline-drop-area{.drop-and-provider-timeline{display:none;}& + div{display:none !important;}}"],(({height:e})=>e),(e=>e.theme.eui.euiFormBackgroundColor),(e=>e.isDraggingOver?`\n    .drop-and-provider-timeline {\n      &:hover {\n        background-color: ${Object(O.rgba)(e.theme.eui.euiColorSuccess,.3)};\n      }\n    }\n    .drop-and-provider-timeline:hover {\n        background-color: ${Object(O.rgba)(e.theme.eui.euiColorSuccess,.3)};\n    }\n  > div.timeline-drop-area-empty {\n     color: ${e.theme.eui.euiColorSuccess};\n     background-color: ${Object(O.rgba)(e.theme.eui.euiColorSuccess,.2)};\n\n     & .timeline-drop-area-empty__text {\n      color: ${e.theme.eui.euiColorSuccess};\n     }\n  }\n  > div.timeline-drop-area {\n    background-color: ${Object(O.rgba)(e.theme.eui.euiColorSuccess,.2)};\n    .provider-item-filter-container div:first-child{\n      /* Override dragNdrop beautiful so we do not have our droppable moving around for no good reason */\n      transform: none !important;\n    }\n    .drop-and-provider-timeline {\n      display: block !important;\n      + div {\n        display: none;\n      }\n    }\n\n    & .euiFormHelpText {\n      color: ${e.theme.eui.euiColorSuccess};\n    }\n  }\n  .flyout-overlay {\n    .euiPanel {\n      background-color: ${e.theme.eui.euiColorLightShade};\n    }\n    + div {\n      /* Override dragNdrop beautiful so we do not have our droppable moving around for no good reason */\n      display: none !important;\n    }\n  }\n  `:""));M.displayName="ReactDndDropTarget";const N=o.a.memo((({children:e=null,droppableId:t,height:a="100%",isDropDisabled:i=!1,type:r,render:n=null,renderClone:d})=>{const s=Object(l.useCallback)(((t,i)=>o.a.createElement(M,F()({height:a,ref:t.innerRef},t.droppableProps,{isDraggingOver:i.isDraggingOver}),null==n?e:n({isDraggingOver:i.isDraggingOver}),t.placeholder)),[e,a,n]);return o.a.createElement(q.Droppable,{isDropDisabled:i,droppableId:t,direction:"horizontal",type:r,renderClone:d},s)}));N.displayName="DroppableWrapper";var D=a(153),T=a(603),Q=a(106),z=a(945),_=a(434),K=a(150),R=a(484);const B=d.a.div.withConfig({displayName:"AddFieldPopoverContainer",componentId:"sc-1r7cchu-0"})(["min-width:350px;"]),$=({browserFields:e,timelineId:t})=>{const a=Object(s.useDispatch)(),[n,d]=Object(l.useState)(!1),c=Object(l.useMemo)((()=>y.b.getTimelineByIdSelector()),[]),{dataProviders:u,timelineType:m}=Object(k.a)((e=>Object(r.pick)(["dataProviders","timelineType"],c(e,t)))),p=Object(l.useCallback)((()=>d(!n)),[d,n]),g=Object(l.useCallback)((()=>d(!1)),[d]),h=Object(l.useCallback)((({andProviderId:e,excluded:i,field:r,id:l,operator:o,providerId:n,value:d,type:s})=>{Object(_.b)({dataProviders:u,destination:{droppableId:`droppableId.timelineProviders.${t}.group.${u.length}`,index:0},dispatch:a,onAddedToTimeline:g,providerToAdd:{id:n,name:r,enabled:!0,excluded:i,kqlQuery:"",type:s,queryMatch:{displayField:void 0,displayValue:Object(_.d)(d),field:r,value:d,operator:o},and:[]},timelineId:t})}),[u,t,a,g]),v=Object(l.useMemo)((()=>[{id:0,width:400,items:[{name:R.a,icon:o.a.createElement(i.EuiIcon,{type:"plusInCircle",size:"m"}),panel:1},m===Q.l.template?{disabled:m!==Q.l.template,name:R.b,icon:o.a.createElement(i.EuiIcon,{type:"visText",size:"m"}),panel:2}:null].filter((e=>null!==e))},{id:1,title:R.a,width:400,content:o.a.createElement(z.a,{browserFields:e,field:"",isExcluded:!1,onDataProviderEdited:h,operator:":",timelineId:t,value:"",type:K.a.default,providerId:`${t}-${Object(S.v4)()}`})},{id:2,title:R.b,width:400,content:o.a.createElement(z.a,{browserFields:e,field:"",isExcluded:!1,onDataProviderEdited:h,operator:":",timelineId:t,value:"",type:K.a.template,providerId:`${t}-${Object(S.v4)()}`})}]),[e,h,t,m]),b=Object(l.useMemo)((()=>m===Q.l.template?o.a.createElement(i.EuiButton,{size:"s",onClick:p,"data-test-subj":"addField",iconType:"arrowDown",fill:!0,iconSide:"right"},o.a.createElement(i.EuiText,{size:"s"},R.a)):o.a.createElement(i.EuiButtonEmpty,{size:"s",onClick:p,"data-test-subj":"addField",iconSide:"right"},o.a.createElement(i.EuiText,{size:"s"},`+ ${R.a}`))),[p,m]),f=Object(l.useMemo)((()=>m===Q.l.template?o.a.createElement(i.EuiContextMenu,{initialPanelId:0,panels:v}):o.a.createElement(z.a,{browserFields:e,field:"",isExcluded:!1,onDataProviderEdited:h,operator:":",timelineId:t,value:"",type:K.a.default,providerId:`${t}-${Object(S.v4)()}`})),[e,h,v,t,m]);return o.a.createElement(i.EuiPopover,{id:"addFieldsPopover",button:b,isOpen:n,closePopover:g,anchorPosition:"downLeft",panelPaddingSize:"none",repositionOnScroll:!0},o.a.createElement(B,null,f))};$.displayName="AddDataProviderPopoverComponent";const A=o.a.memo($);A.displayName="AddDataProviderPopover";const L=d()(i.EuiText).withConfig({displayName:"Text",componentId:"sc-1o1enwl-0"})(["overflow:hidden;margin:5px 0 5px 0;padding:3px;white-space:nowrap;"]);L.displayName="Text";const W=d()(i.EuiBadge).withConfig({displayName:"BadgeHighlighted",componentId:"sc-1o1enwl-1"})(["height:20px;margin:0 5px 0 5px;maxwidth:85px;minwidth:85px;"]);W.displayName="BadgeHighlighted";const H=d.a.span.withConfig({displayName:"HighlightedBackground",componentId:"sc-1o1enwl-2"})(["background-color:",";"],(e=>e.theme.eui.euiColorLightShade));H.displayName="HighlightedBackground";const G=d.a.div.withConfig({displayName:"EmptyContainer",componentId:"sc-1o1enwl-3"})(["width:",";align-items:center;display:flex;flex-direction:column;flex-wrap:wrap;justify-content:center;user-select:none;align-content:center;",""],(e=>e.showSmallMsg?"60px":"auto"),(e=>e.showSmallMsg?`\n      border-right: 1px solid ${e.theme.eui.euiColorMediumShade};\n      margin-right: 10px;\n    `:"\n  min-height: 100px;\n  + div {\n    display: none !important;\n   }\n  "));G.displayName="EmptyContainer";const U=d.a.div.withConfig({displayName:"NoWrap",componentId:"sc-1o1enwl-4"})(["align-items:center;display:flex;flex-direction:row;flex-wrap:no-wrap;"]);U.displayName="NoWrap";const V=o.a.memo((({showSmallMsg:e=!1,browserFields:t,timelineId:a})=>o.a.createElement(G,{className:"timeline-drop-area-empty","data-test-subj":"empty",showSmallMsg:e},!e&&o.a.createElement(o.a.Fragment,null,o.a.createElement(U,null,o.a.createElement(L,{color:"subdued",size:"s",className:"timeline-drop-area-empty__text"},R.f),o.a.createElement(H,null,o.a.createElement(W,{className:"highlighted-drop-target"},R.n)),o.a.createElement(L,{color:"subdued",size:"s",className:"timeline-drop-area-empty__text"},R.m),o.a.createElement(T.a,{type:"or"}),o.a.createElement(L,{color:"subdued",size:"s",className:"timeline-drop-area-empty__text"},R.q)),o.a.createElement(A,{browserFields:t,timelineId:a})),e&&o.a.createElement(T.a,{type:"or"}))));V.displayName="Empty";var X=a(662),Y=a(950);const J={alignItems:"center",display:"flex",height:"36px",minWidth:"125px"},Z=d.a.div.withConfig({displayName:"DroppableContainer",componentId:"sc-1sqk37k-0"})(["min-height:","px;height:auto !important;."," &:hover{background-color:"," !important;}"],36,P.d,(({theme:e})=>Object(O.rgba)(e.eui.euiColorSuccess,.2))),ee=d.a.span.withConfig({displayName:"Parens",componentId:"sc-1sqk37k-1"})(["color:",";font-size:32px;padding:2px;user-select:none;"],(({theme:e})=>e.eui.euiColorMediumShade)),te=d.a.div.withConfig({displayName:"AndOrBadgeContainer",componentId:"sc-1sqk37k-2"})(["span{visibility:",";}"],(({hideBadge:e})=>e?"hidden":"inherit")),ae=d.a.div.withConfig({displayName:"LastAndOrBadgeInGroup",componentId:"sc-1sqk37k-3"})(["display:none;."," &{display:initial;}"],P.d),ie=d()(i.EuiFlexItem).withConfig({displayName:"OrFlexItem",componentId:"sc-1sqk37k-4"})(["padding-left:9px;"]);d()(i.EuiFormHelpText).withConfig({displayName:"TimelineEuiFormHelpText",componentId:"sc-1sqk37k-5"})(["padding-top:0px;position:absolute;bottom:0px;left:4px;"]).displayName="TimelineEuiFormHelpText";const re=d()(i.EuiFlexItem).withConfig({displayName:"ParensContainer",componentId:"sc-1sqk37k-6"})(["align-self:center;"]),le=o.a.memo((({browserFields:e,timelineId:t,dataProviders:a})=>{const i=Object(l.useMemo)((()=>[...Object(_.c)(a),..._.a]),[a]),r=Object(l.useMemo)((()=>i.map(((r,l)=>o.a.createElement(ne,{key:`droppable-${l}`,group:r,groupIndex:l,isLastGroup:l===i.length-1,browserFields:e,timelineId:t,dataProviders:a})))),[e,i,a,t]);return o.a.createElement("div",null,r)}));le.displayName="Providers";const oe=o.a.memo((({browserFields:e,group:t,groupIndex:a,dataProvider:r,index:n,timelineId:d})=>{var c;const u=Object(l.useRef)(null),[m,p]=Object(l.useState)(!1),[,g]=Object(l.useState)(!1),h=Object(s.useDispatch)(),v=Object(l.useCallback)((()=>{g((e=>!e))}),[]),b=Object(l.useMemo)((()=>Object(D.o)({dataProviderId:r.id,groupIndex:a,timelineId:d})),[r.id,a,d]),f=Object(l.useCallback)((()=>{const e={id:d,providerId:n>0?t[0].id:r.id,andProviderId:n>0?r.id:void 0};h(y.a.removeProvider(e))}),[r.id,h,t,n,d]),E=Object(l.useCallback)((()=>{const e={id:d,providerId:n>0?t[0].id:r.id,enabled:!r.enabled,andProviderId:n>0?r.id:void 0};h(y.a.updateDataProviderEnabled(e))}),[r.enabled,r.id,h,t,n,d]),x=Object(l.useCallback)((()=>{const e={id:d,providerId:n>0?t[0].id:r.id,excluded:!r.excluded,andProviderId:n>0?r.id:void 0};h(y.a.updateDataProviderExcluded(e))}),[r.excluded,r.id,h,t,n,d]),I=Object(l.useCallback)((()=>{const e={id:d,providerId:n>0?t[0].id:r.id,type:r.type===K.a.template?K.a.default:K.a.template,andProviderId:n>0?r.id:void 0};h(y.a.updateDataProviderType(e))}),[r.id,r.type,h,t,n,d]),O=Object(l.useCallback)((({andProviderId:e,excluded:t,field:a,operator:i,providerId:r,value:l})=>h(y.a.dataProviderEdited({andProviderId:e,excluded:t,field:a,id:d,operator:i,providerId:r,value:l}))),[h,d]),S=Object(l.useCallback)((()=>{var e;null===(e=u.current)||void 0===e||e.focus()}),[]),w=Object(l.useCallback)((()=>{p(!0)}),[]),{onBlur:C,onKeyDown:k}=Object(X.a)({closePopover:v,draggableId:b,fieldName:r.queryMatch.field,keyboardHandlerRef:u,openPopover:w}),j=Object(l.useCallback)((e=>{u.current===document.activeElement&&k(e)}),[k]),M=String(null!==(c=r.queryMatch.displayValue)&&void 0!==c?c:r.queryMatch.value),N=Object(l.useCallback)(((a,l)=>{var s,c,g,h,v;return o.a.createElement("div",F()({ref:a.innerRef},a.draggableProps,a.dragHandleProps,{style:(v=a.draggableProps.style,{...v,userSelect:"none"}),"data-test-subj":"providerContainer",tabIndex:-1}),o.a.createElement(i.EuiFlexGroup,{alignItems:"center",gutterSize:"none"},o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(Y.a,{andProviderId:n>0?r.id:void 0,browserFields:e,deleteProvider:f,field:n>0?null!==(s=r.queryMatch.displayField)&&void 0!==s?s:r.queryMatch.field:null!==(c=t[0].queryMatch.displayField)&&void 0!==c?c:t[0].queryMatch.field,kqlQuery:n>0?r.kqlQuery:t[0].kqlQuery,isEnabled:n>0?r.enabled:t[0].enabled,isExcluded:n>0?r.excluded:t[0].excluded,isPopoverOpen:m,onDataProviderEdited:O,operator:n>0?null!==(g=r.queryMatch.operator)&&void 0!==g?g:K.d:null!==(h=t[0].queryMatch.operator)&&void 0!==h?h:K.d,register:r,providerId:n>0?t[0].id:r.id,timelineId:d,setIsPopoverOpen:p,toggleEnabledProvider:E,toggleExcludedProvider:x,toggleTypeProvider:I,displayValue:M,val:r.queryMatch.value,type:r.type,wrapperRef:u})),o.a.createElement(i.EuiFlexItem,{grow:!1},!l.isDragging&&(n<t.length-1?o.a.createElement(T.a,{type:"and"}):o.a.createElement(ae,null,o.a.createElement(T.a,{type:"and"}))))))}),[e,r,M,t,O,f,E,x,I,n,m,u,p,d]);return o.a.createElement("div",{className:P.a,"data-test-subj":"draggableWrapperKeyboardHandler",onClick:S,onBlur:C,onKeyDown:j,ref:u,role:"button",tabIndex:0},o.a.createElement(q.Draggable,{disableInteractiveElementBlocking:!0,draggableId:b,index:n,key:r.id},N))}));oe.displayName="DataProvidersGroupItem";const ne=o.a.memo((({browserFields:e,timelineId:t,group:a,groupIndex:r,isLastGroup:n})=>{const d=Object(l.useMemo)((()=>Object(D.p)({groupIndex:r,timelineId:t})),[r,t]),s=Object(l.useMemo)((()=>a.map(((i,l)=>o.a.createElement(oe,{key:i.id,browserFields:e,dataProvider:i,index:l,timelineId:t,group:a,groupIndex:r})))),[e,a,r,t]),c=Object(l.useCallback)((e=>o.a.createElement(Z,F()({className:n?"empty-providers-group":"",ref:e.innerRef,style:J},e.droppableProps),s,e.placeholder)),[s,n]);return o.a.createElement(o.a.Fragment,null,0!==r&&o.a.createElement(i.EuiSpacer,{size:"xs"}),o.a.createElement(i.EuiFlexGroup,{"aria-label":R.l(r),alignItems:"center",gutterSize:"none"},o.a.createElement(ie,{grow:!1},o.a.createElement(te,{hideBadge:0===r},o.a.createElement(T.a,{type:"or"}))),o.a.createElement(re,{grow:!1},o.a.createElement(ee,null,"(")),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(q.Droppable,{droppableId:d,direction:"horizontal"},c)),o.a.createElement(re,{grow:!1},o.a.createElement(ee,null,")")),n&&o.a.createElement(A,{browserFields:e,timelineId:t})))}));ne.displayName="DataProvidersGroup";var de=a(133);const se=d.a.div.withConfig({displayName:"DropTargetDataProvidersContainer",componentId:"sc-iiyap4-0"})(["padding:2px 0 4px 0;."," & .drop-target-data-providers{background:",";border:0.2rem dashed ",";& .timeline-drop-area-empty__text{color:",";}& .euiFormHelpText{color:",";}}"],P.d,(({theme:e})=>Object(O.rgba)(e.eui.euiColorSuccess,.1)),(({theme:e})=>e.eui.euiColorSuccess),(({theme:e})=>e.eui.euiColorSuccess),(({theme:e})=>e.eui.euiColorSuccess)),ce=d.a.div.withConfig({displayName:"DropTargetDataProviders",componentId:"sc-iiyap4-1"})(["display:flex;flex-direction:column;justify-content:flex-start;padding-bottom:2px;position:relative;border:0.2rem dashed ",";border-radius:5px;padding:"," 0;margin:2px 0 2px 0;max-height:33vh;min-height:100px;overflow:auto;resize:vertical;background-color:",";"],(({theme:e})=>e.eui.euiColorMediumShade),(({theme:e})=>e.eui.euiSizeXS),(({theme:e})=>e.eui.euiFormBackgroundColor));ce.displayName="DropTargetDataProviders";const ue=o.a.memo((({timelineId:e})=>{const{browserFields:t}=Object(C.d)(w.SourcererScopeName.timeline),a=Object(l.useMemo)((()=>y.b.getTimelineByIdSelector()),[]),i=Object(k.a)((t=>{var i;return(null!==(i=a(t,e))&&void 0!==i?i:de.b).isLoading})),r=Object(k.a)((t=>{var i;return(null!==(i=a(t,e))&&void 0!==i?i:de.b).dataProviders})),n=Object(l.useMemo)((()=>{return t=e,`${D.h}${t}${Object(S.v4)()}`;var t}),[e]);return o.a.createElement(se,{"aria-label":R.r,className:"drop-target-data-providers-container"},o.a.createElement(ce,{className:"drop-target-data-providers","data-test-subj":"dataProviders"},null!=r&&r.length?o.a.createElement(le,{browserFields:t,timelineId:e,dataProviders:r}):o.a.createElement(N,{isDropDisabled:i,droppableId:n},o.a.createElement(V,{browserFields:t,timelineId:e}))))}));ue.displayName="DataProviders";var me,pe=a(122),ge=a(378),he=a(909),ve=a(0),ye=a.n(ve),be=a(53),fe=a.n(be);!function(e){e.BACK="back",e.FORWARD="forward"}(me||(me={}));class super_select_EuiSuperSelect extends l.Component{constructor(...e){super(...e),ye()(this,"itemNodes",[]),ye()(this,"_isMounted",!1),ye()(this,"state",{isPopoverOpen:this.props.isOpen||!1}),ye()(this,"setItemNode",((e,t)=>{this.itemNodes[t]=e})),ye()(this,"openPopover",(()=>{this.setState({isPopoverOpen:!0});const e=()=>{const t=this.props.options.reduce(((e,t,a)=>null!=e?e:null==t?null:t.value===this.props.valueOfSelected?a:null),null);requestAnimationFrame((()=>{this._isMounted&&null!=this.props.valueOfSelected&&(null!=t?this.focusItemAt(t):e())}))};requestAnimationFrame(e)})),ye()(this,"closePopover",(()=>{this.setState({isPopoverOpen:!1})})),ye()(this,"itemClicked",(e=>{this.setState({isPopoverOpen:!1}),this.props.onChange&&this.props.onChange(e)})),ye()(this,"onSelectKeyDown",(e=>{e.key!==i.keys.ARROW_UP&&e.key!==i.keys.ARROW_DOWN||(e.preventDefault(),e.stopPropagation(),this.openPopover())})),ye()(this,"onItemKeyDown",(e=>{switch(e.key){case i.keys.ESCAPE:e.preventDefault(),e.stopPropagation(),this.closePopover();break;case i.keys.TAB:e.preventDefault(),e.stopPropagation();break;case i.keys.ARROW_UP:e.preventDefault(),e.stopPropagation(),this.shiftFocus(me.BACK);break;case i.keys.ARROW_DOWN:e.preventDefault(),e.stopPropagation(),this.shiftFocus(me.FORWARD)}}))}componentDidMount(){this._isMounted=!0,this.props.isOpen&&this.openPopover()}componentWillUnmount(){this._isMounted=!1}focusItemAt(e){const t=this.itemNodes[e];null!=t&&t.focus()}shiftFocus(e){const t=this.itemNodes.indexOf(document.activeElement);let a;a=-1===t?0:e===me.BACK?0===t?this.itemNodes.length-1:t-1:t===this.itemNodes.length-1?0:t+1,this.focusItemAt(a)}render(){const{className:e,options:t,valueOfSelected:a,onChange:r,isOpen:l,isInvalid:n,hasDividers:d,itemClassName:s,itemLayoutAlign:c,fullWidth:u,popoverProps:m,compressed:p,...g}=this.props,h=fe()("euiSuperSelect",null==m?void 0:m.className),v=fe()({"euiSuperSelect--isOpen__button":this.state.isPopoverOpen},e),y=fe()("euiSuperSelect__item",{"euiSuperSelect__item--hasDividers":d},s),b=o.a.createElement(i.EuiSuperSelectControl,F()({options:t,value:a,onClick:this.state.isPopoverOpen?this.closePopover:this.openPopover,onKeyDown:this.onSelectKeyDown,className:v,fullWidth:u,isInvalid:n,compressed:p},g)),f=t.map(((e,t)=>{const{value:r,dropdownDisplay:l,inputDisplay:n,...d}=e;return o.a.createElement(i.EuiContextMenuItem,F()({key:t,className:y,icon:a===r?"check":"empty",onClick:()=>this.itemClicked(r),onKeyDown:this.onItemKeyDown,layoutAlign:c,buttonRef:e=>this.setItemNode(e,t),role:"option",id:r,"aria-selected":a===r},d),l||n)}));return o.a.createElement(i.EuiInputPopover,F()({},m,{className:h,input:b,isOpen:l||this.state.isPopoverOpen,closePopover:this.closePopover,panelPaddingSize:"none",panelClassName:h,fullWidth:u,repositionOnScroll:!0,anchorPosition:"downCenter"}),o.a.createElement(i.EuiScreenReaderOnly,null,o.a.createElement("p",{role:"alert"},o.a.createElement(i.EuiI18n,{token:"euiSuperSelect.screenReaderAnnouncement",default:"You are in a form selector of {optionsCount} items and must select a single option. Use the up and down keys to navigate or escape to close.",values:{optionsCount:t.length}}))),o.a.createElement("div",{className:"euiSuperSelect__listbox",role:"listbox","aria-activedescendant":a,tabIndex:0},f))}}ye()(super_select_EuiSuperSelect,"defaultProps",{compressed:!1,fullWidth:!1,hasDividers:!1,isInvalid:!1,isLoading:!1});var Ee=a(5);const xe=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.filterDescription",{defaultMessage:"Events from the data providers above are filtered by the adjacent KQL"}),Ie=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.filterKqlTooltip",{defaultMessage:"Events from the data providers above are filtered by this KQL"}),Oe=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.filterKqlPlaceholder",{defaultMessage:"Filter events"}),Se=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.filterKqlSelectedText",{defaultMessage:"Filter"}),Pe=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.searchDescription",{defaultMessage:"Events from the data providers above are combined with results from the adjacent KQL"}),we=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.searchKqlTooltip",{defaultMessage:"Events from the data providers above are combined with results from this KQL"}),Ce=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.searchKqlPlaceholder",{defaultMessage:"Search events"}),ke=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.searchKqlSelectedText",{defaultMessage:"Search"}),je=Ee.i18n.translate("xpack.securitySolution.timeline.searchOrFilter.filterOrSearchWithKql",{defaultMessage:"Filter or Search with KQL"}),Fe=d.a.div.withConfig({displayName:"AndOrContainer",componentId:"sc-x7ceea-0"})(["position:relative;top:-1px;"]);Fe.displayName="AndOrContainer";const qe={filter:{mode:"filter",description:xe,kqlBarTooltip:Ie,placeholder:Oe,selectText:Se},search:{mode:"search",description:Pe,kqlBarTooltip:we,placeholder:Ce,selectText:ke}},Me=[{value:qe.filter.mode,inputDisplay:o.a.createElement(Fe,null,o.a.createElement(T.a,{type:"and"}),qe.filter.selectText),dropdownDisplay:o.a.createElement(o.a.Fragment,null,o.a.createElement(T.a,{type:"and"}),o.a.createElement("strong",null,qe.filter.selectText),o.a.createElement(i.EuiSpacer,{size:"xs"}),o.a.createElement(i.EuiText,{size:"s",color:"subdued"},o.a.createElement("p",null,qe.filter.description))),"data-test-subj":"kqlModePopoverFilter"},{value:qe.search.mode,inputDisplay:o.a.createElement(Fe,null,o.a.createElement(T.a,{type:"or"}),qe.search.selectText),dropdownDisplay:o.a.createElement(o.a.Fragment,null,o.a.createElement(T.a,{type:"or"}),o.a.createElement("strong",null,qe.search.selectText),o.a.createElement(i.EuiSpacer,{size:"xs"}),o.a.createElement(i.EuiText,{size:"s",color:"subdued"},o.a.createElement("p",null,qe.search.description))),"data-test-subj":"kqlModePopoverSearch"}],Ne="timelineSelectModeItemsClassName",De="searchOrFilterPopover",Te="352px",Qe=Object(n.createGlobalStyle)([".","{width:350px !important;}.",".euiPopover__panel{width:"," !important;.euiSuperSelect__listbox{width:"," !important;}}"],Ne,De,Te,Te),ze=d.a.div.withConfig({displayName:"SearchOrFilterContainer",componentId:"sc-1xwjodn-0"})([""," user-select:none;"],(({theme:e})=>`margin-top: ${e.eui.euiSizeXS};`));ze.displayName="SearchOrFilterContainer";const _e=d()(i.EuiFlexItem).withConfig({displayName:"ModeFlexItem",componentId:"sc-1xwjodn-1"})(["user-select:none;"]);_e.displayName="ModeFlexItem";const Ke=o.a.memo((({dataProviders:e,isRefreshPaused:t,filters:a,filterManager:r,filterQuery:n,from:d,fromStr:s,kqlMode:c,timelineId:u,refreshInterval:m,savedQueryId:p,setFilters:g,setSavedQueryId:h,to:v,toStr:y,updateKqlMode:b,updateReduxTime:f})=>{const E=Object(l.useCallback)((e=>b({id:u,kqlMode:e})),[u,b]);return o.a.createElement(o.a.Fragment,null,o.a.createElement(ze,null,o.a.createElement(i.EuiFlexGroup,{"data-test-subj":"timeline-search-or-filter",gutterSize:"xs"},o.a.createElement(_e,{grow:!1},o.a.createElement(i.EuiToolTip,{content:je},o.a.createElement(super_select_EuiSuperSelect,{"data-test-subj":"timeline-select-search-or-filter",hasDividers:!0,itemLayoutAlign:"top",itemClassName:Ne,onChange:E,options:Me,popoverProps:{className:De},valueOfSelected:c}))),o.a.createElement(i.EuiFlexItem,{"data-test-subj":"timeline-search-or-filter-search-container"},o.a.createElement(he.a,{dataProviders:e,filters:a,filterManager:r,filterQuery:n,from:d,fromStr:s,kqlMode:c,isRefreshPaused:t,refreshInterval:m,savedQueryId:p,setFilters:g,setSavedQueryId:h,timelineId:u,to:v,toStr:y,updateReduxTime:f})))),o.a.createElement(Qe,null))}));Ke.displayName="SearchOrFilter";const Re=o.a.memo((({dataProviders:e,filters:t,filterManager:a,filterQuery:i,from:r,fromStr:n,isRefreshPaused:d,kqlMode:s,refreshInterval:c,savedQueryId:u,setFilters:m,setSavedQueryId:p,timelineId:g,to:h,toStr:v,updateKqlMode:y,updateReduxTime:b})=>{const f=Object(l.useCallback)((e=>m({id:g,filters:e})),[g,m]),E=Object(l.useCallback)((e=>p({id:g,savedQueryId:e})),[g,p]);return o.a.createElement(Ke,{dataProviders:e,filters:t,filterManager:a,filterQuery:i,from:r,fromStr:n,isRefreshPaused:d,kqlMode:s,refreshInterval:c,savedQueryId:u,setFilters:f,setSavedQueryId:E,timelineId:g,to:h,toStr:v,updateKqlMode:y,updateReduxTime:b})}),((e,t)=>e.filterManager===t.filterManager&&e.from===t.from&&e.fromStr===t.fromStr&&e.to===t.to&&e.toStr===t.toStr&&e.isRefreshPaused===t.isRefreshPaused&&e.refreshInterval===t.refreshInterval&&e.timelineId===t.timelineId&&u()(e.dataProviders,t.dataProviders)&&u()(e.filters,t.filters)&&u()(e.filterQuery,t.filterQuery)&&u()(e.kqlMode,t.kqlMode)&&u()(e.savedQueryId,t.savedQueryId)&&u()(e.timelineId,t.timelineId)));Re.displayName="StatefulSearchOrFilterComponent";const Be=Object(s.connect)((()=>{const e=y.b.getTimelineByIdSelector(),t=y.b.getKqlFilterKuerySelector(),a=pe.d.getTimelineSelector(),i=pe.d.getTimelinePolicySelector();return(l,{timelineId:o})=>{var n;const d=null!==(n=e(l,o))&&void 0!==n?n:de.b,s=a(l),c=i(l);return{dataProviders:d.dataProviders,filterQuery:t(l,o),filters:d.filters,from:s.timerange.from,fromStr:s.timerange.fromStr,isRefreshPaused:"manual"===c.kind,kqlMode:Object(r.getOr)("filter","kqlMode",d),refreshInterval:c.duration,savedQueryId:Object(r.getOr)(null,"savedQueryId",d),to:s.timerange.to,toStr:s.timerange.toStr}}}),(e=>({applyKqlFilterQuery:({id:t,filterQuery:a})=>e(y.a.applyKqlFilterQuery({id:t,filterQuery:a})),updateKqlMode:({id:t,kqlMode:a})=>e(y.a.updateKqlMode({id:t,kqlMode:a})),setSavedQueryId:({id:t,savedQueryId:a})=>e(y.a.setSavedQueryId({id:t,savedQueryId:a})),setFilters:({id:t,filters:a})=>e(y.a.setFilters({id:t,filters:a})),updateReduxTime:Object(ge.b)(e)})))(Re);var $e=a(560);const Ae=({filterManager:e,show:t,showCallOutUnauthorizedMsg:a,status:r,timelineId:l})=>o.a.createElement(o.a.Fragment,null,a&&o.a.createElement(i.EuiCallOut,{"data-test-subj":"timelineCallOutUnauthorized",title:$e.b,color:"warning",iconType:"warning",size:"s"}),r===Q.k.immutable&&o.a.createElement(i.EuiCallOut,{"data-test-subj":"timelineImmutableCallOut",title:$e.a,color:"primary",iconType:"warning",size:"s"}),t&&o.a.createElement(ue,{timelineId:l}),o.a.createElement(Be,{filterManager:e,timelineId:l})),Le=o.a.memo(Ae);var We=a(148),He=a(161),Ge=a(1535),Ue=a(118),Ve=a(312),Xe=a(1429),Ye=a(519),Je=a(1542),Ze=a(178),et=a(302),tt=a(690),at=a(722),it=a(1117),rt=a(1445),lt=a(17),ot=a(652);const nt=d.a.div.withConfig({displayName:"TimelineHeaderContainer",componentId:"sc-1q91qxc-0"})(["margin-top:6px;width:100%;"]);nt.displayName="TimelineHeaderContainer";const dt=d()(i.EuiFlyoutHeader).withConfig({displayName:"StyledEuiFlyoutHeader",componentId:"sc-1q91qxc-1"})(["align-items:stretch;box-shadow:none;display:flex;flex-direction:column;&.euiFlyoutHeader{","}"],(({theme:e})=>`padding: ${e.eui.euiSizeM} ${e.eui.euiSizeS} 0 ${e.eui.euiSizeS};`)),st=d()(i.EuiFlyoutBody).withConfig({displayName:"StyledEuiFlyoutBody",componentId:"sc-1q91qxc-2"})(["overflow-y:hidden;flex:1;.euiFlyoutBody__overflow{overflow:hidden;mask-image:none;}.euiFlyoutBody__overflowContent{padding:0;height:100%;display:flex;}"]),ct=d()(i.EuiFlyoutFooter).withConfig({displayName:"StyledEuiFlyoutFooter",componentId:"sc-1q91qxc-3"})(["background:none;&.euiFlyoutFooter{","}"],(({theme:e})=>`padding: ${e.eui.euiSizeS} 0;`)),ut=d()(i.EuiFlexGroup).withConfig({displayName:"FullWidthFlexGroup",componentId:"sc-1q91qxc-4"})(["margin:0;width:100%;overflow:hidden;"]),mt=d()(i.EuiFlexItem).withConfig({displayName:"ScrollableFlexItem",componentId:"sc-1q91qxc-5"})([""," overflow:hidden;"],(({theme:e})=>`margin: 0 ${e.eui.euiSizeM};`)),pt=d()(i.EuiFlexItem).withConfig({displayName:"SourcererFlex",componentId:"sc-1q91qxc-6"})(["align-items:flex-end;"]);pt.displayName="SourcererFlex";const gt=d.a.div.withConfig({displayName:"VerticalRule",componentId:"sc-1q91qxc-7"})(["width:2px;height:100%;background:",";"],(({theme:e})=>e.eui.euiColorLightShade));gt.displayName="VerticalRule";const ht=d()(i.EuiBadge).withConfig({displayName:"EventsCountBadge",componentId:"sc-1q91qxc-8"})(["margin-left:",";"],(({theme:e})=>e.eui.euiSizeS)),vt=[],yt=[],bt=({activeTab:e,columns:t,dataProviders:a,end:n,expandedDetail:d,filters:c,timelineId:u,isLive:O,itemsPerPage:S,itemsPerPageOptions:P,kqlMode:j,kqlQueryExpression:F,kqlQueryLanguage:q,onEventClosed:M,renderCellValue:N,rowRenderers:D,show:T,showCallOutUnauthorizedMsg:Q,showExpandedDetails:z,start:_,status:K,sort:R,timerangeKind:B})=>{var $;const A=Object(s.useDispatch)(),{portalNode:L}=Object(Ye.d)(),{setTimelineFullScreen:W,timelineFullScreen:H}=Object(Ze.c)(),{browserFields:G,dataViewId:U,loading:V,indexPattern:X,runtimeMappings:Y,selectedPatterns:J}=Object(C.d)(w.SourcererScopeName.timeline),{uiSettings:Z}=Object(f.j)().services,ee=Object(lt.b)().isEnterprise()?6:5,te=Object(l.useMemo)((()=>y.b.getTimelineByIdSelector()),[]),ae=Object(k.a)((e=>te(e,null!=u?u:Ue.c.active))).filterManager,ie=Object(l.useMemo)((()=>null!=ae?ae:new p.FilterManager(Z)),[ae,Z]),re=Object(l.useMemo)((()=>Object(g.getEsQueryConfig)(Z)),[Z]),le=Object(l.useMemo)((()=>({query:F.trim(),language:q})),[F,q]),oe=Object(He.d)({config:re,dataProviders:a,indexPattern:X,browserFields:G,filters:c,kqlQuery:le,kqlMode:j});Object(v.a)({id:u,filterQuery:null==oe?void 0:oe.filterQuery,kqlError:null==oe?void 0:oe.kqlError,query:le,startDate:_,endDate:n});const ne=Object(r.isEmpty)(a)&&Object(r.isEmpty)(c)&&Object(r.isEmpty)(le.query)&&void 0===(null==oe?void 0:oe.filterQuery),de=Object(l.useMemo)((()=>null!=oe&&null!=V&&!V&&!Object(r.isEmpty)(_)&&!Object(r.isEmpty)(n)&&void 0!==(null==oe?void 0:oe.filterQuery)),[oe,n,V,_]),se=R.map((({columnId:e,columnType:t,esTypes:a,sortDirection:i})=>({field:e,direction:i,esTypes:null!=a?a:[],type:t})));Object(l.useEffect)((()=>{A(y.a.initializeTimelineSettings({filterManager:ie,id:u}))}),[A,ie,u]);const[ce,{events:ue,inspect:me,totalCount:pe,pageInfo:he,loadPage:ve,updatedAt:ye,refetch:be}]=Object(b.a)({dataViewId:U,endDate:n,fields:[...(Object(r.isEmpty)(t)?E.b:t).map((e=>e.id)),...Ve.h],filterQuery:null==oe?void 0:oe.filterQuery,id:u,indexNames:J,language:le.language,limit:S,runtimeMappings:Y,skip:!de,sort:se,startDate:_,timerangeKind:B}),fe=Object(l.useCallback)((()=>{var e;M({tabType:Ue.d.query,id:u}),null!==(e=d[Ue.d.query])&&void 0!==e&&e.panelView&&u===Ue.c.active&&z&&et.a.toggleExpandedDetail({})}),[M,u,d,z]);Object(l.useEffect)((()=>{A(y.a.updateIsLoading({id:u,isLoading:ce||V}))}),[V,u,ce,A]);const Ee=Object(l.useMemo)((()=>oe&&null!=oe.kqlError||!1),[oe]),xe=Object(l.useMemo)((()=>Object(it.a)(ee).map((e=>({...e,headerCellRender:ot.a})))),[ee]);return o.a.createElement(o.a.Fragment,null,o.a.createElement(m.a,{node:L},pe>=0?o.a.createElement(ht,null,pe):null),o.a.createElement(Ge.a,{id:`${u}-${Ue.d.query}`,inputId:h.a.timeline,inspect:me,loading:ce,refetch:be,skip:!de}),o.a.createElement(ut,{gutterSize:"none"},o.a.createElement(mt,{grow:2},o.a.createElement(dt,{"data-test-subj":`${e}-tab-flyout-header`,hasBorder:!1},o.a.createElement(i.EuiFlexGroup,{alignItems:"center",gutterSize:"s","data-test-subj":"timeline-date-picker-container"},H&&null!=W&&o.a.createElement(at.b,{fullScreen:H,setFullScreen:W}),o.a.createElement(i.EuiFlexItem,{grow:10},o.a.createElement(ge.a,{width:"auto",id:h.a.timeline,timelineId:u,disabled:Ee})),o.a.createElement(i.EuiFlexItem,{grow:!1},o.a.createElement(Je.a,null)),o.a.createElement(pt,{grow:1},e===Ue.d.query&&o.a.createElement(rt.a,{scope:w.SourcererScopeName.timeline}))),o.a.createElement(nt,{"data-test-subj":"timelineHeader"},o.a.createElement(Le,{filterManager:ie,show:T&&e===Ue.d.query,showCallOutUnauthorizedMsg:Q,status:K,timelineId:u}))),o.a.createElement(Xe.a,null,o.a.createElement(st,{"data-test-subj":`${Ue.d.query}-tab-flyout-body`,className:"timeline-flyout-body"},o.a.createElement(x.a,{activePage:he.activePage,browserFields:G,data:ne?vt:ue,id:u,refetch:be,renderCellValue:N,rowRenderers:D,sort:R,tabType:Ue.d.query,totalPages:Object(We.h)({itemsCount:pe,itemsPerPage:S}),leadingControlColumns:xe,trailingControlColumns:yt})),o.a.createElement(ct,{"data-test-subj":`${Ue.d.query}-tab-flyout-footer`,className:"timeline-flyout-footer"},!ne&&o.a.createElement(I.a,{activePage:null!==($=null==he?void 0:he.activePage)&&void 0!==$?$:0,"data-test-subj":"timeline-footer",updatedAt:ye,height:I.b,id:u,isLive:O,isLoading:ce||V,itemsCount:ne?0:ue.length,itemsPerPage:S,itemsPerPageOptions:P,onChangePage:ve,totalCount:ne?0:pe})))),z&&o.a.createElement(o.a.Fragment,null,o.a.createElement(gt,null),o.a.createElement(mt,{grow:1},o.a.createElement(tt.a,{browserFields:G,handleOnPanelClosed:fe,runtimeMappings:Y,tabType:Ue.d.query,scopeId:u})))))},ft=Object(s.connect)((()=>{const e=y.b.getShowCallOutUnauthorizedMsg(),t=y.b.getTimelineByIdSelector(),a=y.b.getKqlFilterKuerySelector(),i=pe.d.getTimelineSelector();return(l,{timelineId:o})=>{var n,d,s,c,u;const m=null!==(n=t(l,o))&&void 0!==n?n:de.b,p=i(l),{activeTab:g,columns:h,dataProviders:v,expandedDetail:y,filters:b,itemsPerPage:f,itemsPerPageOptions:E,kqlMode:x,show:I,sort:O,status:S,timelineType:P}=m,w=a(l,o),C="filter"===x&&b||[],k=Object(r.isEmpty)(v)&&Object(r.isEmpty)(null!==(d=null==w?void 0:w.expression)&&void 0!==d?d:"")&&"template"===P?" ":null!==(s=null==w?void 0:w.expression)&&void 0!==s?s:"",j=Object(r.isEmpty)(v)&&"template"===P?"kuery":null!==(c=null==w?void 0:w.kind)&&void 0!==c?c:"kuery";return{activeTab:g,columns:h,dataProviders:v,end:p.timerange.to,expandedDetail:y,filters:C,timelineId:o,isLive:"interval"===p.policy.kind,itemsPerPage:f,itemsPerPageOptions:E,kqlMode:x,kqlQueryExpression:k,kqlQueryLanguage:j,showCallOutUnauthorizedMsg:e(l),show:I,showExpandedDetails:!!y[Ue.d.query]&&!(null===(u=y[Ue.d.query])||void 0===u||!u.panelView),sort:O,start:p.timerange.from,status:S,timerangeKind:p.timerange.kind}}}),((e,{timelineId:t})=>({onEventClosed:t=>{e(y.a.toggleDetailPanel(t))}})))(o.a.memo(bt,((e,t)=>((e,t)=>e.kqlMode===t.kqlMode&&e.kqlQueryExpression===t.kqlQueryExpression&&u()(e.filters,t.filters))(e,t)&&e.activeTab===t.activeTab&&((e,t)=>e.end===t.end&&e.start===t.start&&e.timerangeKind===t.timerangeKind)(e,t)&&e.isLive===t.isLive&&e.itemsPerPage===t.itemsPerPage&&e.onEventClosed===t.onEventClosed&&e.show===t.show&&e.showCallOutUnauthorizedMsg===t.showCallOutUnauthorizedMsg&&e.showExpandedDetails===t.showExpandedDetails&&e.status===t.status&&e.timelineId===t.timelineId&&u()(e.columns,t.columns)&&u()(e.dataProviders,t.dataProviders)&&u()(e.itemsPerPageOptions,t.itemsPerPageOptions)&&u()(e.sort,t.sort))))}}]);