/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
 * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */
(window.securitySolution_bundle_jsonpfunction=window.securitySolution_bundle_jsonpfunction||[]).push([[9],{1039:function(e,t,a){"use strict";a.d(t,"a",(function(){return c}));var n=a(2),i=a.n(n),l=a(121),r=a(117),o=a(123);const c=i.a.memo((({Component:e,contextId:t,eventId:a,fieldName:n,fieldType:c,isAggregatable:s,isDraggable:u,title:d,value:g})=>u?i.a.createElement(l.b,{"data-test-subj":"port",field:n,fieldType:c,isAggregatable:s,id:`port-default-draggable-${t}-${a}-${n}-${g}`,isDraggable:u,tooltipContent:n,value:g},i.a.createElement(o.i,{portOrServiceName:g||Object(r.e)(),Component:e,title:d})):i.a.createElement(o.i,{portOrServiceName:g||Object(r.e)(),Component:e,title:d})));c.displayName="Port"},1263:function(e,t,a){"use strict";a.d(t,"a",(function(){return M})),a.d(t,"b",(function(){return T})),a.d(t,"c",(function(){return x}));var n=a(40),i=a(42),l=a(2),r=a.n(l),o=a(41),c=a.n(o),s=a(121),u=a(117),d=a(201),g=a(339),m=a(228),b=a(1609),f=a.n(b),p=a(392),y=a(131),v=a(169),I=a(102),E=a(4),D=a(123),j=a(318);const N=c()(n.EuiFlexItem).withConfig({displayName:"EventModuleFlexItem",componentId:"sc-14g85rc-0"})(["width:100%;"]),M=({children:e,Component:t,contextId:a,eventId:n,fieldName:o,fieldType:c,isAggregatable:m,isDraggable:b,isButton:f,onClick:p,linkValue:N,openInNewTab:M=!1,truncate:T,title:C,value:A})=>{const x=`${A}`,O=N,{search:$}=Object(v.m)(y.a.rules),{navigateToApp:k,getUrlForApp:w}=Object(I.j)().services.application,S=Object(l.useCallback)((e=>{e.preventDefault(),k(E.l,{deepLinkId:y.a.rules,path:Object(d.d)(null!=O?O:"",$),openInNewTab:M})}),[k,O,$,M]),h=Object(l.useMemo)((()=>w(E.l,{deepLinkId:y.a.rules,path:Object(d.d)(null!=O?O:"",$)})),[w,O,$]),L=`event-details-value-default-draggable-${a}-${n}-${o}-${A}-${O}`,z=Object(l.useMemo)((()=>{const a=T?r.a.createElement(g.b,{dataTestSubj:`formatted-field-${o}`},A):A;return f?r.a.createElement(j.b,{Component:t,dataTestSubj:"data-grid-host-details",href:h,iconType:"expand",onClick:null!=p?p:S,title:null!=C?C:x},e):t?r.a.createElement(t,{"aria-label":C,"data-test-subj":`view-${o}`,iconType:"link",onClick:S,title:C},null!=C?C:A):M?r.a.createElement(D.f,{onClick:S,href:h,"data-test-subj":"goToRuleDetails",target:"_blank"},null!=e?e:a):r.a.createElement(D.f,{onClick:S,href:h,"data-test-subj":"ruleName"},null!=e?e:a)}),[t,e,o,S,h,f,p,x,C,T,A,M]);return Object(i.isString)(A)&&x.length>0&&null!=O?b?r.a.createElement(s.b,{field:o,fieldType:c,isAggregatable:m,id:L,isDraggable:b,tooltipContent:A,value:A},z):z:null!=A?b?r.a.createElement(s.b,{field:o,fieldType:c,isAggregatable:m,id:L,isDraggable:b,tooltipContent:A,value:`${A}`},A):r.a.createElement(r.a.Fragment,null,A):Object(u.d)()},T=({contextId:e,eventId:t,fieldName:a,fieldType:l,isAggregatable:o,isDraggable:c,linkValue:d,truncate:b,value:y})=>{const v=`${y}`,I=d,E=b?r.a.createElement(g.b,null,y):y;return Object(i.isString)(y)&&v.length>0?r.a.createElement(n.EuiFlexGroup,{gutterSize:"none",alignItems:"center",justifyContent:null==I||Object(i.isEmpty)(I)?"spaceBetween":"flexStart"},r.a.createElement(N,null,c?r.a.createElement(s.b,{field:a,id:`event-details-value-default-draggable-${e}-${t}-${a}-${y}-${v}`,fieldType:l,isAggregatable:o,isDraggable:c,tooltipContent:y,value:y},E):r.a.createElement(r.a.Fragment,null,E)),null!=I&&((e,t)=>"endgame"===e.trim().toLocaleLowerCase()&&null!=t&&!Object(i.isEmpty)(t)&&!Object(m.c)(t)&&t.includes("/alerts/"))(v,I)&&r.a.createElement(n.EuiFlexItem,{grow:!1},r.a.createElement(n.EuiToolTip,{"data-test-subj":"event-module-link-to-elastic-endpoint-security",content:r.a.createElement(r.a.Fragment,null,r.a.createElement("p",null,p.f),r.a.createElement("p",null,I))},r.a.createElement(n.EuiLink,{href:I,target:"_blank"},r.a.createElement(n.EuiIcon,{type:f.a,size:"m"}))))):Object(u.d)()},C=({children:e,Component:t,dataTestSubj:a,href:i,onClick:l,title:o,iconType:c="link"})=>t?r.a.createElement(t,{"data-test-subj":a,href:i,iconType:c,onClick:l,title:o},null!=o?o:e):r.a.createElement(n.EuiLink,{"data-test-subj":a,target:"_blank",href:i},null!=o?o:e),A=r.a.memo(C),x=({contextId:e,Component:t,eventId:a,fieldName:n,fieldType:l,isAggregatable:o,isDraggable:c,truncate:d,title:b,value:f})=>{const p=`${f}`,y=!Object(m.c)(p),v=d?r.a.createElement(g.b,null,f):f,I=y?r.a.createElement(A,{Component:t,href:p,dataTestSubj:"ata-grid-url",title:b,iconType:"link"}):r.a.createElement(r.a.Fragment,null,v);return Object(i.isString)(f)&&p.length>0?c?r.a.createElement(s.b,{field:n,fieldType:l,isAggregatable:o,id:`event-details-value-default-draggable-${e}-${a}-${n}-${f}-${p}`,isDraggable:c,tooltipContent:f,value:f},I):I:Object(u.d)()}},1387:function(e,t,a){"use strict";a.d(t,"a",(function(){return o})),a.d(t,"b",(function(){return c}));var n=a(2),i=a.n(n),l=a(121),r=a(727);const o="bytes",c=i.a.memo((({contextId:e,eventId:t,fieldName:a,fieldType:n,isAggregatable:o,isDraggable:c,value:s,scopeId:u})=>c?i.a.createElement(l.b,{id:`bytes-default-draggable-${e}-${t}-${a}-${s}`,fieldType:n,isAggregatable:o,isDraggable:c,name:name,field:a,tooltipContent:null,value:s,scopeId:u},i.a.createElement(r.a,{value:`${s}`})):i.a.createElement(r.a,{value:`${s}`})));c.displayName="Bytes"},1394:function(e,t,a){"use strict";a.d(t,"a",(function(){return f})),a.d(t,"b",(function(){return N})),a.d(t,"c",(function(){return M}));var n=a(50),i=a.n(n),l=a(117),r=a(5);const o=r.i18n.translate("xpack.securitySolution.formatted.duration.noDurationTooltip",{defaultMessage:"no duration"}),c=r.i18n.translate("xpack.securitySolution.formatted.duration.invalidDurationTooltip",{defaultMessage:"invalid duration"}),s=r.i18n.translate("xpack.securitySolution.formatted.duration.aNanosecondTooltip",{defaultMessage:"a nanosecond"}),u=r.i18n.translate("xpack.securitySolution.formatted.duration.aFewNanosecondsTooltip",{defaultMessage:"a few nanoseconds"}),d=r.i18n.translate("xpack.securitySolution.formatted.duration.aMillisecondTooltip",{defaultMessage:"a millisecond"}),g=r.i18n.translate("xpack.securitySolution.formatted.duration.aFewMillisecondsTooltip",{defaultMessage:"a few milliseconds"}),m=r.i18n.translate("xpack.securitySolution.formatted.duration.aSecondTooltip",{defaultMessage:"a second"}),b=r.i18n.translate("xpack.securitySolution.formatted.duration.zeroNanosecondsTooltip",{defaultMessage:"zero nanoseconds"}),f=1e6,p=1e3,y=e=>Number.isInteger(e.milliseconds())?`${e.milliseconds()}ms`:`${e.milliseconds().toFixed(6)}ms`,v=e=>`${e.seconds().toFixed()}s${e.milliseconds()>0?` ${y(e)}`:""}`,I=e=>`${e.minutes()}m ${v(e)}`,E=e=>`${e.hours()}h ${I(e)}`,D=e=>`${e.days()}d ${E(e)}`,j=e=>`${e.years()>0||e.months()>0?`${e.months()}m `:""}${D(e)}`,N=e=>{const t=Number(e);if(null==e)return Object(l.e)();if(Number.isNaN(t)||t<0)return`${e}`;if(t<f)return`${t}ns`;const a=i.a.duration(t/f),n=a.asMilliseconds();return n<p?y(a):n<6e4?v(a):n<36e5?I(a):n<864e5?E(a):n<2592e6?D(a):n<31536e6?j(a):(e=>`${e.years()>0?`${e.years()}y `:""}${j(e)}`)(a)},M=e=>{if(null==e)return o;const t=Number(e);if(Number.isNaN(t)||t<0)return c;if(0===t)return b;if(1===t)return s;if(t<f)return u;if(t===f)return d;const a=t/f;return a<p?g:a===p?m:i.a.duration(a).humanize()}},1407:function(e,t,a){"use strict";a.d(t,"a",(function(){return i}));var n=a(42);const i=e=>null==e?"":Object(n.isObject)(e)?JSON.stringify(e):Object(n.isNumber)(e)?e:e.toString()},1435:function(e,t,a){"use strict";a.d(t,"a",(function(){return g}));var n=a(2),i=a.n(n),l=a(1394),r=a(40),o=a(44),c=a(41);const s=a.n(c).a.p.withConfig({displayName:"P",componentId:"sc-1axlhrf-0"})(["margin-bottom:5px;"]);s.displayName="P";const u=i.a.memo((({maybeDurationNanoseconds:e,tooltipTitle:t})=>i.a.createElement(i.a.Fragment,null,null!=t?i.a.createElement(s,{"data-test-subj":"title"},t):null,i.a.createElement(s,{"data-test-subj":"humanized"},Object(l.c)(e)),i.a.createElement(s,{"data-test-subj":"raw-value"},i.a.createElement(o.FormattedMessage,{id:"xpack.securitySolution.formattedDuration.tooltipLabel",defaultMessage:"raw"}),": ",e))));u.displayName="FormattedDurationTooltipContent";const d=i.a.memo((({children:e,maybeDurationNanoseconds:t,tooltipTitle:a})=>i.a.createElement(r.EuiToolTip,{"data-test-subj":"formatted-duration-tooltip",content:i.a.createElement(u,{maybeDurationNanoseconds:t,tooltipTitle:a})},i.a.createElement(i.a.Fragment,null,e))));d.displayName="FormattedDurationTooltip";const g=i.a.memo((({maybeDurationNanoseconds:e,tooltipTitle:t})=>i.a.createElement(d,{maybeDurationNanoseconds:e,tooltipTitle:t},i.a.createElement("div",{"data-test-subj":"formatted-duration"},Object(l.b)(e)))));g.displayName="FormattedDuration"},1609:function(e,t){e.exports="data:image/svg+xml;base64,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"},188:function(e,t,a){"use strict";a.d(t,"b",(function(){return n})),a.d(t,"g",(function(){return i})),a.d(t,"p",(function(){return l})),a.d(t,"h",(function(){return r})),a.d(t,"f",(function(){return o})),a.d(t,"i",(function(){return c})),a.d(t,"c",(function(){return s})),a.d(t,"m",(function(){return u})),a.d(t,"l",(function(){return d})),a.d(t,"e",(function(){return g})),a.d(t,"n",(function(){return m})),a.d(t,"o",(function(){return b})),a.d(t,"a",(function(){return f})),a.d(t,"j",(function(){return p})),a.d(t,"k",(function(){return y})),a.d(t,"d",(function(){return v}));const n="date",i="host.name",l="user.name",r="ip",o="geo_point",c="message",s="event.module",u="rule.reference",d="reference.url",g="event.url",m="kibana.alert.rule.name",b="kibana.alert.workflow_status",f="agent.status",p="quarantined.path",y="kibana.alert.reason",v="eventSummary"},289:function(e,t,a){"use strict";let n,i;a.d(t,"b",(function(){return n})),a.d(t,"a",(function(){return i})),function(e){e.DEFAULT="security-default-cellActions",e.DETAILS_FLYOUT="security-detailsFlyout-cellActions",e.ALERTS_COUNT="security-alertsCount-cellActions"}(n||(n={})),function(e){e.FILTER="security-cellAction-type-filter",e.COPY="security-cellAction-type-copyToClipboard",e.ADD_TO_TIMELINE="security-cellAction-type-addToTimeline",e.INVESTIGATE_IN_NEW_TIMELINE="security-cellAction-type-investigateInNewTimeline",e.SHOW_TOP_N="security-cellAction-type-showTopN",e.TOGGLE_COLUMN="security-cellAction-type-toggleColumn"}(i||(i={}))},337:function(e,t,a){"use strict";a.d(t,"a",(function(){return ee}));var n=a(40),i=a(42),l=a(2),r=a.n(l),o=a(889),c=a(167),s=a(121),u=a(1387),d=a(485),g=a(117),m=a(132),b=a(103),f=a(130),p=a.n(f),y=a(923),v=a(115),I=a(263),E=a(321),D=a(153),j=a(1407),N=a(150),M=a(379),T=a(118),C=a(302),A=a(123);const x=({contextId:e,eventId:t,fieldName:a,address:n})=>`formatted-ip-data-provider-${e}-${a}-${n}-${t}`,O=({contextId:e,eventId:t,fieldName:a,address:n})=>({enabled:!0,id:Object(D.i)(x({contextId:e,eventId:t,fieldName:a,address:n})),name:`${a}: ${Object(j.a)(n)}`,queryMatch:{field:a,value:Object(j.a)(n),operator:N.d},excluded:!1,kqlQuery:"",and:[]}),$=({contextId:e,eventId:t,fieldName:a,fieldType:n,isAggregatable:i,isDraggable:o,truncate:c,value:s})=>{const u=Object(l.useMemo)((()=>`non-decorated-ip-draggable-wrapper-${x({contextId:e,eventId:t,fieldName:a,address:s})}`),[e,t,a,s]),d=Object(l.useMemo)((()=>O({contextId:e,eventId:t,fieldName:a,address:s})),[e,t,a,s]),m=Object(l.useMemo)((()=>"object"!=typeof s?Object(g.f)(s):Object(g.f)((e=>{try{return JSON.stringify(e)}catch(t){return`${e}`}})(s))),[s]),b=Object(l.useCallback)(((e,t,a)=>a.isDragging?r.a.createElement(E.a,null,r.a.createElement(M.a,{dataProvider:e})):m),[m]);return o?r.a.createElement(E.b,{dataProvider:d,fieldType:n,isAggregatable:i,isDraggable:o,key:u,render:b,truncate:c}):m},k=r.a.memo($),w=({address:e,Component:t,contextId:a,eventId:n,fieldName:i,fieldType:o,isAggregatable:c,isButton:u,isDraggable:d,onClick:g,truncate:m,title:f})=>{const p=`address-links-draggable-wrapper-${x({contextId:a,eventId:n,fieldName:i,address:e})}`,D=Object(l.useMemo)((()=>O({contextId:a,eventId:n,fieldName:i,address:e})),[e,a,n,i]),j=Object(b.useDispatch)(),N=Object(l.useContext)(y.a),$=e&&(null==N?void 0:N.enableIpDetailsFlyout)&&(null==N?void 0:N.timelineID),k=Object(l.useCallback)((t=>{if(t.preventDefault(),g&&g(),N&&$){const{tabType:t,timelineID:a}=N,n={panelView:"networkDetail",params:{ip:e,flowTarget:i.includes(I.b.destination)?I.b.destination:I.b.source}},l=Object(v.getScopedActions)(a);l&&j(l.toggleDetailPanel({...n,id:a,tabType:t})),a===T.c.active&&t===T.d.query&&C.a.toggleExpandedDetail({...n})}}),[g,N,$,e,i,j]),w=Object(l.useMemo)((()=>t?r.a.createElement(A.h,{Component:t,ip:e,isButton:u,onClick:$?k:void 0,title:f}):r.a.createElement(s.a,{field:i,tooltipContent:i},r.a.createElement(A.h,{Component:t,ip:e,isButton:u,onClick:$?k:void 0,title:f}))),[t,e,i,u,$,k,f]),S=Object(l.useCallback)(((e,t,a)=>a.isDragging?r.a.createElement(E.a,null,r.a.createElement(M.a,{dataProvider:D})):w),[D,w]);return d?r.a.createElement(E.b,{dataProvider:D,isDraggable:d,fieldType:o,isAggregatable:c,key:p,render:S,truncate:m}):w},S=r.a.memo(w),h=({addresses:e,Component:t,contextId:a,eventId:n,fieldName:o,fieldType:c,isAggregatable:s,isButton:u,isDraggable:d,onClick:g,truncate:m,title:b})=>{const f=Object(l.useMemo)((()=>Object(i.uniq)(e)),[e]),p=Object(l.useMemo)((()=>f.map((e=>r.a.createElement(S,{key:e,address:e,Component:t,contextId:a,eventId:n,fieldName:o,fieldType:c,isAggregatable:s,isButton:u,isDraggable:d,onClick:g,truncate:m,title:b})))),[t,a,n,o,c,s,u,d,g,b,m,f]);return r.a.createElement(r.a.Fragment,null,p)},L=r.a.memo(h,((e,t)=>e.contextId===t.contextId&&e.eventId===t.eventId&&e.fieldName===t.fieldName&&e.isAggregatable===t.isAggregatable&&e.fieldType===t.fieldType&&e.isDraggable===t.isDraggable&&e.truncate===t.truncate&&p()(e.addresses,t.addresses))),z=({Component:e,contextId:t,eventId:a,fieldName:n,fieldType:l,isAggregatable:o,isDraggable:c,isButton:s,onClick:u,title:d,truncate:g,value:m})=>{if(Object(i.isString)(m)&&!Object(i.isEmpty)(m)){try{const b=JSON.parse(m);if(Object(i.isArray)(b))return r.a.createElement(L,{addresses:b,Component:e,contextId:t,eventId:a,fieldName:n,fieldType:l,isAggregatable:o,isButton:s,isDraggable:c,onClick:u,title:d,truncate:g})}catch(e){}return r.a.createElement(L,{addresses:[m],Component:e,contextId:t,eventId:a,isButton:s,isDraggable:c,onClick:u,fieldName:n,fieldType:l,isAggregatable:o,truncate:g,title:d})}return r.a.createElement(k,{contextId:t,eventId:a,fieldName:n,fieldType:l,isAggregatable:o,isDraggable:c,truncate:g,value:m})},B=r.a.memo(z,((e,t)=>e.contextId===t.contextId&&e.eventId===t.eventId&&e.fieldName===t.fieldName&&e.isAggregatable===t.isAggregatable&&e.fieldType===t.fieldType&&e.isDraggable===t.isDraggable&&e.truncate===t.truncate&&p()(e.value,t.value)));var F=a(1039),P=a(380),_=a(339),U=a(188),Q=a(1263),Z=a(41);const G={open:"primary",acknowledged:"warning",closed:"default"},V=a.n(Z)()(n.EuiBadge).withConfig({displayName:"StyledEuiBadge",componentId:"sc-1keooo6-0"})(["text-transform:capitalize;"]),H=({contextId:e,eventId:t,fieldName:a,fieldType:n,isAggregatable:o,isDraggable:c,value:u,onClick:d,onClickAriaLabel:g,iconSide:m,iconType:b})=>{const f=Object(l.useMemo)((()=>Object(i.getOr)("default",`${u}`,G)),[u]),p=r.a.createElement(V,{color:f,onClick:d,onClickAriaLabel:g,iconType:b,iconSide:m,"data-test-subj":"rule-status-badge"},u);return c?r.a.createElement(s.b,{field:a,id:`alert-details-value-default-draggable-${e}-${t}-${a}-${u}`,fieldType:n,isAggregatable:o,isDraggable:!1,value:`${u}`,tooltipContent:a},p):p},W=r.a.memo(H);W.displayName="RuleStatus";const Y=({fieldName:e,fieldType:t,isAggregatable:a,Component:n,contextId:o,eventId:c,isDraggable:u,isButton:d,onClick:m,title:f,value:p})=>{const I=Object(b.useDispatch)(),E=Object(l.useContext)(y.a),D=`${p}`,j=D&&(null==E?void 0:E.enableHostDetailsFlyout)&&(null==E?void 0:E.timelineID),N=Object(l.useCallback)((e=>{if(e.preventDefault(),m&&m(),E&&j){const{timelineID:e,tabType:t}=E,a={panelView:"hostDetail",params:{hostName:D}},n=Object(v.getScopedActions)(e);n&&I(n.toggleDetailPanel({...a,id:e,tabType:t})),e===T.c.active&&t===T.d.query&&C.a.toggleExpandedDetail({...a})}}),[m,E,j,D,I]),M=Object(l.useMemo)((()=>r.a.createElement(A.d,{Component:n,hostName:D,isButton:d,onClick:j?N:void 0,title:f},r.a.createElement(_.b,{"data-test-subj":"draggable-truncatable-content"},D))),[n,D,d,j,N,f]);return Object(i.isString)(p)&&D.length>0?u?r.a.createElement(s.b,{field:e,fieldType:t,isAggregatable:a,id:`event-details-value-default-draggable-${o}-${c}-${e}-${p}`,isDraggable:u,tooltipContent:e,value:D},M):M:Object(g.d)()},q=r.a.memo(Y);q.displayName="HostName";const J=({fieldName:e,Component:t,contextId:a,eventId:n,fieldType:o,isAggregatable:c,isDraggable:u,isButton:d,onClick:m,title:f,value:p})=>{const I=Object(b.useDispatch)(),E=Object(l.useContext)(y.a),D=`${p}`,j=D&&(null==E?void 0:E.timelineID),N=Object(l.useCallback)((e=>{if(e.preventDefault(),m&&m(),E&&j){const{timelineID:e,tabType:t}=E,a={panelView:"userDetail",params:{userName:D}},n=Object(v.getScopedActions)(e);n&&I(n.toggleDetailPanel({...a,id:e,tabType:t})),e===T.c.active&&t===T.d.query&&C.a.toggleExpandedDetail({...a})}}),[m,E,j,D,I]),M=Object(l.useMemo)((()=>r.a.createElement(A.m,{Component:t,userName:D,isButton:d,onClick:j?N:void 0,title:f},r.a.createElement(_.b,{"data-test-subj":"draggable-truncatable-content"},D))),[D,d,j,N,t,f]);return Object(i.isString)(p)&&D.length>0?u?r.a.createElement(s.b,{field:e,id:`event-details-value-default-draggable-${a}-${n}-${e}-${p}`,fieldType:o,isAggregatable:c,isDraggable:u,tooltipContent:e,value:D},M):M:Object(g.d)()},R=r.a.memo(J);R.displayName="UserName";const K=[U.i],X=({asPlainText:e,Component:t,contextId:a,eventId:l,fieldFormat:b,isAggregatable:f=!1,fieldName:p,fieldType:y="",isButton:v,isObjectArray:I=!1,isDraggable:E=!0,onClick:D,onClickAriaLabel:j,title:N,truncate:M=!0,value:T,linkValue:C})=>{if(I||e)return r.a.createElement("span",{"data-test-subj":`formatted-field-${p}`},T);if(y===U.h)return r.a.createElement(B,{Component:t,eventId:l,contextId:a,fieldName:p,fieldType:y,isAggregatable:f,isButton:v,isDraggable:E,value:Object(i.isNumber)(T)?String(T):T,onClick:D,title:N,truncate:M});if(y===U.f)return r.a.createElement(r.a.Fragment,null,T);if(y===U.b){const e=M?"eui-textTruncate eui-alignMiddle":void 0;return E?r.a.createElement(s.b,{field:p,fieldType:y,isAggregatable:f,id:`event-details-value-default-draggable-${a}-${l}-${p}-${T}`,isDraggable:E,tooltipContent:null,value:`${T}`},r.a.createElement(m.a,{className:e,fieldName:p,value:T})):r.a.createElement(m.a,{className:e,fieldName:p,value:T})}if(P.b.some((e=>p===e)))return r.a.createElement(F.a,{Component:t,contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,title:N,value:`${T}`});if(p===d.b)return r.a.createElement(d.a,{contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,value:`${T}`});if(p===U.g)return r.a.createElement(q,{Component:t,contextId:a,eventId:l,fieldType:y,isAggregatable:f,fieldName:p,isDraggable:E,isButton:v,onClick:D,title:N,value:T});if(p===U.p)return r.a.createElement(R,{Component:t,contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,isButton:v,onClick:D,title:N,value:T});if(b===u.a)return r.a.createElement(u.b,{contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,value:`${T}`});if(p===U.n)return r.a.createElement(Q.a,{Component:t,contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,isButton:v,onClick:D,linkValue:C,title:N,truncate:M,value:T});if(p===U.c)return Object(Q.b)({contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,linkValue:C,truncate:M,value:T});if(p===U.o)return r.a.createElement(W,{contextId:a,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,value:T,onClick:D,onClickAriaLabel:j,iconType:v?"arrowDown":void 0,iconSide:v?"right":void 0});if(p===U.a)return r.a.createElement(o.b,{endpointAgentId:String(null!=T?T:""),"data-test-subj":"endpointHostAgentStatus"});if([U.m,U.l,U.e,c.j].includes(p))return Object(Q.c)({contextId:a,Component:t,eventId:l,fieldName:p,fieldType:y,isAggregatable:f,isDraggable:E,truncate:M,title:N,value:T});if(K.includes(p)||!E)return M&&!Object(i.isEmpty)(T)?r.a.createElement(_.b,{"data-test-subj":"truncatable-message"},r.a.createElement(n.EuiToolTip,{"data-test-subj":"message-tool-tip",content:r.a.createElement(n.EuiFlexGroup,{direction:"column",gutterSize:"none"},r.a.createElement(n.EuiFlexItem,{grow:!1},r.a.createElement("span",null,p)),r.a.createElement(n.EuiFlexItem,{grow:!1},r.a.createElement("span",null,T)))},r.a.createElement("span",{"data-test-subj":`formatted-field-${p}`},T))):r.a.createElement("span",{"data-test-subj":`formatted-field-${p}`},T);{const e=Object(g.f)(T),t=M?r.a.createElement(_.b,null,e):e;return r.a.createElement(s.b,{field:p,id:`event-details-value-default-draggable-${a}-${l}-${p}-${T}`,fieldType:null!=y?y:"",isAggregatable:f,isDraggable:E,value:`${T}`,tooltipContent:y===U.b||y===d.b?null:p},t)}},ee=r.a.memo(X)},380:function(e,t,a){"use strict";a.d(t,"a",(function(){return n})),a.d(t,"c",(function(){return i})),a.d(t,"b",(function(){return l}));const n="destination.port",i="source.port",l=["client.port",n,"server.port",i,"url.port"]},392:function(e,t,a){"use strict";a.d(t,"c",(function(){return i})),a.d(t,"d",(function(){return l})),a.d(t,"i",(function(){return r})),a.d(t,"e",(function(){return o})),a.d(t,"g",(function(){return c})),a.d(t,"f",(function(){return s})),a.d(t,"h",(function(){return u})),a.d(t,"b",(function(){return d})),a.d(t,"a",(function(){return g}));var n=a(5);n.i18n.translate("xpack.securitySolution.timeline.tcp",{defaultMessage:"TCP"});const i=n.i18n.translate("xpack.securitySolution.timeline.destination",{defaultMessage:"Destination"}),l=n.i18n.translate("xpack.securitySolution.timeline.file.fromOriginalPathDescription",{defaultMessage:"from its original path"}),r=n.i18n.translate("xpack.securitySolution.timeline.source",{defaultMessage:"Source"}),o=n.i18n.translate("xpack.securitySolution.auditd.inDescription",{defaultMessage:"in"}),c=n.i18n.translate("xpack.securitySolution.auditd.nonExistentDescription",{defaultMessage:"an unknown process"}),s=n.i18n.translate("xpack.securitySolution.event.module.linkToElasticEndpointSecurityDescription",{defaultMessage:"Open in Endpoint Security"}),u=e=>n.i18n.translate("xpack.securitySolution.event.summary.threat_indicator.showMatches",{values:{count:e},defaultMessage:"Show all {count} indicator match alerts"}),d=n.i18n.translate("xpack.securitySolution.event.summary.threat_indicator.modal.allMatches",{defaultMessage:"All Indicator Matches"}),g=n.i18n.translate("xpack.securitySolution.event.summary.threat_indicator.modal.close",{defaultMessage:"Close"})},395:function(e,t,a){"use strict";a.d(t,"d",(function(){return r})),a.d(t,"a",(function(){return o})),a.d(t,"b",(function(){return c})),a.d(t,"c",(function(){return s}));var n=a(2),i=a.n(n),l=a(337);const r="source.ip",o="destination.ip",c="ip",s=i.a.memo((({contextId:e,eventId:t,fieldName:a,isDraggable:n,value:r})=>i.a.createElement(l.a,{contextId:e,"data-test-subj":"formatted-ip",eventId:t,fieldName:a,isDraggable:n,fieldType:c,value:r,truncate:!0})));s.displayName="Ip"},485:function(e,t,a){"use strict";a.d(t,"b",(function(){return o})),a.d(t,"a",(function(){return c}));var n=a(2),i=a.n(n),l=a(121),r=a(1435);const o="event.duration",c=i.a.memo((({contextId:e,eventId:t,fieldName:a,fieldType:n,isAggregatable:o,isDraggable:c,value:s})=>c?i.a.createElement(l.b,{id:`duration-default-draggable-${e}-${t}-${a}-${s}`,fieldType:n,isAggregatable:o,isDraggable:c,field:a,tooltipContent:null,value:s},i.a.createElement(r.a,{maybeDurationNanoseconds:s,tooltipTitle:a})):i.a.createElement(r.a,{maybeDurationNanoseconds:s,tooltipTitle:a})));c.displayName="Duration"},727:function(e,t,a){"use strict";a.d(t,"a",(function(){return u}));var n=a(2),i=a.n(n),l=a(55),r=a.n(l),o=a(4),c=a(102);const s=({value:e})=>i.a.createElement(i.a.Fragment,null,(()=>{const[e]=Object(c.p)(o.A);return t=>((e,t)=>r()(e).format(t))(t,e)})()(e));s.displayName="PreferenceFormattedBytesComponent";const u=i.a.memo(s);u.displayName="PreferenceFormattedBytes"},923:function(e,t,a){"use strict";a.d(t,"a",(function(){return i}));var n=a(2);const i=Object(n.createContext)(null)}}]);