/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements. * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */!function(e){function t(t){for(var n,r,s=t[0],o=t[1],a=0,u=[];a= "now-30d/d"',J="/explore",Y="/dashboards",X="/manage",Z="/timelines",ee="/cases",te="/overview",ne="/get_started",ie="/data_quality",re="/detection_response",se="/detections",oe="/alerts",ae=`${oe}/redirect`,ce="/rules",ue=`${ce}/landing`,le=`${ce}/add_rules`,de=`${ce}/create`,pe="/exceptions",_e=`${pe}/details/:detailName`,be="/hosts",fe="/users",ge="/kubernetes",he="/network",me="/administration",ye="/rules_coverage_overview",ve="/threat_intelligence",Ee=`${me}/endpoints`,Se=`${me}/policy`,ke=`${me}/trusted_apps`,Pe=`${me}/event_filters`,we=`${me}/host_isolation_exceptions`,Oe=`${me}/blocklist`,Ae=`${me}/response_actions_history`,Te="/entity_analytics",Ie="/entity_analytics_management",De="securitySolution:enableNewsFeed",Ce="securitySolution:enableExpandableFlyout",je="securitySolution:rulesTableRefresh",Le="securitySolution:newsFeedUrl",xe="securitySolution:ipReputationLinks",Re="securitySolution:showRelatedIntegrations",Ne="securitySolution:extendedRuleExecutionLoggingEnabled",Me="securitySolution:extendedRuleExecutionLoggingMinLevel",Ue=`/api${pe}/shared`,Be="/api/detection_engine",$e=`${Be}/privileges`,Ve=`${Be}/index`,Fe=`${Be}/rules`,Ge=`${Fe}/_find`,ze=`${Fe}/_bulk_action`,Ke=`${Fe}/preview`,He="/internal/risk_score",Qe=e=>`${He}/prebuilt_content/saved_objects/_bulk_create/${e}`,We=e=>`${He}/prebuilt_content/saved_objects/_bulk_delete/${e}`,qe=`${He}/stored_scripts/create`,Je=`${He}/stored_scripts/delete`,Ye=`${He}/preview`,Xe=`${He}/engine`,Ze=`${Xe}/status`,et=`${Xe}/init`,tt=`${Xe}/enable`,nt=`${Xe}/disable`,it="/internal/dashboards",rt="/internal/tags",st="/internal/detection_engine",ot=`${st}/signal/index`,at="/api/timeline/resolve",ct="/api/timeline",ut="/api/timelines",lt="/api/timeline/_favorite",dt=`${ct}/_draft`,pt=`${ct}/_export`,_t=`${ct}/_import`,bt=`${ct}/_prepackaged`,ft="/api/note",gt="/api/pinned_event",ht="/internal/risk_score/index_status",mt=`${Be}/signals`,yt=`${mt}/status`,vt=`${mt}/search`,Et=`${mt}/tags`,St="/internal/rac/alerts/find",kt=["security","siem"],Pt="no_actions",wt="rule",Ot={notifyWhen:i.RuleNotifyWhen.ACTIVE,throttle:null,summary:!0},At="ml_host_risk_score_",Tt="ml_user_risk_score_",It=new Set(["aborting","failed","stopped","stopping"]),Dt=(new Set(["indexing","started"]),100),Ct="securitySolution.ruleDetails.ruleExecutionLog.showMetrics.v8.2";let jt;!function(e){e.IMMUTABLE="IMMUTABLE",e.MACHINE_LEARNING_AUTH="MACHINE_LEARNING_AUTH",e.MACHINE_LEARNING_INDEX_PATTERN="MACHINE_LEARNING_INDEX_PATTERN"}(jt||(jt={}));const Lt="https://www.elastic.co/guide/en/security/current/host-risk-score.html",xt="https://www.elastic.co/guide/en/security/current/user-risk-score.html",Rt="https://www.elastic.co/guide/en/security/current/detection-entity-dashboard.html",Nt=3,Mt=2e3,Ut=[{title:"Status",fieldName:"kibana.alert.workflow_status",selectedOptions:["open"],hideActionBar:!0,persist:!0,hideExists:!0},{title:"Severity",fieldName:"kibana.alert.severity",selectedOptions:[],hideActionBar:!0,hideExists:!0},{title:"User",fieldName:"user.name"},{title:"Host",fieldName:"host.name"}],Bt="securitySolution.alerts.table.view-selection",$t={gridView:"gridView",eventRenderedView:"eventRenderedView"},Vt={ALERTS_PAGE:`${o}-alerts-page`,RULE_DETAILS:`${o}-rule-details`,CASE:`${o}-case`,RISK_INPUTS:`${o}-risk-inputs`},Ft="securitySolution:alertTags"},function(e,t){e.exports=__kbnSharedDeps__.KbnI18n},function(e,t,n){"use strict";n.d(t,"b",(function(){return i})),n.d(t,"c",(function(){return r})),n.d(t,"a",(function(){return s}));const i="securitySolutionUI";let r,s;!function(e){e.administration="administration",e.alerts="alerts",e.assets="assets",e.blocklist="blocklist",e.case="cases",e.caseConfigure="cases_configure",e.caseCreate="cases_create",e.cloudSecurityPostureBenchmarks="cloud_security_posture-benchmarks",e.cloudSecurityPostureDashboard="cloud_security_posture-dashboard",e.cloudSecurityPostureFindings="cloud_security_posture-findings",e.cloudSecurityPostureRules="cloud_security_posture-rules",e.cloudDefend="cloud_defend",e.cloudDefendPolicies="cloud_defend-policies",e.dashboards="dashboards",e.dataQuality="data_quality",e.detections="detections",e.detectionAndResponse="detection_response",e.endpoints="endpoints",e.eventFilters="event_filters",e.exceptions="exceptions",e.exploreLanding="explore",e.hostIsolationExceptions="host_isolation_exceptions",e.hosts="hosts",e.hostsAnomalies="hosts-anomalies",e.hostsRisk="hosts-risk",e.hostsEvents="hosts-events",e.investigations="investigations",e.kubernetes="kubernetes",e.landing="get_started",e.mlLanding="machine_learning-landing",e.network="network",e.networkAnomalies="network-anomalies",e.networkDns="network-dns",e.networkEvents="network-events",e.networkHttp="network-http",e.networkTls="network-tls",e.noPage="",e.overview="overview",e.policies="policy",e.projectSettings="project_settings",e.responseActionsHistory="response_actions_history",e.rules="rules",e.rulesAdd="rules-add",e.rulesCreate="rules-create",e.rulesLanding="rules-landing",e.sessions="sessions",e.threatIntelligence="threat_intelligence",e.timelines="timelines",e.timelinesTemplates="timelines-templates",e.trustedApps="trusted_apps",e.uncommonProcesses="uncommon_processes",e.users="users",e.usersAnomalies="users-anomalies",e.usersAuthentications="users-authentications",e.usersEvents="users-events",e.usersRisk="users-risk",e.entityAnalytics="entity_analytics",e.entityAnalyticsManagement="entity_analytics-management",e.coverageOverview="coverage-overview"}(r||(r={})),function(e){e.title="title",e.collapsibleTitle="collapsibleTitle",e.accordion="accordion",e.separator="separator"}(s||(s={}))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("entry/core/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.Lodash},function(e,t,n){"use strict";n.d(t,"a",(function(){return u})),n.d(t,"f",(function(){return d})),n.d(t,"h",(function(){return _})),n.d(t,"g",(function(){return b})),n.d(t,"c",(function(){return f})),n.d(t,"b",(function(){return g})),n.d(t,"e",(function(){return h})),n.d(t,"d",(function(){return m}));var i=n(2),r=n(10),s=n.n(r),o=n(3),a=n(8);const c=new o.BehaviorSubject([]),u=c.asObservable(),l=new o.BehaviorSubject({}),d=(e,t)=>{const n=E(e,t);c.next(Object.freeze(n)),l.next(Object.freeze(y(n)))},p=()=>s()(l,l.getValue()),_=e=>{const t=p();return Object(i.useMemo)((()=>!!t[e]),[t,e])},b=e=>{const t=(e=>{const t=p();return Object(i.useMemo)((()=>{const n=t[e];if(!n)return;const{parentId:i,...r}=n;return r}),[t,e])})(e);return Object(i.useMemo)((()=>null!=t&&!t.unauthorized),[t])},f=e=>{const t=v(e);if(!t)return;const{parentId:n,...i}=t;return i},g=e=>{const t=[];let n=e;for(;n;){const e=v(n);if(e){const{parentId:i,...r}=e;t.push(r),n=i}else n=void 0}return t.reverse()},h=e=>{var t;return!(null!==(t=v(e))&&void 0!==t&&t.skipUrlState)},m=()=>Object.values(l.getValue()).filter((e=>e.hideTimeline));function y(e,t){return e.reduce(((e,{links:n,...i})=>(e[i.id]={...i,parentId:t},n&&n.length>0&&Object.assign(e,y(n,i.id)),e)),{})}const v=e=>l.getValue()[e],E=(e,t)=>e.reduce(((e,{links:n,...i})=>{if(!S(i,t))return e;if(r=t.capabilities,(s=i.capabilities)&&!(Object(a.isArray)(s)?s.some((e=>Object(a.isArray)(e)?e.every((e=>Object(a.get)(r,e,!1))):Object(a.get)(r,e,!1))):Object(a.get)(r,s,!1))||!k(i,t))return t.upselling.isPageUpsellable(i.id)&&e.push({...i,unauthorized:!0}),e;var r,s;const o=i;if(n){const e=E(n,t);e.length>0&&(o.links=e)}return e.push(o),e}),[]),S=(e,{experimentalFeatures:t})=>!(e.hideWhenExperimentalKey&&t[e.hideWhenExperimentalKey]||e.experimentalKey&&!t[e.experimentalKey]),k=(e,{license:t})=>{var n;const i=null!==(n=e.licenseType)&&void 0!==n?n:"basic";if(t){if(!t.hasAtLeast(i))return!1}else if("basic"!==i)return!1;return!0}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=n(34),r=n(2),s=i.__importDefault(n(35));t.default=function(e,t){var n=r.useState(t),i=n[0],o=n[1];return s.default((function(){var t=e.subscribe(o);return function(){return t.unsubscribe()}}),[e]),i}},function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return a}));var i=n(2),r=n(21);const s=Object(i.createContext)(null),o=({core:e,children:t})=>Object(r.jsx)(s.Provider,{value:e},t),a=()=>{const e=Object(i.useContext)(s);if(!e)throw new Error("Kibana services not found in navigation context");return e}},function(e,t,n){"use strict";n.r(t),n.d(t,"addNote",(function(){return s})),n.d(t,"addNoteToEvent",(function(){return o})),n.d(t,"showTimeline",(function(){return a})),n.d(t,"setInsertTimeline",(function(){return c})),n.d(t,"addProvider",(function(){return u})),n.d(t,"saveTimeline",(function(){return l})),n.d(t,"createTimeline",(function(){return d})),n.d(t,"pinEvent",(function(){return p})),n.d(t,"setTimelineUpdatedAt",(function(){return _})),n.d(t,"removeProvider",(function(){return b})),n.d(t,"updateGraphEventId",(function(){return f})),n.d(t,"updateSessionViewConfig",(function(){return g})),n.d(t,"unPinEvent",(function(){return h})),n.d(t,"updateTimeline",(function(){return m})),n.d(t,"addTimeline",(function(){return y})),n.d(t,"startTimelineSaving",(function(){return v})),n.d(t,"endTimelineSaving",(function(){return E})),n.d(t,"updateDataProviderEnabled",(function(){return S})),n.d(t,"updateDataProviderExcluded",(function(){return k})),n.d(t,"dataProviderEdited",(function(){return P})),n.d(t,"updateDataProviderType",(function(){return w})),n.d(t,"updateKqlMode",(function(){return O})),n.d(t,"applyKqlFilterQuery",(function(){return A})),n.d(t,"updateIsFavorite",(function(){return T})),n.d(t,"updateTitleAndDescription",(function(){return I})),n.d(t,"updateProviders",(function(){return D})),n.d(t,"updateRange",(function(){return C})),n.d(t,"updateAutoSaveMsg",(function(){return j})),n.d(t,"showCallOutUnauthorizedMsg",(function(){return L})),n.d(t,"setSavedQueryId",(function(){return x})),n.d(t,"setFilters",(function(){return R})),n.d(t,"setExcludedRowRendererIds",(function(){return N})),n.d(t,"updateDataView",(function(){return M})),n.d(t,"setActiveTabTimeline",(function(){return U})),n.d(t,"toggleModalSaveTimeline",(function(){return B})),n.d(t,"updateEqlOptions",(function(){return $})),n.d(t,"updateIsLoading",(function(){return V})),n.d(t,"toggleDetailPanel",(function(){return F})),n.d(t,"setEventsLoading",(function(){return G})),n.d(t,"setEventsDeleted",(function(){return z})),n.d(t,"removeColumn",(function(){return K})),n.d(t,"updateColumns",(function(){return H})),n.d(t,"updateSort",(function(){return Q})),n.d(t,"upsertColumn",(function(){return W})),n.d(t,"setSelected",(function(){return q})),n.d(t,"clearSelected",(function(){return J})),n.d(t,"initializeTimelineSettings",(function(){return Y})),n.d(t,"updateItemsPerPage",(function(){return X})),n.d(t,"updateItemsPerPageOptions",(function(){return Z})),n.d(t,"applyDeltaToColumnWidth",(function(){return ee})),n.d(t,"clearEventsLoading",(function(){return te})),n.d(t,"clearEventsDeleted",(function(){return ne})),n.d(t,"updateTotalCount",(function(){return ie}));var i=n(22);const r=n.n(i)()("x-pack/security_solution/local/timeline"),s=r("ADD_NOTE"),o=r("ADD_NOTE_TO_EVENT"),a=r("SHOW_TIMELINE"),c=r("SET_INSERT_TIMELINE"),u=r("ADD_PROVIDER"),l=r("SAVE_TIMELINE"),d=r("CREATE_TIMELINE"),p=r("PIN_EVENT"),_=r("SET_TIMELINE_UPDATED_AT"),b=r("REMOVE_PROVIDER"),f=r("UPDATE_TIMELINE_GRAPH_EVENT_ID"),g=r("UPDATE_TIMELINE_SESSION_VIEW_CONFIG"),h=r("UN_PIN_EVENT"),m=r("UPDATE_TIMELINE"),y=r("ADD_TIMELINE"),v=r("START_TIMELINE_SAVING"),E=r("END_TIMELINE_SAVING"),S=r("TOGGLE_PROVIDER_ENABLED"),k=r("TOGGLE_PROVIDER_EXCLUDED"),P=r("DATA_PROVIDER_EDITED"),w=r("UPDATE_PROVIDER_TYPE"),O=r("UPDATE_KQL_MODE"),A=r("APPLY_KQL_FILTER_QUERY"),T=r("UPDATE_IS_FAVORITE"),I=r("UPDATE_TITLE_AND_DESCRIPTION"),D=r("UPDATE_PROVIDERS"),C=r("UPDATE_RANGE"),j=r("UPDATE_AUTO_SAVE"),L=r("SHOW_CALL_OUT_UNAUTHORIZED_MSG"),x=r("SET_TIMELINE_SAVED_QUERY"),R=r("SET_TIMELINE_FILTERS"),N=r("SET_TIMELINE_EXCLUDED_ROW_RENDERER_IDS"),M=r("UPDATE_DATA_VIEW"),U=r("SET_ACTIVE_TAB_TIMELINE"),B=r("TOGGLE_MODAL_SAVE_TIMELINE"),$=r("UPDATE_EQL_OPTIONS_TIMELINE"),V=r("UPDATE_LOADING"),F=r("TOGGLE_DETAIL_PANEL"),G=r("SET_TIMELINE_EVENTS_LOADING"),z=r("SET_TIMELINE_EVENTS_DELETED"),K=r("REMOVE_COLUMN"),H=r("UPDATE_COLUMNS"),Q=r("UPDATE_SORT"),W=r("UPSERT_COLUMN"),q=r("SET_TIMELINE_SELECTED"),J=r("CLEAR_TIMELINE_SELECTED"),Y=r("INITIALIZE_TIMELINE"),X=r("UPDATE_ITEMS_PER_PAGE"),Z=r("UPDATE_ITEMS_PER_PAGE_OPTIONS"),ee=r("APPLY_DELTA_TO_COLUMN_WIDTH"),te=r("CLEAR_TGRID_EVENTS_LOADING"),ne=r("CLEAR_TGRID_EVENTS_DELETED"),ie=r("UPDATE_TOTAL_COUNT")},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/data/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/kibanaUtils/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return o}));const i=Object.freeze({tGridEnabled:!0,tGridEventRenderedViewEnabled:!0,excludePoliciesInFilterEnabled:!1,kubernetesEnabled:!0,chartEmbeddablesEnabled:!0,donutChartEmbeddablesEnabled:!1,alertsPreviewChartEmbeddablesEnabled:!1,previewTelemetryUrlEnabled:!1,insightsRelatedAlertsByProcessAncestry:!0,extendedRuleExecutionLoggingEnabled:!1,socTrendsEnabled:!1,responseActionsEnabled:!0,endpointResponseActionsEnabled:!0,alertDetailsPageEnabled:!1,responseActionUploadEnabled:!0,alertsPageChartsEnabled:!0,alertTypeEnabled:!1,alertsPageFiltersEnabled:!0,newUserDetailsFlyout:!1,riskScoringPersistence:!1,riskScoringRoutesEnabled:!1,discoverInTimeline:!1}),r=Object.keys(i),s=e=>{const t={},n=[];for(const i of e)r.includes(i)?t[i]=!0:n.push(i);return{features:{...i,...t},invalid:n}},o=()=>[...r]},function(e,t,n){"use strict";n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return a})),n.d(t,"c",(function(){return u}));var i=n(2),r=n(6),s=n(11);const o=()=>{const{getUrlForApp:e}=Object(s.b)().application;return{getAppUrl:Object(i.useCallback)((({appId:t=r.b,...n})=>e(t,n)),[e])}},a=()=>{const{navigateToApp:e,navigateToUrl:t}=Object(s.b)().application;return{navigateTo:Object(i.useCallback)((({url:n,appId:i=r.b,restoreScroll:s,...o})=>{s&&c(),n?t(n):e(i,o)}),[e,t])}},c=()=>{const e=window.scrollY;window.addEventListener("scroll",(()=>window.scrollTo(0,e)),{once:!0})},u=()=>{const{navigateTo:e}=a(),{getAppUrl:t}=o();return{navigateTo:e,getAppUrl:t}}},function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"b",(function(){return r}));const i=new(n(28).a);function r(){return i}},function(e,t,n){"use strict";n.d(t,"g",(function(){return r})),n.d(t,"a",(function(){return s.a})),n.d(t,"c",(function(){return s.c})),n.d(t,"b",(function(){return s.b})),n.d(t,"d",(function(){return telemetry_service_TelemetryService})),n.d(t,"h",(function(){return E.b})),n.d(t,"f",(function(){return E.a})),n.d(t,"e",(function(){return S}));var i=n(12);const r=e=>e=>t=>(i.endTimelineSaving.match(t)?Object(E.b)(s.a.COUNT,s.c.TIMELINE_SAVED):i.updateTitleAndDescription.match(t)?Object(E.b)(s.a.COUNT,s.c.TIMELINE_NAMED):i.showTimeline.match(t)&&t.payload.show&&Object(E.b)(s.a.LOADED,s.c.TIMELINE_OPENED),e(t));var s=n(1),o=n(0),a=n.n(o);class telemetry_client_TelemetryClient{constructor(e){a()(this,"reportAlertsGroupingChanged",(e=>{this.analytics.reportEvent(s.d.AlertsGroupingChanged,e)})),a()(this,"reportAlertsGroupingToggled",(e=>{this.analytics.reportEvent(s.d.AlertsGroupingToggled,e)})),a()(this,"reportAlertsGroupingTakeAction",(e=>{this.analytics.reportEvent(s.d.AlertsGroupingTakeAction,e)})),a()(this,"reportAssistantInvoked",(({conversationId:e,invokedBy:t})=>{this.analytics.reportEvent(s.d.AssistantInvoked,{conversationId:e,invokedBy:t})})),a()(this,"reportAssistantMessageSent",(({conversationId:e,role:t})=>{this.analytics.reportEvent(s.d.AssistantMessageSent,{conversationId:e,role:t})})),a()(this,"reportAssistantQuickPrompt",(({conversationId:e,promptTitle:t})=>{this.analytics.reportEvent(s.d.AssistantQuickPrompt,{conversationId:e,promptTitle:t})})),a()(this,"reportEntityDetailsClicked",(({entity:e})=>{this.analytics.reportEvent(s.d.EntityDetailsClicked,{entity:e})})),a()(this,"reportEntityAlertsClicked",(({entity:e})=>{this.analytics.reportEvent(s.d.EntityAlertsClicked,{entity:e})})),a()(this,"reportEntityRiskFiltered",(({entity:e,selectedSeverity:t})=>{this.analytics.reportEvent(s.d.EntityRiskFiltered,{entity:e,selectedSeverity:t})})),a()(this,"reportMLJobUpdate",(e=>{this.analytics.reportEvent(s.d.MLJobUpdate,e)})),a()(this,"reportCellActionClicked",(e=>{this.analytics.reportEvent(s.d.CellActionClicked,e)})),a()(this,"reportAnomaliesCountClicked",(e=>{this.analytics.reportEvent(s.d.AnomaliesCountClicked,e)})),a()(this,"reportDataQualityIndexChecked",(e=>{this.analytics.reportEvent(s.d.DataQualityIndexChecked,e)})),a()(this,"reportDataQualityCheckAllCompleted",(e=>{this.analytics.reportEvent(s.d.DataQualityCheckAllCompleted,e)})),a()(this,"reportBreadcrumbClicked",(({title:e})=>{this.analytics.reportEvent(s.d.BreadcrumbClicked,{title:e})})),this.analytics=e}}var c=n(3);const u={eventType:s.d.AlertsGroupingToggled,schema:{isOpen:{type:"boolean",_meta:{description:"on or off",optional:!1}},tableId:{type:"text",_meta:{description:"Table ID",optional:!1}},groupNumber:{type:"integer",_meta:{description:"Group number",optional:!1}}}},l={eventType:s.d.AlertsGroupingChanged,schema:{tableId:{type:"keyword",_meta:{description:"Table ID",optional:!1}},groupByField:{type:"keyword",_meta:{description:"Selected field",optional:!1}}}},d={eventType:s.d.AlertsGroupingTakeAction,schema:{tableId:{type:"keyword",_meta:{description:"Table ID",optional:!1}},groupNumber:{type:"integer",_meta:{description:"Group number",optional:!1}},status:{type:"keyword",_meta:{description:"Alert status",optional:!1}},groupByField:{type:"keyword",_meta:{description:"Selected field",optional:!1}}}},p={eventType:s.d.EntityDetailsClicked,schema:{entity:{type:"keyword",_meta:{description:"Entity name (host|user)",optional:!1}}}},_={eventType:s.d.EntityAlertsClicked,schema:{entity:{type:"keyword",_meta:{description:"Entity name (host|user)",optional:!1}}}},b={eventType:s.d.EntityRiskFiltered,schema:{entity:{type:"keyword",_meta:{description:"Entity name (host|user)",optional:!1}},selectedSeverity:{type:"keyword",_meta:{description:"Selected severity (Unknown|Low|Moderate|High|Critical)",optional:!1}}}},f={eventType:s.d.AssistantInvoked,schema:{conversationId:{type:"keyword",_meta:{description:"Active conversation ID",optional:!1}},invokedBy:{type:"keyword",_meta:{description:"Invocation method",optional:!1}}}},g={eventType:s.d.AssistantMessageSent,schema:{conversationId:{type:"keyword",_meta:{description:"Active conversation ID",optional:!1}},role:{type:"keyword",_meta:{description:"Conversation role",optional:!1}}}},h={eventType:s.d.AssistantQuickPrompt,schema:{conversationId:{type:"keyword",_meta:{description:"Active conversation ID",optional:!1}},promptTitle:{type:"keyword",_meta:{description:"Title of the quick prompt",optional:!1}}}},m={eventType:s.d.DataQualityIndexChecked,schema:{batchId:{type:"keyword",_meta:{description:"batch id",optional:!1}},indexId:{type:"keyword",_meta:{description:"Index uuid",optional:!1}},indexName:{type:"keyword",_meta:{description:"Index name",optional:!1}},numberOfIndices:{type:"integer",_meta:{description:"Number of indices",optional:!0}},numberOfIndicesChecked:{type:"integer",_meta:{description:"Number of indices checked",optional:!0}},timeConsumedMs:{type:"integer",_meta:{description:"Time consumed in milliseconds",optional:!0}},ecsVersion:{type:"keyword",_meta:{description:"ECS version",optional:!0}},errorCount:{type:"integer",_meta:{description:"Error count",optional:!0}},numberOfIncompatibleFields:{type:"integer",_meta:{description:"Number of incompatible fields",optional:!0}},numberOfDocuments:{type:"integer",_meta:{description:"Number of documents",optional:!0}},sizeInBytes:{type:"integer",_meta:{description:"Size in bytes",optional:!0}},isCheckAll:{type:"boolean",_meta:{description:"Is triggered by check all button",optional:!0}},unallowedMappingFields:{type:"array",items:{type:"keyword",_meta:{description:"Unallowed mapping fields"}}},unallowedValueFields:{type:"array",items:{type:"keyword",_meta:{description:"Unallowed value fields"}}},ilmPhase:{type:"keyword",_meta:{description:"ILM phase",optional:!0}}}},y={eventType:s.d.DataQualityCheckAllCompleted,schema:{batchId:{type:"keyword",_meta:{description:"batch id",optional:!1}},numberOfIndices:{type:"integer",_meta:{description:"Number of indices",optional:!0}},numberOfIndicesChecked:{type:"integer",_meta:{description:"Number of indices checked",optional:!0}},timeConsumedMs:{type:"integer",_meta:{description:"Time consumed in milliseconds",optional:!0}},ecsVersion:{type:"keyword",_meta:{description:"ECS version",optional:!0}},numberOfIncompatibleFields:{type:"integer",_meta:{description:"Number of incompatible fields",optional:!0}},numberOfDocuments:{type:"integer",_meta:{description:"Number of documents",optional:!0}},sizeInBytes:{type:"integer",_meta:{description:"Size in bytes",optional:!0}},isCheckAll:{type:"boolean",_meta:{description:"Is triggered by check all button",optional:!0}}}},v=[u,l,d,f,g,h,p,_,b,{eventType:s.d.MLJobUpdate,schema:{jobId:{type:"keyword",_meta:{description:"Job id",optional:!1}},isElasticJob:{type:"boolean",_meta:{description:"If true the job is one of the pre-configure security solution modules",optional:!1}},moduleId:{type:"keyword",_meta:{description:"Module id",optional:!0}},status:{type:"keyword",_meta:{description:"It describes what has changed in the job.",optional:!1}},errorMessage:{type:"text",_meta:{description:"Error message",optional:!0}}}},{eventType:s.d.CellActionClicked,schema:{fieldName:{type:"keyword",_meta:{description:"Field Name",optional:!1}},actionId:{type:"keyword",_meta:{description:"Action id",optional:!1}},displayName:{type:"keyword",_meta:{description:"User friendly action name",optional:!1}},metadata:{type:"pass_through",_meta:{description:"Action metadata",optional:!0}}}},{eventType:s.d.AnomaliesCountClicked,schema:{jobId:{type:"keyword",_meta:{description:"Job id",optional:!1}},count:{type:"integer",_meta:{description:"Number of anomalies",optional:!1}}}},m,y,{eventType:s.d.BreadcrumbClicked,schema:{title:{type:"keyword",_meta:{description:"Breadcrumb title",optional:!1}}}}];class telemetry_service_TelemetryService{constructor(e=null){this.analytics=e}setup({analytics:e},t){if(this.analytics=e,t){const n=Object(c.of)(t);e.registerContextProvider({name:"detection_response",context$:n,schema:{prebuiltRulesPackageVersion:{type:"keyword",_meta:{description:"The version of prebuilt rules",optional:!0}}}})}v.forEach((t=>e.registerEventType(t)))}start(){if(!this.analytics)throw new Error("The TelemetryService.setup() method has not been invoked, be sure to call it during the plugin setup.");return new telemetry_client_TelemetryClient(this.analytics)}}var E=n(30);const S={groupedAlertsTakeAction:({tableId:e,groupNumber:t,status:n})=>`alerts_table_${e}_group-${t}_mark-${n}`}},function(e,t,n){"use strict";n.d(t,"c",(function(){return r})),n.d(t,"a",(function(){return s})),n.d(t,"f",(function(){return o})),n.d(t,"g",(function(){return a})),n.d(t,"h",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"d",(function(){return l})),n.d(t,"e",(function(){return d}));var i=n(5);const r=i.i18n.translate("xpack.securitySolution.pages.common.solutionName",{defaultMessage:"Security"}),s=i.i18n.translate("xpack.securitySolution.pages.common.beta",{defaultMessage:"Beta"}),o=e=>i.i18n.translate("xpack.securitySolution.pages.common.updateAlertStatusFailed",{values:{conflicts:e},defaultMessage:"Failed to update { conflicts } {conflicts, plural, =1 {alert} other {alerts}}."}),a=(e,t)=>i.i18n.translate("xpack.securitySolution.pages.common.updateAlertStatusFailedDetailed",{values:{updated:e,conflicts:t},defaultMessage:"{ updated } {updated, plural, =1 {alert was} other {alerts were}} updated successfully, but { conflicts } failed to update\n because { conflicts, plural, =1 {it was} other {they were}} already being modified."}),c=i.i18n.translate("xpack.securitySolution.endpoint.actions.disabledResponder.tooltip",{defaultMessage:"The current version of the Agent does not support this feature. Upgrade your Agent through Fleet to use this feature and new response actions such as killing and suspending processes."}),u=i.i18n.translate("xpack.securitySolution.endpoint.actions.insufficientPrivileges.error",{defaultMessage:"You do not have sufficient privileges to use this command. Please contact your administrator for access."}),l=i.i18n.translate("xpack.securitySolution.timeline.unsavedWorkMessage",{defaultMessage:"Leave Timeline with unsaved work?"}),d=i.i18n.translate("xpack.securitySolution.timeline.unsavedWorkTitle",{defaultMessage:"Unsaved changes"})},function(e,t,n){"use strict";n.d(t,"e",(function(){return i.f})),n.d(t,"f",(function(){return i.g})),n.d(t,"b",(function(){return i.c})),n.d(t,"a",(function(){return i.b})),n.d(t,"d",(function(){return i.e})),n.d(t,"c",(function(){return i.d}));var i=n(9)},function(e,t){e.exports=__kbnSharedDeps__.EmotionReact},function(e,t,n){"use strict";function i(e,t){void 0===t&&(t=function(e){return e instanceof Error});var n=e?e+"/":"";function i(e,i,r){void 0===r&&(r=t);var s=n+e;return Object.assign((function(e,t){var n={type:s,payload:e};return(i||t)&&(n.meta=Object.assign({},i,t)),r&&("boolean"==typeof r||r(e))&&(n.error=!0),n}),{type:s,toString:function(){return s},match:function(e){return e.type===s}})}return Object.assign(i,{async:function(e,t){return{type:n+e,started:i(e+"_STARTED",t,!1),done:i(e+"_DONE",t,!1),failed:i(e+"_FAILED",t,!0)}}})}Object.defineProperty(t,"__esModule",{value:!0}),t.isType=function(e,t){return e.type===t.type},t.actionCreatorFactory=i,t.default=i},function(e,t){e.exports=__kbnSharedDeps__.KbnAnalytics},function(e,t,n){"use strict";n.d(t,"g",(function(){return i.a})),n.d(t,"h",(function(){return i.b})),n.d(t,"i",(function(){return i.c})),n.d(t,"b",(function(){return r.a})),n.d(t,"c",(function(){return s.c})),n.d(t,"a",(function(){return s.a})),n.d(t,"f",(function(){return o})),n.d(t,"d",(function(){return a})),n.d(t,"e",(function(){return c}));var i=n(16),r=n(11),s=n(6);const o=e=>(null==e.type||e.type===s.a.title)&&null!=e.label,a=e=>e.type===s.a.accordion&&null!=e.label,c=e=>e.type===s.a.separator},function(e,t,n){"use strict";let i,r,s;n.d(t,"b",(function(){return o})),n.d(t,"a",(function(){return a})),function(e){e[e.HOUR=12]="HOUR",e[e.DAY=24]="DAY",e[e.WEEK=168]="WEEK",e[e.MONTH=30]="MONTH"}(i||(i={})),function(e){e.HOUR="5m",e.DAY="1h",e.WEEK="1h",e.MONTH="1d"}(r||(r={})),function(e){e.HOUR="now-6m",e.DAY="now-65m",e.WEEK="now-65m",e.MONTH="now-25h"}(s||(s={}));const o="security_detection_engine",a="9a1a2dae-0b5f-4c3d-8305-a268d404c306"},function(e,t,n){"use strict";n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"c",(function(){return l}));var i=n(10),r=n.n(i),s=n(3),o=n(9);const a=e=>e.map((e=>{var t;return{id:e.id,title:e.title,...null!=e.categories?{categories:e.categories}:{},...null!=e.description?{description:e.description}:{},...!0===e.sideNavDisabled?{disabled:!0}:{},...null!=e.landingIcon?{landingIcon:e.landingIcon}:{},...null!=e.landingImage?{landingImage:e.landingImage}:{},...null!=e.sideNavIcon?{sideNavIcon:e.sideNavIcon}:{},...null!=e.skipUrlState?{skipUrlState:e.skipUrlState}:{},...null!=e.isBeta?{isBeta:e.isBeta}:{},...null!=e.betaOptions?{betaOptions:e.betaOptions}:{},...(null===(t=e.links)||void 0===t?void 0:t.length)&&{links:a(e.links)}}})),c=o.a.pipe(Object(s.map)(a)),u=()=>r()(c,[]),l=e=>u().find((({id:t})=>t===e))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/alerting/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){"use strict";n.d(t,"a",(function(){return LicenseService})),n.d(t,"b",(function(){return s}));var i=n(0),r=n.n(i);class LicenseService{constructor(){r()(this,"observable",null),r()(this,"subscription",null),r()(this,"licenseInformation",null)}updateInformation(e){this.licenseInformation=e}start(e){this.observable=e,this.subscription=this.observable.subscribe(this.updateInformation.bind(this))}stop(){this.subscription&&this.subscription.unsubscribe()}getLicenseInformation(){return this.licenseInformation}getLicenseInformation$(){return this.observable}getLicenseType(){return this.licenseInformation&&this.licenseInformation.type?this.licenseInformation.type:""}getLicenseUID(){return this.licenseInformation&&this.licenseInformation.uid?this.licenseInformation.uid:""}isAtLeast(e){return s(this.licenseInformation,e)}isGoldPlus(){return this.isAtLeast("gold")}isPlatinumPlus(){return this.isAtLeast("platinum")}isEnterprise(){return this.isAtLeast("enterprise")}}const s=(e,t)=>!!e&&e.isAvailable&&e.isActive&&e.hasAtLeast(t)},function(e,t,n){"use strict";n.d(t,"a",(function(){return ExperimentalFeaturesService}));var i=n(0),r=n.n(i);class ExperimentalFeaturesService{static init({experimentalFeatures:e}){this.experimentalFeatures=e}static get(){return this.experimentalFeatures||this.throwUninitializedError(),this.experimentalFeatures}static throwUninitializedError(){throw new Error("Technical preview features services not initialized - are you trying to import this module from outside of the Security Solution app?")}}r()(ExperimentalFeaturesService,"experimentalFeatures",void 0)},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return o}));const i=()=>{};let r;const s=(e,t,n)=>{try{r(e,t,n)}catch(e){}},o=({usageCollection:e},t)=>{var n,s;r=null!==(n=null==e||null===(s=e.reportUiCounter)||void 0===s?void 0:s.bind(null,t))&&void 0!==n?n:i}},function(e,t,n){"use strict";n.d(t,"a",(function(){return KibanaServices}));var i=n(0),r=n.n(i);class KibanaServices{static init({http:e,application:t,data:n,unifiedSearch:i,kibanaBranch:r,kibanaVersion:s,prebuiltRulesPackageVersion:o,uiSettings:a,notifications:c}){this.services={application:t,data:n,http:e,uiSettings:a,unifiedSearch:i,notifications:c},this.kibanaBranch=r,this.kibanaVersion=s,this.prebuiltRulesPackageVersion=o}static get(){return this.services||this.throwUninitializedError(),this.services}static getKibanaBranch(){return this.kibanaBranch||this.throwUninitializedError(),this.kibanaBranch}static getKibanaVersion(){return this.kibanaVersion||this.throwUninitializedError(),this.kibanaVersion}static getPrebuiltRulesPackageVersion(){return this.prebuiltRulesPackageVersion}static throwUninitializedError(){throw new Error("Kibana services not initialized - are you trying to import this module from outside of the SIEM app?")}}r()(KibanaServices,"kibanaBranch",void 0),r()(KibanaServices,"kibanaVersion",void 0),r()(KibanaServices,"prebuiltRulesPackageVersion",void 0),r()(KibanaServices,"services",void 0)},function(e,t,n){"use strict";n.d(t,"b",(function(){return s})),n.d(t,"a",(function(){return r}));const i=new(n(3).BehaviorSubject)({leading:[],trailing:[]}),r=i.asObservable(),s=e=>{i.next(e)}},function(e,t){e.exports=__kbnSharedDeps_npm__},function(e,t){e.exports=__kbnSharedDeps__.TsLib},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=n(2),r="undefined"!=typeof window?i.useLayoutEffect:i.useEffect;t.default=r},function(e,t,n){"use strict";n.r(t),n.d(t,"APP_UI_ID",(function(){return i.l})),n.d(t,"APP_ID",(function(){return i.i})),n.d(t,"CASES_FEATURE_ID",(function(){return i.q})),n.d(t,"SERVER_APP_ID",(function(){return i.tc})),n.d(t,"APP_PATH",(function(){return i.k})),n.d(t,"MANAGE_PATH",(function(){return i.Jb})),n.d(t,"ADD_DATA_PATH",(function(){return i.a})),n.d(t,"SecurityPageName",(function(){return i.wc})),n.d(t,"ELASTIC_SECURITY_RULE_ID",(function(){return r.a})),n.d(t,"allowedExperimentalValues",(function(){return s.a})),n.d(t,"AppFeatureKey",(function(){return u})),n.d(t,"ALL_APP_FEATURE_KEYS",(function(){return l}));var i=n(4),r=n(25),s=n(15);let o,a,c;!function(e){e.advancedInsights="advanced_insights",e.investigationGuide="investigation_guide",e.endpointHostManagement="endpoint_host_management",e.endpointPolicyManagement="endpoint_policy_management",e.endpointPolicyProtections="endpoint_policy_protections",e.endpointArtifactManagement="endpoint_artifact_management",e.endpointResponseActions="endpoint_response_actions",e.threatIntelligence="threat-intelligence",e.osqueryAutomatedResponseActions="osquery_automated_response_actions"}(o||(o={})),function(e){e.assistant="assistant"}(a||(a={})),function(e){e.casesConnectors="cases_connectors"}(c||(c={}));const u={...o,...c,...a},l=Object.freeze(Object.values(u))},function(e,t,n){n(38),__kbnBundles__.define("plugin/securitySolution/public",n,39),__kbnBundles__.define("plugin/securitySolution/common",n,36)},function(e,t,n){n.p=window.__kbnPublicPath__.securitySolution},function(e,t,n){"use strict";n.r(t),n.d(t,"plugin",(function(){return C})),n.d(t,"Plugin",(function(){return plugin_Plugin}));var i=n(0),r=n.n(i),s=n(5),o=n(3),a=n(13),c=n(7),u=n(14),l=n(18),d=n(31),p=n(19),_=n(4),b=n(20),f=n(9);const g=e=>e.map((e=>{var t;return{id:e.id,path:e.path,title:e.title,searchable:!e.globalSearchDisabled,...null!=e.globalNavPosition?{navLinkStatus:c.AppNavLinkStatus.visible,order:e.globalNavPosition}:{navLinkStatus:c.AppNavLinkStatus.hidden},...null!=e.globalSearchKeywords?{keywords:e.globalSearchKeywords}:{},...e.links&&null!==(t=e.links)&&void 0!==t&&t.length?{deepLinks:g(e.links)}:{}}}));var h=n(17),m=n(29),y=n(2);const v=({coreStart:e,depsStart:t,services:i})=>Object(y.lazy)((async()=>{const[{withSecurityContext:r},{EndpointPolicyEditExtension:s}]=await Promise.all([Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(14)]).then(n.bind(null,1671)),Promise.all([n.e(0),n.e(2),n.e(5),n.e(4),n.e(8),n.e(28)]).then(n.bind(null,1668))]);return{default:r({coreStart:e,depsStart:t,services:i,WrappedComponent:s})}})),E=({coreStart:e,depsStart:t,services:i})=>Object(y.lazy)((async()=>{const[{withSecurityContext:r},{EndpointPolicyCreateExtension:s}]=await Promise.all([Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(14)]).then(n.bind(null,1671)),n.e(35).then(n.bind(null,1666))]);return{default:r({coreStart:e,depsStart:t,services:i,WrappedComponent:s})}})),S=Object(y.lazy)((async()=>{const{EndpointPolicyCreateMultiStepExtension:e}=await Promise.all([n.e(0),n.e(30)]).then(n.bind(null,1646));return{default:e}})),k=({coreStart:e,depsStart:t,services:i})=>Object(y.lazy)((async()=>{const[{withSecurityContext:r},{EndpointPackageCustomExtension:s}]=await Promise.all([Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(14)]).then(n.bind(null,1671)),Promise.all([n.e(0),n.e(2),n.e(5),n.e(3),n.e(4),n.e(6),n.e(8),n.e(29)]).then(n.bind(null,1669))]);return{default:r({coreStart:e,depsStart:t,services:i,WrappedComponent:s})}})),P=({coreStart:e,depsStart:t,services:i})=>Object(y.lazy)((async()=>{const[{withSecurityContext:r},{EndpointPolicyResponseExtension:s}]=await Promise.all([Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(14)]).then(n.bind(null,1671)),Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(40)]).then(n.bind(null,1647))]);return{default:r({coreStart:e,depsStart:t,services:i,WrappedComponent:s})}})),w=({coreStart:e,depsStart:t,services:i})=>Object(y.lazy)((async()=>{const[{withSecurityContext:r},{EndpointGenericErrorsList:s}]=await Promise.all([Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(14)]).then(n.bind(null,1671)),Promise.all([n.e(0),n.e(39)]).then(n.bind(null,1672))]);return{default:r({coreStart:e,depsStart:t,services:i,WrappedComponent:s})}}));var O=n(15);const A=Object(y.lazy)((async()=>{const{EndpointCustomAssetsExtension:e}=await Promise.all([n.e(0),n.e(43)]).then(n.bind(null,1648));return{default:e}}));class upselling_service_UpsellingService{constructor(){r()(this,"sections",void 0),r()(this,"pages",void 0),r()(this,"messages",void 0),r()(this,"messagesSubject$",void 0),r()(this,"sectionsSubject$",void 0),r()(this,"pagesSubject$",void 0),r()(this,"sections$",void 0),r()(this,"pages$",void 0),r()(this,"messages$",void 0),this.sections=new Map,this.sectionsSubject$=new o.BehaviorSubject(new Map),this.sections$=this.sectionsSubject$.asObservable(),this.pages=new Map,this.pagesSubject$=new o.BehaviorSubject(new Map),this.pages$=this.pagesSubject$.asObservable(),this.messages=new Map,this.messagesSubject$=new o.BehaviorSubject(new Map),this.messages$=this.messagesSubject$.asObservable()}setSections(e){this.sections.clear(),Object.entries(e).forEach((([e,t])=>{this.sections.set(e,t)})),this.sectionsSubject$.next(this.sections)}setPages(e){this.pages.clear(),Object.entries(e).forEach((([e,t])=>{this.pages.set(e,t)})),this.pagesSubject$.next(this.pages)}setMessages(e){this.messages.clear(),Object.entries(e).forEach((([e,t])=>{this.messages.set(e,t)})),this.messagesSubject$.next(this.messages)}isPageUpsellable(e){return this.pages.has(e)}getPageUpselling(e){return this.pages.get(e)}getSectionsValue(){return this.sectionsSubject$.getValue()}getMessagesValue(){return this.messagesSubject$.getValue()}}var T=n(26),I=n(32);class plugin_contract_PluginContract{constructor(){r()(this,"isSidebarEnabled$",void 0),r()(this,"getStartedComponent$",void 0),r()(this,"upsellingService",void 0),r()(this,"extraRoutes$",void 0),r()(this,"appLinksSwitcher",void 0),this.extraRoutes$=new o.BehaviorSubject([]),this.isSidebarEnabled$=new o.BehaviorSubject(!0),this.getStartedComponent$=new o.BehaviorSubject(null),this.upsellingService=new upselling_service_UpsellingService,this.appLinksSwitcher=e=>e}getStartServices(){return{extraRoutes$:this.extraRoutes$.asObservable(),isSidebarEnabled$:this.isSidebarEnabled$.asObservable(),getStartedComponent$:this.getStartedComponent$.asObservable(),upselling:this.upsellingService}}getSetupContract(){return{resolver:D,setAppLinksSwitcher:e=>{this.appLinksSwitcher=e}}}getStartContract(){return{getNavLinks$:()=>T.a,setExtraRoutes:e=>this.extraRoutes$.next(e),setIsSidebarEnabled:e=>this.isSidebarEnabled$.next(e),setGetStartedPage:e=>{this.getStartedComponent$.next(e)},getBreadcrumbsNav$:()=>I.a,getUpselling:()=>this.upsellingService}}getStopContract(){return{}}}const D=async()=>{const{resolverPluginSetup:e}=await Promise.all([n.e(0),n.e(3),n.e(10),n.e(21)]).then(n.bind(null,1667));return e()};class top_values_popover_service_TopValuesPopoverService{constructor(){r()(this,"currentPopoverSubject$",void 0),this.currentPopoverSubject$=new o.BehaviorSubject(void 0)}showPopover(e){return this.currentPopoverSubject$.next(e)}closePopover(){return this.currentPopoverSubject$.next(void 0)}getObservable(){return this.currentPopoverSubject$.asObservable()}}class plugin_Plugin{constructor(e){r()(this,"kibanaBranch",void 0),r()(this,"kibanaVersion",void 0),r()(this,"prebuiltRulesPackageVersion",void 0),r()(this,"config",void 0),r()(this,"contract",void 0),r()(this,"telemetry",void 0),r()(this,"experimentalFeatures",void 0),r()(this,"queryService",new a.QueryService),r()(this,"nowProvider",new a.NowProvider),r()(this,"appUpdater$",new o.Subject),r()(this,"storage",new u.Storage(localStorage)),r()(this,"sessionStorage",new u.Storage(sessionStorage)),r()(this,"_subPlugins",void 0),r()(this,"_store",void 0),r()(this,"_actionsRegistered",!1),this.initializerContext=e,this.config=this.initializerContext.config.get(),this.experimentalFeatures=Object(O.c)(this.config.enableExperimental||[]).features,this.kibanaVersion=e.env.packageInfo.version,this.kibanaBranch=e.env.packageInfo.branch,this.prebuiltRulesPackageVersion=this.config.prebuiltRulesPackageVersion,this.contract=new plugin_contract_PluginContract,this.telemetry=new l.d,this.storage=new u.Storage(window.localStorage)}setup(e,t){var i;Object(l.f)({usageCollection:t.usageCollection},_.l);const r={prebuiltRulesPackageVersion:this.prebuiltRulesPackageVersion};this.telemetry.setup({analytics:e.analytics},r),null===(i=this.queryService)||void 0===i||i.setup({uiSettings:e.uiSettings,storage:this.storage,nowProvider:this.nowProvider}),t.home&&t.home.featureCatalogue.registerSolution({id:_.i,title:p.c,description:s.i18n.translate("xpack.securitySolution.featureCatalogueDescription",{defaultMessage:"Prevent, collect, detect, and respond to threats for unified protection across your infrastructure."}),icon:"logoSecurity",path:_.k,order:300});const o=async t=>{const[i,r]=await e.getStartServices(),{apm:s}=await n.e(27).then(n.t.bind(null,1645,7)),{SecuritySolutionTemplateWrapper:o}=await Promise.all([n.e(0),n.e(1),n.e(2),n.e(5),n.e(7),n.e(3),n.e(10),n.e(4),n.e(9),n.e(26)]).then(n.bind(null,1659)),{savedObjectsTaggingOss:c,...u}=r,l=this.queryService.start({uiSettings:e.uiSettings,storage:this.storage,http:e.http}),d=new a.FilterManager(e.uiSettings),p={...u.data,query:{...l,filterManager:d}};return{...i,...u,...this.contract.getStartServices(),apm:s,savedObjectsTagging:c.getTaggingApi(),storage:this.storage,sessionStorage:this.sessionStorage,security:r.security,onAppLeave:t.onAppLeave,securityLayout:{getPluginWrapper:()=>o},contentManagement:r.contentManagement,telemetry:this.telemetry.start(),discoverFilterManager:d,customDataService:p,topValuesPopover:new top_values_popover_service_TopValuesPopoverService}};return e.application.register({id:_.l,title:p.c,appRoute:_.k,category:c.DEFAULT_APP_CATEGORIES.security,navLinkStatus:c.AppNavLinkStatus.visible,searchable:!0,updater$:this.appUpdater$,euiIconType:_.h,mount:async n=>{const{alertsTableConfigurationRegistry:i}=t.triggersActionsUi,{registerAlertsTableConfiguration:r}=await this.lazyRegisterAlertsTableConfiguration();r(i,this.storage);const[s,a]=await e.getStartServices(),c=await this.startSubPlugins(this.storage,s,a),u=await this.store(s,a,c),l=await o(n);await this.registerActions(u,n.history,l);const{renderApp:d}=await this.lazyApplicationDependencies(),{getSubPluginRoutesByCapabilities:p}=await this.lazyHelpersForRoutes();return d({...n,services:l,store:u,usageCollection:t.usageCollection,subPluginRoutes:p(c,s.application.capabilities,l)})}}),e.application.register({id:"siem",appRoute:"app/siem",title:"SIEM",navLinkStatus:3,mount:async t=>{const[n]=await e.getStartServices(),{manageOldSiemRoutes:i}=await this.lazyHelpersForRoutes(),r=this.appUpdater$.subscribe((()=>{i(n),r.unsubscribe()}));return()=>!0}}),this.contract.getSetupContract()}start(e,t){if(d.a.init({...e,...t,kibanaBranch:this.kibanaBranch,kibanaVersion:this.kibanaVersion,prebuiltRulesPackageVersion:this.prebuiltRulesPackageVersion}),m.a.init({experimentalFeatures:this.experimentalFeatures}),h.a.start(t.licensing.license$),t.fleet){const{registerExtension:n}=t.fleet,i={coreStart:e,depsStart:t,services:{upsellingService:this.contract.upsellingService}};n({package:"endpoint",view:"package-policy-edit",Component:v(i)}),n({package:"endpoint",view:"package-policy-response",Component:P(i)}),n({package:"endpoint",view:"package-generic-errors-list",Component:w(i)}),n({package:"endpoint",view:"package-policy-create",Component:E(i)}),n({package:"endpoint",view:"package-policy-create-multi-step",Component:S}),n({package:"endpoint",view:"package-detail-custom",Component:k(i)}),n({package:"endpoint",view:"package-detail-assets",Component:A})}return this.registerAppLinks(e,t),this.contract.getStartContract()}stop(){return this.queryService.stop(),h.a.stop(),this.contract.getStopContract()}lazyHelpersForRoutes(){return Promise.all([n.e(0),n.e(2),n.e(3),n.e(4),n.e(6),n.e(11)]).then(n.bind(null,115))}lazyApplicationDependencies(){return Promise.all([n.e(0),n.e(2),n.e(7),n.e(3),n.e(4),n.e(6),n.e(8),n.e(11),n.e(12),n.e(22)]).then(n.bind(null,1660))}lazySubPlugins(){return Promise.all([n.e(0),n.e(1),n.e(2),n.e(5),n.e(7),n.e(3),n.e(10),n.e(4),n.e(9),n.e(24)]).then(n.bind(null,1658))}lazyRegisterAlertsTableConfiguration(){return Promise.all([n.e(0),n.e(1),n.e(2),n.e(5),n.e(7),n.e(3),n.e(10),n.e(4),n.e(9),n.e(23)]).then(n.bind(null,1664))}lazyApplicationLinks(){return Promise.all([n.e(2),n.e(18)]).then(n.bind(null,1661))}lazyActions(){return Promise.all([n.e(0),n.e(1),n.e(2),n.e(3),n.e(4),n.e(9),n.e(6),n.e(8),n.e(11),n.e(17)]).then(n.bind(null,1662))}async subPlugins(){if(!this._subPlugins){const{subPluginClasses:e}=await this.lazySubPlugins();this._subPlugins={alerts:new e.Detections,rules:new e.Rules,exceptions:new e.Exceptions,cases:new e.Cases,dashboards:new e.Dashboards,explore:new e.Explore,kubernetes:new e.Kubernetes,overview:new e.Overview,timelines:new e.Timelines,management:new e.Management,cloudDefend:new e.CloudDefend,cloudSecurityPosture:new e.CloudSecurityPosture,threatIntelligence:new e.ThreatIntelligence,entityAnalytics:new e.EntityAnalytics}}return this._subPlugins}async startSubPlugins(e,t,n){const i=await this.subPlugins();return{alerts:i.alerts.start(e),cases:i.cases.start(),cloudDefend:i.cloudDefend.start(),cloudSecurityPosture:i.cloudSecurityPosture.start(),dashboards:i.dashboards.start(),exceptions:i.exceptions.start(e),explore:i.explore.start(e),kubernetes:i.kubernetes.start(),management:i.management.start(t,n),overview:i.overview.start(),rules:i.rules.start(e),threatIntelligence:i.threatIntelligence.start(),timelines:i.timelines.start(),entityAnalytics:i.entityAnalytics.start(this.experimentalFeatures.riskScoringRoutesEnabled)}}async store(e,t,n){if(!this._store){const{createStoreFactory:i}=await this.lazyApplicationDependencies();this._store=await i(e,t,n,this.storage,this.experimentalFeatures)}return t.timelines&&t.timelines.setTimelineEmbeddedStore(this._store),this._store}async registerActions(e,t,n){if(!this._actionsRegistered){const{registerActions:i}=await this.lazyActions();i(e,t,n),this._actionsRegistered=!0}}async registerAppLinks(e,t){const{links:n,getFilteredLinks:i}=await this.lazyApplicationLinks(),{license$:r}=t.licensing,{upsellingService:s,appLinksSwitcher:o}=this.contract;var a;a=this.appUpdater$,f.a.subscribe((e=>{a.next((()=>({navLinkStatus:c.AppNavLinkStatus.hidden,deepLinks:g(e)})))}));const u={experimentalFeatures:this.experimentalFeatures,upselling:s,capabilities:e.application.capabilities};r.subscribe((async r=>{const s={...u,...null!=r.type&&{license:r}};Object(b.e)(o(n),s);const a=await i(e,t);Object(b.e)(o(a),s)}))}}const C=e=>new plugin_Plugin(e)},function(e,t){e.exports=__kbnSharedDeps__.ElasticEui},function(e,t){e.exports=__kbnSharedDeps__.StyledComponents},function(e,t){e.exports=__kbnSharedDeps__.LodashFp},function(e,t){e.exports=__kbnSharedDeps__.IoTs},function(e,t){e.exports=__kbnSharedDeps__.KbnI18nReact},function(e,t){e.exports=__kbnSharedDeps__.ReactRouterDom},function(e,t){e.exports=__kbnSharedDeps__.ReactQuery},function(e,t){e.exports=__kbnSharedDeps__.Uuid},function(e,t){e.exports=__kbnSharedDeps__.KbnUiTheme},function(e,t){e.exports=__kbnSharedDeps__.KbnEsQuery},function(e,t){e.exports=__kbnSharedDeps__.Moment},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/data/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/esUiShared/static/forms/hook_form_lib");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.Classnames},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/timelines/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.ElasticNumeral},function(e,t){e.exports=__kbnSharedDeps__.KbnRison},function(e,t){e.exports=__kbnSharedDeps__.ElasticCharts},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/kibanaReact/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/timelines/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.RxjsOperators},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/kibanaReact/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.KbnDatemath},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/cases/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.ReactDom},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/fleet/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/stackConnectors/public/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/esUiShared/static/forms/components");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/triggersActionsUi/public/common/constants");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/actions/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.HelloPangeaDnd},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/usageCollection/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/unifiedSearch/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/embeddable/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.KbnStd},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/esUiShared/static/forms/helpers");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.MomentTimezone},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/ml/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.EmotionCache},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/triggersActionsUi/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/lists/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/fleet/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.SaferLodashSet},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/dataViews/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/spaces/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/kibanaUtils/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/dashboard/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t){e.exports=__kbnSharedDeps__.ReactRouterDomV5Compat},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/cloudDefend/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/cloudSecurityPosture/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/threatIntelligence/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/uiActions/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/ml/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/controls/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/controls/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/sessionView/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/maps/common");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/maps/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/cloudChat/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/cases/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/discover/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))},function(e,t,n){n.r(t);var i=__kbnBundles__.get("plugin/lens/public");Object.defineProperties(t,Object.getOwnPropertyDescriptors(i))}]);