Update integration tests with new enrichment fields

rylnd · rylnd · commit f2de1adf720a · 2021-02-26T00:08:57.000-06:00
diff --git a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts
@@ -307,6 +307,8 @@ export default ({ getService }: FtrProviderContext) => {
                   first_seen: '2021-01-26T11:09:04.000Z',
                   matched: {
                     atomic: '159.89.119.67',
+                    id: '978783',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'destination.ip',
                     type: 'url',
                   },
@@ -327,6 +329,8 @@ export default ({ getService }: FtrProviderContext) => {
                   first_seen: '2021-01-26T11:09:04.000Z',
                   matched: {
                     atomic: '159.89.119.67',
+                    id: '978783',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'destination.ip',
                     type: 'url',
                   },
@@ -388,6 +392,8 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: '45.115.45.3',
+                    id: '978785',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.ip',
                     type: 'url',
                   },
@@ -401,6 +407,8 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: '45.115.45.3',
+                    id: '978787',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.ip',
                     type: 'ip',
                   },
@@ -468,25 +476,15 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: '45.115.45.3',
+                    id: '978785',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.ip',
                     type: 'url',
                   },
                   port: 57324,
                   provider: 'geenensp',
                   type: 'url',
                 },
-                {
-                  description: 'this should match auditbeat/hosts on ip',
-                  first_seen: '2021-01-26T11:06:03.000Z',
-                  ip: '45.115.45.3',
-                  matched: {
-                    atomic: '45.115.45.3',
-                    field: 'source.ip',
-                    type: 'ip',
-                  },
-                  provider: 'other_provider',
-                  type: 'ip',
-                },
                 // We do not merge matched indicators during enrichment, so in
                 // certain circumstances a given indicator document could appear
                 // multiple times in an enriched alert (albeit with different
@@ -498,13 +496,29 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: 57324,
+                    id: '978785',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.port',
                     type: 'url',
                   },
                   port: 57324,
                   provider: 'geenensp',
                   type: 'url',
                 },
+                {
+                  description: 'this should match auditbeat/hosts on ip',
+                  first_seen: '2021-01-26T11:06:03.000Z',
+                  ip: '45.115.45.3',
+                  matched: {
+                    atomic: '45.115.45.3',
+                    id: '978787',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
+                    field: 'source.ip',
+                    type: 'ip',
+                  },
+                  provider: 'other_provider',
+                  type: 'ip',
+                },
               ],
             },
           ]);
@@ -570,6 +584,8 @@ export default ({ getService }: FtrProviderContext) => {
                   first_seen: '2021-01-26T11:09:04.000Z',
                   matched: {
                     atomic: '159.89.119.67',
+                    id: '978783',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'destination.ip',
                     type: 'url',
                   },
@@ -590,6 +606,8 @@ export default ({ getService }: FtrProviderContext) => {
                   first_seen: '2021-01-26T11:09:04.000Z',
                   matched: {
                     atomic: '159.89.119.67',
+                    id: '978783',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'destination.ip',
                     type: 'url',
                   },
@@ -606,6 +624,8 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: '45.115.45.3',
+                    id: '978785',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.ip',
                     type: 'url',
                   },
@@ -619,6 +639,8 @@ export default ({ getService }: FtrProviderContext) => {
                   ip: '45.115.45.3',
                   matched: {
                     atomic: 57324,
+                    id: '978785',
+                    index: 'filebeat-8.0.0-2021.01.26-000001',
                     field: 'source.port',
                     type: 'url',
                   },
