Skip to content

[8.18] [Security Solution] Add support for arrays in the build_ebt_data_views script (#234905)#235311

Merged
kibanamachine merged 2 commits intoelastic:8.18from
kibanamachine:backport/8.18/pr-234905
Sep 17, 2025
Merged

[8.18] [Security Solution] Add support for arrays in the build_ebt_data_views script (#234905)#235311
kibanamachine merged 2 commits intoelastic:8.18from
kibanamachine:backport/8.18/pr-234905

Conversation

@kibanamachine
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 8.18:

Questions ?

Please refer to the Backport tool documentation

…s script (elastic#234905)

**Partially resolves: elastic#140369**

## Summary

This PR is a follow up for the elastic#234571, where I am introducing telemetry
event with array of primitive string values.
In order to display these values in Kibana Lens, a runtime mapping needs
to be done in the `security-solution-ebt-kibana-server` data view.
Before that, it was done manually. I am introducing support for arrays,
so that manual intervention is not needed for them.

### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Maxim Palenov <maxim.palenov@elastic.co>
(cherry picked from commit f0e38a3)
@kibanamachine kibanamachine merged commit ac95fad into elastic:8.18 Sep 17, 2025
8 checks passed
@elasticmachine
Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #83 / Fleet Endpoints fleet policy secrets copy agent policy with secrets should not delete used secrets on delete of duplicated package policy

Metrics [docs]

Unknown metric groups

ESLint disabled in files

id before after diff
securitySolution 83 84 +1

ESLint disabled line counts

id before after diff
securitySolution 628 629 +1

Total ESLint disabled count

id before after diff
securitySolution 711 713 +2

History

cc @jkelas

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants