Skip to content

[7.x] [Security Solution][Exceptions Table] - Fix exceptions table search by name (#88701)#91255

Merged
yctercero merged 1 commit intoelastic:7.xfrom
yctercero:backport/7.x/pr-88701
Feb 12, 2021
Merged

[7.x] [Security Solution][Exceptions Table] - Fix exceptions table search by name (#88701)#91255
yctercero merged 1 commit intoelastic:7.xfrom
yctercero:backport/7.x/pr-88701

Conversation

@yctercero
Copy link
Copy Markdown
Contributor

Backports the following commits to 7.x:

…y name (elastic#88701)

Addresses elastic#88450

Issue
Search was not working as expected was because the exception list property name is mapped as a keyword - this means it does not get tokenized which is why one word searches were working but if the name included multiple words and was partial, it was not filtering properly.
@yctercero yctercero added the backport This PR is a backport of another PR label Feb 11, 2021
@kibanamachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
securitySolution 2187 2188 +1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 7.5MB 7.5MB +2.5KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
lists 142.7KB 142.9KB +206.0B

Saved Objects .kibana field count

Every field in each saved object type adds overhead to Elasticsearch. Kibana needs to keep the total field count below Elasticsearch's default limit of 1000 fields. Only specify field mappings for the fields you wish to search on or query. See https://www.elastic.co/guide/en/kibana/master/development-plugin-saved-objects.html#_mappings

id before after diff
exception-list 39 41 +2
exception-list-agnostic 39 41 +2
total +4

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@yctercero yctercero merged commit 54c06ec into elastic:7.x Feb 12, 2021
@yctercero yctercero deleted the backport/7.x/pr-88701 branch October 13, 2021 06:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants