Textdoc
Zipdoc
Writeurl
Txtshare
Online Calc
Loading…
{ "log": { "version": "1.2", "creator": { "name": "WebInspector", "version": "537.36" }, "pages": [ { "startedDateTime": "2022-03-26T12:34:40.588Z", "id": "page_2", "title": "http://localhost:5601/app/security/timelines/template?sourcerer=(default:(id:security-solution-default,selectedPatterns:!()))&timerange=(global:(linkTo:!(timeline),timerange:(from:%272022-03-25T23:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272022-03-26T22:59:59.999Z%27,toStr:now%2Fd)),timeline:(linkTo:!(global),timerange:(from:%272022-03-25T23:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272022-03-26T22:59:59.999Z%27,toStr:now%2Fd)))", "pageTimings": { "onContentLoad": 182.61100000017905, "onLoad": 178.26200000035897 } } ], "entries": [ { "_fromCache": "disk", "_initiator": { "type": "script", "stack": { "callFrames": [ { "functionName": "i.e", "scriptId": "393", "url": "http://localhost:5601/50609/bundles/plugin/securitySolution/8.0.0/securitySolution.plugin.js", "lineNumber": 1, "columnNumber": 1226 }, { "functionName": "lazyApplicationDependencies", "scriptId": "393", "url": "http://localhost:5601/50609/bundles/plugin/securitySolution/8.0.0/securitySolution.plugin.js", "lineNumber": 1, "columnNumber": 246620 }, { "functionName": "mount", "scriptId": "393", "url": "http://localhost:5601/50609/bundles/plugin/securitySolution/8.0.0/securitySolution.plugin.js", "lineNumber": 1, "columnNumber": 244755 } ], "parent": { "description": "await", "callFrames": [ { "functionName": "", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 74679 }, { "functionName": "", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 65836 }, { "functionName": "", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 66029 }, { "functionName": "Ms", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 84720 }, { "functionName": "Fu", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 102264 }, { "functionName": "t.unstable_runWithPriority", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 454, "columnNumber": 3461 }, { "functionName": "Xi", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 45746 }, { "functionName": "Ru", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 98859 }, { "functionName": "wu", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 94553 }, { "functionName": "", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 46037 }, { "functionName": "t.unstable_runWithPriority", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 454, "columnNumber": 3461 }, { "functionName": "Xi", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 45746 }, { "functionName": "Ji", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 45982 }, { "functionName": "Qi", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 45917 }, { "functionName": "Mu", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 94727 }, { "functionName": "yc", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 116991 }, { "functionName": "render", "scriptId": "360", "url": "http://localhost:5601/50609/bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll.js", "lineNumber": 446, "columnNumber": 118908 }, { "functionName": "start", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 214136 }, { "functionName": "start", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 222184 } ], "parent": { "description": "await", "callFrames": [ { "functionName": "Vt", "scriptId": "362", "url": "http://localhost:5601/50609/bundles/core/core.entry.js", "lineNumber": 7, "columnNumber": 225888 } ], "parent": { "description": "await", "callFrames": [ { "functionName": "", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 106, "columnNumber": 46 }, { "functionName": "innerCb", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 89, "columnNumber": 12 } ], "parent": { "description": "load", "callFrames": [ { "functionName": "loadScript", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 79, "columnNumber": 10 }, { "functionName": "", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 98, "columnNumber": 10 }, { "functionName": "load", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 85, "columnNumber": 11 }, { "functionName": "window.onload", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 103, "columnNumber": 4 } ], "parent": { "description": "load", "callFrames": [ { "functionName": "", "scriptId": "359", "url": "http://localhost:5601/bootstrap.js", "lineNumber": 46, "columnNumber": 16 } ] } } } } } } }, "_priority": "Low", "_resourceType": "script", "cache": {}, "pageref": "page_2", "request": { "method": "GET", "url": "http://localhost:5601/50609/bundles/plugin/securitySolution/8.0.0/securitySolution.chunk.9.js", "httpVersion": "HTTP/1.1", "headers": [], "queryString": [], "cookies": [ { "name": "locale", "value": "en", "path": "/", "domain": "localhost", "expires": "2023-03-23T09:53:35.192Z", "httpOnly": false, "secure": false, "sameSite": "Strict" } ], "headersSize": 87, "bodySize": 0 }, "response": { "status": 200, "statusText": "OK", "httpVersion": "HTTP/1.1", "headers": [ { "name": "cache-control", "value": "max-age=31536000" }, { "name": "content-encoding", "value": "br" }, { "name": "content-type", "value": "application/javascript; charset=utf-8" }, { "name": "x-content-type-options", "value": "nosniff" }, { "name": "referrer-policy", "value": "no-referrer-when-downgrade" }, { "name": "kbn-name", "value": "WIN-E91D14FS6F4" }, { "name": "kbn-license-sig", "value": "5132f4cb1372c27d1722adae3ffafd561c75f82f571cf955b00572f620e0a104" }, { "name": "vary", "value": "accept-encoding" }, { "name": "Date", "value": "Sat, 26 Mar 2022 12:33:49 GMT" }, { "name": "Access-Control-Allow-Origin", "value": "http://localhost:5601" }, { "name": "Access-Control-Allow-Methods", "value": "GET, PUT, POST, DELETE, HEAD, OPTIONS" } ], "cookies": [], "content": { "size": 110729, "mimeType": "application/javascript", "text": "/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements. * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */ (window.securitySolution_bundle_jsonpfunction=window.securitySolution_bundle_jsonpfunction||[]).push([[9],{1432:function(e,t,a){"use strict";a.r(t),a.d(t,"renderApp",(function(){return mn})),a.d(t,"createStore",(function(){return v.c})),a.d(t,"createInitialState",(function(){return v.b}));var i=a(49),n=a.n(i),l=a(4),r=a.n(l),o=a(134),s=a(58),c=a(264),u=a(42),d=a(16),m=a(255),p=a(55),b=a(252),g=a(2),E=a(70),v=a(72),h=a(35),f=a(45);const j=({toastLifeTimeMs:e=5e3})=>{const t=Object(u.useDispatch)(),a=Object(l.useMemo)((()=>v.a.errorsSelector()),[]),i=Object(E.a)(a),[{toasts:n},r]=Object(f.h)();return Object(l.useEffect)((()=>{i.forEach((({id:a,title:i,message:l})=>{n.some((e=>e.id===a))||r({type:"addToaster",toast:{color:"danger",id:a,iconType:"alert",title:i,errors:l,toastLifeTimeMs:e}}),t(h.a.removeError({id:a}))}))}),[t,r,i,e,n]),null};j.displayName="ErrorToastDispatcherComponent";const y=r.a.memo(j);var O=a(836),S=a(17),w=a(647);const x=({children:e})=>r.a.createElement(w.a.Provider,{value:Object(l.useReducer)(((e,t)=>{switch(t.type){case"updateRoute":return t.route;case"updateRouteWithOutSearch":return{...e,...t.route};case"updateSearch":return{...e,search:t.search};default:return e}}),w.b)},e),k=Object(l.memo)(x);var T=a(82),I=a(27);const C=Object(l.memo)((({children:e})=>{const t=Object(s.useLocation)(),a=Object(u.useDispatch)();return Object(l.useEffect)((()=>{a(T.a.showTimeline({id:I.TimelineId.active,show:!1}))}),[a,t.pathname]),Object(l.useEffect)((()=>{a({type:"userChangedUrl",payload:t})})),r.a.createElement(r.a.Fragment,null,e)}));C.displayName="RouteCapture";var P=a(3),M=a(175),N=a(83),F=a.n(N),D=a(84),L=a(396),A=a(6);A.i18n.translate("xpack.securitySolution.components.ml.api.errors.statusCodeFailureTitle",{defaultMessage:"Status Code:"}),A.i18n.translate("xpack.securitySolution.components.ml.api.errors.networkErrorFailureTitle",{defaultMessage:"Network Error:"}),A.i18n.translate("xpack.securitySolution.components.mlPopup.hooks.errors.indexPatternFetchFailureTitle",{defaultMessage:"Index pattern fetch failure"}),A.i18n.translate("xpack.securitySolution.components.hooks.eql.partialResponse",{defaultMessage:"EQL Preview Error"}),A.i18n.translate("xpack.securitySolution.components.hooks.errors.timeIntervalsNotDefined",{defaultMessage:"Time intervals are not defined."});var B=a(14),z=a(199),R=a(85),_=a(20),q=a(648);window["__react-beautiful-dnd-disable-dev-warnings"]=!0;const $=({browserFields:e,children:t})=>{const a=Object(u.useDispatch)(),i=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),n=Object(l.useMemo)((()=>v.d.getDataProvidersSelector()),[]),{timelines:o}=Object(S.j)().services,s=[o.getUseAddToTimelineSensor()],{dataProviders:c,timelineType:d}=Object(E.a)((e=>{var t;return Object(P.pick)(["dataProviders","timelineType"],null!==(t=i(e,B.i.active))&&void 0!==t?t:R.a)})),m=Object(E.a)(n),[,p]=Object(f.h)(),b=Object(l.useCallback)((e=>{const t=d===B.m.template?(e=>A.i18n.translate("xpack.securitySolution.hooks.useAddToTimeline.template.addedFieldMessage",{values:{fieldOrValue:e},defaultMessage:"Added {fieldOrValue} to timeline template"}))(e):(e=>A.i18n.translate("xpack.securitySolution.hooks.useAddToTimeline.addedFieldMessage",{values:{fieldOrValue:e},defaultMessage:"Added {fieldOrValue} to timeline"}))(e);Object(f.e)(t,p)}),[p,d]),g=Object(l.useCallback)((t=>{try{U(),null!=m&&(({activeTimelineDataProviders:e,browserFields:t,dataProviders:a,dispatch:i,onAddedToTimeline:n,result:l})=>{if(Object(z.p)(l))Object(L.d)({dataProviders:e,destination:l.destination,dispatch:i,source:l.source,timelineId:B.i.active});else if(Object(z.o)(l))Object(z.c)({activeTimelineDataProviders:e,dataProviders:a,dispatch:i,onAddedToTimeline:n,result:l,timelineId:B.i.active});else if(Object(z.i)(l)){var r,o;Object(_.addFieldToTimelineColumns)({browserFields:t,defaultsHeader:q.b,dispatch:i,result:l,timelineId:Object(_.getTimelineIdFromColumnDroppableId)(null!==(r=null===(o=l.destination)||void 0===o?void 0:o.droppableId)&&void 0!==r?r:"")})}})({activeTimelineDataProviders:c,browserFields:e,dataProviders:m,dispatch:a,onAddedToTimeline:b,result:t})}finally{document.body.classList.remove(D.d),Object(z.e)(t)&&document.body.classList.remove(z.b)}}),[c,e,m,a,b]);return r.a.createElement(M.DragDropContext,{onDragEnd:g,onBeforeCapture:J,sensors:s},t)};$.displayName="DragDropContextWrapperComponent";const V=r.a.memo($,((e,t)=>F()(e.children,t.children)));V.displayName="DragDropContextWrapper";const J=e=>{Object(z.e)(e)||document.body.classList.add(D.d),Object(z.e)(e)&&document.body.classList.add(z.b)},U=()=>window.onscroll=()=>P.noop;var G=a(90),H=a(78);const Q=r.a.memo((()=>{const{chrome:e,docLinks:t}=Object(S.j)().services;return Object(l.useEffect)((()=>{e.setHelpExtension({appName:H.a,links:[{content:A.i18n.translate("xpack.securitySolution.chrome.helpMenu.documentation",{defaultMessage:"Security documentation"}),href:t.links.siem.guide,iconType:"documents",linkType:"custom",target:"_blank",rel:"noopener"},{content:A.i18n.translate("xpack.securitySolution.chrome.helpMenu.documentation.ecs",{defaultMessage:"ECS documentation"}),href:t.links.ecs.guide,iconType:"documents",linkType:"custom",target:"_blank",rel:"noopener"},{linkType:"discuss",href:"https://discuss.elastic.co/c/security",target:"_blank",rel:"noopener"}]})}),[]),null}));Q.displayName="HelpMenu";var W=a(310),K=a(76),Y=a(133),Z=a(265),X=a(65),ee=a(247),te=a(13);const ae=(e,t)=>{const a=Object(Z.a)(e),i="global",n={linkTo:Object(P.get)("global.linkTo",a)},l=Object(P.get)("global.timerange.kind",a),r="timeline",o={linkTo:Object(P.get)("timeline.linkTo",a)},s=Object(P.get)("timeline.timerange.kind",a);if(Object(P.isEmpty)(n.linkTo)?t(K.b.removeGlobalLinkTo()):t(K.b.addGlobalLinkTo({linkToId:"timeline"})),Object(P.isEmpty)(o.linkTo)?t(K.b.removeTimelineLinkTo()):t(K.b.addTimelineLinkTo({linkToId:"global"})),s){if("absolute"===s){const e=Object(X.a)(Object(P.get)("timeline.timerange",a));t(K.b.setAbsoluteRangeDatePicker({...e,id:r}))}if("relative"===s){const e=Object(X.a)(Object(P.get)("timeline.timerange",a));t(K.b.setRelativeRangeDatePicker({...e,id:r}))}}if(l){if("absolute"===l){const e=Object(X.a)(Object(P.get)("global.timerange",a));t(K.b.setAbsoluteRangeDatePicker({...e,id:i}))}if("relative"===l){const e=Object(X.a)(Object(P.get)("global.timerange",a));t(K.b.setRelativeRangeDatePicker({...e,id:i}))}}};var ie=a(675);const ne=({search:e,urlKey:t})=>Object(Z.c)(Object(Z.d)(e),t);const le=({indexPattern:e,navTabs:t,pageName:a,urlState:i,search:n,pathName:r,history:o})=>{const[c,d]=Object(l.useState)(!0),{filterManager:m,savedQueries:p}=Object(S.j)().services.data.query,{pathname:b}=Object(s.useLocation)(),g=function(e){const t=Object(l.useRef)(e);return Object(l.useEffect)((()=>{t.current=e})),t.current}({pathName:r,pageName:a,urlState:i,search:n}),{setInitialStateFromUrl:E,updateTimeline:v,updateTimelineIsLoading:h}=(()=>{const e=Object(u.useDispatch)(),t=Object(l.useMemo)((()=>Object(ee.b)(e)),[e]),a=Object(l.useMemo)((()=>t=>e(T.a.updateIsLoading(t))),[e]),i=Object(l.useCallback)((({filterManager:i,indexPattern:n,pageName:l,savedQueries:r,urlStateToUpdate:o})=>{o.forEach((({urlKey:o,newUrlStateString:s})=>{if(o===Y.a.timerange&&ae(s,e),o===Y.a.sourcerer){const t=Object(Z.a)(s);null!=t&&Object.keys(t).filter((e=>!(e===te.SourcererScopeName.default&&Object(Z.g)(l)))).forEach((a=>{var i,n,l,r;return e(K.c.setSelectedDataView({id:a,selectedDataViewId:null!==(i=null===(n=t[a])||void 0===n?void 0:n.id)&&void 0!==i?i:null,selectedPatterns:null!==(l=null===(r=t[a])||void 0===r?void 0:r.selectedPatterns)&&void 0!==l?l:[]}))}))}if(o===Y.a.appQuery&&null!=n){const t=Object(Z.a)(s);null!=t&&e(K.b.setFilterQuery({id:"global",query:t.query,language:t.language}))}if(o===Y.a.filters){const e=Object(Z.a)(s);i.setFilters(e||[])}if(o===Y.a.savedQuery){const t=Object(Z.a)(s);null!=t&&""!==t&&r.getSavedQuery(t).then((t=>{i.setFilters(t.attributes.filters||[]),e(K.b.setFilterQuery({id:"global",...t.attributes.query})),e(K.b.setSavedQuery({id:"global",savedQuery:t}))}))}if(o===Y.a.timeline){const e=Object(Z.a)(s);null!=e&&""!==e.id&&Object(ee.h)({activeTimelineTab:e.activeTab,duplicate:!1,graphEventId:e.graphEventId,timelineId:e.id,openTimeline:e.isOpen,updateIsLoading:a,updateTimeline:t})}}))}),[e,t,a]);return Object.freeze({setInitialStateFromUrl:i,updateTimeline:t,updateTimelineIsLoading:a})})(),f=Object(l.useCallback)((t=>{const l=[],s=[];Object(ie.b)(t)?ie.a.forEach((e=>{s.push({urlStateToReplace:"",urlStateKey:e})})):ie.a.forEach((e=>{const t=oe({urlKey:e,search:n});if(t){const n=se({isFirstPageLoad:c,newUrlStateString:t,updateTimerange:Object(Z.g)(a)||c,urlKey:e});n&&s.push(n);const r=n?Object(Z.b)(n.urlStateToReplace):t;(c||Object(Z.g)(a)&&r!==t)&&(e===Y.a.timeline&&ce(t,i.timeline)||l.push({urlKey:e,newUrlStateString:r}))}else s.push({urlStateToReplace:re(i,e),urlStateKey:e})})),Object(Z.l)(s,r,n,o),E({filterManager:m,indexPattern:e,pageName:a,savedQueries:p,urlStateToUpdate:l})}),[m,o,e,a,r,p,n,E,i,c]);return Object(l.useEffect)((()=>{if(b!==r)return;const e=Object(Z.f)(a);if(F()(i,g.urlState)||c||Object(ie.b)(e))(c&&null!=a&&""!==a||r!==g.pathName)&&(f(e),d(!1));else{const e=ie.a.map((e=>({urlStateToReplace:re(i,e),urlStateKey:e})));Object(Z.l)(e,r,n,o)}}),[c,o,r,a,g,i,b,f,n]),Object(l.useEffect)((()=>{document.title=`${Object(Z.e)(a,t)} - Kibana`}),[a,t]),Object(l.useEffect)((()=>{(({oldSearch:e,search:t,timelineIdFromReduxStore:a,updateTimeline:i,updateTimelineIsLoading:n})=>{const l=ne({urlKey:Y.a.timeline,search:null!=e?e:""}),r=ne({urlKey:Y.a.timeline,search:t});if(null!=l&&null!=r){var o,s;let e=null,t=null;try{e=Object(Z.a)(r)}catch(e){}try{t=Object(Z.a)(l)}catch(e){}const m=null===(o=e)||void 0===o?void 0:o.id,p=null===(s=t)||void 0===s?void 0:s.id;var c,u,d;m&&m!==p&&m!==a&&Object(ee.h)({activeTimelineTab:null!==(c=null===(u=e)||void 0===u?void 0:u.activeTab)&&void 0!==c?c:B.l.query,duplicate:!1,graphEventId:null===(d=e)||void 0===d?void 0:d.graphEventId,timelineId:m,openTimeline:!0,updateIsLoading:n,updateTimeline:i})}})({oldSearch:g.search,search:n,timelineIdFromReduxStore:i.timeline.id,updateTimeline:v,updateTimelineIsLoading:h})}),[n,g.search,i.timeline.id,v,h]),null},re=(e,t)=>Object(Z.h)(e[t],t)?"":e[t],oe=({search:e,urlKey:t})=>Object(Z.c)(Object(Z.d)(e),t),se=({isFirstPageLoad:e,newUrlStateString:t,updateTimerange:a,urlKey:i})=>{if(Object(Z.h)(Object(Z.a)(t),i))return{urlStateToReplace:"",urlStateKey:i};if(i===Y.a.timerange&&a){const a=Object(Z.a)(t);if(null!=a&&null!=a.global)return{urlStateToReplace:Object(Z.m)(a,e),urlStateKey:i}}},ce=(e,t)=>{const a=Object(Z.a)(e);return null!=a&&a.id===t.id},ue=r.a.memo((function(e){return le(e),null}),((e,t)=>e.pathName===t.pathName&&F()(e.urlState,t.urlState)&&F()(e.indexPattern,t.indexPattern)&&e.search===t.search&&F()(e.navTabs,t.navTabs))),de=Object(u.connect)(Z.i)((e=>{const[t]=Object(W.a)();return r.a.createElement(ue,n()({},t,e))}));var me=a(500),pe=a(194),be=a(166),ge=a(215);const Ee=()=>{const e=Object(S.j)(),t=Object(ge.a)().endpointPrivileges.canAccessFleet;Object(l.useEffect)((()=>{const a=new AbortController,i=()=>{a.abort()};if(t){const t=a.signal;return(async()=>{try{var i;await(null===(i=e.services.fleet)||void 0===i?void 0:i.isInitialized()),await(async(e,t={})=>e.post(be.epmRouteService.getBulkInstallPath(),{...t,body:JSON.stringify({packages:["endpoint","security_detection_engine"]})}))(e.services.http,{signal:t})}catch(e){a.signal.aborted||console.error(e)}})(),i}}),[t,e.services.fleet,e.services.http])};var ve=a(292),he=a(163),fe=a(50),je=a.n(fe),ye=a(25),Oe=a.n(ye),Se=a(64),we=a(845);const xe=(e,t)=>e.filter((e=>null==t||(e.id.includes(t)||e.description.includes(t)))),ke=A.i18n.translate("xpack.securitySolution.components.mlPopover.jobsTable.filters.searchFilterPlaceholder",{defaultMessage:"e.g. rare_process_linux"}),Te=A.i18n.translate("xpack.securitySolution.components.mlPopover.jobsTable.filters.groupsLabel",{defaultMessage:"Groups"}),Ie=A.i18n.translate("xpack.securitySolution.components.mlPopover.jobsTable.filters.noGroupsAvailableDescription",{defaultMessage:"No Groups available"}),Ce=A.i18n.translate("xpack.securitySolution.components.mlPopover.jobsTable.filters.showAllJobsLabel",{defaultMessage:"Elastic jobs"}),Pe=A.i18n.translate("xpack.securitySolution.components.mlPopover.jobsTable.filters.showSiemJobsLabel",{defaultMessage:"Custom jobs"});var Me=a(677);const Ne=({securityJobs:e,onSelectedGroupsChanged:t})=>{const[a,i]=Object(l.useState)(!1),[n,o]=Object(l.useState)([]),s=e.map((e=>e.groups)).flat().filter((e=>"siem"!==e&&"security"!==e)),c=Array.from(new Set(s));return Object(l.useEffect)((()=>{t(n)}),[n.sort().join()]),r.a.createElement(d.EuiPopover,{ownFocus:!0,button:r.a.createElement(d.EuiFilterButton,{"data-test-subj":"groups-filter-popover-button",iconType:"arrowDown",onClick:()=>i(!a),isSelected:a,numFilters:c.length,hasActiveFilters:n.length>0,numActiveFilters:n.length},Te),isOpen:a,closePopover:()=>i(!a),panelPaddingSize:"none",repositionOnScroll:!0},c.map(((e,t)=>r.a.createElement(d.EuiFilterSelectItem,{checked:n.includes(e)?"on":void 0,key:`${t}-${e}`,onClick:()=>Object(Me.a)(e,n,o)},`${e} (${s.filter((t=>t===e)).length})`))),0===c.length&&r.a.createElement(d.EuiFlexGroup,{gutterSize:"m",justifyContent:"spaceAround"},r.a.createElement(d.EuiFlexItem,{grow:!0},r.a.createElement(d.EuiIcon,{type:"minusInCircle"}),r.a.createElement(d.EuiSpacer,{size:"xs"}),r.a.createElement("p",null,Ie))))};Ne.displayName="GroupsFilterPopoverComponent";const Fe=r.a.memo(Ne);Fe.displayName="GroupsFilterPopover";const De=({securityJobs:e,onFilterChanged:t})=>{const[a,i]=Object(l.useState)(""),[n,o]=Object(l.useState)([]),[s,c]=Object(l.useState)(!1),[u,m]=Object(l.useState)(!1);Object(l.useEffect)((()=>{t({filterQuery:a,showCustomJobs:s,showElasticJobs:u,selectedGroups:n})}),[a,n,s,u,t]);const p=Object(l.useCallback)((e=>i(e.queryText.trim())),[i]),b=Object(l.useCallback)((()=>{m(!u),c(!1)}),[m,u,c]),g=Object(l.useCallback)((()=>{c(!s),m(!1)}),[m,s,c]);return r.a.createElement(d.EuiFlexGroup,{gutterSize:"m",justifyContent:"flexEnd"},r.a.createElement(d.EuiFlexItem,{grow:!0},r.a.createElement(d.EuiSearchBar,{"data-test-subj":"jobs-filter-bar",box:{placeholder:ke,incremental:!0},onChange:p})),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiFilterGroup,null,r.a.createElement(Fe,{securityJobs:e,onSelectedGroupsChanged:o}))),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiFilterGroup,null,r.a.createElement(d.EuiFilterButton,{hasActiveFilters:u,onClick:b,"data-test-subj":"show-elastic-jobs-filter-button",withNext:!0},Ce),r.a.createElement(d.EuiFilterButton,{hasActiveFilters:s,onClick:g,"data-test-subj":"show-custom-jobs-filter-button"},Pe))))};De.displayName="JobsTableFiltersComponent";const Le=r.a.memo(De);Le.displayName="JobsTableFilters";const Ae=A.i18n.translate("xpack.securitySolution.components.mlPopup.jobsTable.jobNameColumn",{defaultMessage:"Job name"}),Be=A.i18n.translate("xpack.securitySolution.components.mlPopup.jobsTable.tagsColumn",{defaultMessage:"Groups"}),ze=A.i18n.translate("xpack.securitySolution.components.mlPopup.jobsTable.runJobColumn",{defaultMessage:"Run job"}),Re=A.i18n.translate("xpack.securitySolution.components.mlPopup.jobsTable.noItemsDescription",{defaultMessage:"No Security Machine Learning jobs found"}),_e=A.i18n.translate("xpack.securitySolution.components.mlPopup.jobsTable.createCustomJobButtonLabel",{defaultMessage:"Create custom job"});var qe=a(279);const $e=Oe()(d.EuiSwitch).withConfig({displayName:"StaticSwitch",componentId:"sc-1xsgv9-0"})([".euiSwitch__thumb,.euiSwitch__icon{transition:none;}"]);$e.displayName="StaticSwitch";const Ve=({job:e,isSecurityJobsLoading:t,onJobStateChange:a})=>{const[i,n]=Object(l.useState)(!1),o=Object(l.useCallback)((async t=>{n(!0),await a(e,e.latestTimestampMs||0,t.target.checked),n(!1)}),[e,n,a]);return r.a.createElement(d.EuiFlexGroup,{justifyContent:"spaceAround"},r.a.createElement(d.EuiFlexItem,{grow:!1},t||i||Object(qe.b)(e.jobState,e.datafeedState)?r.a.createElement(d.EuiLoadingSpinner,{size:"m","data-test-subj":"job-switch-loader"}):r.a.createElement($e,{"data-test-subj":"job-switch",disabled:Object(qe.a)(e.jobState,e.datafeedState),checked:Object(qe.c)(e.jobState,e.datafeedState),onChange:o,showLabel:!1,label:""})))};Ve.displayName="JobSwitchComponent";const Je=r.a.memo(Ve);Je.displayName="JobSwitch";var Ue=a(176);const Ge=Oe.a.div.withConfig({displayName:"JobNameWrapper",componentId:"sc-1foobv2-0"})(["margin:5px 0;"]);Ge.displayName="JobNameWrapper";const He=({id:e,description:t,basePath:a})=>{const{services:{ml:i}}=Object(S.j)(),n=Object(Ue.useMlHref)(i,a,{page:Ue.ML_PAGES.ANOMALY_DETECTION_JOBS_MANAGE,pageState:{jobId:e}});return r.a.createElement(Ge,null,r.a.createElement(d.EuiText,{size:"s"},r.a.createElement(d.EuiLink,{"data-test-subj":"jobs-table-link",href:n,target:"_blank"},e)),r.a.createElement(d.EuiText,{color:"subdued",size:"xs"},t.length>200?`${t.substring(0,200)}...`:t))},Qe=(e,t,a)=>[{name:Ae,render:({id:e,description:t})=>r.a.createElement(He,{id:e,description:t,basePath:a})},{name:Be,render:({groups:e})=>r.a.createElement(d.EuiFlexGroup,{wrap:!0,responsive:!0,gutterSize:"xs"},e.map((e=>r.a.createElement(d.EuiFlexItem,{grow:!1,key:e},r.a.createElement(d.EuiBadge,{color:"hollow"},e))))),width:"140px"},{name:ze,render:a=>a.isCompatible?r.a.createElement(Je,{job:a,isSecurityJobsLoading:e,onJobStateChange:t}):r.a.createElement(d.EuiIcon,{"aria-label":"Warning",size:"s",type:"alert",color:"warning"}),align:d.CENTER_ALIGNMENT,width:"80px"}],We=(e,t,a)=>e.slice(t*a,t*a+a),Ke=({isLoading:e,jobs:t,onJobStateChange:a})=>{const[i,n]=Object(l.useState)(0),o=Object(S.e)(),s={hidePerPageOptions:!0,pageIndex:i,pageSize:5,totalItemCount:t.length};return Object(l.useEffect)((()=>{n(0)}),[t.length]),r.a.createElement(d.EuiBasicTable,{"data-test-subj":"jobs-table",columns:Qe(e,a,o),items:We(t,i,5),loading:e,noItemsMessage:r.a.createElement(Ze,{basePath:o}),pagination:s,responsive:!1,onChange:({page:e})=>{n(e.index)}})};Ke.displayName="JobsTableComponent";const Ye=r.a.memo(Ke);Ye.displayName="JobsTable";const Ze=r.a.memo((({basePath:e})=>{const{services:{ml:t}}=Object(S.j)(),a=Object(Ue.useMlHref)(t,e,{page:Ue.ML_PAGES.ANOMALY_DETECTION_CREATE_JOB_SELECT_INDEX});return r.a.createElement(d.EuiEmptyPrompt,{title:r.a.createElement("h3",null,Re),titleSize:"xs",actions:r.a.createElement(d.EuiButton,{href:a,iconType:"popout",iconSide:"right",size:"s",target:"_blank"},_e)})}));Ze.displayName="NoItemsMessage";const Xe=Oe.a.div.withConfig({displayName:"ShowingContainer",componentId:"sc-8k6h3p-0"})(["user-select:none;margin-top:5px;"]);Xe.displayName="ShowingContainer";const et=({filterResultsLength:e})=>r.a.createElement(Xe,{"data-test-subj":"showing"},r.a.createElement(d.EuiText,{color:"subdued",size:"xs"},r.a.createElement(he.FormattedMessage,{"data-test-subj":"query-message",id:"xpack.securitySolution.components.mlPopup.showingLabel",defaultMessage:"Showing: {filterResultsLength} {filterResultsLength, plural, one {job} other {jobs}}",values:{filterResultsLength:e}})));et.displayName="ShowingCountComponent";const tt=r.a.memo(et);tt.displayName="ShowingCount";const at=()=>r.a.createElement(d.EuiText,{size:"s"},r.a.createElement(he.FormattedMessage,{id:"xpack.securitySolution.components.mlPopup.anomalyDetectionDescription",defaultMessage:"Run any of the Machine Learning jobs below to prepare for creating detection rules that produce alerts for detected anomalies, and to view anomalous events throughout the Security application. We’ve provided a collection of common detection jobs to get you started. If you wish to add your own custom ML jobs, create and add them to the “Security” group from the {machineLearning} application.",values:{machineLearning:r.a.createElement(d.EuiLink,{href:`${Object(S.e)()}/app/ml`,target:"_blank"},r.a.createElement(he.FormattedMessage,{id:"xpack.securitySolution.components.mlPopup.machineLearningLink",defaultMessage:"Machine Learning"}))}}));at.displayName="PopoverDescriptionComponent";const it=r.a.memo(at);it.displayName="PopoverDescription";const nt=A.i18n.translate("xpack.securitySolution.components.mlPopup.mlJobSettingsButtonLabel",{defaultMessage:"ML job settings"}),lt=A.i18n.translate("xpack.securitySolution.components.mlPopup.upgradeTitle",{defaultMessage:"Upgrade to Elastic Platinum"}),rt=A.i18n.translate("xpack.securitySolution.components.mlPopup.upgradeButtonLabel",{defaultMessage:"Subscription plans"}),ot=A.i18n.translate("xpack.securitySolution.components.mlPopup.licenseButtonLabel",{defaultMessage:"Manage license"}),st=e=>A.i18n.translate("xpack.securitySolution.components.mlPopup.moduleNotCompatibleTitle",{values:{incompatibleJobCount:e},defaultMessage:"{incompatibleJobCount} {incompatibleJobCount, plural, =1 {job} other {jobs}} are currently unavailable"}),ct=A.i18n.translate("xpack.securitySolution.components.mlPopup.errors.startJobFailureTitle",{defaultMessage:"Start job failure"}),ut=A.i18n.translate("xpack.securitySolution.containers.errors.stopJobFailureTitle",{defaultMessage:"Stop job failure"}),dt=A.i18n.translate("xpack.securitySolution.components.mlPopup.errors.createJobFailureTitle",{defaultMessage:"Create job failure"}),mt=Oe.a.div.withConfig({displayName:"PopoverContentsDiv",componentId:"sc-fqnfg5-0"})(["width:384px;"]);mt.displayName="PopoverContentsDiv";const pt=()=>r.a.createElement(mt,{"data-test-subj":"ml-popover-upgrade-contents"},r.a.createElement(d.EuiPopoverTitle,null,lt),r.a.createElement(d.EuiText,{size:"s"},r.a.createElement(he.FormattedMessage,{id:"xpack.securitySolution.components.mlPopup.upgradeDescription",defaultMessage:"To access SIEM’s anomaly detection features, you must update your license to Platinum, start a free 30-day trial, or spin up a {cloudLink} on AWS, GCP, or Azure. You can then run Machine Learning jobs and view anomalies.",values:{cloudLink:r.a.createElement(d.EuiLink,{href:"https://www.elastic.co/cloud/",target:"_blank"},r.a.createElement(he.FormattedMessage,{id:"xpack.securitySolution.components.mlPopup.cloudLink",defaultMessage:"cloud deployment"}))}})),r.a.createElement(d.EuiSpacer,null),r.a.createElement(d.EuiFlexGroup,{gutterSize:"s",wrap:!0},r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiButton,{href:"https://www.elastic.co/subscriptions",iconType:"popout",iconSide:"right",target:"_blank"},rt)),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiButton,{href:`${Object(S.e)()}/app/management/stack/license_management`,iconType:"gear",target:"_blank"},ot)))),bt=r.a.memo(pt);bt.displayName="UpgradeContents";var gt=a(495);const Et=Oe.a.div.withConfig({displayName:"PopoverContentsDiv",componentId:"sc-z6keba-0"})(["max-width:684px;max-height:90vh;overflow-y:auto;overflow-x:hidden;padding-bottom:15px;"]);function vt(e,t){switch(t.type){case"refresh":return{...e,refreshToggle:!e.refreshToggle};case"loading":return{...e,isLoading:!0};case"success":case"failure":return{...e,isLoading:!1};default:return e}}Et.displayName="PopoverContentsDiv";const ht={isLoading:!1,refreshToggle:!0},ft={filterQuery:"",showCustomJobs:!1,showElasticJobs:!1,selectedGroups:[]},jt=r.a.memo((()=>{const[{isLoading:e,refreshToggle:t},a]=Object(l.useReducer)(vt,ht),[i,n]=Object(l.useState)(!1),[o,s]=Object(l.useState)(ft),{isMlAdmin:c,isLicensed:u,loading:m,jobs:p}=Object(gt.a)(t),[,b]=Object(f.h)(),g=Object(S.j)().services.docLinks,E=Object(l.useCallback)(((e,t,i)=>yt(e,t,i,a,b)),[a,b]),v=(({jobs:e,selectedGroups:t,showCustomJobs:a,showElasticJobs:i,filterQuery:n})=>xe(e.filter((e=>!a||a&&!e.isElasticJob)).filter((e=>!i||i&&e.isElasticJob)).filter((e=>0===t.length||t.some((t=>e.groups.includes(t))))),n))({jobs:p,...o}),h=p.filter((e=>!e.isCompatible)).length,j=Object(l.useMemo)((()=>p.filter((e=>e.isInstalled)).map((e=>e.id))),[p]);return u?c?r.a.createElement(d.EuiPopover,{anchorPosition:"downRight",id:"integrations-popover",button:r.a.createElement(d.EuiHeaderSectionItemButton,{"aria-expanded":i,"aria-haspopup":"true","aria-label":nt,color:"primary","data-test-subj":"integrations-button",iconType:"arrowDown",iconSide:"right",onClick:()=>{n(!i),a({type:"refresh"})},textProps:{style:{fontSize:"1rem"}}},nt),isOpen:i,closePopover:()=>n(!i),repositionOnScroll:!0},r.a.createElement(Et,{"data-test-subj":"ml-popover-contents"},r.a.createElement(d.EuiPopoverTitle,null,nt),r.a.createElement(it,null),r.a.createElement(d.EuiSpacer,null),r.a.createElement(Le,{securityJobs:p,onFilterChanged:s}),r.a.createElement(tt,{filterResultsLength:v.length}),r.a.createElement(d.EuiSpacer,{size:"m"}),h>0&&r.a.createElement(r.a.Fragment,null,r.a.createElement(d.EuiCallOut,{title:st(h),color:"warning",iconType:"alert",size:"s"},r.a.createElement("p",null,r.a.createElement(he.FormattedMessage,{defaultMessage:"We could not find any data, see {mlDocs} for more information on Machine Learning job requirements.",id:"xpack.securitySolution.components.mlPopup.moduleNotCompatibleDescription",values:{mlDocs:r.a.createElement("a",{href:`${g.links.siem.ml}`,rel:"noopener noreferrer",target:"_blank"},"Anomaly Detection with Machine Learning")}}))),r.a.createElement(d.EuiSpacer,{size:"m"})),r.a.createElement(Ue.MLJobsAwaitingNodeWarning,{jobIds:j}),r.a.createElement(Ye,{isLoading:m||e,jobs:v,onJobStateChange:E}))):null:r.a.createElement(d.EuiPopover,{anchorPosition:"downRight",id:"integrations-popover",button:r.a.createElement(d.EuiHeaderSectionItemButton,{"aria-expanded":i,"aria-haspopup":"true","aria-label":nt,color:"primary","data-test-subj":"integrations-button",iconType:"arrowDown",iconSide:"right",onClick:()=>n(!i),textProps:{style:{fontSize:"1rem"}}},nt),isOpen:i,closePopover:()=>n(!i),repositionOnScroll:!0},r.a.createElement(bt,null))})),yt=async(e,t,a,i,n)=>{if(Ot(e,a),!e.isInstalled){i({type:"loading"});try{await Object(we.c)({configTemplate:e.moduleId,indexPatternName:e.defaultIndexPattern,jobIdErrorFilter:[e.id],groups:e.groups}),i({type:"success"})}catch(e){return Object(f.g)({title:dt,error:e,dispatchToaster:n}),i({type:"failure"}),void i({type:"refresh"})}}const l=je.a.utc().subtract(14,"days").valueOf();if(a){const a=Math.max(t,l);try{await Object(we.d)({datafeedIds:[`datafeed-${e.id}`],start:a})}catch(e){Object(Se.e)(Se.a.COUNT,Se.b.JOB_ENABLE_FAILURE),Object(f.g)({title:ct,error:e,dispatchToaster:n})}}else try{await Object(we.e)({datafeedIds:[`datafeed-${e.id}`]})}catch(e){Object(Se.e)(Se.a.COUNT,Se.b.JOB_DISABLE_FAILURE),Object(f.g)({title:ut,error:e,dispatchToaster:n})}i({type:"refresh"})},Ot=(e,t)=>{Object(Se.e)(Se.a.COUNT,e.isElasticJob?t?Se.b.SIEM_JOB_ENABLED:Se.b.SIEM_JOB_DISABLED:t?Se.b.CUSTOM_JOB_ENABLED:Se.b.CUSTOM_JOB_DISABLED)};jt.displayName="MlPopover";var St=a(73),wt=a(608);const xt=A.i18n.translate("xpack.securitySolution.globalHeader.buttonAddData",{defaultMessage:"Add integrations"}),kt=r.a.memo((({setHeaderActionMenu:e})=>{const t=Object(l.useMemo)((()=>Object(ve.c)()),[]),{theme:a,http:{basePath:{prepend:i}}}=Object(S.j)().services,{pathname:n}=Object(s.useLocation)(),o=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),c=Object(E.b)((e=>{var t;return(null!==(t=o(e,B.i.active))&&void 0!==t?t:R.a).show})),u=Object(pe.b)(n),m=Object(pe.c)(n),b=Object(l.useMemo)((()=>i(g.a)),[i]);return Object(l.useEffect)((()=>(e((e=>Object(p.toMountPoint)(r.a.createElement(ve.b,{node:t}),{theme$:a.theme$})(e))),()=>{t.unmount(),e(void 0)})),[t,e,a.theme$]),r.a.createElement(ve.a,{node:t},r.a.createElement(d.EuiHeaderSection,{side:"right"},Object(St.e)(n)&&r.a.createElement(d.EuiHeaderSectionItem,null,r.a.createElement(jt,null)),r.a.createElement(d.EuiHeaderSectionItem,null,r.a.createElement(d.EuiHeaderLinks,null,r.a.createElement(d.EuiHeaderLink,{color:"primary","data-test-subj":"add-data",href:b,iconType:"indexOpen"},xt),m&&!c&&r.a.createElement(wt.a,{scope:u,"data-test-subj":"sourcerer"})))))}));kt.displayName="GlobalHeader";var Tt=a(522),It=a(33),Ct=a(87),Pt=a(360),Mt=a(209);const Nt=({navTabs:e,selectedTabId:t,...a})=>{const{navigateTo:i,getAppUrl:n}=Object(Ct.i)(),r=Object(l.useCallback)((e=>{const{id:l,name:r,disabled:o}=e,s=t===l,c=Object(Tt.a)(e,a),u=n({deepLinkId:l,path:c});return{"data-href":u,"data-test-subj":`navigation-${l}`,disabled:o,href:u,id:l,isSelected:s,name:r,onClick:e=>{e.preventDefault(),i({deepLinkId:l,path:c})}}}),[n,i,t,a]),o=function(e){var t;const a=null===(t=Object(S.h)())||void 0===t?void 0:t.read,i=Object(Pt.a)(),n=Object(Mt.a)("policyListEnabled"),r=Object(It.b)().services.application.capabilities;return Object(l.useMemo)((()=>r.siem.show?[{id:"main",name:"",items:[e.overview]},{...me.b.detect,items:[e.alerts,e.rules,e.exceptions]},{...me.b.explore,items:[e.hosts,e.network,...null!=e.ueba?[e.ueba]:[]]},{...me.b.investigate,items:a?[e.timelines,e.cases]:[e.timelines]},{...me.b.manage,items:[e.endpoints,...n?[e.policies]:[],e.trusted_apps,e.event_filters,...i?[e.host_isolation_exceptions]:[]]}]:a?[{...me.b.investigate,items:[e.cases]}]:[]),[r.siem.show,e,a,i,n])}(e);return Object(l.useMemo)((()=>o.map((e=>({...e,items:e.items.map((e=>r(e)))})))),[r,o])};const Ft=A.i18n.translate("xpack.securitySolution.navigation.mainLabel",{defaultMessage:"Security"});var Dt=a(866);const Lt=()=>{const[e]=Object(W.a)(),t=Object(Z.i)(),{urlState:a}=Object(E.a)(t),{chrome:i,application:{getUrlForApp:n,navigateToUrl:r}}=Object(S.j)().services,{detailName:o,flowTarget:s,pageName:c,pathName:u,search:d,state:m,tabName:p}=e,b=Object(Mt.a)("uebaEnabled");let g=me.a;if(!b){const{ueba:e,...t}=g;g=t}const v=Object(Dt.a)();return Object(l.useEffect)((()=>{(u||c)&&v({detailName:o,filters:a.filters,flowTarget:s,navTabs:g,pageName:c,pathName:u,query:a.query,savedQuery:a.savedQuery,search:d,sourcerer:a.sourcerer,state:m,tabName:p,timeline:a.timeline,timerange:a.timerange},i,n,r)}),[i,c,u,d,a,m,o,s,p,n,r,g,v]),(({filters:e,query:t,navTabs:a,pageName:i,savedQuery:n,sourcerer:r,tabName:o,timeline:s,timerange:c})=>{const u=Object(l.useCallback)((()=>{var e,t;return null!==(e=null===(t=o&&a[o]||a[i])||void 0===t?void 0:t.id)&&void 0!==e?e:""}),[i,o,a]),[d,m]=Object(l.useState)(u());Object(l.useEffect)((()=>{const e=u();e!==d&&m(e)}),[i,a,u,d]);const p=Nt({navTabs:a,selectedTabId:d,filters:e,query:t,savedQuery:n,sourcerer:r,timeline:s,timerange:c});return{name:Ft,icon:"logoSecurity",items:p}})({query:a.query,filters:a.filters,navTabs:g,pageName:c,sourcerer:a.sourcerer,savedQuery:a.savedQuery,tabName:p,timeline:a.timeline,timerange:a.timerange})};var At=a(12);const Bt=()=>Object(At.createSelector)(T.b.selectTimeline,(e=>{var t,a,i,n;return{activeTab:null!==(t=null==e?void 0:e.activeTab)&&void 0!==t?t:B.l.query,status:null!==(a=null==e?void 0:e.status)&&void 0!==a?a:B.k.draft,show:null!==(i=null==e?void 0:e.show)&&void 0!==i&&i,updated:null!==(n=null==e?void 0:e.updated)&&void 0!==n?n:void 0}}));var zt=a(681);const Rt=Oe.a.div.withConfig({displayName:"StyledStickyWrapper",componentId:"sc-jbkt6d-0"})(["position:sticky;z-index:",";"],(e=>e.theme.eui.euiZHeaderBelowDataGrid)),_t=r.a.memo((()=>{const{globalKQLHeaderPortalNode:e}=Object(zt.a)();return r.a.createElement(Rt,{id:"securitySolutionStickyKQL"},r.a.createElement(ve.b,{node:e}))}));_t.displayName="GlobalKQLHeader";const qt=["/cases/configure","/administration"],$t=()=>{const[{pageName:e,pathName:t}]=Object(W.a)(),[a,i]=Object(l.useState)(!qt.includes(window.location.pathname));return Object(l.useEffect)((()=>{qt.filter((e=>window.location.pathname.includes(e))).length>0?a&&i(!1):a||i(!0)}),[e,t]),[a]};var Vt=a(21);const Jt=A.i18n.translate("xpack.securitySolution.timeline.autosave.warning.title",{defaultMessage:"Auto-save disabled until refresh"}),Ut=A.i18n.translate("xpack.securitySolution.timeline.autosave.warning.description",{defaultMessage:"Another user has made changes to this timeline. Any changes you make will not be auto-saved until you have refreshed this timeline to absorb those changes."}),Gt=A.i18n.translate("xpack.securitySolution.timeline.autosave.warning.refresh.title",{defaultMessage:"Refresh timeline"}),Ht=()=>{const e=Object(u.useDispatch)(),t=Object(f.h)()[1],{timelineId:a,newTimelineModel:i}=Object(E.a)(T.b.autoSaveMsgSelector),n=Object(l.useCallback)((()=>{null!=a&&null!=i&&(e(T.a.updateTimeline({id:a,timeline:i})),e(T.a.updateAutoSaveMsg({timelineId:null,newTimelineModel:null})),e(Object(Vt.setTimelineRangeDatePicker)({from:Object(P.getOr)(0,"dateRange.start",i),to:Object(P.getOr)(0,"dateRange.end",i)})))}),[e,i,a]),o=Object(l.useMemo)((()=>r.a.createElement(r.a.Fragment,null,r.a.createElement("p",null,Ut),r.a.createElement(d.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"s"},r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiButton,{size:"s",onClick:n},Gt))))),[n]);if(null!=a&&null!=i){t({type:"addToaster",toast:{id:"AutoSaveWarningMsg",title:Jt,color:"warning",iconType:"alert",toastLifeTimeMs:1e4,text:o}})}return null};Ht.displayName="AutoSaveWarningMsgComponent";const Qt=r.a.memo(Ht);var Wt=a(838),Kt=a(205),Yt=a(401),Zt=a(7),Xt=a(213),ea=a(9),ta=a(341);const aa=({timelineId:e})=>{var t;const a=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),{cases:i,application:{navigateToApp:n}}=Object(S.j)().services,o=Object(u.useDispatch)(),{graphEventId:s,savedObjectId:c,status:m,title:p,timelineType:b}=Object(E.a)((t=>{var i;return Object(P.pick)(["graphEventId","savedObjectId","status","title","timelineType"],null!==(i=a(t,e))&&void 0!==i?i:R.a)})),[v,h]=Object(l.useState)(!1),[f,j]=Object(l.useState)(!1),y=Object(l.useCallback)((async t=>{j(!1),await n(g.w,{deepLinkId:ea.a.case,path:null!=t?Object(Xt.b)({id:t.id}):Object(Xt.c)()}),o(Object(Zt.setInsertTimeline)({graphEventId:s,timelineId:e,timelineSavedObjectId:c,timelineTitle:p}))}),[o,s,n,c,e,p]),O=Object(S.h)(),w=Object(l.useCallback)((()=>{h((e=>!e))}),[]),x=Object(l.useCallback)((()=>h(!1)),[]),k=Object(l.useCallback)((()=>{x(),n(g.w,{deepLinkId:ea.a.case,path:Object(Xt.c)()}).then((()=>{o(Object(Zt.setInsertTimeline)({graphEventId:s,timelineId:e,timelineSavedObjectId:c,timelineTitle:p.length>0?p:ta.l})),o(Object(Zt.showTimeline)({id:B.i.active,show:!1}))}))}),[o,s,n,x,c,e,p]),I=Object(l.useCallback)((()=>{x(),j(!0)}),[j,x]),C=Object(l.useCallback)((()=>{h(!1)}),[]),M=Object(l.useMemo)((()=>r.a.createElement(d.EuiButton,{fill:!0,size:"m","data-test-subj":"attach-timeline-case-button",iconType:"arrowDown",iconSide:"right",onClick:w,disabled:m===B.k.draft||b!==B.m.default},ta.c)),[w,m,b]),N=Object(l.useMemo)((()=>[r.a.createElement(d.EuiContextMenuItem,{key:"new-case","data-test-subj":"attach-timeline-new-case",onClick:k},ta.e),r.a.createElement(d.EuiContextMenuItem,{key:"existing-case","data-test-subj":"attach-timeline-existing-case",onClick:I},ta.d)]),[I,k]);return r.a.createElement(r.a.Fragment,null,r.a.createElement(d.EuiPopover,{id:"singlePanel",button:M,isOpen:v,closePopover:C,panelPaddingSize:"none",anchorPosition:"downLeft"},r.a.createElement(d.EuiContextMenuPanel,{items:N})),f&&i.getAllCasesSelectorModal({onRowClick:y,userCanCrud:null!==(t=null==O?void 0:O.crud)&&void 0!==t&&t,owner:[g.l]}))};aa.displayName="AddToCaseButtonComponent";const ia=r.a.memo(aa);var na=a(881),la=a(839),ra=a(237),oa=a(18),sa=a(71),ca=a(167),ua=a(190);const da=A.i18n.translate("xpack.securitySolution.timeline.kpiFailDescription",{defaultMessage:"An error has occurred"}),ma=A.i18n.translate("xpack.securitySolution.timeline.kpiFailSearchDescription",{defaultMessage:"Failed to load KPIs"});var pa=a(164),ba=a(266),ga=a(467);const Ea=e=>A.i18n.translate("xpack.securitySolution.timeline.flyout.header.closeTimelineButtonLabel",{defaultMessage:"Close {isTimeline, select, true {timeline} false {template}}",values:{isTimeline:e}}),va=A.i18n.translate("xpack.securitySolution.timeline.properties.unsavedLabel",{defaultMessage:"Unsaved"}),ha=A.i18n.translate("xpack.securitySolution.timeline.properties.autosavedLabel",{defaultMessage:"Autosaved"}),fa=A.i18n.translate("xpack.securitySolution.timeline.properties.inspectTimelineTitle",{defaultMessage:"Timeline"}),ja=A.i18n.translate("xpack.securitySolution.timeline.kpis.processKpiTitle",{defaultMessage:"Processes"}),ya=A.i18n.translate("xpack.securitySolution.timeline.kpis.hostKpiTitle",{defaultMessage:"Hosts"}),Oa=A.i18n.translate("xpack.securitySolution.timeline.kpis.sourceIpKpiTitle",{defaultMessage:"Source IPs"}),Sa=A.i18n.translate("xpack.securitySolution.timeline.kpis.destinationKpiTitle",{defaultMessage:"Destination IPs"}),wa=A.i18n.translate("xpack.securitySolution.timeline.kpis.userKpiTitle",{defaultMessage:"Users"}),xa=A.i18n.translate("xpack.securitySolution.timeline.properties.readMore",{defaultMessage:"Read More"}),ka=({isOpen:e,title:t})=>A.i18n.translate("xpack.securitySolution.timeline.properties.timelineToggleButtonAriaLabel",{values:{isOpen:e,title:t},defaultMessage:"{isOpen, select, false {Open} true {Close} other {Toggle}} timeline {title}"}),Ta=Oe()(d.EuiHealth).withConfig({displayName:"EuiHealthStyled",componentId:"sc-4g9vxo-0"})(["display:block;"]),Ia=Oe()(d.EuiButtonEmpty).withConfig({displayName:"StyledEuiButtonEmpty",componentId:"sc-4g9vxo-1"})(["> span{padding:0;}"]),Ca=Oe()(d.EuiFlexItem).withConfig({displayName:"TitleConatiner",componentId:"sc-4g9vxo-2"})(["overflow:hidden;display:inline-block;text-overflow:ellipsis;"]),Pa=({timelineId:e,timelineStatus:t,timelineType:a,timelineTitle:i,updated:n,isOpen:o})=>{const s=Object(u.useDispatch)(),c=Object(l.useCallback)((()=>{s(T.a.showTimeline({id:e,show:!o})),Object(Kt.j)()}),[s,o,e]),m=Object(P.isEmpty)(i)?a===B.m.template?ta.k:ta.l:i,p=Object(l.useMemo)((()=>t===B.k.draft?r.a.createElement(r.a.Fragment,null,va):r.a.createElement(r.a.Fragment,null,ha," ",r.a.createElement(he.FormattedRelative,{"data-test-subj":"timeline-status",key:"timeline-status-autosaved",value:new Date(n)}))),[t,n]);return r.a.createElement(Ia,{"aria-label":ka({isOpen:o,title:m}),className:Kt.b,flush:"both","data-test-subj":"flyoutOverlay",size:"s",isSelected:o,onClick:c},r.a.createElement(d.EuiFlexGroup,{gutterSize:"none",alignItems:"center",justifyContent:"flexStart",responsive:!1},r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{position:"top",content:p},r.a.createElement(Ta,{color:t===B.k.draft?"warning":"success"}))),r.a.createElement(Ca,{grow:!1},m),!o&&r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(ga.b,null))))},Ma=r.a.memo(Pa);var Na=a(165),Fa=a.n(Na),Da=a(192);const La=Oe()(d.EuiStat).withConfig({displayName:"NoWrapEuiStat",componentId:"sc-9jxvke-0"})(["& .euiStat__description{white-space:nowrap;}"]),Aa=r.a.memo((({kpis:e,isLoading:t})=>{const a="0,0.[000]a",[i]=Object(S.o)(g.R),n=Object(l.useMemo)((()=>({process:null===e?Object(Da.e)():Fa()(e.processCount).format(a),user:null===e?Object(Da.e)():Fa()(e.userCount).format(a),host:null===e?Object(Da.e)():Fa()(e.hostCount).format(a),sourceIp:null===e?Object(Da.e)():Fa()(e.sourceIpCount).format(a),destinationIp:null===e?Object(Da.e)():Fa()(e.destinationIpCount).format(a)})),[e]),o=Object(l.useMemo)((()=>({process:Fa()(null==e?void 0:e.processCount).format(i),user:Fa()(null==e?void 0:e.userCount).format(i),host:Fa()(null==e?void 0:e.hostCount).format(i),sourceIp:Fa()(null==e?void 0:e.sourceIpCount).format(i),destinationIp:Fa()(null==e?void 0:e.destinationIpCount).format(i)})),[e,i]);return r.a.createElement(d.EuiFlexGroup,{wrap:!0,"data-test-subj":"siem-timeline-kpis"},r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{position:"left",content:o.process},r.a.createElement(La,{"data-test-subj":"siem-timeline-process-kpi",title:n.process,description:ja,titleSize:"s",isLoading:t}))),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{position:"left",content:o.user},r.a.createElement(La,{"data-test-subj":"siem-timeline-user-kpi",title:n.user,description:wa,titleSize:"s",isLoading:t}))),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{position:"left",content:o.host},r.a.createElement(La,{"data-test-subj":"siem-timeline-host-kpi",title:n.host,description:ya,titleSize:"s",isLoading:t}))),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{position:"left",content:o.sourceIp},r.a.createElement(La,{"data-test-subj":"siem-timeline-source-ip-kpi",title:n.sourceIp,description:Oa,titleSize:"s",isLoading:t}))),r.a.createElement(d.EuiFlexItem,{grow:!1,style:{minWidth:100}},r.a.createElement(d.EuiToolTip,{position:"left",content:o.destinationIp},r.a.createElement(La,{"data-test-subj":"siem-timeline-destination-ip-kpi",title:n.destinationIp,description:Sa,titleSize:"s",isLoading:t}))))}));Aa.displayName="TimelineKPIs";var Ba=a(712);const za=Oe()(d.EuiPanel).withConfig({displayName:"StyledPanel",componentId:"sc-12xgwp3-0"})(["margin:0 -1px 0;"]),Ra=Oe()(d.EuiFlexItem).withConfig({displayName:"ActiveTimelinesContainer",componentId:"sc-12xgwp3-1"})(["overflow:hidden;"]),_a=({timelineId:e})=>{const t=Object(u.useDispatch)(),{browserFields:a,indexPattern:i}=Object(pe.e)(te.SourcererScopeName.timeline),{uiSettings:n}=Object(S.j)().services,o=Object(l.useMemo)((()=>Object(pa.getEsQueryConfig)(n)),[n]),s=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),{activeTab:c,dataProviders:m,kqlQuery:p,title:b,timelineType:g,status:v,updated:h,show:f,filters:j,kqlMode:y}=Object(E.a)((t=>{var a;return Object(P.pick)(["activeTab","dataProviders","kqlQuery","status","title","timelineType","updated","show","filters","kqlMode"],null!==(a=s(t,e))&&void 0!==a?a:R.a)})),O=Object(l.useMemo)((()=>!Object(P.isEmpty)(m)||!Object(P.isEmpty)(Object(P.get)("filterQuery.kuery.expression",p))),[m,p]),w=Object(l.useMemo)((()=>T.b.getKqlFilterQuerySelector()),[]),x=Object(u.useSelector)((t=>w(t,e))),k=Object(P.isEmpty)(m)&&Object(P.isEmpty)(x)&&"template"===g?" ":x,I=Object(l.useMemo)((()=>({query:k,language:"kuery"})),[k]),C=Object(l.useMemo)((()=>Object(Kt.i)({config:o,dataProviders:m,indexPattern:i,browserFields:a,filters:j||[],kqlQuery:I,kqlMode:y})),[a,m,o,j,i,y,I]),M=Object(l.useCallback)((()=>{t(T.a.showTimeline({id:e,show:!1})),Object(Kt.j)()}),[t,e]);return r.a.createElement(za,{borderRadius:"none",grow:!1,paddingSize:"s",hasShadow:!1,"data-test-subj":"timeline-flyout-header-panel"},r.a.createElement(d.EuiFlexGroup,{alignItems:"center",gutterSize:"s",responsive:!1},r.a.createElement(na.b,{timelineId:e}),r.a.createElement(Ra,{grow:!1},r.a.createElement(Ma,{timelineId:e,timelineType:g,timelineTitle:b,timelineStatus:v,isOpen:f,updated:h})),f&&r.a.createElement(d.EuiFlexItem,null,r.a.createElement(d.EuiFlexGroup,{justifyContent:"flexEnd",gutterSize:"s",responsive:!1},(c===B.l.query||c===B.l.eql)&&r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(ra.a,{compact:!0,queryId:`${e}-${c}`,inputId:"timeline",inspectIndex:0,isDisabled:!O||void 0===(null==C?void 0:C.filterQuery),title:fa})),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiToolTip,{content:Ea("default"===g)},r.a.createElement(d.EuiButtonIcon,{"aria-label":Ea("default"===g),"data-test-subj":"close-timeline",iconType:"cross",onClick:M})))))))},qa=r.a.memo(_a),$a=Oe.a.div.withConfig({displayName:"StyledDiv",componentId:"sc-12xgwp3-2"})(["display:-webkit-box;-webkit-line-clamp:1;-webkit-box-orient:vertical;overflow:hidden;word-break:break-word;"]),Va=({description:e,onclick:t})=>{const[a,i]=Object(Ba.a)(e);return r.a.createElement(r.a.Fragment,null,r.a.createElement($a,{ref:i},e),a&&r.a.createElement(d.EuiButtonEmpty,{flush:"left",onClick:t},xa))},Ja=Oe()(d.EuiFlexGroup).withConfig({displayName:"StyledTimelineHeader",componentId:"sc-12xgwp3-3"})([""," flex:0;"],(({theme:e})=>`margin: ${e.eui.euiSizeXS} ${e.eui.euiSizeS} 0 ${e.eui.euiSizeS};`)),Ua=Oe.a.span.withConfig({displayName:"TimelineStatusInfoContainer",componentId:"sc-12xgwp3-4"})([""," white-space:nowrap;"],(({theme:e})=>`margin-left: ${e.eui.euiSizeS};`)),Ga=Oe.a.div.withConfig({displayName:"KpisContainer",componentId:"sc-12xgwp3-5"})(["",""],(({theme:e})=>`margin-right: ${e.eui.euiSizeM};`)),Ha=Oe()(d.EuiFlexItem).withConfig({displayName:"RowFlexItem",componentId:"sc-12xgwp3-6"})(["flex-direction:row;align-items:center;"]),Qa=Oe.a.h3.withConfig({displayName:"TimelineTitleContainer",componentId:"sc-12xgwp3-7"})(["display:-webkit-box;overflow:hidden;-webkit-line-clamp:1;-webkit-box-orient:vertical;word-break:break-word;"]),Wa=({timelineId:e})=>{const t=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),{title:a,timelineType:i}=Object(E.a)((a=>{var i;return Object(P.pick)(["title","timelineType"],null!==(i=t(a,e))&&void 0!==i?i:R.a)})),n=Object(l.useMemo)((()=>i===B.m.template?ta.k:ta.l),[i]),o=Object(l.useMemo)((()=>a||n),[a,n]);return r.a.createElement(d.EuiToolTip,{content:o,position:"bottom"},r.a.createElement(d.EuiText,null,r.a.createElement(Qa,{"data-test-subj":"timeline-title"},o)))},Ka=r.a.memo(Wa),Ya=({timelineId:e})=>{const t=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),a=Object(E.a)((a=>{var i;return(null!==(i=t(a,e))&&void 0!==i?i:R.a).description})),i=Object(u.useDispatch)(),n=Object(l.useCallback)((t=>{i(Object(Zt.setActiveTabTimeline)({id:e,activeTab:B.l.notes,scrollToTop:!0}))}),[i,e]);return r.a.createElement(d.EuiText,{size:"s","data-test-subj":"timeline-description"},r.a.createElement(Va,{description:a||ta.f,onclick:n}))},Za=r.a.memo(Ya),Xa=({timelineId:e})=>{const t=Object(l.useMemo)((()=>Object(At.createSelector)(T.b.selectTimeline,(e=>{var t,a;return{status:null!==(t=null==e?void 0:e.status)&&void 0!==t?t:B.k.draft,updated:null!==(a=null==e?void 0:e.updated)&&void 0!==a?a:void 0}}))),[]),{status:a,updated:i}=Object(E.a)((a=>t(a,e)));return Object(l.useMemo)((()=>a===B.k.draft),[a])?r.a.createElement(d.EuiText,{size:"xs"},r.a.createElement(d.EuiTextColor,{color:"warning","data-test-subj":"timeline-status"},va)):r.a.createElement(d.EuiText,{size:"xs"},r.a.createElement(d.EuiTextColor,{color:"default"},ha," ",r.a.createElement(he.FormattedRelative,{"data-test-subj":"timeline-status",key:"timeline-status-autosaved",value:new Date(i)})))},ei=r.a.memo(Xa),ti=({timelineId:e})=>{var t,a,i;const{selectedPatterns:n,indexPattern:o,docValueFields:s,browserFields:c}=Object(pe.e)(te.SourcererScopeName.timeline),m=Object(l.useMemo)((()=>Object(ba.i)()),[]),p=Object(l.useMemo)((()=>Object(ba.b)()),[]),b=Object(l.useMemo)((()=>e===B.i.active),[e]),g=Object(E.a)((e=>b?{from:m(e.inputs.timeline),to:p(e.inputs.timeline),interval:""}:{from:m(e.inputs.global),to:p(e.inputs.global),interval:""})),{uiSettings:v}=Object(S.j)().services,h=Object(l.useMemo)((()=>Object(pa.getEsQueryConfig)(v)),[v]),f=Object(l.useMemo)((()=>T.b.getTimelineByIdSelector()),[]),j=Object(u.useSelector)((t=>{var a;return null!==(a=f(t,e))&&void 0!==a?a:R.a})),{dataProviders:y,filters:O,timelineType:w,kqlMode:x,activeTab:k}=j,I=Object(l.useMemo)((()=>T.b.getKqlFilterQuerySelector()),[]),C=Object(u.useSelector)((t=>I(t,e))),M=Object(P.isEmpty)(y)&&Object(P.isEmpty)(C)&&"template"===w?" ":C,N=Object(l.useMemo)((()=>({query:M,language:"kuery"})),[M]),D=Object(l.useMemo)((()=>Object(Kt.i)({config:h,dataProviders:y,indexPattern:o,browserFields:c,filters:O||[],kqlQuery:N,kqlMode:x})),[c,y,h,O,o,x,N]),L=Object(l.useMemo)((()=>Object(P.isEmpty)(y)&&Object(P.isEmpty)(O)&&Object(P.isEmpty)(N.query)||void 0===(null==D?void 0:D.filterQuery)),[y,O,N,D]),[A,z]=(({timerange:e,filterQuery:t,docValueFields:a,defaultIndex:i,isBlankTimeline:n})=>{const{data:r}=Object(S.j)().services,o=Object(l.useRef)(P.noop),s=Object(l.useRef)(new AbortController),c=Object(l.useRef)(new oa.Subscription),[u,d]=Object(l.useState)(!1),[m,p]=Object(l.useState)(null),[b,g]=Object(l.useState)(null),{addError:E,addWarning:v}=Object(ua.a)(),h=Object(l.useCallback)((e=>{if(null==e)return;const t=async()=>{s.current=new AbortController,d(!0),c.current=r.search.search(e,{strategy:"timelineSearchStrategy",abortSignal:s.current.signal}).subscribe({next:e=>{Object(ca.isCompleteResponse)(e)?(d(!1),g(e),c.current.unsubscribe()):Object(ca.isErrorResponse)(e)&&(d(!1),v(da),c.current.unsubscribe())},error:e=>{d(!1),E(e,{title:ma}),c.current.unsubscribe()}})};c.current.unsubscribe(),s.current.abort(),t(),o.current=t}),[r.search,E,v]);return Object(l.useEffect)((()=>{p((n=>{const l={...null!=n?n:{},docValueFields:a,defaultIndex:i,timerange:e,filterQuery:t,factoryQueryType:sa.y.kpi};return F()(n,l)?n:l}))}),[a,i,e,t]),Object(l.useEffect)((()=>(n?(d(!1),g(null)):h(m),()=>{c.current.unsubscribe(),s.current.abort()})),[n,m,h]),[u,b]})({defaultIndex:n,docValueFields:s,timerange:g,isBlankTimeline:L,filterQuery:null!==(t=null==D?void 0:D.filterQuery)&&void 0!==t?t:""}),_=null!==(a=null===(i=Object(S.h)())||void 0===i?void 0:i.crud)&&void 0!==a&&a;return r.a.createElement(Ja,{alignItems:"center",gutterSize:"s"},r.a.createElement(d.EuiFlexItem,null,r.a.createElement(d.EuiFlexGroup,{"data-test-subj":"properties-left",direction:"column",gutterSize:"none"},r.a.createElement(Ha,null,r.a.createElement(Ka,{timelineId:e}),r.a.createElement(la.a,{timelineId:e,initialFocus:"title"}),r.a.createElement(Ua,null,r.a.createElement(ei,{timelineId:e}))),r.a.createElement(Ha,null,r.a.createElement(Za,{timelineId:e}),r.a.createElement(la.a,{timelineId:e,initialFocus:"description"})))),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(Ga,null,k===B.l.query?r.a.createElement(Aa,{kpis:z,isLoading:A}):null)),r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(d.EuiFlexGroup,{gutterSize:"s"},r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(Yt.a,{timelineId:e})),_&&r.a.createElement(d.EuiFlexItem,{grow:!1},r.a.createElement(ia,{timelineId:e})))))};ti.displayName="FlyoutHeaderComponent";const ai=r.a.memo(ti),ii=Oe()(d.EuiPanel).withConfig({displayName:"DataProvidersPanel",componentId:"sc-oo43db-0"})(["border-radius:0;padding:0 4px 0 4px;user-select:none;z-index:",";"],(({theme:e})=>e.eui.euiZLevel9)),ni=r.a.memo((({activeTab:e,showDataproviders:t,timelineId:a})=>r.a.createElement("div",{className:Kt.e,"data-test-subj":"flyoutBottomBar"},t&&r.a.createElement(qa,{timelineId:a}),(t||!t&&e!==B.l.query)&&r.a.createElement(ii,{paddingSize:"none"},r.a.createElement(Wt.a,{timelineId:a,"data-test-subj":"dataProviders-bottomBar"})))));ni.displayName="FlyoutBottomBar";var li=a(74),ri=a(77),oi=a(337),si=a(761);const ci=A.i18n.translate("xpack.securitySolution.timeline.tabs.queyTabTimelineTitle",{defaultMessage:"Query"}),ui=A.i18n.translate("xpack.securitySolution.timeline.tabs.eqlTabTimelineTitle",{defaultMessage:"Correlation"}),di=A.i18n.translate("xpack.securitySolution.timeline.tabs.analyserTabTimelineTitle",{defaultMessage:"Analyzer"}),mi=A.i18n.translate("xpack.securitySolution.timeline.tabs.notesTabTimelineTitle",{defaultMessage:"Notes"}),pi=A.i18n.translate("xpack.securitySolution.timeline.tabs.pinnedTabTimelineTitle",{defaultMessage:"Pinned"}),bi=Oe.a.div.attrs((({$isVisible:e=!1})=>({style:{display:e?"flex":"none"}}))).withConfig({displayName:"HideShowContainer",componentId:"sc-14igzi1-0"})(["flex:1;overflow:hidden;"]),gi=Object(l.lazy)((()=>Promise.all([a.e(5),a.e(14)]).then(a.bind(null,1433)))),Ei=Object(l.lazy)((()=>Promise.all(