function baseCreateAlerts()

in src/createAlerts.ts [3:102]


function baseCreateAlerts({
  userName = 'user-1',
  hostName = 'host-1',
  space = 'default',
}: {
  userName?: string;
  hostName?: string;
  space?: string;
} = {}) {
  return {
    'host.name': hostName,
    'user.name': userName,
    'kibana.alert.start': '2023-04-11T20:18:15.816Z',
    'kibana.alert.last_detected': '2023-04-11T20:18:15.816Z',
    'kibana.version': '8.7.0',
    'kibana.alert.rule.parameters': {
      description: '2',
      risk_score: 21,
      severity: 'low',
      license: '',
      author: [],
      false_positives: [],
      from: 'now-360s',
      rule_id: faker.string.uuid(),
      max_signals: 100,
      risk_score_mapping: [],
      severity_mapping: [],
      threat: [],
      to: 'now',
      references: [],
      version: 3,
      exceptions_list: [],
      immutable: false,
      related_integrations: [],
      required_fields: [],
      setup: '',
      type: 'query',
      language: 'kuery',
      index: ['my*'],
      query: '*',
      filters: [],
    },
    'kibana.alert.rule.category': 'Custom Query Rule',
    'kibana.alert.rule.consumer': 'siem',
    'kibana.alert.rule.execution.uuid': faker.string.uuid(),
    'kibana.alert.rule.name': 'Alert create by documents-generator',
    'kibana.alert.rule.producer': 'siem',
    'kibana.alert.rule.rule_type_id': 'siem.queryRule',
    'kibana.alert.rule.uuid': faker.string.uuid(),
    'kibana.space_ids': [space],
    'kibana.alert.rule.tags': [],
    '@timestamp': Date.now(),
    'event.kind': 'signal',
    'kibana.alert.original_time': '2023-04-11T20:17:14.851Z',
    'kibana.alert.ancestors': [
      {
        id: '8TD3cYcB1hicTK_CdP--',
        type: 'event',
        index: 'my-index',
        depth: 0,
      },
    ],
    'kibana.alert.status': 'active',
    'kibana.alert.workflow_status': 'open',
    'kibana.alert.depth': 1,
    'kibana.alert.reason': 'event on ' + hostName + 'created low alert 1.',
    'kibana.alert.severity': 'low',
    'kibana.alert.risk_score': 21,
    'kibana.alert.rule.actions': [],
    'kibana.alert.rule.author': [],
    'kibana.alert.rule.created_at': '2023-04-11T20:15:52.473Z',
    'kibana.alert.rule.created_by': 'elastic',
    'kibana.alert.rule.description': '2',
    'kibana.alert.rule.enabled': true,
    'kibana.alert.rule.exceptions_list': [],
    'kibana.alert.rule.false_positives': [],
    'kibana.alert.rule.from': 'now-360s',
    'kibana.alert.rule.immutable': false,
    'kibana.alert.rule.interval': '5m',
    'kibana.alert.rule.indices': ['my*'],
    'kibana.alert.rule.license': '',
    'kibana.alert.rule.max_signals': 100,
    'kibana.alert.rule.references': [],
    'kibana.alert.rule.risk_score_mapping': [],
    'kibana.alert.rule.rule_id': 'cc066b08-b4d2-4e74-81cb-3cda5aaa612d',
    'kibana.alert.rule.severity_mapping': [],
    'kibana.alert.rule.threat': [],
    'kibana.alert.rule.to': 'now',
    'kibana.alert.rule.type': 'query',
    'kibana.alert.rule.updated_at': '2023-04-11T20:18:11.024Z',
    'kibana.alert.rule.updated_by': 'elastic',
    'kibana.alert.rule.version': 3,
    'kibana.alert.rule.meta.from': '1m',
    'kibana.alert.rule.meta.kibana_siem_app_url':
      'http://localhost:5601/app/security',
    'kibana.alert.rule.risk_score': 21,
    'kibana.alert.rule.severity': 'low',
    'kibana.alert.uuid': faker.string.uuid(),
  };
}