in src/createAlerts.ts [3:102]
function baseCreateAlerts({
userName = 'user-1',
hostName = 'host-1',
space = 'default',
}: {
userName?: string;
hostName?: string;
space?: string;
} = {}) {
return {
'host.name': hostName,
'user.name': userName,
'kibana.alert.start': '2023-04-11T20:18:15.816Z',
'kibana.alert.last_detected': '2023-04-11T20:18:15.816Z',
'kibana.version': '8.7.0',
'kibana.alert.rule.parameters': {
description: '2',
risk_score: 21,
severity: 'low',
license: '',
author: [],
false_positives: [],
from: 'now-360s',
rule_id: faker.string.uuid(),
max_signals: 100,
risk_score_mapping: [],
severity_mapping: [],
threat: [],
to: 'now',
references: [],
version: 3,
exceptions_list: [],
immutable: false,
related_integrations: [],
required_fields: [],
setup: '',
type: 'query',
language: 'kuery',
index: ['my*'],
query: '*',
filters: [],
},
'kibana.alert.rule.category': 'Custom Query Rule',
'kibana.alert.rule.consumer': 'siem',
'kibana.alert.rule.execution.uuid': faker.string.uuid(),
'kibana.alert.rule.name': 'Alert create by documents-generator',
'kibana.alert.rule.producer': 'siem',
'kibana.alert.rule.rule_type_id': 'siem.queryRule',
'kibana.alert.rule.uuid': faker.string.uuid(),
'kibana.space_ids': [space],
'kibana.alert.rule.tags': [],
'@timestamp': Date.now(),
'event.kind': 'signal',
'kibana.alert.original_time': '2023-04-11T20:17:14.851Z',
'kibana.alert.ancestors': [
{
id: '8TD3cYcB1hicTK_CdP--',
type: 'event',
index: 'my-index',
depth: 0,
},
],
'kibana.alert.status': 'active',
'kibana.alert.workflow_status': 'open',
'kibana.alert.depth': 1,
'kibana.alert.reason': 'event on ' + hostName + 'created low alert 1.',
'kibana.alert.severity': 'low',
'kibana.alert.risk_score': 21,
'kibana.alert.rule.actions': [],
'kibana.alert.rule.author': [],
'kibana.alert.rule.created_at': '2023-04-11T20:15:52.473Z',
'kibana.alert.rule.created_by': 'elastic',
'kibana.alert.rule.description': '2',
'kibana.alert.rule.enabled': true,
'kibana.alert.rule.exceptions_list': [],
'kibana.alert.rule.false_positives': [],
'kibana.alert.rule.from': 'now-360s',
'kibana.alert.rule.immutable': false,
'kibana.alert.rule.interval': '5m',
'kibana.alert.rule.indices': ['my*'],
'kibana.alert.rule.license': '',
'kibana.alert.rule.max_signals': 100,
'kibana.alert.rule.references': [],
'kibana.alert.rule.risk_score_mapping': [],
'kibana.alert.rule.rule_id': 'cc066b08-b4d2-4e74-81cb-3cda5aaa612d',
'kibana.alert.rule.severity_mapping': [],
'kibana.alert.rule.threat': [],
'kibana.alert.rule.to': 'now',
'kibana.alert.rule.type': 'query',
'kibana.alert.rule.updated_at': '2023-04-11T20:18:11.024Z',
'kibana.alert.rule.updated_by': 'elastic',
'kibana.alert.rule.version': 3,
'kibana.alert.rule.meta.from': '1m',
'kibana.alert.rule.meta.kibana_siem_app_url':
'http://localhost:5601/app/security',
'kibana.alert.rule.risk_score': 21,
'kibana.alert.rule.severity': 'low',
'kibana.alert.uuid': faker.string.uuid(),
};
}