Skip to content

Commit f21500b

Browse files
authored
[Rules migration] Allow sorting by risk_score field (elastic#207207)
## Summary [Internal link](elastic/security-team#10820) to the feature details This PR adds possibility to sort migration rules by `risk_score` field. https://github.com/user-attachments/assets/97a2bb5b-fc19-45db-ab93-c7f9676aa81c > [!NOTE] > This feature needs `siemMigrationsEnabled` experimental flag enabled to work.
1 parent fb8a17b commit f21500b

1 file changed

Lines changed: 13 additions & 0 deletions

File tree

  • x-pack/solutions/security/plugins/security_solution/server/lib/siem_migrations/rules/data

x-pack/solutions/security/plugins/security_solution/server/lib/siem_migrations/rules/data/sort.ts

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,9 @@ const sortingOptions = {
5050
},
5151
];
5252
},
53+
riskScore(direction: estypes.SortOrder = 'asc'): estypes.SortCombinations[] {
54+
return [{ 'elastic_rule.risk_score': direction }];
55+
},
5356
status(direction: estypes.SortOrder = 'asc'): estypes.SortCombinations[] {
5457
const field = 'translation_result';
5558
const installedRuleField = 'elastic_rule.id';
@@ -101,6 +104,7 @@ const DEFAULT_SORTING: estypes.Sort = [
101104
...sortingOptions.status('desc'),
102105
...sortingOptions.matchedPrebuiltRule('desc'),
103106
...sortingOptions.severity(),
107+
...sortingOptions.riskScore('desc'),
104108
...sortingOptions.updated(),
105109
];
106110

@@ -109,6 +113,13 @@ const sortingOptionsMap: {
109113
} = {
110114
'elastic_rule.title': sortingOptions.name,
111115
'elastic_rule.severity': (direction?: estypes.SortOrder) => [
116+
...sortingOptions.severity(direction),
117+
...sortingOptions.riskScore(direction),
118+
...sortingOptions.status('desc'),
119+
...sortingOptions.matchedPrebuiltRule('desc'),
120+
],
121+
'elastic_rule.risk_score': (direction?: estypes.SortOrder) => [
122+
...sortingOptions.riskScore(direction),
112123
...sortingOptions.severity(direction),
113124
...sortingOptions.status('desc'),
114125
...sortingOptions.matchedPrebuiltRule('desc'),
@@ -117,11 +128,13 @@ const sortingOptionsMap: {
117128
...sortingOptions.matchedPrebuiltRule(direction),
118129
...sortingOptions.status('desc'),
119130
...sortingOptions.severity('desc'),
131+
...sortingOptions.riskScore(direction),
120132
],
121133
translation_result: (direction?: estypes.SortOrder) => [
122134
...sortingOptions.status(direction),
123135
...sortingOptions.matchedPrebuiltRule('desc'),
124136
...sortingOptions.severity('desc'),
137+
...sortingOptions.riskScore(direction),
125138
],
126139
updated_at: sortingOptions.updated,
127140
};

0 commit comments

Comments
 (0)