@cccsaurora/howler-ui 2.19.0-cases.1064 → 2.19.0-cases.1095

package/components/routes/events/EventViewer.js

@@ -0,0 +1,27 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Box, Skeleton } from '@mui/material';
+import api from '@cccsaurora/howler-ui/api';
+import ObjectDetails from '@cccsaurora/howler-ui/components/elements/ObjectDetails';
+import useMyApi from '@cccsaurora/howler-ui/components/hooks/useMyApi';
+import { useEffect, useState } from 'react';
+const EventViewer = ({ event: provided, eventId }) => {
+    const { dispatchApi } = useMyApi();
+    const [event, setEvent] = useState(null);
+    useEffect(() => {
+        if (provided) {
+            setEvent(provided);
+        }
+    }, [provided]);
+    useEffect(() => {
+        if (eventId) {
+            dispatchApi(api.v2.search.post('event', { query: `howler.id:${eventId}`, rows: 1 }), {
+                throwError: false
+            }).then(res => setEvent(res.items[0]));
+        }
+    }, [dispatchApi, eventId]);
+    if (!event) {
+        return;
+    }
+    return _jsx(Box, { p: 1, children: event ? _jsx(ObjectDetails, { obj: event }) : _jsx(Skeleton, { height: 120 }) });
+};
+export default EventViewer;

package/components/routes/hits/search/SearchPane.js

@@ -14,9 +14,9 @@ import VSBoxContent from '@cccsaurora/howler-ui/components/elements/addons/layou
 import VSBoxHeader from '@cccsaurora/howler-ui/components/elements/addons/layout/vsbox/VSBoxHeader';
 import SearchPagination from '@cccsaurora/howler-ui/components/elements/addons/search/SearchPagination';
 import SearchTotal from '@cccsaurora/howler-ui/components/elements/addons/search/SearchTotal';
+import EventCard from '@cccsaurora/howler-ui/components/elements/event/EventCard';
 import HitCard from '@cccsaurora/howler-ui/components/elements/hit/HitCard';
 import { HitLayout } from '@cccsaurora/howler-ui/components/elements/hit/HitLayout';
-import ObservableCard from '@cccsaurora/howler-ui/components/elements/observable/ObservableCard';
 import RecordContextMenu from '@cccsaurora/howler-ui/components/elements/record/RecordContextMenu';
 import { useMyLocalStorageItem } from '@cccsaurora/howler-ui/components/hooks/useMyLocalStorage';
 import useRecordSelection from '@cccsaurora/howler-ui/components/hooks/useRecordSelection';
@@ -26,7 +26,7 @@ import { useTranslation } from 'react-i18next';
 import { Link } from 'react-router-dom';
 import { useContextSelector } from 'use-context-selector';
 import { StorageKey } from '@cccsaurora/howler-ui/utils/constants';
-import { isHit, isObservable } from '@cccsaurora/howler-ui/utils/typeUtils';
+import { isEvent, isHit } from '@cccsaurora/howler-ui/utils/typeUtils';
 import LayoutSettings from './LayoutSettings';
 import QuerySettings from './QuerySettings';
 import RecordQuery from './RecordQuery';
@@ -73,7 +73,7 @@ const Item = memo(({ record, onClick }) => {
                     boxShadow: `0px 0px 5px 2px ${theme.palette.primary.main}`
                 }
             }
-        ], children: [isHit(record) && _jsx(HitCard, { id: record.howler.id, layout: layout }), isObservable(record) && _jsx(ObservableCard, { id: record.howler.id, observable: record })] }));
+        ], children: [isHit(record) && _jsx(HitCard, { id: record.howler.id, layout: layout }), isEvent(record) && _jsx(EventCard, { id: record.howler.id, event: record })] }));
 });
 const SearchPane = () => {
     const { t } = useTranslation();

package/components/routes/hits/search/grid/EnhancedCell.d.ts

@@ -1,8 +1,8 @@
 import { type SxProps } from '@mui/material';
+import type { Event } from '@cccsaurora/howler-ui/models/entities/generated/Event';
 import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
-import type { Observable } from '@cccsaurora/howler-ui/models/entities/generated/Observable';
 declare const _default: import("react").NamedExoticComponent<{
-    record: Hit | Observable;
+    record: Hit | Event;
     value: string;
     sx?: SxProps;
     className: string;

package/components/routes/hits/search/grid/RecordRow.d.ts

@@ -1,11 +1,11 @@
+import type { Event } from '@cccsaurora/howler-ui/models/entities/generated/Event';
 import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
-import type { Observable } from '@cccsaurora/howler-ui/models/entities/generated/Observable';
 declare const _default: import("react").NamedExoticComponent<{
-    record: Hit | Observable;
+    record: Hit | Event;
     analyticIds: Record<string, string>;
     columns: string[];
     columnWidths: Record<string, string>;
     collapseMainColumn: boolean;
-    onClick: (e: React.MouseEvent<HTMLDivElement>, record: Hit | Observable) => void;
+    onClick: (e: React.MouseEvent<HTMLDivElement>, record: Hit | Event) => void;
 }>;
 export default _default;

package/components/routes/hits/search/grid/RecordRow.js

@@ -3,11 +3,11 @@ import { KeyboardArrowUp } from '@mui/icons-material';
 import { Box, Collapse, IconButton, lighten, Stack, TableCell, TableRow, Typography, useTheme } from '@mui/material';
 import { ParameterContext } from '@cccsaurora/howler-ui/components/app/providers/ParameterProvider';
 import { RecordContext } from '@cccsaurora/howler-ui/components/app/providers/RecordProvider';
+import EventCard from '@cccsaurora/howler-ui/components/elements/event/EventCard';
 import Assigned from '@cccsaurora/howler-ui/components/elements/hit/elements/Assigned';
 import EscalationChip from '@cccsaurora/howler-ui/components/elements/hit/elements/EscalationChip';
 import HitCard from '@cccsaurora/howler-ui/components/elements/hit/HitCard';
 import { HitLayout } from '@cccsaurora/howler-ui/components/elements/hit/HitLayout';
-import ObservableCard from '@cccsaurora/howler-ui/components/elements/observable/ObservableCard';
 import { get } from 'lodash-es';
 import { memo, useState } from 'react';
 import { useTranslation } from 'react-i18next';
@@ -47,6 +47,6 @@ const RecordRow = ({ record, analyticIds, columns, columnWidths, collapseMainCol
                                         e.preventDefault();
                                         e.stopPropagation();
                                         setExpandRow(_expanded => !_expanded);
-                                    }, children: _jsx(KeyboardArrowUp, {}) }), _jsx(Collapse, { in: !collapseMainColumn, orientation: "horizontal", unmountOnExit: true, children: _jsxs(Stack, { direction: "row", spacing: 1, flexWrap: "nowrap", children: [isHit(record) && _jsx(EscalationChip, { hit: record, layout: HitLayout.DENSE, hideLabel: true }), _jsxs(Typography, { sx: { textWrap: 'nowrap', whiteSpace: 'nowrap', fontSize: 'inherit' }, children: [analyticIds[record.howler.analytic] ? (_jsx(Link, { to: `/analytics/${analyticIds[record.howler.analytic]}`, onClick: e => e.stopPropagation(), children: record.howler.analytic })) : (record.howler.analytic), record.howler.detection && ': ', record.howler.detection] }), isHit(record) && record.howler.assignment !== 'unassigned' && (_jsx(Assigned, { hit: record, layout: HitLayout.DENSE, hideLabel: true }))] }) })] }) }), columns.map(col => (_jsx(EnhancedCell, { record: record, className: `col-${col.replaceAll('.', '-')}`, value: get(record, col) ?? t('none'), sx: columnWidths[col] ? { width: columnWidths[col] } : { width: '220px', maxWidth: '300px' }, field: col }, col)))] }, record.howler.id), _jsx(TableRow, { onClick: ev => onClick(ev, record), children: _jsx(TableCell, { colSpan: columns.length + 2, style: { paddingBottom: 0, paddingTop: 0 }, children: _jsx(Collapse, { in: expandRow, unmountOnExit: true, children: _jsx(Box, { width: "100%", maxWidth: "1200px", margin: 1, children: isHit(record) ? (_jsx(HitCard, { id: record.howler.id, layout: HitLayout.NORMAL })) : (_jsx(ObservableCard, { id: record.howler.id, observable: record })) }) }) }) })] }));
+                                    }, children: _jsx(KeyboardArrowUp, {}) }), _jsx(Collapse, { in: !collapseMainColumn, orientation: "horizontal", unmountOnExit: true, children: _jsxs(Stack, { direction: "row", spacing: 1, flexWrap: "nowrap", children: [isHit(record) && _jsx(EscalationChip, { hit: record, layout: HitLayout.DENSE, hideLabel: true }), _jsxs(Typography, { sx: { textWrap: 'nowrap', whiteSpace: 'nowrap', fontSize: 'inherit' }, children: [analyticIds[record.howler.analytic] ? (_jsx(Link, { to: `/analytics/${analyticIds[record.howler.analytic]}`, onClick: e => e.stopPropagation(), children: record.howler.analytic })) : (record.howler.analytic), record.howler.detection && ': ', record.howler.detection] }), isHit(record) && record.howler.assignment !== 'unassigned' && (_jsx(Assigned, { hit: record, layout: HitLayout.DENSE, hideLabel: true }))] }) })] }) }), columns.map(col => (_jsx(EnhancedCell, { record: record, className: `col-${col.replaceAll('.', '-')}`, value: get(record, col) ?? t('none'), sx: columnWidths[col] ? { width: columnWidths[col] } : { width: '220px', maxWidth: '300px' }, field: col }, col)))] }, record.howler.id), _jsx(TableRow, { onClick: ev => onClick(ev, record), children: _jsx(TableCell, { colSpan: columns.length + 2, style: { paddingBottom: 0, paddingTop: 0 }, children: _jsx(Collapse, { in: expandRow, unmountOnExit: true, children: _jsx(Box, { width: "100%", maxWidth: "1200px", margin: 1, children: isHit(record) ? (_jsx(HitCard, { id: record.howler.id, layout: HitLayout.NORMAL })) : (_jsx(EventCard, { id: record.howler.id, event: record })) }) }) }) })] }));
 };
 export default memo(RecordRow);

package/components/routes/hits/search/shared/IndexPicker.js

@@ -8,7 +8,7 @@ import { useTranslation } from 'react-i18next';
 import { useContextSelector } from 'use-context-selector';
 const FILTER_OPTIONS = [
     { label: 'hit.search.index.hit', value: 'hit' },
-    { label: 'hit.search.index.observable', value: 'observable' }
+    { label: 'hit.search.index.event', value: 'event' }
 ];
 const IndexPicker = () => {
     const { t } = useTranslation();

package/components/routes/home/ViewCard.js

@@ -5,16 +5,16 @@ import api from '@cccsaurora/howler-ui/api';
 import AppListEmpty from '@cccsaurora/howler-ui/commons/components/display/AppListEmpty';
 import { useRecordContextSelector } from '@cccsaurora/howler-ui/components/app/providers/RecordProvider';
 import { ViewContext } from '@cccsaurora/howler-ui/components/app/providers/ViewProvider';
+import EventCard from '@cccsaurora/howler-ui/components/elements/event/EventCard';
 import HitBanner from '@cccsaurora/howler-ui/components/elements/hit/HitBanner';
 import { HitLayout } from '@cccsaurora/howler-ui/components/elements/hit/HitLayout';
-import ObservableCard from '@cccsaurora/howler-ui/components/elements/observable/ObservableCard';
 import RecordContextMenu from '@cccsaurora/howler-ui/components/elements/record/RecordContextMenu';
 import useMyApi from '@cccsaurora/howler-ui/components/hooks/useMyApi';
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { useTranslation } from 'react-i18next';
 import { Link, useNavigate } from 'react-router-dom';
 import { useContextSelector } from 'use-context-selector';
-import { isObservable } from '@cccsaurora/howler-ui/utils/typeUtils';
+import { isEvent } from '@cccsaurora/howler-ui/utils/typeUtils';
 import { buildViewUrl } from '@cccsaurora/howler-ui/utils/viewUtils';
 // Custom hook to select records by IDs with proper memoization
 const useSelectRecordsByIds = (recordIds) => {
@@ -49,7 +49,7 @@ const createRecordSignature = (record) => {
     if (!record) {
         return '';
     }
-    if (isObservable(record)) {
+    if (isEvent(record)) {
         return record.howler?.id;
     }
     return `${record.howler?.id}:${normalize(record.howler?.status)}:${normalize(record.howler?.assignment)}:${normalize(record.howler?.assessment)}`;
@@ -157,6 +157,6 @@ const ViewCard = ({ viewId, limit, refreshTick, onRefreshComplete }) => {
         }
         return selectedElement.id;
     }, []);
-    return (_jsx(Card, { variant: "outlined", sx: { height: '100%' }, children: _jsxs(Stack, { spacing: 1, sx: { p: 1, minHeight: 100 }, children: [_jsxs(Stack, { direction: "row", spacing: 1, alignItems: "center", children: [_jsx(Typography, { variant: "h6", children: t(view?.title) || _jsx(Skeleton, { variant: "text", height: "2em", width: "100px" }) }), _jsx(IconButton, { size: "small", component: Link, disabled: !view, to: view ? buildViewUrl(view) : '', onClick: () => onClick(view.query), children: _jsx(OpenInNew, { fontSize: "small" }) })] }), loading ? (_jsxs(_Fragment, { children: [_jsx(Skeleton, { height: 150, width: "100%", variant: "rounded" }), _jsx(Skeleton, { height: 160, width: "100%", variant: "rounded" }), _jsx(Skeleton, { height: 140, width: "100%", variant: "rounded" })] })) : records.length > 0 ? (_jsx(RecordContextMenu, { getSelectedId: getSelectedId, children: records.map((r) => (_jsx(Card, { id: r.howler.id, variant: "outlined", sx: { cursor: 'pointer' }, onClick: () => navigate(`/hits/${r.howler.id}`), children: _jsx(CardContent, { children: r.__index == 'hit' ? (_jsx(HitBanner, { layout: HitLayout.DENSE, hit: r })) : (_jsx(ObservableCard, { observable: r })) }) }, r.howler.id))) })) : (_jsx(AppListEmpty, {}))] }) }));
+    return (_jsx(Card, { variant: "outlined", sx: { height: '100%' }, children: _jsxs(Stack, { spacing: 1, sx: { p: 1, minHeight: 100 }, children: [_jsxs(Stack, { direction: "row", spacing: 1, alignItems: "center", children: [_jsx(Typography, { variant: "h6", children: t(view?.title) || _jsx(Skeleton, { variant: "text", height: "2em", width: "100px" }) }), _jsx(IconButton, { size: "small", component: Link, disabled: !view, to: view ? buildViewUrl(view) : '', onClick: () => onClick(view.query), children: _jsx(OpenInNew, { fontSize: "small" }) })] }), loading ? (_jsxs(_Fragment, { children: [_jsx(Skeleton, { height: 150, width: "100%", variant: "rounded" }), _jsx(Skeleton, { height: 160, width: "100%", variant: "rounded" }), _jsx(Skeleton, { height: 140, width: "100%", variant: "rounded" })] })) : records.length > 0 ? (_jsx(RecordContextMenu, { getSelectedId: getSelectedId, children: records.map((r) => (_jsx(Card, { id: r.howler.id, variant: "outlined", sx: { cursor: 'pointer' }, onClick: () => navigate(`/hits/${r.howler.id}`), children: _jsx(CardContent, { children: r.__index == 'hit' ? (_jsx(HitBanner, { layout: HitLayout.DENSE, hit: r })) : (_jsx(EventCard, { event: r })) }) }, r.howler.id))) })) : (_jsx(AppListEmpty, {}))] }) }));
 };
 export default ViewCard;

package/components/routes/views/ViewComposer.js

@@ -16,9 +16,9 @@ import VSBox from '@cccsaurora/howler-ui/components/elements/addons/layout/vsbox
 import VSBoxContent from '@cccsaurora/howler-ui/components/elements/addons/layout/vsbox/VSBoxContent';
 import VSBoxHeader from '@cccsaurora/howler-ui/components/elements/addons/layout/vsbox/VSBoxHeader';
 import SearchTotal from '@cccsaurora/howler-ui/components/elements/addons/search/SearchTotal';
+import EventCard from '@cccsaurora/howler-ui/components/elements/event/EventCard';
 import HitCard from '@cccsaurora/howler-ui/components/elements/hit/HitCard';
 import { HitLayout } from '@cccsaurora/howler-ui/components/elements/hit/HitLayout';
-import ObservableCard from '@cccsaurora/howler-ui/components/elements/observable/ObservableCard';
 import useMyApi from '@cccsaurora/howler-ui/components/hooks/useMyApi';
 import { useMyLocalStorageItem } from '@cccsaurora/howler-ui/components/hooks/useMyLocalStorage';
 import useMySnackbar from '@cccsaurora/howler-ui/components/hooks/useMySnackbar';
@@ -199,6 +199,6 @@ const ViewComposer = () => {
                                             fontSize: '0.9em',
                                             fontStyle: 'italic',
                                             mb: 0.5
-                                        }), variant: "body2", children: t('hit.search.prompt') }), _jsx(RecordQuery, { triggerSearch: search, searching: searching, onChange: (_query, isDirty) => setIsSearchDirty(isDirty) }), _jsxs(Stack, { direction: "row", spacing: 1, children: [_jsx(IndexPicker, {}), _jsx(HitSort, {}), _jsx(SearchSpan, { omitCustom: true }), _jsx("div", { style: { flex: 1 } }), _jsxs(Stack, { spacing: 1, direction: "row", alignItems: "center", sx: { flex: '0 !important', minWidth: '300px' }, children: [_jsx(Typography, { component: "span", children: t('view.settings.advance_on_triage') }), _jsx(Tooltip, { title: t('view.settings.advance_on_triage.description'), children: _jsx(HelpOutline, { sx: { fontSize: '16px' } }) }), _jsx(Checkbox, { size: "small", checked: advanceOnTriage, onChange: (_event, checked) => setAdvanceOnTriage(checked) })] })] }), response?.total ? (_jsx(SearchTotal, { total: response.total, pageLength: response.items.length, offset: response.offset, sx: theme => ({ color: theme.palette.text.secondary, fontSize: '0.9em', fontStyle: 'italic' }) })) : null, _jsx(LinearProgress, { sx: [!searching && { opacity: 0 }] })] }) }), _jsx(VSBoxContent, { children: _jsxs(Stack, { spacing: 1, children: [!response?.total && _jsx(AppListEmpty, {}), response?.items.map(record => record.__index === 'hit' ? (_jsx(HitCard, { id: record.howler.id, layout: HitLayout.DENSE }, record.howler.id)) : (_jsx(ObservableCard, { observable: record }, record.howler.id)))] }) })] }) }) }) }));
+                                        }), variant: "body2", children: t('hit.search.prompt') }), _jsx(RecordQuery, { triggerSearch: search, searching: searching, onChange: (_query, isDirty) => setIsSearchDirty(isDirty) }), _jsxs(Stack, { direction: "row", spacing: 1, children: [_jsx(IndexPicker, {}), _jsx(HitSort, {}), _jsx(SearchSpan, { omitCustom: true }), _jsx("div", { style: { flex: 1 } }), _jsxs(Stack, { spacing: 1, direction: "row", alignItems: "center", sx: { flex: '0 !important', minWidth: '300px' }, children: [_jsx(Typography, { component: "span", children: t('view.settings.advance_on_triage') }), _jsx(Tooltip, { title: t('view.settings.advance_on_triage.description'), children: _jsx(HelpOutline, { sx: { fontSize: '16px' } }) }), _jsx(Checkbox, { size: "small", checked: advanceOnTriage, onChange: (_event, checked) => setAdvanceOnTriage(checked) })] })] }), response?.total ? (_jsx(SearchTotal, { total: response.total, pageLength: response.items.length, offset: response.offset, sx: theme => ({ color: theme.palette.text.secondary, fontSize: '0.9em', fontStyle: 'italic' }) })) : null, _jsx(LinearProgress, { sx: [!searching && { opacity: 0 }] })] }) }), _jsx(VSBoxContent, { children: _jsxs(Stack, { spacing: 1, children: [!response?.total && _jsx(AppListEmpty, {}), response?.items.map(record => record.__index === 'hit' ? (_jsx(HitCard, { id: record.howler.id, layout: HitLayout.DENSE }, record.howler.id)) : (_jsx(EventCard, { event: record }, record.howler.id)))] }) })] }) }) }) }));
 };
 export default ViewComposer;

package/locales/en/translation.json

@@ -188,7 +188,7 @@
     "hit.header.threat": "Threat",
     "hit.header.view.case": "View case {{id}}",
     "hit.header.view.hit": "View hit {{id}}",
-    "hit.header.view.observable": "View observable {{id}}",
+    "hit.header.view.event": "View event {{id}}",
     "hit.header.votes": "Votes: ",
     "hit.howler.related": "{{count}} related records",
     "hit.label": "Labels",
@@ -233,7 +233,7 @@
     "hit.related.tab.case": "Cases",
     "hit.related.tab.hit": "Hits",
     "hit.related.tab.links": "Links",
-    "hit.related.tab.observable": "Observables",
+    "hit.related.tab.event": "Events",
     "hit.search.aggregate.button": "Create Summary",
     "hit.search.button": "Perform search",
     "hit.search.custom": "Custom Sort",
@@ -244,7 +244,7 @@
     "hit.search.filter.values": "Values",
     "hit.search.index": "Indexes",
     "hit.search.index.hit": "Hits",
-    "hit.search.index.observable": "Observables",
+    "hit.search.index.event": "Events",
     "hit.search.invalid": "Invalid Query",
     "hit.search.keyboard": "Keyboard shortcuts",
     "hit.search.keyboard.no_shortcuts": "No shortcuts",
@@ -368,7 +368,7 @@
     "no.data": "No Data",
     "none": "None",
     "normal": "Normal Priority",
-    "observable.open": "Open Observable",
+    "event.open": "Open Event",
     "on": "on",
     "open": "Open",
     "operations.add_label": "Add Label",

package/locales/fr/translation.json

@@ -188,7 +188,7 @@
     "hit.header.threat": "Menace",
     "hit.header.view.case": "Voir le cas {{id}}",
     "hit.header.view.hit": "Voir l'alerte {{id}}",
-    "hit.header.view.observable": "Voir l'observable {{id}}",
+    "hit.header.view.event": "Voir l'événement {{id}}",
     "hit.header.votes": "Votes: ",
     "hit.howler.related": "{{count}} enregistrements associés",
     "hit.label": "Étiquettes",
@@ -233,7 +233,7 @@
     "hit.related.tab.case": "Cas",
     "hit.related.tab.hit": "Alertes",
     "hit.related.tab.links": "Liens",
-    "hit.related.tab.observable": "Observables",
+    "hit.related.tab.event": "Événements",
     "hit.search.aggregate.button": "Créer un sommaire",
     "hit.search.button": "Effectuer une recherche",
     "hit.search.custom": "Triage personnalisé",
@@ -244,7 +244,7 @@
     "hit.search.filter.values": "Valeurs",
     "hit.search.index": "Indexes",
     "hit.search.index.hit": "Hits",
-    "hit.search.index.observable": "Observables",
+    "hit.search.index.event": "Événements",
     "hit.search.invalid": "Requête invalide",
     "hit.search.keyboard": "Raccourcis clavier",
     "hit.search.keyboard.no_shortcuts": "Pas de raccourcis",
@@ -368,7 +368,7 @@
     "no.data": "Aucune donnée",
     "none": "Rien",
     "normal": "Priorité normale",
-    "observable.open": "Ouvrir observable",
+    "event.open": "Ouvrir événement",
     "on": "sur",
     "open": "Ouvert",
     "operations.add_label": "Ajouter un label",

package/models/entities/generated/ECSEvent.d.ts

@@ -0,0 +1,31 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ECSEvent {
+  action?: string;
+  category?: string[];
+  code?: string;
+  count?: number;
+  created?: string;
+  dataset?: string;
+  duration?: number;
+  end?: string;
+  hash?: string;
+  id?: string;
+  ingested?: string;
+  kind?: string;
+  module?: string;
+  original?: string;
+  outcome?: string;
+  provider?: string;
+  reason?: string;
+  reference?: string;
+  risk_score?: number;
+  risk_score_norm?: number;
+  sequence?: number;
+  severity?: number;
+  start?: string;
+  timezone?: string;
+  type?: string[];
+  url?: string;
+}

package/models/entities/generated/Event.d.ts

@@ -1,31 +1,85 @@
+import type { Agent } from './Agent';
+import type { Assemblyline } from './Assemblyline';
+import type { Aws } from './Aws';
+import type { Azure } from './Azure';
+import type { Cbs } from './Cbs';
+import type { Clue } from './Clue';
+import type { Container } from './Container';
+import type { Dns } from './Dns';
+import type { Ecs } from './Ecs';
+import type { ECSEvent } from './ECSEvent';
+import type { Error } from './Error';
+import type { EventCloud } from './EventCloud';
+import type { EventDestination } from './EventDestination';
+import type { EventEmail } from './EventEmail';
+import type { EventFile } from './EventFile';
+import type { EventHowler } from './EventHowler';
+import type { EventHttp } from './EventHttp';
+import type { EventObserver } from './EventObserver';
+import type { EventOrganization } from './EventOrganization';
+import type { EventProcess } from './EventProcess';
+import type { EventSource } from './EventSource';
+import type { EventThreat } from './EventThreat';
+import type { EventTls } from './EventTls';
+import type { Faas } from './Faas';
+import type { Gcp } from './Gcp';
+import type { Group } from './Group';
+import type { Host } from './Host';
+import type { Interface } from './Interface';
+import type { Network } from './Network';
+import type { Registry } from './Registry';
+import type { Related } from './Related';
+import type { Rule } from './Rule';
+import type { Server } from './Server';
+import type { Url } from './Url';
+import type { User } from './User';
+import type { UserAgent } from './UserAgent';
+import type { Vulnerability } from './Vulnerability';
+
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
 export interface Event {
-  action?: string;
-  category?: string[];
-  code?: string;
-  count?: number;
-  created?: string;
-  dataset?: string;
-  duration?: number;
-  end?: string;
-  hash?: string;
-  id?: string;
-  ingested?: string;
-  kind?: string;
-  module?: string;
-  original?: string;
-  outcome?: string;
-  provider?: string;
-  reason?: string;
-  reference?: string;
-  risk_score?: number;
-  risk_score_norm?: number;
-  sequence?: number;
-  severity?: number;
-  start?: string;
-  timezone?: string;
-  type?: string[];
-  url?: string;
+  __index: 'event';
+  agent?: Agent;
+  assemblyline?: Assemblyline;
+  aws?: Aws;
+  azure?: Azure;
+  cbs?: Cbs;
+  cloud?: EventCloud;
+  clue?: Clue;
+  container?: Container;
+  destination?: EventDestination;
+  dns?: Dns;
+  ecs?: Ecs;
+  email?: EventEmail;
+  error?: Error;
+  event?: ECSEvent;
+  faas?: Faas;
+  file?: EventFile;
+  gcp?: Gcp;
+  group?: Group;
+  host?: Host;
+  howler: EventHowler;
+  http?: EventHttp;
+  interface?: Interface;
+  labels?: { [index: string]: string };
+  message?: string;
+  network?: Network;
+  observer?: EventObserver;
+  organization?: EventOrganization;
+  process?: EventProcess;
+  registry?: Registry;
+  related?: Related;
+  rule?: Rule;
+  server?: Server;
+  source?: EventSource;
+  tags?: string[];
+  threat?: EventThreat;
+  timestamp: string;
+  tls?: EventTls;
+  url?: Url;
+  user?: User;
+  user_agent?: UserAgent;
+  vulnerability?: Vulnerability;
 }

package/models/entities/generated/{ObservableCloud.d.ts → EventCloud.d.ts}

@@ -7,7 +7,7 @@ import type { Service } from './Service';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableCloud {
+export interface EventCloud {
   account?: CloudAccount;
   availability_zone?: string;
   instance?: Instance;

package/models/entities/generated/{ObservableDestination.d.ts → EventDestination.d.ts}

@@ -7,7 +7,7 @@ import type { User } from './User';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableDestination {
+export interface EventDestination {
   address?: string;
   autonomous_systems?: AutonomousSystems;
   bytes?: number;

package/models/entities/generated/{ObservableEmail.d.ts → EventEmail.d.ts}

@@ -10,7 +10,7 @@ import type { To } from './To';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableEmail {
+export interface EventEmail {
   attachments?: EmailAttachment[];
   bcc?: Bcc;
   cc?: Cc;

package/models/entities/generated/{ObservableFile.d.ts → EventFile.d.ts}

@@ -6,7 +6,7 @@ import type { Pe } from './Pe';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableFile {
+export interface EventFile {
   accessed?: string;
   attributes?: string[];
   code_signature?: CodeSignature;

package/models/entities/generated/{ObservableHowler.d.ts → EventHowler.d.ts}

@@ -10,7 +10,7 @@ import type { Votes } from './Votes';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableHowler {
+export interface EventHowler {
   analytic: string;
   assessment?: string;
   comment?: HowlerComment[];

package/models/entities/generated/{ObservableHttp.d.ts → EventHttp.d.ts}

@@ -4,7 +4,7 @@ import type { Request } from './Request';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableHttp {
+export interface EventHttp {
   request?: Request;
   response?: HttpResponse;
   version?: string;

package/models/entities/generated/{ObservableObserver.d.ts → EventObserver.d.ts}

@@ -5,7 +5,7 @@ import type { ObserverIngress } from './ObserverIngress';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableObserver {
+export interface EventObserver {
   egress?: Egress;
   hostname?: string;
   ingress?: ObserverIngress;

package/models/entities/generated/{ObservableOrganization.d.ts → EventOrganization.d.ts}

@@ -1,7 +1,7 @@
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableOrganization {
+export interface EventOrganization {
   id?: string;
   name?: string;
 }

package/models/entities/generated/{ObservableProcess.d.ts → EventProcess.d.ts}

@@ -8,7 +8,7 @@ import type { ProcessUser } from './ProcessUser';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableProcess {
+export interface EventProcess {
   args?: string[];
   args_count?: number;
   code_signature?: CodeSignature;

package/models/entities/generated/{ObservableSource.d.ts → EventSource.d.ts}

@@ -7,7 +7,7 @@ import type { User } from './User';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableSource {
+export interface EventSource {
   address?: string;
   autonomous_systems?: AutonomousSystems;
   bytes?: number;

package/models/entities/generated/{ObservableThreat.d.ts → EventThreat.d.ts}

@@ -9,7 +9,7 @@ import type { ThreatTechnique } from './ThreatTechnique';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableThreat {
+export interface EventThreat {
   enrichments?: ThreatEnrichment[];
   feed?: Feed;
   framework?: string;

package/models/entities/generated/{ObservableTls.d.ts → EventTls.d.ts}

@@ -4,7 +4,7 @@ import type { TlsServer } from './TlsServer';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface ObservableTls {
+export interface EventTls {
   client?: Client;
   server?: TlsServer;
   version?: string;

package/models/entities/generated/Hit.d.ts

@@ -9,9 +9,9 @@ import type { Container } from './Container';
 import type { Destination } from './Destination';
 import type { Dns } from './Dns';
 import type { Ecs } from './Ecs';
+import type { ECSEvent } from './ECSEvent';
 import type { Email } from './Email';
 import type { Error } from './Error';
-import type { Event } from './Event';
 import type { Faas } from './Faas';
 import type { Gcp } from './Gcp';
 import type { Group } from './Group';
@@ -55,7 +55,7 @@ export interface Hit {
   ecs?: Ecs;
   email?: Email;
   error?: Error;
-  event?: Event;
+  event?: ECSEvent;
   faas?: Faas;
   file?: HitFile;
   gcp?: Gcp;

package/models/entities/generated/Rule.d.ts

@@ -8,5 +8,5 @@ export interface Rule {
   author?: string;
   enabled?: boolean;
   timeframe?: string;
-  indexes?: ('hit' | 'observable')[];
+  indexes?: ('hit' | 'event')[];
 }

package/package.json

@@ -96,7 +96,7 @@
     "internal-slot": "1.0.7"
   },
   "type": "module",
-  "version": "2.19.0-cases.1064",
+  "version": "2.19.0-cases.1095",
   "exports": {
     "./i18n": "./i18n.js",
     "./index.css": "./index.css",
@@ -183,11 +183,11 @@
     "./components/routes/action/*": "./components/routes/action/*.js",
     "./components/routes/advanced/*": "./components/routes/advanced/*.js",
     "./components/routes/analytics/*": "./components/routes/analytics/*.js",
-    "./components/routes/observables/*": "./components/routes/observables/*.js",
     "./components/routes/admin/*": "./components/routes/admin/*.js",
     "./components/routes/overviews/*": "./components/routes/overviews/*.js",
     "./components/routes/templates/*": "./components/routes/templates/*.js",
     "./components/routes/views/*": "./components/routes/views/*.js",
+    "./components/routes/events/*": "./components/routes/events/*.js",
     "./components/routes/dossiers/*": "./components/routes/dossiers/*.js",
     "./components/routes/hits/*": "./components/routes/hits/*.js",
     "./components/routes/cases/*": "./components/routes/cases/*.js",
@@ -217,12 +217,12 @@
     "./components/app/drawers/*": "./components/app/drawers/*.js",
     "./components/app/hooks/*": "./components/app/hooks/*.js",
     "./components/elements/view/*": "./components/elements/view/*.js",
+    "./components/elements/event/*": "./components/elements/event/*.js",
     "./components/elements/case/*": "./components/elements/case/*.js",
     "./components/elements/record/*": "./components/elements/record/*.js",
     "./components/elements/display/*": "./components/elements/display/*.js",
     "./components/elements/hit/*": "./components/elements/hit/*.js",
     "./components/elements/addons/*": "./components/elements/addons/*.js",
-    "./components/elements/observable/*": "./components/elements/observable/*.js",
     "./components/elements/display/markdownPlugins/*.md": "./components/elements/display/markdownPlugins/*.md.js",
     "./components/elements/display/features/*": "./components/elements/display/features/*.js",
     "./components/elements/display/icons/*": "./components/elements/display/icons/*.js",

package/plugins/clue/utils.d.ts

@@ -1,3 +1,3 @@
+import type { Event } from '@cccsaurora/howler-ui/models/entities/generated/Event';
 import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
-import type { Observable } from '@cccsaurora/howler-ui/models/entities/generated/Observable';
-export declare const useType: (hit?: Hit | Observable, field?: string, value?: string) => any;
+export declare const useType: (hit?: Hit | Event, field?: string, value?: string) => any;

package/tests/server-handlers.js

@@ -31,7 +31,7 @@ export const MOCK_RESPONSES = {
         rows: 1
     },
     '/api/v1/analytic': [createMockAnalytic()],
-    '/api/v2/search/hit,observable': {
+    '/api/v2/search/hit,event': {
         items: [],
         total: 0,
         rows: 0