POC Spike Fleet Management #6935

Machi3mfl · 2024-08-21T13:32:20Z

Description

This PR, creates the POC of the Fleet Management app

Closes

Spikes:

POCs

Configuration

Add index templates

PUT _index_template/fleet-agents-default
{
  "index_patterns": [
    "fleet-agents-default"
  ],
  "template": {
    "mappings": {
      "date_detection": false,
      "dynamic_templates": [
        {
          "strings_as_keyword": {
            "mapping": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "match_mapping_type": "string"
          }
        }
      ],
      "properties": {
        "agent": {
          "properties": {
            "build": {
              "properties": {
                "original": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "ephemeral_id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "name": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "last_login": {
              "type": "date"
            },
            "version": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "groups": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "node_name": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "host": {
          "properties": {
            "architecture": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "checksum": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "hostname": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "ip": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "scan_time": {
              "type": "date"
            },
            "sysname": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "os": {
              "properties": {
                "full": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "kernel": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "platform": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "type": {
                  "ignore_above": 1024,
                  "type": "keyword"
                },
                "version": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "wazuh": {
          "properties": {
            "cluster": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "manager": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "node": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        }
      }
    },
    "settings": {
      "index": {
        "codec": "best_compression",
        "mapping": {
          "total_fields": {
            "limit": 1000
          }
        },
        "refresh_interval": "2s"
      }
    }
  }
}

PUT _index_template/inventory-networks-default
{
  "index_patterns": [
    "inventory-networks-default"
  ],
  "template": {
    "mappings": {
      "date_detection": false,
      "dynamic_templates": [
        {
          "strings_as_keyword": {
            "mapping": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "match_mapping_type": "string"
          }
        }
      ],
      "properties": {
        "agent": {
          "properties": {
            "id": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "network": {
          "properties": {
            "name": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "MAC": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "state": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "mtu": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "type": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "wazuh": {
          "properties": {
            "cluster": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "manager": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "node": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        }
      }
    },
    "settings": {
      "index": {
        "codec": "best_compression",
        "mapping": {
          "total_fields": {
            "limit": 1000
          }
        },
        "refresh_interval": "2s"
      }
    }
  }
}

PUT _index_template/inventory-system-default
{
  "index_patterns": [
    "inventory-system-default"
  ],
  "template": {
      "mappings": {
        "date_detection": false,
        "dynamic_templates": [
          {
            "strings_as_keyword": {
              "mapping": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "match_mapping_type": "string"
            }
          }
        ],
        "properties": {
          "agent": {
            "properties": {
              "id": {
                "ignore_above": 1024,
                "type": "keyword"
              }
            }
          },
          "host": {
            "properties": {
              "architecture": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "checksum": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "hostname": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "ip": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "scan_time": {
                "type": "date"
              },
              "sysname": {
                "ignore_above": 1024,
                "type": "keyword"
              },
              "os": {
                "properties": {
                  "full": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  },
                  "kernel": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  },
                  "name": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  },
                  "platform": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  },
                  "type": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  },
                  "version": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  }
                }
              }
            }
          },
          "wazuh": {
            "properties": {
              "cluster": {
                "properties": {
                  "name": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  }
                }
              },
              "manager": {
                "properties": {
                  "name": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  }
                }
              },
              "node": {
                "properties": {
                  "name": {
                    "ignore_above": 1024,
                    "type": "keyword"
                  }
                }
              }
            }
          }
        }
      },
      "settings": {
        "index": {
          "codec": "best_compression",
          "mapping": {
            "total_fields": {
              "limit": 1000
            }
          },
          "refresh_interval": "2s"
        }
      }
    }    
}

PUT _index_template/wazuh-fleet-groups-default
{
  "index_patterns": ["wazuh-fleet-groups-default"],
  "template": {
    "mappings": {
      "date_detection": false,
      "dynamic_templates": [
        {
          "strings_as_keyword": {
            "mapping": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "match_mapping_type": "string"
          }
        }
      ],
      "properties": {
        "id": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "name": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "agents": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "wazuh": {
          "properties": {
            "cluster": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "manager": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "node": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        }
      }
    },
    "settings": {
      "index": {
        "codec": "best_compression",
        "mapping": {
          "total_fields": {
            "limit": 1000
          }
        },
        "refresh_interval": "2s"
      }
    }
  }
}

PUT _index_template/commands-default
{
  "index_patterns": [
    "commands-default"
  ],
  "template": {
    "mappings": {
      "dynamic": true,
      "date_detection": false,
      "dynamic_templates": [
        {
          "strings_as_keyword": {
            "mapping": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "match_mapping_type": "string"
          }
        }
      ],
      "properties": {
        "message": {
          "type": "text"
        },
        "process": {
          "properties": {
            "command_line": {
              "fields": {
                "text": {
                  "type": "text"
                }
              },
              "type": "text"
            },
            "end": {
              "type": "date"
            },
            "entity_id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "name": {
              "fields": {
                "text": {
                  "type": "text"
                }
              },
              "ignore_above": 1024,
              "type": "keyword"
            },
            "start": {
              "type": "date"
            }
          }
        },
        "tags": {
          "ignore_above": 1024,
          "type": "keyword"
        },
        "wazuh": {
          "properties": {
            "cluster": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "manager": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            },
            "node": {
              "properties": {
                "name": {
                  "ignore_above": 1024,
                  "type": "keyword"
                }
              }
            }
          }
        },
        "agent": {
          "properties": {
            "id": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        },
        "status": {
          "type": "keyword"
        },
        "info": {
          "type": "text"
        },
        "args": {
          "type": "text"
        }
      }
    },
    "settings": {
      "index": {
        "codec": "best_compression",
        "mapping": {
          "total_fields": {
            "limit": 1000
          }
        },
        "refresh_interval": "2s"
      }
    }
  }
}

Run /scripts

wazuh-fleet-generator
wazuh-fleet-groups-generator
wazuh-fleet-commands-generator

Agents section

screen-capture.webm

Screen.Recording.2024-08-21.at.15.35.42.mov

Groups section

Screen.Recording.2024-08-21.at.15.36.23.mov

Commands

Check List

All tests pass
- yarn test:jest
New functionality includes testing.
New functionality has been documented.
Update CHANGELOG.md
Commits are signed per the DCO using --signoff

github-actions · 2024-08-22T11:11:51Z

Wazuh Core plugin code coverage (Jest) test	%	values
Statements	46.02%	( 400 / 869 )
Branches	41.97%	( 157 / 374 )
Functions	44.01%	( 136 / 309 )
Lines	46.22%	( 398 / 861 )

github-actions · 2024-08-22T11:12:02Z

Wazuh Check Updates plugin code coverage (Jest) test	%	values
Statements	76.44%	( 172 / 225 )
Branches	58.65%	( 61 / 104 )
Functions	61.7%	( 29 / 47 )
Lines	76.44%	( 172 / 225 )

github-actions · 2024-08-22T11:16:28Z

Main plugin code coverage (Jest) test	%	values
Statements	13.6%	( 4030 / 29631 )
Branches	9.08%	( 1755 / 19325 )
Functions	13.23%	( 947 / 7155 )
Lines	13.77%	( 3928 / 28515 )

asteriscos

LGTM 🟢

lucianogorza and others added 19 commits June 25, 2024 17:48

New plugin wazuh-fleet

b9a9622

Implement wazuh-fleet sidebar and fleet list components

043ed39

Add agents grid

651a930

Add fields to script

b400b57

Add visualizations in agents summary

98dd902

Improve agent list

b348e92

Add agent details page and flyout

6dfe212

Add groups index script

4a8f63a

Add groups data source

e7b8299

Add groups components to router

ce36179

Add group table

de74e7f

Add command index script

0dc8f97

Add commands list in fleet management

198952c

Fix get agent details

56aea92

Improve and fix minor issues

764eeb0

Add host and networks to script and improve agent view

1be6176

Merge branch 'master' into enhancement/209-spike-fleet-management

a75c6b2

Apply prettier

33faa20

Apply prettier

5da1a62

Machi3mfl linked an issue Aug 21, 2024 that may be closed by this pull request

Spike - agent comms API UX wazuh/wazuh-dashboard#209

Closed

9 tasks

asteriscos marked this pull request as ready for review August 22, 2024 09:51

asteriscos added 3 commits August 22, 2024 11:56

Upgrade axios dependency

9e98650

Prettier

9cd39bd

Fix agent.id field in commands columns

921e691

asteriscos assigned Machi3mfl Aug 22, 2024

asteriscos approved these changes Aug 22, 2024

View reviewed changes

asteriscos merged commit a1fc490 into master Aug 22, 2024
5 checks passed

asteriscos deleted the enhancement/209-spike-fleet-management branch August 22, 2024 11:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

POC Spike Fleet Management #6935

POC Spike Fleet Management #6935

Machi3mfl commented Aug 21, 2024 •

edited by asteriscos

Loading

github-actions bot commented Aug 22, 2024

github-actions bot commented Aug 22, 2024

github-actions bot commented Aug 22, 2024

asteriscos left a comment

POC Spike Fleet Management #6935

POC Spike Fleet Management #6935

Conversation

Machi3mfl commented Aug 21, 2024 • edited by asteriscos Loading

Description

Closes

Configuration

Add index templates

Run /scripts

Agents section

Groups section

Commands

Check List

github-actions bot commented Aug 22, 2024

github-actions bot commented Aug 22, 2024

github-actions bot commented Aug 22, 2024

asteriscos left a comment

Choose a reason for hiding this comment

Machi3mfl commented Aug 21, 2024 •

edited by asteriscos

Loading