Skip to content

Conversation

@maximpn
Copy link
Contributor

@maximpn maximpn commented Sep 9, 2025

Backport

This will backport the following commits from main to 8.19:

Questions ?

Please refer to the Backport tool documentation

…lastic#232776)

**Resolves: elastic#202068

## Summary

This PR implements [prebuilt rules customization test plan](https://github.com/elastic/kibana/blob/main/x-pack/solutions/security/plugins/security_solution/docs/testing/test_plans/detection_response/prebuilt_rules/prebuilt_rule_customization.md).

## Details

The major part of the [prebuilt rules customization test plan](https://github.com/elastic/kibana/blob/main/x-pack/solutions/security/plugins/security_solution/docs/testing/test_plans/detection_response/prebuilt_rules/prebuilt_rule_customization.md) had been implemented already so this PR adds missing test scenario implementations and refactors the existing tests. In particular the following has been done

- Prebuilt rules reverting customization test plan has been extracted
- Existing prebuilt rule customization tests have been refactored to improve naming and remove duplicates
- Test scenario implementations for missing base version have been added
- Test scenario implementations for insufficient license have been added
- Per field customization integration tests now also verify the customization can be reverted by saving original field value

Extended test coverage is crucial for making sure changes suggested in elastic#230856 don't bring in new issues.

## Flaky test runner

- [Prebuilt rule customization integration tests](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9251) (200 runs)
- [Prebuilt rule customization e2e tests](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9254) (100 runs)

(cherry picked from commit 57d96cf)

# Conflicts:
#	x-pack/solutions/security/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/customization_disabled/customization/calculate_is_customized.ts
#	x-pack/solutions/security/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/customization_enabled/customization/calculate_is_customized.ts
#	x-pack/solutions/security/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/customization_enabled/customization/customize_prebuilt_rules.ts
@maximpn maximpn added the backport This PR is a backport of another PR label Sep 9, 2025
@maximpn maximpn enabled auto-merge (squash) September 9, 2025 19:16
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

✅ unchanged

History

@maximpn maximpn merged commit 6f247c9 into elastic:8.19 Sep 10, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants