[Rules migration] Add Integrations column (#11387)

x-pack/solutions/security/plugins/security_solution/common/api/quickstart_client.gen.ts

@@ -367,6 +367,8 @@ import type {
   GetRuleMigrationRequestQueryInput,
   GetRuleMigrationRequestParamsInput,
   GetRuleMigrationResponse,
+  GetRuleMigrationIntegrationsRequestParamsInput,
+  GetRuleMigrationIntegrationsResponse,
   GetRuleMigrationPrebuiltRulesRequestParamsInput,
   GetRuleMigrationPrebuiltRulesResponse,
   GetRuleMigrationResourcesRequestQueryInput,
@@ -1455,6 +1457,24 @@ finalize it.
       })
       .catch(catchAxiosErrorFormatAndThrow);
   }
+  /**
+   * Retrieves all related integrations
+   */
+  async getRuleMigrationIntegrations(props: GetRuleMigrationIntegrationsProps) {
+    this.log.info(`${new Date().toISOString()} Calling API GetRuleMigrationIntegrations`);
+    return this.kbnClient
+      .request<GetRuleMigrationIntegrationsResponse>({
+        path: replaceParams(
+          '/internal/siem_migrations/rules/{migration_id}/integrations',
+          props.params
+        ),
+        headers: {
+          [ELASTIC_HTTP_VERSION_HEADER]: '1',
+        },
+        method: 'GET',
+      })
+      .catch(catchAxiosErrorFormatAndThrow);
+  }
   /**
    * Retrieves all available prebuilt rules (installed and installable)
    */
@@ -2459,6 +2479,9 @@ export interface GetRuleMigrationProps {
   query: GetRuleMigrationRequestQueryInput;
   params: GetRuleMigrationRequestParamsInput;
 }
+export interface GetRuleMigrationIntegrationsProps {
+  params: GetRuleMigrationIntegrationsRequestParamsInput;
+}
 export interface GetRuleMigrationPrebuiltRulesProps {
   params: GetRuleMigrationPrebuiltRulesRequestParamsInput;
 }

x-pack/solutions/security/plugins/security_solution/common/siem_migrations/constants.ts

@@ -25,6 +25,8 @@ export const SIEM_RULE_MIGRATION_INSTALL_TRANSLATED_PATH =
   `${SIEM_RULE_MIGRATION_PATH}/install_translated` as const;
 export const SIEM_RULE_MIGRATIONS_PREBUILT_RULES_PATH =
   `${SIEM_RULE_MIGRATION_PATH}/prebuilt_rules` as const;
+export const SIEM_RULE_MIGRATIONS_INTEGRATIONS_PATH =
+  `${SIEM_RULE_MIGRATION_PATH}/integrations` as const;
 
 export const SIEM_RULE_MIGRATION_RESOURCES_PATH = `${SIEM_RULE_MIGRATION_PATH}/resources` as const;
 export const SIEM_RULE_MIGRATION_RESOURCES_MISSING_PATH =

x-pack/solutions/security/plugins/security_solution/common/siem_migrations/model/api/rules/rule_migration.gen.ts

@@ -30,6 +30,7 @@ import {
 } from '../../rule_migration.gen';
 import { NonEmptyString } from '../../../../api/model/primitives.gen';
 import { ConnectorId, LangSmithOptions } from '../../common.gen';
+import { RelatedIntegration } from '../../../../api/detection_engine/model/rule_schema/common_attributes.gen';
 
 export type CreateRuleMigrationRequestParams = z.infer<typeof CreateRuleMigrationRequestParams>;
 export const CreateRuleMigrationRequestParams = z.object({
@@ -79,6 +80,24 @@ export const GetRuleMigrationResponse = z.object({
   data: z.array(RuleMigration),
 });
 
+export type GetRuleMigrationIntegrationsRequestParams = z.infer<
+  typeof GetRuleMigrationIntegrationsRequestParams
+>;
+export const GetRuleMigrationIntegrationsRequestParams = z.object({
+  migration_id: NonEmptyString,
+});
+export type GetRuleMigrationIntegrationsRequestParamsInput = z.input<
+  typeof GetRuleMigrationIntegrationsRequestParams
+>;
+
+/**
+ * The map of related integrations, with the integration id as a key
+ */
+export type GetRuleMigrationIntegrationsResponse = z.infer<
+  typeof GetRuleMigrationIntegrationsResponse
+>;
+export const GetRuleMigrationIntegrationsResponse = z.object({}).catchall(RelatedIntegration);
+
 export type GetRuleMigrationPrebuiltRulesRequestParams = z.infer<
   typeof GetRuleMigrationPrebuiltRulesRequestParams
 >;

x-pack/solutions/security/plugins/security_solution/common/siem_migrations/model/api/rules/rule_migration.schema.yaml

@@ -396,6 +396,33 @@ paths:
                 additionalProperties:
                   $ref: '../../rule_migration.schema.yaml#/components/schemas/PrebuiltRuleVersion'
 
+  /internal/siem_migrations/rules/{migration_id}/integrations:
+    get:
+      summary: Retrieves all related integrations for a specific migration
+      operationId: GetRuleMigrationIntegrations
+      x-codegen-enabled: true
+      x-internal: true
+      description: Retrieves all related integrations
+      tags:
+        - SIEM Rule Migrations
+      parameters:
+        - name: migration_id
+          in: path
+          required: true
+          schema:
+            description: The migration id to retrieve related integrations for
+            $ref: '../../../../../common/api/model/primitives.schema.yaml#/components/schemas/NonEmptyString'
+      responses:
+        200:
+          description: Indicates that related integrations have been retrieved correctly.
+          content:
+            application/json:
+              schema:
+                type: object
+                description: The map of related integrations, with the integration id as a key
+                additionalProperties:
+                  $ref: '../../../../../common/api/detection_engine/model/rule_schema/common_attributes.schema.yaml#/components/schemas/RelatedIntegration'
+
   # Rule migration resources APIs
 
   /internal/siem_migrations/rules/{migration_id}/resources:

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/api/index.ts

@@ -23,6 +23,7 @@ import {
   SIEM_RULE_MIGRATION_RESOURCES_MISSING_PATH,
   SIEM_RULE_MIGRATION_RESOURCES_PATH,
   SIEM_RULE_MIGRATIONS_PREBUILT_RULES_PATH,
+  SIEM_RULE_MIGRATIONS_INTEGRATIONS_PATH,
 } from '../../../../common/siem_migrations/constants';
 import type {
   CreateRuleMigrationRequestBody,
@@ -39,6 +40,7 @@ import type {
   UpsertRuleMigrationResourcesResponse,
   GetRuleMigrationPrebuiltRulesResponse,
   UpdateRuleMigrationResponse,
+  GetRuleMigrationIntegrationsResponse,
 } from '../../../../common/siem_migrations/model/api/rules/rule_migration.gen';
 
 export interface GetRuleMigrationStatsParams {
@@ -279,6 +281,23 @@ export const getRuleMigrationsPrebuiltRules = async ({
   );
 };
 
+export interface GetRelatedIntegrationsParams {
+  /** `id` of the migration to get related integrations for */
+  migrationId: string;
+  /** Optional AbortSignal for cancelling request */
+  signal?: AbortSignal;
+}
+/** Retrieves related integrations for a specific migration. */
+export const getRelatedIntegrations = async ({
+  migrationId,
+  signal,
+}: GetRelatedIntegrationsParams): Promise<GetRuleMigrationIntegrationsResponse> => {
+  return KibanaServices.get().http.get<GetRuleMigrationIntegrationsResponse>(
+    replaceParams(SIEM_RULE_MIGRATIONS_INTEGRATIONS_PATH, { migration_id: migrationId }),
+    { version: '1', signal }
+  );
+};
+
 export interface UpdateRulesParams {
   /** The list of migration rules data to update */
   rulesToUpdate: UpdateRuleMigrationData[];

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/components/rules_table/index.tsx

@@ -18,6 +18,7 @@ import {
 } from '@elastic/eui';
 import React, { useCallback, useMemo, useState } from 'react';
 
+import type { RelatedIntegration, RuleResponse } from '../../../../../common/api/detection_engine';
 import { useAppToasts } from '../../../../common/hooks/use_app_toasts';
 import type { RuleMigration } from '../../../../../common/siem_migrations/model/rule_migration.gen';
 import { EmptyMigration } from './empty_migration';
@@ -33,6 +34,7 @@ import { BulkActions } from './bulk_actions';
 import { SearchField } from './search_field';
 import { RuleTranslationResult } from '../../../../../common/siem_migrations/constants';
 import * as i18n from './translations';
+import { useGetRelatedIntegrations } from '../../service/hooks/use_get_integrations';
 
 const DEFAULT_PAGE_SIZE = 10;
 const DEFAULT_SORT_FIELD = 'translation_result';
@@ -64,6 +66,9 @@ export const MigrationRulesTable: React.FC<MigrationRulesTableProps> = React.mem
     const { data: prebuiltRules = {}, isLoading: isPrebuiltRulesLoading } =
       useGetMigrationPrebuiltRules(migrationId);
 
+    const { integrations, isLoading: isIntegrationsLoading } =
+      useGetRelatedIntegrations(migrationId);
+
     const {
       data: { ruleMigrations, total } = { ruleMigrations: [], total: 0 },
       isLoading: isDataLoading,
@@ -180,7 +185,12 @@ export const MigrationRulesTable: React.FC<MigrationRulesTableProps> = React.mem
       [addError, installTranslatedMigrationRules]
     );
 
-    const isLoading = isStatsLoading || isPrebuiltRulesLoading || isDataLoading || isTableLoading;
+    const isLoading =
+      isStatsLoading ||
+      isPrebuiltRulesLoading ||
+      isIntegrationsLoading ||
+      isDataLoading ||
+      isTableLoading;
 
     const ruleActionsFactory = useCallback(
       (ruleMigration: RuleMigration, closeRulePreview: () => void) => {
@@ -221,29 +231,49 @@ export const MigrationRulesTable: React.FC<MigrationRulesTableProps> = React.mem
       [installSingleRule, isLoading]
     );
 
-    const getMigrationRule = useCallback(
+    const getMigrationRuleData = useCallback(
       (ruleId: string) => {
-        if (!isLoading && ruleMigrations.length) {
-          return ruleMigrations.find((item) => item.id === ruleId);
+        if (!isLoading && ruleMigrations.length && integrations) {
+          const ruleMigration = ruleMigrations.find((item) => item.id === ruleId);
+          let matchedPrebuiltRule: RuleResponse | undefined;
+          const relatedIntegrations: RelatedIntegration[] = [];
+          if (ruleMigration) {
+            // Find matched prebuilt rule if any and prioritize its installed version
+            const matchedPrebuiltRuleVersion = ruleMigration.elastic_rule?.prebuilt_rule_id
+              ? prebuiltRules[ruleMigration.elastic_rule.prebuilt_rule_id]
+              : undefined;
+            matchedPrebuiltRule =
+              matchedPrebuiltRuleVersion?.current ?? matchedPrebuiltRuleVersion?.target;
+
+            if (matchedPrebuiltRule?.related_integrations) {
+              relatedIntegrations.push(...matchedPrebuiltRule.related_integrations);
+            } else if (ruleMigration.elastic_rule?.integration_id) {
+              const integration = integrations[ruleMigration.elastic_rule.integration_id];
+              if (integration) {
+                relatedIntegrations.push(integration);
+              }
+            }
+          }
+          return { ruleMigration, matchedPrebuiltRule, relatedIntegrations };
         }
       },
-      [isLoading, ruleMigrations]
+      [integrations, isLoading, prebuiltRules, ruleMigrations]
     );
 
     const {
       migrationRuleDetailsFlyout: rulePreviewFlyout,
       openMigrationRuleDetails: openRulePreview,
     } = useMigrationRuleDetailsFlyout({
       isLoading,
-      prebuiltRules,
-      getMigrationRule,
+      getMigrationRuleData,
       ruleActionsFactory,
     });
 
     const rulesColumns = useMigrationRulesTableColumns({
       disableActions: isTableLoading,
       openMigrationRuleDetails: openRulePreview,
       installMigrationRule: installSingleRule,
+      getMigrationRuleData,
     });
 
     return (

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/components/rules_table_columns/author.tsx

@@ -34,6 +34,7 @@ export const createAuthorColumn = (): TableColumn => {
       return <Author isPrebuiltRule={!!rule.elastic_rule?.prebuilt_rule_id} />;
     },
     sortable: true,
+    truncateText: true,
     width: '10%',
   };
 };

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/components/rules_table_columns/integrations.tsx

@@ -0,0 +1,37 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import React from 'react';
+import type { RelatedIntegration } from '../../../../../common/api/detection_engine';
+import { IntegrationsPopover } from '../../../../detections/components/rules/related_integrations/integrations_popover';
+import type { RuleMigration } from '../../../../../common/siem_migrations/model/rule_migration.gen';
+import * as i18n from './translations';
+import type { TableColumn } from './constants';
+
+export const createIntegrationsColumn = ({
+  getMigrationRuleData,
+}: {
+  getMigrationRuleData: (
+    ruleId: string
+  ) => { relatedIntegrations?: RelatedIntegration[] } | undefined;
+}): TableColumn => {
+  return {
+    field: 'elastic_rule.integration_id',
+    name: i18n.COLUMN_INTEGRATIONS,
+    render: (_, rule: RuleMigration) => {
+      const migrationRuleData = getMigrationRuleData(rule.id);
+      const relatedIntegrations = migrationRuleData?.relatedIntegrations;
+      if (relatedIntegrations == null || relatedIntegrations.length === 0) {
+        return null;
+      }
+      return <IntegrationsPopover relatedIntegrations={relatedIntegrations} />;
+    },
+    truncateText: true,
+    width: '143px',
+    align: 'center',
+  };
+};

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/components/rules_table_columns/translations.ts

@@ -97,3 +97,10 @@ export const COLUMN_UPDATED = i18n.translate(
     defaultMessage: 'Updated',
   }
 );
+
+export const COLUMN_INTEGRATIONS = i18n.translate(
+  'xpack.securitySolution.siemMigrations.rules.tableColumn.integrationsLabel',
+  {
+    defaultMessage: 'Integrations',
+  }
+);

x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/components/rules_table_columns/updated.tsx

@@ -19,7 +19,7 @@ export const createUpdatedColumn = (): TableColumn => {
       <FormattedRelativePreferenceDate value={value} dateFormat="M/D/YY" />
     ),
     sortable: true,
-    truncateText: false,
+    truncateText: true,
     align: 'center',
     width: '10%',
   };