[Security Solution][Detection Engine] adds ftr tests that cover synth…

…etic source behaviour different to stored source (elastic#193752) ## Summary - adds tests that capture [limitations](https://docs.google.com/document/d/1wDkYv37ExvaN3Qm2Z7G5bWjtVIFj7Be2s5ZIZxlRhcw/edit#heading=h.e6lq0pp7ny3k) of synthetic source mode - add tests that cover failures in [ftr tests](elastic#191527 (comment)) when synthetic source enabled. Most of them can be attributed to array stings sorting and converting flattened(do-notation) objects properties to nested --------- Co-authored-by: kibanamachine <[email protected]>
kapral18 · Oct 9, 2024 · 4b695fd · 4b695fd
1 parent f72ab5e
commit 4b695fd
Show file tree

Hide file tree

Showing 5 changed files with 492 additions and 0 deletions.
diff --git a/...etection_engine/rule_execution_logic/trial_license_complete_tier/execution_logic/index.ts b/...etection_engine/rule_execution_logic/trial_license_complete_tier/execution_logic/index.ts
@@ -23,6 +23,7 @@ export default ({ loadTestFile }: FtrProviderContext): void => {
     loadTestFile(require.resolve('./indicator_match_alert_suppression'));
     loadTestFile(require.resolve('./threshold'));
     loadTestFile(require.resolve('./threshold_alert_suppression'));
+    loadTestFile(require.resolve('./synthetic_source'));
     loadTestFile(require.resolve('./non_ecs_fields'));
     loadTestFile(require.resolve('./custom_query'));
   });