Add reducer configuration, test data, increment patch version, and add details.json

Author: PolBreachIty

config/config.json

@@ -242,5 +242,10 @@
       "userCanEdit": false,
       "adminOnly": true
     }
-  ]
-}
+  ],
+  "reducer": {
+    "details": {
+      "file": "./reducers/details.json"
+    }
+  }
+}

mocks/details.json

@@ -0,0 +1,146 @@
+{
+  "totalResults": 47,
+  "from": 0,
+  "size": 10,
+  "results": [
+    {
+      "hit": {
+        "_index": "security-logs-2024.01",
+        "_type": "_doc",
+        "_id": "AYcZ1XkBT7_9MqJxR_2L",
+        "_score": 12.453,
+        "_source": {
+          "timestamp": "2024-01-16T03:15:42.000Z",
+          "source_ip": "192.168.1.50",
+          "destination_ip": "10.0.0.15",
+          "source_port": 54321,
+          "destination_port": 443,
+          "protocol": "HTTPS",
+          "bytes_sent": 2048,
+          "bytes_received": 8192,
+          "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+          "http_method": "POST",
+          "url": "/api/v1/authenticate",
+          "response_code": 200,
+          "country": "United States",
+          "city": "San Francisco",
+          "threat_score": 0,
+          "threat_level": "low"
+        }
+      },
+      "details": [
+        {
+          "label": "Source IP",
+          "value": "192.168.1.50"
+        },
+        {
+          "label": "Destination IP",
+          "value": "10.0.0.15"
+        },
+        {
+          "label": "Timestamp",
+          "value": "2024-01-16T03:15:42.000Z"
+        }
+      ]
+    },
+    {
+      "hit": {
+        "_index": "security-logs-2024.01",
+        "_type": "_doc",
+        "_id": "AYcZ1YkBT7_9MqJxS_3M",
+        "_score": 11.892,
+        "_source": {
+          "timestamp": "2024-01-16T02:45:18.000Z",
+          "source_ip": "203.0.113.45",
+          "destination_ip": "198.51.100.22",
+          "source_port": 48123,
+          "destination_port": 22,
+          "protocol": "SSH",
+          "bytes_sent": 512,
+          "bytes_received": 1024,
+          "user": "admin",
+          "auth_method": "password",
+          "auth_result": "failed",
+          "country": "Unknown",
+          "threat_score": 85,
+          "threat_level": "high"
+        }
+      },
+      "details": [
+        {
+          "label": "Source IP",
+          "value": "203.0.113.45"
+        },
+        {
+          "label": "Auth Result",
+          "value": "failed"
+        },
+        {
+          "label": "Threat Score",
+          "value": 85
+        }
+      ]
+    },
+    {
+      "hit": {
+        "_index": "security-logs-2024.01",
+        "_type": "_doc",
+        "_id": "AYcZ1ZkBT7_9MqJxT_4N",
+        "_score": 10.234,
+        "_source": {
+          "timestamp": "2024-01-16T01:30:05.000Z",
+          "source_ip": "10.0.0.100",
+          "destination_ip": "8.8.8.8",
+          "source_port": 53214,
+          "destination_port": 53,
+          "protocol": "DNS",
+          "query": "malicious-domain.com",
+          "query_type": "A",
+          "response_code": "NXDOMAIN",
+          "country": "United States",
+          "threat_score": 95,
+          "threat_level": "critical",
+          "malware_family": "DarkComet"
+        }
+      },
+      "details": [
+        {
+          "label": "DNS Query",
+          "value": "malicious-domain.com"
+        },
+        {
+          "label": "Threat Level",
+          "value": "critical"
+        },
+        {
+          "label": "Malware Family",
+          "value": "DarkComet"
+        }
+      ]
+    }
+  ],
+  "tags": [
+    "Source: 192.168.1.50",
+    "Destination: 10.0.0.15",
+    "Protocol: HTTPS",
+    "Country: United States",
+    "Threat: high"
+  ],
+  "queries": [
+    "{\"query\": { \"simple_query_string\": { \"query\": \"\\\"192.168.1.50\\\"\" } }, \"sort\": [ {\"timestamp\": \"desc\" } ] }"
+  ],
+  "highlights": {
+    "AYcZ1XkBT7_9MqJxR_2L": [
+      {
+        "fieldName": "source_ip",
+        "fieldValues": [
+          "Traffic from <span class=\"highlight\">192.168.1.50</span> detected"
+        ]
+      }
+    ]
+  },
+  "isConnectionReset": false,
+  "maxRequestQueueLimitHit": false,
+  "isGatewayTimeout": false,
+  "isProtoError": false
+}

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "Elasticsearch",
-  "version": "3.7.0",
+  "version": "3.7.1",
   "main": "./integration.js",
   "description": "Search your data in real-time",
   "private": true,

package.json

@@ -0,0 +1,26 @@
+{
+  "root": {
+    "path": "",
+    "on_null": "return_empty"
+  },
+  "pipeline": [
+    {
+      "op": "copy",
+      "from": "totalResults",
+      "to": "reduced_results.total_results"
+    },
+    {
+      "op": "copy",
+      "from": "tags",
+      "to": "reduced_results.tags"
+    },
+    {
+      "op": "prune",
+      "strategy": "empty_values",
+      "target": "reduced_results"
+    }
+  ],
+  "output": {
+    "result": "$working.reduced_results"
+  }
+}