[Corelight] Update saved search of all dashboards

[sharadcrest]

Type of change

• Enhancement

Proposed commit message

• Update saved search of all dashboards to include only timestamps and summary of parsed logs.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/corelight directory.
• Run the following command to run tests.

elastic-package test

--- Test results for package: corelight - START ---
╭───────────┬─────────────┬───────────┬────────────────────────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE   │ DATA STREAM │ TEST TYPE │ TEST NAME                                                          │ RESULT │ TIME ELAPSED │
├───────────┼─────────────┼───────────┼────────────────────────────────────────────────────────────────────┼────────┼──────────────┤
│ corelight │             │ asset     │ dashboard corelight-023162b6-94da-4d8d-b1f6-de6192356cce is loaded │ PASS   │      1.088µs │
│ corelight │             │ asset     │ dashboard corelight-0cfc8a95-4979-4265-b9ad-91edf63f01a9 is loaded │ PASS   │        195ns │
│ corelight │             │ asset     │ dashboard corelight-2d4dc345-cbbe-4d7a-9203-5ab11c8cb5ba is loaded │ PASS   │        173ns │
│ corelight │             │ asset     │ dashboard corelight-323b0f27-993e-4fee-ae6e-b5977d7cab11 is loaded │ PASS   │        169ns │
│ corelight │             │ asset     │ dashboard corelight-3a4a279f-f238-47de-90ba-f643c5647fde is loaded │ PASS   │        188ns │
│ corelight │             │ asset     │ dashboard corelight-40bbc19b-dd9c-4b43-a88a-e29fc8701902 is loaded │ PASS   │        199ns │
│ corelight │             │ asset     │ dashboard corelight-45197477-c13f-4e52-a5dd-fb4f53564963 is loaded │ PASS   │        222ns │
│ corelight │             │ asset     │ dashboard corelight-58885f47-95e1-4242-a1ee-783de69ace17 is loaded │ PASS   │        234ns │
│ corelight │             │ asset     │ dashboard corelight-65a5fa91-06e4-459b-b4bb-998c85a6cf08 is loaded │ PASS   │        255ns │
│ corelight │             │ asset     │ dashboard corelight-7c0946bc-acd0-4ec3-ab3b-8a92853f4a3b is loaded │ PASS   │        266ns │
│ corelight │             │ asset     │ dashboard corelight-8546a96c-86c9-4edf-9d46-88338d6ac40e is loaded │ PASS   │        270ns │
│ corelight │             │ asset     │ dashboard corelight-8c5f15f7-7063-4228-be54-fb8c20b29caa is loaded │ PASS   │        306ns │
│ corelight │             │ asset     │ dashboard corelight-e4a93cfe-4b1f-44df-ab99-50c74f6f2203 is loaded │ PASS   │        289ns │
│ corelight │             │ asset     │ dashboard corelight-eff0434c-1e27-4c02-959e-9f5d95488efb is loaded │ PASS   │        324ns │
│ corelight │             │ asset     │ dashboard corelight-f1208ffe-d168-46d1-9531-24de523d1bfb is loaded │ PASS   │        337ns │
│ corelight │             │ asset     │ dashboard corelight-f4864774-ed73-4b78-b861-5b8235ec12cf is loaded │ PASS   │        349ns │
│ corelight │             │ asset     │ dashboard corelight-f7da14f0-85db-48e8-a591-1f650af0f618 is loaded │ PASS   │        350ns │
│ corelight │             │ asset     │ dashboard corelight-ff07e65c-2703-4cbe-a45f-3881025352a3 is loaded │ PASS   │        396ns │
│ corelight │             │ asset     │ search corelight-039807c4-9ec2-4778-b548-0e08877fb8d2 is loaded    │ PASS   │        272ns │
│ corelight │             │ asset     │ search corelight-25c4969f-1368-433e-905d-fda0ae7e4923 is loaded    │ PASS   │        289ns │
│ corelight │             │ asset     │ search corelight-34498312-f418-4e47-9931-bc5fc46c0bff is loaded    │ PASS   │        235ns │
│ corelight │             │ asset     │ search corelight-845d2914-3a55-4057-9dca-a3fd4e226d54 is loaded    │ PASS   │        254ns │
│ corelight │             │ asset     │ search corelight-92c0bf7d-5abe-46a1-800d-281386e4b219 is loaded    │ PASS   │        290ns │
│ corelight │             │ asset     │ search corelight-9eee7e02-dea8-4e4b-9dc1-9d1df9785aef is loaded    │ PASS   │        283ns │
│ corelight │             │ asset     │ search corelight-a44be701-0e99-4b53-9073-b7720df40481 is loaded    │ PASS   │        296ns │
│ corelight │             │ asset     │ search corelight-e0f9718e-23ec-4c36-8040-d687fc177db4 is loaded    │ PASS   │        331ns │
╰───────────┴─────────────┴───────────┴────────────────────────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: corelight - END   ---
Done

Screenshots

Before

After

[kcreddy]

/test

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[kcreddy]

/test

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
99.9% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 9e1859a

History

• 💔 Build #21943 failed 493dd22

[kcreddy]

LGTM

[elastic-vault-github-plugin-prod]

Package corelight - 0.6.0 containing this change is available at https://epr.elastic.co/package/corelight/0.6.0/