[sentinel_one] Add configuration option to filter results by Site IDs, fix error handling for CEL, improve UI layout, and readme document

[brijesh-elastic]

Proposed commit message

sentinel_one: Add configuration option to filter results by Site IDs, fix error handling for CEL,
improve UI layout, and readme document

Add a configuration option to filter results by Site IDs for the application data stream.
Fix error handling for CEL code in the application risk data stream. Update the
configuration parameter descriptions and the README document.

Note

To Reviewers:

• The URL configuration parameter type was text previously; with this enhancement, it has been updated to the url type. I have tested the upgrade process, and the parameter's value is preserved correctly.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/sentinel_one directory.
• Run the following command to run tests.

elastic-package test -v

Related Issue

• Closes Sentinel One: Add siteIds filter to application data stream #15339
• Closes Sentinel One: UI layout improvements and doc changes #15340

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[chemamartinez]

LGTM

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 0d7b337

History

• 💚 Build #31905 succeeded e198dad
• 💔 Build #31898 failed b7afa5b
• 💔 Build #31897 failed 9ad07c6

cc @brijesh-elastic

[elastic-vault-github-plugin-prod]

Package sentinel_one - 1.41.0 containing this change is available at https://epr.elastic.co/package/sentinel_one/1.41.0/