[Security Solution] [Resolver] Remove related events api (#79036) (#8…

…0196)

* Removing old related events route

* Removing outer describe block

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>

x-pack/plugins/security_solution/common/endpoint/schema/resolver.ts

@@ -23,23 +23,6 @@ export const validateTree = {
   }),
 };
 
-/**
- * Used to validate GET requests for non process events for a specific event.
- */
-export const validateRelatedEvents = {
-  params: schema.object({ id: schema.string({ minLength: 1 }) }),
-  query: schema.object({
-    events: schema.number({ defaultValue: 1000, min: 1, max: 10000 }),
-    afterEvent: schema.maybe(schema.string()),
-    legacyEndpointID: schema.maybe(schema.string({ minLength: 1 })),
-  }),
-  body: schema.nullable(
-    schema.object({
-      filter: schema.maybe(schema.string()),
-    })
-  ),
-};
-
 /**
  * Used to validate POST requests for `/resolver/events` api.
  */

x-pack/plugins/security_solution/common/endpoint/types/index.ts

@@ -197,7 +197,6 @@ export interface SafeResolverTree {
    */
   entityID: string;
   children: SafeResolverChildren;
-  relatedEvents: Omit<SafeResolverRelatedEvents, 'entityID'>;
   relatedAlerts: Omit<ResolverRelatedAlerts, 'entityID'>;
   ancestry: SafeResolverAncestry;
   lifecycle: SafeResolverEvent[];
@@ -267,15 +266,6 @@ export interface ResolverRelatedEvents {
   nextEvent: string | null;
 }
 
-/**
- * Safe version of `ResolverRelatedEvents`
- */
-export interface SafeResolverRelatedEvents {
-  entityID: string;
-  events: SafeResolverEvent[];
-  nextEvent: string | null;
-}
-
 /**
  * Response structure for the events route.
  * `nextEvent` will be set to null when at the time of querying there were no more results to retrieve from ES.

x-pack/plugins/security_solution/server/endpoint/routes/resolver.ts

@@ -8,14 +8,12 @@ import { IRouter } from 'kibana/server';
 import { EndpointAppContext } from '../types';
 import {
   validateTree,
-  validateRelatedEvents,
   validateEvents,
   validateChildren,
   validateAncestry,
   validateAlerts,
   validateEntities,
 } from '../../../common/endpoint/schema/resolver';
-import { handleRelatedEvents } from './resolver/related_events';
 import { handleChildren } from './resolver/children';
 import { handleAncestry } from './resolver/ancestry';
 import { handleTree } from './resolver/tree';
@@ -26,17 +24,6 @@ import { handleEvents } from './resolver/events';
 export function registerResolverRoutes(router: IRouter, endpointAppContext: EndpointAppContext) {
   const log = endpointAppContext.logFactory.get('resolver');
 
-  // this route will be removed in favor of the one below
-  router.post(
-    {
-      // @deprecated use `/resolver/events` instead
-      path: '/api/endpoint/resolver/{id}/events',
-      validate: validateRelatedEvents,
-      options: { authRequired: true },
-    },
-    handleRelatedEvents(log, endpointAppContext)
-  );
-
   router.post(
     {
       path: '/api/endpoint/resolver/events',