[Response Ops] Event log aggregations

x-pack/plugins/alerting/server/rules_client/rules_client.ts

@@ -594,7 +594,7 @@ export class RulesClient {
             page: 1,
             per_page: 10000,
             start: parsedDateStart.toISOString(),
-            sort_order: 'desc',
+            sort: [{ sort_field: '@timestamp', sort_order: 'desc' }],
             end: dateNow.toISOString(),
           },
           rule.legacyId !== null ? [rule.legacyId] : undefined
@@ -606,7 +606,7 @@ export class RulesClient {
             page: 1,
             per_page: numberOfExecutions ?? 60,
             filter: 'event.provider: alerting AND event.action:execute',
-            sort_order: 'desc',
+            sort: [{ sort_field: '@timestamp', sort_order: 'desc' }],
             end: dateNow.toISOString(),
           },
           rule.legacyId !== null ? [rule.legacyId] : undefined

x-pack/plugins/alerting/server/rules_client/tests/get_alert_summary.test.ts

@@ -223,7 +223,12 @@ describe('getAlertSummary()', () => {
           "end": "2019-02-12T21:01:22.479Z",
           "page": 1,
           "per_page": 10000,
-          "sort_order": "desc",
+          "sort": Array [
+            Object {
+              "sort_field": "@timestamp",
+              "sort_order": "desc",
+            },
+          ],
           "start": "2019-02-12T21:00:22.479Z",
         },
         undefined,
@@ -260,7 +265,12 @@ describe('getAlertSummary()', () => {
           "end": "2019-02-12T21:01:22.479Z",
           "page": 1,
           "per_page": 10000,
-          "sort_order": "desc",
+          "sort": Array [
+            Object {
+              "sort_field": "@timestamp",
+              "sort_order": "desc",
+            },
+          ],
           "start": "2019-02-12T21:00:22.479Z",
         },
         Array [

x-pack/plugins/event_log/common/index.ts

@@ -5,4 +5,4 @@
  * 2.0.
  */
 
-export const BASE_EVENT_LOG_API_PATH = '/api/event_log';
+export const BASE_EVENT_LOG_API_PATH = '/internal/event_log';

x-pack/plugins/event_log/server/es/cluster_client_adapter.mock.ts

@@ -24,6 +24,7 @@ const createClusterClientMock = () => {
     getExistingIndexAliases: jest.fn(),
     setIndexAliasToHidden: jest.fn(),
     queryEventsBySavedObjects: jest.fn(),
+    aggregateEventsBySavedObjects: jest.fn(),
     shutdown: jest.fn(),
   };
   return mock;