[Security Solution] Add AlertSuppression and Investigation Fields to Rule Upgrade workflow

[jpdjere]

Resolves: #190597

Summary

Adds AlertSuppression and Investigation Fields to Rule Upgrade workflow:

• Fields had already been added to DiffableRule schema and diffing algorithms in [Security Solution] Create Map of upgradable rule fields by type #190128
• Current PR adds them to the UI field list so they get displayed in the diff

Screenshots

Investigation Fields

Alert Suppression

Testing

Little bit tricky: no prebuilt rules have these fields, so no matter which packages you install you wont' see this upgrade. You'll need to tinker with the security-rule assets, for example:

POST .kibana_security_solution/_update_by_query
{
  "script": {
    "source": """
        ctx._source['security-rule']['alert_suppression'] = [
        'group_by': ['agent.hostname'],
        'missing_fields_strategy': 'suppress'
      ];
    """,
    "lang": "painless"
  },
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "type": {
              "value": "security-rule"
            }
          }
        },
        {
          "term": {
            "security-rule.rule_id": {
              "value": "0564fb9d-90b9-4234-a411-82a546dc1343"
            }
          }
        },
        {
          "term": {
            "security-rule.version": {
              "value": "111"
            }
          }
        }
      ]
    }
  }
}

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 28e7e8e

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
securitySolution	20.6MB	20.6MB	+215.0B

History

• 💔 Build #240436 failed 66faf24

cc @jpdjere

[maximpn]

LGTM