[Security Solution] [Detections] Multiple timestamp fields#86368

Merged

dhurley14 merged 11 commits intoelastic:masterfrom dhurley14:timestamp-override-queries

Dec 24, 2020

+689-476

Commits on Dec 23, 2020

query timestamp override and default @timestamp field, adds functional test for this
dhurley14
committed
fix logic for when to filter out timestamp override documents
dhurley14
committed
update the total hits field of the search result if we find hits within the secondary search. Without updating the total hits field, we could be finding events but not indexing them based on the bu…
dhurley14
committed
update integration test, updates logic for performing second search and excluding documents with timestamp override field
dhurley14
committed
cleanup comments, remove commented out console logs, fix logic to break out of loop during secondary search after
dhurley14
committed
default param to 'succeeded'
dhurley14
committed
remove commented out code
dhurley14
committed
always perform a secondary search when timestamp override field is present
dhurley14
committed
perf improvement and fix bug where sortIds were being mixed between search after calls
dhurley14
committed
set sortIds to undefined when not present on search result
dhurley14
committed
exit loop and prevent extraneous searches from occurring if we exhaust sort ids
dhurley14
committed