poc of template fields in saved object

Author: michaelolo24

x-pack/platform/plugins/shared/cases/server/cases_analytics/cases_index/mappings.ts

@@ -8,7 +8,37 @@
 import type { MappingTypeMapping } from '@elastic/elasticsearch/lib/api/types';
 
 export const CAI_CASES_INDEX_MAPPINGS: MappingTypeMapping = {
-  dynamic: false,
+  dynamic: true,
+  dynamic_templates: [
+    {
+      as_keyword: {
+        match_pattern: 'regex',
+        match: '.*_as_keyword',
+        mapping: {
+          type: 'keyword',
+          ignore_above: 256,
+        },
+      },
+    },
+    {
+      as_integer: {
+        match_pattern: 'regex',
+        match: '.*_as_integer',
+        mapping: {
+          type: 'integer',
+        },
+      },
+    },
+    {
+      as_date: {
+        match_pattern: 'regex',
+        match: '.*_as_date',
+        mapping: {
+          type: 'date',
+        },
+      },
+    },
+  ],
   properties: {
     '@timestamp': {
       type: 'date',
@@ -133,6 +163,10 @@ export const CAI_CASES_INDEX_MAPPINGS: MappingTypeMapping = {
         },
       },
     },
+    fields: {
+      type: 'object',
+      dynamic: true,
+    },
     observables: {
       properties: {
         type: {

x-pack/platform/plugins/shared/cases/server/cases_analytics/cases_index/painless_scripts.ts

@@ -125,6 +125,14 @@ export const CAI_CASES_INDEX_SCRIPT: StoredScript = {
       }
     }
 
+    ctx._source.fields = new HashMap();
+    if (source.cases.fields != null) {
+      for (item in source.cases.fields) {
+          ctx._source.fields[item] = source.cases.fields[item];
+      }
+    }
+
+
     ctx._source.observables = [];
     if (source.cases.observables != null) {
       for (item in source.cases.observables) {

x-pack/platform/plugins/shared/cases/server/cases_analytics/tasks/scheduler_task/index.ts

@@ -79,9 +79,9 @@ export async function scheduleCAISchedulerTask({
       id: CAI_SCHEDULER_TASK_ID,
       taskType: ANALYTICS_SCHEDULER_TASK_TYPE,
       params: {},
-      runAt: new Date(Date.now() + 60 * 1000),
+      runAt: new Date(Date.now() + 60 * 1),
       schedule: {
-        interval: '1h',
+        interval: '1m',
       },
       state: {},
     });

x-pack/platform/plugins/shared/cases/server/cases_analytics/tasks/synchronization_task/index.ts

@@ -19,7 +19,7 @@ import type { Owner } from '../../../../common/constants/types';
 import type { CasesServerStartDependencies } from '../../../types';
 import { AnalyticsIndexSynchronizationTaskFactory } from './synchronization_task_factory';
 
-const SCHEDULE: IntervalSchedule = { interval: '5m' };
+const SCHEDULE: IntervalSchedule = { interval: '1m' };
 
 export function registerCAISynchronizationTask({
   taskManager,

x-pack/platform/plugins/shared/cases/server/common/types/case.ts

@@ -37,6 +37,7 @@ export interface CasePersistedAttributes {
   connector: ConnectorPersisted;
   description: string;
   duration: number | null;
+  fields: Record<string, unknown>;
   external_service: ExternalServicePersisted | null;
   owner: string;
   settings: { syncAlerts: boolean; extractObservables?: boolean };

x-pack/platform/plugins/shared/cases/server/config.ts

@@ -50,8 +50,8 @@ export const ConfigSchema = schema.object({
   analytics: schema.object({
     index: schema.object({
       enabled: offeringBasedSchema({
-        serverless: schema.boolean({ defaultValue: false }),
-        traditional: schema.boolean({ defaultValue: false }),
+        serverless: schema.boolean({ defaultValue: true }),
+        traditional: schema.boolean({ defaultValue: true }),
       }),
     }),
   }),

x-pack/platform/plugins/shared/cases/server/saved_object_types/cases/cases.ts

@@ -26,6 +26,7 @@ import {
   modelVersion6,
   modelVersion7,
   modelVersion8,
+  modelVersion9,
 } from './model_versions';
 import { handleImport } from '../import_export/import';
 
@@ -38,6 +39,36 @@ export const createCaseSavedObjectType = (
   hidden: true,
   namespaceType: 'multiple-isolated',
   convertToMultiNamespaceTypeVersion: '8.0.0',
+  dynamic_templates: [
+    {
+      as_keyword: {
+        match_pattern: 'regex',
+        match: '.*_as_keyword',
+        mapping: {
+          type: 'keyword',
+          ignore_above: 256,
+        },
+      },
+    },
+    {
+      as_integer: {
+        match_pattern: 'regex',
+        match: '.*_as_integer',
+        mapping: {
+          type: 'integer',
+        },
+      },
+    },
+    {
+      as_date: {
+        match_pattern: 'regex',
+        match: '.*_as_date',
+        mapping: {
+          type: 'date',
+        },
+      },
+    },
+  ],
   mappings: {
     dynamic: false,
     properties: {
@@ -271,6 +302,11 @@ export const createCaseSavedObjectType = (
           },
         },
       },
+      fields: {
+        // @ts-expect-error - only protected by the typescript type
+        dynamic: true,
+        type: 'object',
+      },
     },
   },
   migrations: caseMigrations,
@@ -283,6 +319,7 @@ export const createCaseSavedObjectType = (
     6: modelVersion6,
     7: modelVersion7,
     8: modelVersion8,
+    9: modelVersion9,
   },
   management: {
     importableAndExportable: true,

x-pack/platform/plugins/shared/cases/server/saved_object_types/cases/model_versions/index.ts

@@ -13,3 +13,4 @@ export { modelVersion5 } from './model_version_5';
 export { modelVersion6 } from './model_version_6';
 export { modelVersion7 } from './model_version_7';
 export { modelVersion8 } from './model_version_8';
+export { modelVersion9 } from './model_version_9';

x-pack/platform/plugins/shared/cases/server/saved_object_types/cases/model_versions/model_version_9.ts

@@ -0,0 +1,27 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import type { SavedObjectsModelVersion } from '@kbn/core-saved-objects-server';
+import { casesSchemaV9 } from '../schemas';
+
+export const modelVersion9: SavedObjectsModelVersion = {
+  changes: [
+    {
+      type: 'mappings_addition',
+      addedMappings: {
+        fields: {
+          // @ts-expect-error
+          dynamic: true,
+          type: 'object',
+        },
+      },
+    },
+  ],
+  schemas: {
+    forwardCompatibility: casesSchemaV9.extends({}, { unknowns: 'ignore' }),
+  },
+};

x-pack/platform/plugins/shared/cases/server/saved_object_types/cases/schemas/index.ts

@@ -15,3 +15,4 @@ export { casesSchema as casesSchemaV5 } from './v5';
 export { casesSchema as casesSchemaV6 } from './v6';
 export { casesSchema as casesSchemaV7 } from './v7';
 export { casesSchema as casesSchemaV8 } from './v8';
+export { casesSchema as casesSchemaV9 } from './v9';