[7.x] [Endpoint] Unifying the test index name for resolver and… (#60587)

* Unifying the test index name for resolver and alerts

* Endpoint isn't sending the agent field so check for it

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>

Co-authored-by: Jonathan Buttner <56361221+jonathan-buttner@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>

x-pack/plugins/endpoint/common/types.ts

@@ -31,9 +31,9 @@ export type Direction = 'asc' | 'desc';
 
 export class EndpointAppConstants {
   static BASE_API_URL = '/api/endpoint';
-  static ALERT_INDEX_NAME = 'my-index';
   static ENDPOINT_INDEX_NAME = 'endpoint-agent*';
-  static EVENT_INDEX_NAME = 'endpoint-events-*';
+  static ALERT_INDEX_NAME = 'events-endpoint-1';
+  static EVENT_INDEX_NAME = 'events-endpoint-*';
   static DEFAULT_TOTAL_HITS = 10000;
   /**
    * Legacy events are stored in indices with endgame-* prefix

x-pack/plugins/endpoint/server/routes/resolver/utils/normalize.ts

@@ -7,7 +7,7 @@
 import { ResolverEvent, LegacyEndpointEvent } from '../../../../common/types';
 
 function isLegacyData(data: ResolverEvent): data is LegacyEndpointEvent {
-  return data.agent.type === 'endgame';
+  return data.agent?.type === 'endgame';
 }
 
 export function extractEventID(event: ResolverEvent) {

x-pack/test/functional/es_archives/endpoint/alerts/api_feature/mappings.json

@@ -3,7 +3,7 @@
   "value": {
     "aliases": {
     },
-    "index": "my-index",
+    "index": "events-endpoint-1",
     "mappings": {
       "_meta": {
         "version": "1.5.0-dev"
@@ -5262,4 +5262,4 @@
       }
     }
   }
-}
+}