[Security Serverless] - no net new capability to initiate/create investigate guides in timelines for 'essential tier' (#8700)#181562
Conversation
…stigate guides in timelines for 'essential tier' (elastic#8700)
e40pud
added
release_note:skip
|
Pinging @elastic/security-solution (Team: SecuritySolution) |
|
Pinging @elastic/security-detection-engine (Team:Detection Engine) |
...plugins/security_solution/public/common/components/markdown_editor/plugins/insight/index.tsx
Show resolved
Hide resolved
semd
left a comment
semd
left a comment
There was a problem hiding this comment.
Tested locally with different product types in serverless, everything works as expected. In ESS investigation guide interactions are always available, regardless of the license type (which is a bit odd, but it's the intended behavior).
LGTM! 💯
|
@elasticmachine merge upstream |
| 'aria-label': 'aria-label-test1', | ||
| iconType: 'logoOsquery', | ||
| isDisabled: !!interactionsUpsellingMessage, | ||
| 'data-test-subj': 'test-test-test', |
There was a problem hiding this comment.
rename or maybe remove since it appears unused?
There was a problem hiding this comment.
oh man, thanks for catching this.. was playing around with plugin and forgot to remove this line. The line 'aria-label': 'aria-label-test1', should be removed as well
kqualters-elastic
left a comment
kqualters-elastic
left a comment
There was a problem hiding this comment.
remove the 1 line and lgtm 👍
💚 Build Succeeded
Metrics [docs]Async chunks
Page load bundle
History
To update your PR or re-run it, just comment with: cc @e40pud |
6 participants
Summary
Addresses https://github.com/elastic/security-team/issues/8700
With these changes we disable Interactive Investigation guides interactions buttons (timelines + OSquery interactive actions) for 'Essential tier' in Serverless.
For Investigation guides in the Detection rules:
Create rule page -> Advanced settings - > Investigation guide
osquery and timeline buttons should be inactive and have an upgrade callout
Rule details page -> Investigations guide
buttons in the markdown should be inactive and have an upgrade callout
Checklist
Delete any items that are not applicable to this PR.