Skip to content

[8.x] [Security Solution] Update alert kpi to exclude closed alerts in document details flyout (#200268)#200642

Merged
kibanamachine merged 1 commit intoelastic:8.xfrom
kibanamachine:backport/8.x/pr-200268
Nov 18, 2024
Merged

[8.x] [Security Solution] Update alert kpi to exclude closed alerts in document details flyout (#200268)#200642
kibanamachine merged 1 commit intoelastic:8.xfrom
kibanamachine:backport/8.x/pr-200268

Conversation

@kibanamachine
Copy link
Contributor

Backport

This will backport the following commits from main to 8.x:

Questions ?

Please refer to the Backport tool documentation

…ment details flyout (elastic#200268)

## Summary

This PR made some changes to the alert count API in document details
flyout. Closed alerts are now removed when showing total count and
distributions. Data fetching logic is updated to match the one used in
host flyout (elastic#197102).

Notable changes:
- Closed alerts are now excluded
- Number of alerts in alerts flyout should match the ones in host flyout
- Clicking the number will open timeline with the specific entity and
`NOT kibana.alert.workflow_status: closed` filters
- If a host/user does not have active alerts (all closed), no
distribution bar is shown

https://github.com/user-attachments/assets/3a1d6e36-527e-4b62-816b-e1f4de7314ca

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

(cherry picked from commit a37a02e)
@kibanamachine kibanamachine merged commit f41ddf0 into elastic:8.x Nov 18, 2024
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 13.4MB 13.4MB -5.2KB

cc @christineweng

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants