Skip to content

[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts#208287

Merged
christineweng merged 1 commit intoelastic:mainfrom
christineweng:new-nav-clean-up
Feb 10, 2025
Merged

[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts#208287
christineweng merged 1 commit intoelastic:mainfrom
christineweng:new-nav-clean-up

Conversation

@christineweng
Copy link
Copy Markdown
Contributor

@christineweng christineweng commented Jan 24, 2025

Summary

This PR updates the cloud insights in entity section to open to entity flyout. When examining the insights (for example, the host is shown to have 50 alerts, instead of opening the preview, and user click on the details and go to respective tabs, this PR updated the behavior to open the details tab via 1 click. The goal is to reduce friction for users during investigation.

Feature flag: newExpandableFlyoutNavigationEnabled

When flag is off:

  • Click on alert count should open timeline (if user has timeline privileage)
  • Click on misconfigurations and vulnerabilities badge should open host/user preview
Screen.Recording.2025-02-07.at.10.12.50.AM.mov

When flag is on:

  • Click on count badges should open the respective entity flyout and the insights details tab
Screen.Recording.2025-02-03.at.1.51.11.PM.mov

Checklist

@christineweng christineweng added backport This PR is a backport of another PR v9.0.0 Team:Threat Hunting Security Solution Threat Hunting Team release_note:feature Makes this part of the condensed release notes Team:Threat Hunting:Investigations Security Solution Threat Hunting Investigations Team v8.18.0 labels Jan 24, 2025
@christineweng christineweng self-assigned this Jan 24, 2025
@christineweng christineweng marked this pull request as ready for review January 27, 2025 16:14
@christineweng christineweng requested a review from a team as a code owner January 27, 2025 16:14
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

Copy link
Copy Markdown
Contributor

@PhilippeOberti PhilippeOberti left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code LGTM! I left a couple of comments to consider. Approving as these comments are subjective. Happy to discuss them if you want!

Copy link
Copy Markdown
Contributor

@PhilippeOberti PhilippeOberti left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry, I meant to approve in my last review

@christineweng
Copy link
Copy Markdown
Contributor Author

christineweng commented Feb 10, 2025

Merging as is today for an upcoming product review. Will update the copy in a separate PR once it is reviewed

@christineweng christineweng added backport:version Backport to applied version labels and removed backport This PR is a backport of another PR labels Feb 10, 2025
@christineweng christineweng enabled auto-merge (squash) February 10, 2025 20:34
@christineweng christineweng merged commit 6e61f52 into elastic:main Feb 10, 2025
@kibanamachine
Copy link
Copy Markdown
Contributor

Starting backport for target branches: 8.18, 8.x, 9.0

https://github.com/elastic/kibana/actions/runs/13251447155

@elasticmachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 21.4MB 21.4MB +20.1KB

History

  • 💔 Build #274882 failed 58517992d9e8878e1a72e38bfd412975c06f52c8
  • 💔 Build #274870 failed 0e695142da28a271419034394e52e8d7e7f7771e
  • 💚 Build #272887 succeeded 43b2998e146606f8807076452c7b55dc4e1e4778
  • 💚 Build #270597 succeeded 92dfbdcc93e8abc79ca2443af316c5fcc6f25d78
  • 💚 Build #270233 succeeded 18aaa3c5b722e09b7a826a5a769e0d60bab48544

cc @christineweng

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Feb 10, 2025
… entity flyouts (elastic#208287)

## Summary

This PR updates the cloud insights in entity section to open to entity
flyout. When examining the insights (for example, the host is shown to
have 50 alerts, instead of opening the preview, and user click on the
details and go to respective tabs, this PR updated the behavior to open
the details tab via 1 click. The goal is to reduce friction for users
during investigation.

Feature flag: `newExpandableFlyoutNavigationEnabled`

When flag is off:
- Click on alert count should open timeline (if user has timeline
privileage)
- Click on misconfigurations and vulnerabilities badge should open
host/user preview

https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710

When flag is on:
- Click on count badges should open the respective entity flyout and the
insights details tab

https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

(cherry picked from commit 6e61f52)
@kibanamachine
Copy link
Copy Markdown
Contributor

💔 Some backports could not be created

Status Branch Result
8.18 Backport failed because of merge conflicts
8.x Backport failed because of merge conflicts
9.0

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 208287

Questions ?

Please refer to the Backport tool documentation

@christineweng
Copy link
Copy Markdown
Contributor Author

💚 All backports created successfully

Status Branch Result
8.18

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

@christineweng
Copy link
Copy Markdown
Contributor Author

💚 All backports created successfully

Status Branch Result
8.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

christineweng added a commit to christineweng/kibana that referenced this pull request Feb 10, 2025
… entity flyouts (elastic#208287)

## Summary

This PR updates the cloud insights in entity section to open to entity
flyout. When examining the insights (for example, the host is shown to
have 50 alerts, instead of opening the preview, and user click on the
details and go to respective tabs, this PR updated the behavior to open
the details tab via 1 click. The goal is to reduce friction for users
during investigation.

Feature flag: `newExpandableFlyoutNavigationEnabled`

When flag is off:
- Click on alert count should open timeline (if user has timeline
privileage)
- Click on misconfigurations and vulnerabilities badge should open
host/user preview

https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710

When flag is on:
- Click on count badges should open the respective entity flyout and the
insights details tab

https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

(cherry picked from commit 6e61f52)

# Conflicts:
#	x-pack/solutions/security/plugins/security_solution/public/flyout/document_details/shared/components/alert_count_insight.tsx
christineweng added a commit to christineweng/kibana that referenced this pull request Feb 10, 2025
… entity flyouts (elastic#208287)

## Summary

This PR updates the cloud insights in entity section to open to entity
flyout. When examining the insights (for example, the host is shown to
have 50 alerts, instead of opening the preview, and user click on the
details and go to respective tabs, this PR updated the behavior to open
the details tab via 1 click. The goal is to reduce friction for users
during investigation.

Feature flag: `newExpandableFlyoutNavigationEnabled`

When flag is off:
- Click on alert count should open timeline (if user has timeline
privileage)
- Click on misconfigurations and vulnerabilities badge should open
host/user preview

https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710

When flag is on:
- Click on count badges should open the respective entity flyout and the
insights details tab

https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

(cherry picked from commit 6e61f52)

# Conflicts:
#	x-pack/solutions/security/plugins/security_solution/public/flyout/document_details/shared/components/alert_count_insight.tsx
kibanamachine added a commit that referenced this pull request Feb 10, 2025
…o open entity flyouts (#208287) (#210472)

# Backport

This will backport the following commits from `main` to `9.0`:
- [[Security Solution][Alert Flyout] Update entity insight badge to open
entity flyouts (#208287)](#208287)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat
Hunting","Team:Threat
Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: christineweng <18648970+christineweng@users.noreply.github.com>
christineweng added a commit that referenced this pull request Feb 11, 2025
…o open entity flyouts (#208287) (#210476)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution][Alert Flyout] Update entity insight badge to open
entity flyouts (#208287)](#208287)

<!--- Backport version: 9.6.4 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat
Hunting","Team:Threat
Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210472","number":210472,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210475","number":210475,"state":"OPEN"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
christineweng added a commit that referenced this pull request Feb 11, 2025
…to open entity flyouts (#208287) (#210475)

# Backport

This will backport the following commits from `main` to `8.18`:
- [[Security Solution][Alert Flyout] Update entity insight badge to open
entity flyouts (#208287)](#208287)

<!--- Backport version: 9.6.4 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat
Hunting","Team:Threat
Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210472","number":210472,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security
Solution][Alert Flyout] Update entity insight badge to open entity
flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud
insights in entity section to open to entity\r\nflyout. When examining
the insights (for example, the host is shown to\r\nhave 50 alerts,
instead of opening the preview, and user click on the\r\ndetails and go
to respective tabs, this PR updated the behavior to open\r\nthe details
tab via 1 click. The goal is to reduce friction for users\r\nduring
investigation.\r\n\r\nFeature flag:
`newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n-
Click on alert count should open timeline (if user has
timeline\r\nprivileage)\r\n- Click on misconfigurations and
vulnerabilities badge should open\r\nhost/user
preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen
flag is on:\r\n- Click on count badges should open the respective entity
flyout and the\r\ninsights details
tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels release_note:enhancement Team:Threat Hunting:Investigations Security Solution Threat Hunting Investigations Team Team:Threat Hunting Security Solution Threat Hunting Team v8.18.0 v9.0.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants