[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts#208287
Conversation
18aaa3c to
92dfbdc
Compare
|
Pinging @elastic/security-threat-hunting (Team:Threat Hunting) |
|
Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations) |
PhilippeOberti
left a comment
There was a problem hiding this comment.
code LGTM! I left a couple of comments to consider. Approving as these comments are subjective. Happy to discuss them if you want!
...ty/plugins/security_solution/public/flyout/document_details/left/components/host_details.tsx
Outdated
Show resolved
Hide resolved
...ty/plugins/security_solution/public/flyout/document_details/left/components/host_details.tsx
Outdated
Show resolved
Hide resolved
PhilippeOberti
left a comment
There was a problem hiding this comment.
Sorry, I meant to approve in my last review
92dfbdc to
43b2998
Compare
|
Merging as is today for an upcoming product review. Will update the copy in a separate PR once it is reviewed |
5851799 to
72e8f7e
Compare
|
Starting backport for target branches: 8.18, 8.x, 9.0 https://github.com/elastic/kibana/actions/runs/13251447155 |
💚 Build Succeeded
Metrics [docs]Async chunks
History
|
… entity flyouts (elastic#208287) ## Summary This PR updates the cloud insights in entity section to open to entity flyout. When examining the insights (for example, the host is shown to have 50 alerts, instead of opening the preview, and user click on the details and go to respective tabs, this PR updated the behavior to open the details tab via 1 click. The goal is to reduce friction for users during investigation. Feature flag: `newExpandableFlyoutNavigationEnabled` When flag is off: - Click on alert count should open timeline (if user has timeline privileage) - Click on misconfigurations and vulnerabilities badge should open host/user preview https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710 When flag is on: - Click on count badges should open the respective entity flyout and the insights details tab https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b ### Checklist - [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md) - [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios - [x] The PR description includes the appropriate Release Notes section, and the correct `release_note:*` label is applied per the [guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process) (cherry picked from commit 6e61f52)
💔 Some backports could not be created
Note: Successful backport PRs will be merged automatically after passing CI. Manual backportTo create the backport manually run: Questions ?Please refer to the Backport tool documentation |
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
… entity flyouts (elastic#208287) ## Summary This PR updates the cloud insights in entity section to open to entity flyout. When examining the insights (for example, the host is shown to have 50 alerts, instead of opening the preview, and user click on the details and go to respective tabs, this PR updated the behavior to open the details tab via 1 click. The goal is to reduce friction for users during investigation. Feature flag: `newExpandableFlyoutNavigationEnabled` When flag is off: - Click on alert count should open timeline (if user has timeline privileage) - Click on misconfigurations and vulnerabilities badge should open host/user preview https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710 When flag is on: - Click on count badges should open the respective entity flyout and the insights details tab https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b ### Checklist - [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md) - [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios - [x] The PR description includes the appropriate Release Notes section, and the correct `release_note:*` label is applied per the [guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process) (cherry picked from commit 6e61f52) # Conflicts: # x-pack/solutions/security/plugins/security_solution/public/flyout/document_details/shared/components/alert_count_insight.tsx
… entity flyouts (elastic#208287) ## Summary This PR updates the cloud insights in entity section to open to entity flyout. When examining the insights (for example, the host is shown to have 50 alerts, instead of opening the preview, and user click on the details and go to respective tabs, this PR updated the behavior to open the details tab via 1 click. The goal is to reduce friction for users during investigation. Feature flag: `newExpandableFlyoutNavigationEnabled` When flag is off: - Click on alert count should open timeline (if user has timeline privileage) - Click on misconfigurations and vulnerabilities badge should open host/user preview https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710 When flag is on: - Click on count badges should open the respective entity flyout and the insights details tab https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b ### Checklist - [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md) - [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios - [x] The PR description includes the appropriate Release Notes section, and the correct `release_note:*` label is applied per the [guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process) (cherry picked from commit 6e61f52) # Conflicts: # x-pack/solutions/security/plugins/security_solution/public/flyout/document_details/shared/components/alert_count_insight.tsx
…o open entity flyouts (#208287) (#210472) # Backport This will backport the following commits from `main` to `9.0`: - [[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)](#208287) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat Hunting","Team:Threat Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: christineweng <18648970+christineweng@users.noreply.github.com>
…o open entity flyouts (#208287) (#210476) # Backport This will backport the following commits from `main` to `8.x`: - [[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)](#208287) <!--- Backport version: 9.6.4 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat Hunting","Team:Threat Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210472","number":210472,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210475","number":210475,"state":"OPEN"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT-->
…to open entity flyouts (#208287) (#210475) # Backport This will backport the following commits from `main` to `8.18`: - [[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)](#208287) <!--- Backport version: 9.6.4 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-10T22:11:13Z","message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","v9.0.0","Team:Threat Hunting","Team:Threat Hunting:Investigations","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts","number":208287,"url":"https://github.com/elastic/kibana/pull/208287","mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210472","number":210472,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/208287","number":208287,"mergeCommit":{"message":"[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)\n\n## Summary\r\n\r\nThis PR updates the cloud insights in entity section to open to entity\r\nflyout. When examining the insights (for example, the host is shown to\r\nhave 50 alerts, instead of opening the preview, and user click on the\r\ndetails and go to respective tabs, this PR updated the behavior to open\r\nthe details tab via 1 click. The goal is to reduce friction for users\r\nduring investigation.\r\n\r\nFeature flag: `newExpandableFlyoutNavigationEnabled`\r\n\r\nWhen flag is off:\r\n- Click on alert count should open timeline (if user has timeline\r\nprivileage)\r\n- Click on misconfigurations and vulnerabilities badge should open\r\nhost/user preview\r\n\r\n\r\nhttps://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710\r\n\r\n\r\nWhen flag is on:\r\n- Click on count badges should open the respective entity flyout and the\r\ninsights details tab\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b\r\n\r\n\r\n### Checklist\r\n\r\n- [x] Any text added follows [EUI's writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\r\nsentence case text and includes [i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\r\n- [x] [Unit or functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere updated or added to match the most common scenarios\r\n- [x] The PR description includes the appropriate Release Notes section,\r\nand the correct `release_note:*` label is applied per the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6e61f526a75de7a654fbb0760edf2efec3a611bb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> --------- Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Summary
This PR updates the cloud insights in entity section to open to entity flyout. When examining the insights (for example, the host is shown to have 50 alerts, instead of opening the preview, and user click on the details and go to respective tabs, this PR updated the behavior to open the details tab via 1 click. The goal is to reduce friction for users during investigation.
Feature flag:
newExpandableFlyoutNavigationEnabledWhen flag is off:
Screen.Recording.2025-02-07.at.10.12.50.AM.mov
When flag is on:
Screen.Recording.2025-02-03.at.1.51.11.PM.mov
Checklist
release_note:*label is applied per the guidelines