Skip to content

[AI4DSOC] Disable actions and replace alerts table on the rule details page for AI4DSOC#219304

Closed
PhilippeOberti wants to merge 1 commit intoelastic:mainfrom
PhilippeOberti:rules-details-ai4dsoc
Closed

[AI4DSOC] Disable actions and replace alerts table on the rule details page for AI4DSOC#219304
PhilippeOberti wants to merge 1 commit intoelastic:mainfrom
PhilippeOberti:rules-details-ai4dsoc

Conversation

@PhilippeOberti
Copy link
Contributor

@PhilippeOberti PhilippeOberti commented Apr 25, 2025

Summary

This PR makes modifications to the rules details page when used in AI4DSOC (searchAiLake tier). It's a follow up to these recently merged PRs (this one and that one).

The PR applies the following changes:

  • disables the Edit rule settings button as this is not allowed in AI4DSOC. The button was not disabled but clicking on it navigated the user to a Page not found page which is not user friendly
  • disabled the Duplicate rule and Delete rule options in the action menu, as these actions should not be allowed in AI4DSOC either
  • replaces the content of the Alerts tab with the same alerts table we have in the Alert summary page. This prevents users from accessible flyouts like the user/host/network/alerts/event... This change is similar to the ones made in these previous PRs (this one for Cases and that one for Attack discovery). A follow up PR will clean all of these table up and merge them into a more reusable one.
Screen.Recording.2025-04-25.at.1.33.30.PM.mov

Checklist

@PhilippeOberti PhilippeOberti added release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting Team:Threat Hunting:Investigations Security Solution Threat Hunting Investigations Team Team:Security Generative AI Security Generative AI v9.1.0 labels Apr 25, 2025
@elasticmachine
Copy link
Contributor

elasticmachine commented Apr 25, 2025

🤖 Jobs for this PR can be triggered through checkboxes. 🚧

ℹ️ To trigger the CI, please tick the checkbox below 👇

  • Click to trigger kibana-pull-request for this PR!
  • Click to trigger kibana-deploy-project-from-pr for this PR!
  • Click to trigger kibana-deploy-cloud-from-pr for this PR!

@PhilippeOberti PhilippeOberti force-pushed the rules-details-ai4dsoc branch from e97a5b9 to 2da9ab3 Compare April 25, 2025 19:08
@PhilippeOberti PhilippeOberti force-pushed the rules-details-ai4dsoc branch from 2da9ab3 to fd5653f Compare April 25, 2025 19:10
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
securitySolution 7338 7340 +2

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 9.1MB 9.1MB +2.7KB

@PhilippeOberti
Copy link
Contributor Author

Closing this PR as after discussing with the rest of the team, the rules details is no longer accessible in AI4DSOC. See this PR that removes the link

@PhilippeOberti PhilippeOberti deleted the rules-details-ai4dsoc branch June 3, 2025 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Security Generative AI Security Generative AI Team:Threat Hunting:Investigations Security Solution Threat Hunting Investigations Team v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants