Skip to content

Conversation

@jcger
Copy link
Contributor

@jcger jcger commented Dec 19, 2025

Summary

Closes #247030

Screenshot after fix Screenshot 2025-12-19 at 12 26 27

The reason field can be a very long text with long unbreakable segments in it (URLs, comma separated values). I added a wrapping class that takes care of that via css, it effectively adds:

word-break: break-word;
overflow-wrap: break-word;

These CSS properties have zero visible effect on content that doesn't need to break - short text, numbers, badges, links all render exactly the same. The CSS only kicks in when there's actually a long unbreakable string.
The overhead of one extra <div> per row is negligible.

Example of broken reason field content:

Document count is 1 in the last 5m for 2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT (-82.52886139 42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win 7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z. Alert when greater than 0.

@jcger jcger added bug Fixes for quality problems that affect the customer experience release_note:skip Skip the PR/issue when compiling release notes Team:ResponseOps Platform ResponseOps team (formerly the Cases and Alerting teams) t// backport:version Backport to applied version labels v9.3.0 v9.2.4 labels Dec 19, 2025
@jcger jcger marked this pull request as ready for review December 19, 2025 11:10
@jcger jcger requested a review from a team as a code owner December 19, 2025 11:10
@elasticmachine
Copy link
Contributor

Pinging @elastic/response-ops (Team:ResponseOps)

Copy link
Contributor

@js-jankisalvi js-jankisalvi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified locally, works as expected 👍

@jcger jcger enabled auto-merge (squash) December 19, 2025 12:06
@jcger jcger merged commit 2b31b97 into elastic:main Dec 19, 2025
13 checks passed
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 9.1, 9.2, 9.3

https://github.com/elastic/kibana/actions/runs/20371642074

@elasticmachine
Copy link
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #73 / discover/esql Index editor allows editing an existing index

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
cases 1.4MB 1.4MB +49.0B
embeddableAlertsTable 1017.0KB 1017.1KB +49.0B
ml 5.6MB 5.6MB +49.0B
observability 1.7MB 1.7MB +49.0B
securitySolution 10.8MB 10.8MB +49.0B
triggersActionsUi 1.5MB 1.5MB +49.0B
total +294.0B

History

kibanamachine added a commit to kibanamachine/kibana that referenced this pull request Dec 19, 2025
## Summary

Closes elastic#247030

<details>
  <summary>Screenshot after fix</summary>
<img width="1261" height="1115" alt="Screenshot 2025-12-19 at 12 26 27"
src="https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791"
/>

</details>

The `reason` field can be a very long text with long unbreakable
segments in it (URLs, comma separated values). I added a wrapping class
that takes care of that via css, it effectively adds:

```
word-break: break-word;
overflow-wrap: break-word;
```

These CSS properties have zero visible effect on content that doesn't
need to break - short text, numbers, badges, links all render exactly
the same. The CSS only kicks in when there's actually a long unbreakable
string.
The overhead of one extra `<div>` per row is negligible.

Example of broken `reason` field content:
```
Document count is 1 in the last 5m for 2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT (-82.52886139 42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win 7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z. Alert when greater than 0.
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 2b31b97)
kibanamachine added a commit to kibanamachine/kibana that referenced this pull request Dec 19, 2025
## Summary

Closes elastic#247030

<details>
  <summary>Screenshot after fix</summary>
<img width="1261" height="1115" alt="Screenshot 2025-12-19 at 12 26 27"
src="https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791"
/>

</details>

The `reason` field can be a very long text with long unbreakable
segments in it (URLs, comma separated values). I added a wrapping class
that takes care of that via css, it effectively adds:

```
word-break: break-word;
overflow-wrap: break-word;
```

These CSS properties have zero visible effect on content that doesn't
need to break - short text, numbers, badges, links all render exactly
the same. The CSS only kicks in when there's actually a long unbreakable
string.
The overhead of one extra `<div>` per row is negligible.

Example of broken `reason` field content:
```
Document count is 1 in the last 5m for 2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT (-82.52886139 42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win 7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z. Alert when greater than 0.
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 2b31b97)
@kibanamachine
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
9.1 Backport failed because of merge conflicts

You might need to backport the following PRs to 9.1:
- [Infra] remove unnecessary await (#246578)
- [ResponseOps][Rules] Tags combobox container doesn't take badge sizes into account and wraps to a new line (#247009)
- [Defend Workflows] Fix endpoint list API to mirror exception list API (#246019)
- [FSH] Moved package_installer to @kbn/fs usage (#245664)
- Address @elastic/eui/require-table-caption lint violations across @elastic/security-entity-analytics files (#246172)
9.2
9.3

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 247055

Questions ?

Please refer to the Backport tool documentation

@jcger
Copy link
Contributor Author

jcger commented Dec 19, 2025

💚 All backports created successfully

Status Branch Result
9.1

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

jcger added a commit to jcger/kibana that referenced this pull request Dec 19, 2025
## Summary

Closes elastic#247030

<details>
  <summary>Screenshot after fix</summary>
<img width="1261" height="1115" alt="Screenshot 2025-12-19 at 12 26 27"
src="https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791"
/>

</details>

The `reason` field can be a very long text with long unbreakable
segments in it (URLs, comma separated values). I added a wrapping class
that takes care of that via css, it effectively adds:

```
word-break: break-word;
overflow-wrap: break-word;
```

These CSS properties have zero visible effect on content that doesn't
need to break - short text, numbers, badges, links all render exactly
the same. The CSS only kicks in when there's actually a long unbreakable
string.
The overhead of one extra `<div>` per row is negligible.

Example of broken `reason` field content:
```
Document count is 1 in the last 5m for 2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT (-82.52886139 42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win 7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z. Alert when greater than 0.
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 2b31b97)

# Conflicts:
#	src/platform/packages/shared/response-ops/alerts-table/components/alert_detail_flyout.tsx
kibanamachine added a commit that referenced this pull request Dec 19, 2025
# Backport

This will backport the following commits from `main` to `9.2`:
- [[ResponseOps][Rules] Fix alert detail flyout
(#247055)](#247055)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julian
Gernun","email":"17549662+jcger@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-12-19T13:35:42Z","message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704","branchLabelMapping":{"^v9.4.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","Team:ResponseOps","backport:version","v9.3.0","v9.4.0","v9.2.4","v9.1.10"],"title":"[ResponseOps][Rules]
Fix alert detail flyout
","number":247055,"url":"https://github.com/elastic/kibana/pull/247055","mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},"sourceBranch":"main","suggestedTargetBranches":["9.3","9.2","9.1"],"targetPullRequestStates":[{"branch":"9.3","label":"v9.3.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.4.0","branchLabelMappingKey":"^v9.4.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/247055","number":247055,"mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},{"branch":"9.2","label":"v9.2.4","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.10","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Julian Gernun <17549662+jcger@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Dec 19, 2025
# Backport

This will backport the following commits from `main` to `9.3`:
- [[ResponseOps][Rules] Fix alert detail flyout
(#247055)](#247055)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julian
Gernun","email":"17549662+jcger@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-12-19T13:35:42Z","message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704","branchLabelMapping":{"^v9.4.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","Team:ResponseOps","backport:version","v9.3.0","v9.4.0","v9.2.4","v9.1.10"],"title":"[ResponseOps][Rules]
Fix alert detail flyout
","number":247055,"url":"https://github.com/elastic/kibana/pull/247055","mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},"sourceBranch":"main","suggestedTargetBranches":["9.3","9.2","9.1"],"targetPullRequestStates":[{"branch":"9.3","label":"v9.3.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.4.0","branchLabelMappingKey":"^v9.4.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/247055","number":247055,"mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},{"branch":"9.2","label":"v9.2.4","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.10","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Julian Gernun <17549662+jcger@users.noreply.github.com>
jcger added a commit that referenced this pull request Dec 19, 2025
# Backport

This will backport the following commits from `main` to `9.1`:
- [[ResponseOps][Rules] Fix alert detail flyout
(#247055)](#247055)

<!--- Backport version: 10.2.0 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julian
Gernun","email":"17549662+jcger@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-12-19T13:35:42Z","message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704","branchLabelMapping":{"^v9.4.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","Team:ResponseOps","backport:version","v9.3.0","v9.4.0","v9.2.4","v9.1.10"],"title":"[ResponseOps][Rules]
Fix alert detail flyout
","number":247055,"url":"https://github.com/elastic/kibana/pull/247055","mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},"sourceBranch":"main","suggestedTargetBranches":["9.1"],"targetPullRequestStates":[{"branch":"9.3","label":"v9.3.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/247092","number":247092,"state":"OPEN"},{"branch":"main","label":"v9.4.0","branchLabelMappingKey":"^v9.4.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/247055","number":247055,"mergeCommit":{"message":"[ResponseOps][Rules]
Fix alert detail flyout (#247055)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/247030\n\n<details>\n
<summary>Screenshot after fix</summary>\n<img width=\"1261\"
height=\"1115\" alt=\"Screenshot 2025-12-19 at 12 26
27\"\nsrc=\"https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791\"\n/>\n\n</details>\n\nThe
`reason` field can be a very long text with long unbreakable\nsegments
in it (URLs, comma separated values). I added a wrapping class\nthat
takes care of that via css, it effectively adds:\n\n```\nword-break:
break-word;\noverflow-wrap: break-word;\n```\n\nThese CSS properties
have zero visible effect on content that doesn't\nneed to break - short
text, numbers, badges, links all render exactly\nthe same. The CSS only
kicks in when there's actually a long unbreakable\nstring.\nThe overhead
of one extra `<div>` per row is negligible.\n\nExample of broken
`reason` field content:\n```\nDocument count is 1 in the last 5m for
2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR
1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT
(-82.52886139
42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win
7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] \"GET
/site-search HTTP/1.1\" 200 680 \"-\" \"Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\",78.218.15.245 - -
[2018-08-03T10:32:24.229Z] \"GET /site-search HTTP/1.1\" 200 680 \"-\"
\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)\",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z.
Alert when greater than 0.\n```\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"2b31b9712ef09b77e3f5d83e38bbd5625744d704"}},{"branch":"9.2","label":"v9.2.4","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/247091","number":247091,"state":"OPEN"},{"branch":"9.1","label":"v9.1.10","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
CAWilson94 pushed a commit to CAWilson94/kibana that referenced this pull request Jan 6, 2026
## Summary

Closes elastic#247030

<details>
  <summary>Screenshot after fix</summary>
<img width="1261" height="1115" alt="Screenshot 2025-12-19 at 12 26 27"
src="https://github.com/user-attachments/assets/59d22e6a-69c1-47ac-b7e6-5e1b7441d791"
/>

</details>

The `reason` field can be a very long text with long unbreakable
segments in it (URLs, comma separated values). I added a wrapping class
that takes care of that via css, it effectively adds:

```
word-break: break-word;
overflow-wrap: break-word;
```

These CSS properties have zero visible effect on content that doesn't
need to break - short text, numbers, badges, links all render exactly
the same. The CSS only kicks in when there's actually a long unbreakable
string.
The overhead of one extra `<div>` per row is negligible.

Example of broken `reason` field content:
```
Document count is 1 in the last 5m for 2025-12-19T10:32:24.229Z,Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322),680,16099067,680,78.218.15.245,sample_web_logs,,,POINT (-82.52886139 42.91095778),US,US,US:US,www.elastic.co,www.elastic.co,kibana_sample_data_logs,kibana_sample_data_logs,78.218.15.245,win 7,win 7,18253611008,78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",78.218.15.245 - - [2018-08-03T10:32:24.229Z] "GET /site-search HTTP/1.1" 200 680 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)",http://twitter.com/success/nikolai-budarin,/site-search,/site-search,200,200,success,info,info,success,2025-12-19T10:32:24.229Z,https://www.elastic.co/solutions/site-search,https://www.elastic.co/solutions/site-search,2025-12-19T10:32:24.229Z. Alert when greater than 0.
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels bug Fixes for quality problems that affect the customer experience release_note:skip Skip the PR/issue when compiling release notes Team:ResponseOps Platform ResponseOps team (formerly the Cases and Alerting teams) t// v9.1.9 v9.1.10 v9.2.3 v9.2.4 v9.3.0 v9.4.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[ResponseOps][Rules] Alert detail flyout - broken css

4 participants