[SigEvents] Add callout with working promote action.#260433
[SigEvents] Add callout with working promote action.#260433mykolaharmash merged 9 commits intoelastic:mainfrom
Conversation
...ublic/components/sig_events/stream_detail_significant_events_view/suggested_rules_flyout.tsx
Outdated
Show resolved
Hide resolved
c9ff5d7 to
77973a4
Compare
77973a4 to
37852d3
Compare
ApprovabilityVerdict: Needs human review This PR introduces a new feature that allows users to promote queries to rules via a new promotion callout and flyout UI. The changes introduce new user-facing behavior with API mutations that create rules, and the author does not own any of the affected files (all owned by @elastic/obs-sig-events-team). The designated team should review this new capability. You can customize Macroscope's approvability policy. Learn more. |
|
One thing I noticed testing this pull request is that when a rule is deleted, also the query is deleted. This is should not be the case. Likely this is not related to this pull request but we should follow up on that. Also right now, all rules are promoted but we had some discussion, that only high and critical should be promoted by default. This can also happen as a follow up. |
ruflin
left a comment
There was a problem hiding this comment.
PR works as expected. See follow up comments for a next PR.
💚 Build Succeeded
Metrics [docs]Module Count
Async chunks
History
|
…heck * commit 'af66aadafa7470ca8ba3e3edd3793bde81fa4596': (31 commits) [Scout] Update test config manifests (elastic#260850) [SLO]: register alerts schema embeddable (elastic#256570) [Discover][Flyout] Update overview fields table with new prop headerVisibility set to false (elastic#260692) [AiButton/Security] Migrate ai-related buttons to use custom styles (elastic#259847) [One Workflow] Fix connector step icons falling back to generic plugs in YAML editor (elastic#260785) [Agent Builder] Dashboard skill: Guard against editing non-ESQL based panels (elastic#260714) Security quality gate Cypress cleanup - Periodic Pipeline (elastic#260820) [Search] Deprecate search indices in favour of index management (elastic#260210) Upgrade dependency @elastic/charts to v71.4.0 (elastic#260593) [Security Solution] [HDQ]: integration-based targeting and descriptor versioning (elastic#258418) docs(saved-objects): consolidate docs and document scoped vs system client (elastic#260743) Fix observability UIAM config and add CPS observability variant (elastic#260485) [Security Solution] Add "matched_indices_count" rule execution metric (elastic#259938) [SigEvents] Add callout with working promote action. (elastic#260433) [Alerting V2] Episode table actions (elastic#260195) [Automatic Migration] Add ability to skip Reference Set step in QRadar upload workflow (elastic#259959) [Rules] KQL-to-DSL conversion without data view produces incorrect queries for keyword fields for Metric threshold rule (elastic#260046) Update dependency lightningcss to v1.32.0 (main) (elastic#259017) Update postcss (main) (elastic#255420) Migrate server-side apm.addLabels to OTel dual-write helpers (elastic#259619) ...
Closes elastic/streams-program#1071 This is a follow up change after [the unified KIs table](elastic#259553). * Adds a promotion callout for all unbacked queries * Adds flyout to inspect/delete suggested queries * Cleans up a few obsolete files https://github.com/user-attachments/assets/42f622ee-79de-4a2b-82ac-6948592da8c7 --------- Co-authored-by: Mykola Harmash <mykola.harmash@elastic.co> Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
Closes https://github.com/elastic/streams-program/issues/1071
This is a follow up change after the unified KIs table.
CleanShot.2026-04-01.at.14.12.36.mp4