Skip to content

[Security Solution] fix wrong banner shown in Discover document flyout because of missing services#268249

Merged
PhilippeOberti merged 1 commit into
elastic:mainfrom
PhilippeOberti:fix-wrong-cps-banner
May 8, 2026
Merged

[Security Solution] fix wrong banner shown in Discover document flyout because of missing services#268249
PhilippeOberti merged 1 commit into
elastic:mainfrom
PhilippeOberti:fix-wrong-cps-banner

Conversation

@PhilippeOberti
Copy link
Copy Markdown
Contributor

@PhilippeOberti PhilippeOberti commented May 7, 2026

Summary

This PR makes a super small couple of changes:

Fix wrong banner message

Move the RemoteDocumentCallout inside the flyoutProviders to ensure that the services are setup correctly. There was an inconsistency when opening the flyout in Discover (which was showing This attack originates from a linked project. Some features may not be available.) and opening the same flyout in a Dashboard where Discover is embedded (which was showing This attack originates from a remote cluster. Some features may not be available.).

Remove the metadataCallout

Remove the EuiCallOut for missing metadata when the services or store aren't defined. This is for better consistency with the header and footer sections of the flyout, which are currently both returning null.

Checklist

  • Unit or functional tests were updated or added to match the most common scenarios
  • The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines
  • Review the backport guidelines and apply applicable backport:* labels.

@PhilippeOberti PhilippeOberti added release_note:fix Team:Threat Hunting Security Solution Threat Hunting Team backport:version Backport to applied version labels v9.4.1 labels May 7, 2026
@kibanamachine
Copy link
Copy Markdown
Contributor

@PhilippeOberti PhilippeOberti marked this pull request as ready for review May 8, 2026 18:58
@PhilippeOberti PhilippeOberti requested a review from a team as a code owner May 8, 2026 18:58
@infra-vault-gh-plugin-prod
Copy link
Copy Markdown

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@PhilippeOberti PhilippeOberti merged commit e465723 into elastic:main May 8, 2026
87 checks passed
@PhilippeOberti PhilippeOberti deleted the fix-wrong-cps-banner branch May 8, 2026 22:46
@kibanamachine
Copy link
Copy Markdown
Contributor

Starting backport for target branches: 9.4

https://github.com/elastic/kibana/actions/runs/25583252813

@kibanamachine
Copy link
Copy Markdown
Contributor

💔 All backports failed

Status Branch Result
9.4 Backport failed because of merge conflicts

Manual backport

To create the backport manually run:

node scripts/backport --pr 268249

Questions ?

Please refer to the Backport tool documentation

@PhilippeOberti
Copy link
Copy Markdown
Contributor Author

💚 All backports created successfully

Status Branch Result
9.4

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label May 11, 2026
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has a backport PR but it still hasn't been merged. Please merge it ASAP to keep the branches relatively in sync.
cc: @PhilippeOberti

PhilippeOberti added a commit that referenced this pull request May 12, 2026
… flyout because of missing services (#268249) (#268749)

# Backport

This will backport the following commits from `main` to `9.4`:
- [[Security Solution] fix wrong banner shown in Discover document
flyout because of missing services
(#268249)](#268249)

<!--- Backport version: 11.0.2 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Philippe
Oberti","email":"philippe.oberti@elastic.co"},"sourceCommit":{"committedDate":"2026-05-08T22:46:54Z","message":"[Security
Solution] fix wrong banner shown in Discover document flyout because of
missing services (#268249)\n\n## Summary\n\nThis PR makes a super small
couple of changes:\n\n#### Fix wrong banner message\n\nMove the
`RemoteDocumentCallout` inside the `flyoutProviders` to ensure\nthat the
`services` are setup correctly. There was an inconsistency when\nopening
the flyout in Discover (which was showing `This attack\noriginates from
a linked project. Some features may not be available.`)\nand opening the
same flyout in a Dashboard where Discover is embedded\n(which was
showing `This attack originates from a remote cluster. Some\nfeatures
may not be available.`).\n\n#### Remove the `metadataCallout`\n\nRemove
the `EuiCallOut` for missing metadata when the `services` or\n`store`
aren't defined. This is for better consistency with the header\nand
footer sections of the flyout, which are currently both
returning\n`null`.\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"e46572362f52cd7769e787eeafce1e2b3abc06e9","branchLabelMapping":{"^v9.5.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Threat
Hunting","backport:version","v9.5.0","v9.4.1"],"title":"[Security
Solution] fix wrong banner shown in Discover document flyout because of
missing
services","number":268249,"url":"https://github.com/elastic/kibana/pull/268249","mergeCommit":{"message":"[Security
Solution] fix wrong banner shown in Discover document flyout because of
missing services (#268249)\n\n## Summary\n\nThis PR makes a super small
couple of changes:\n\n#### Fix wrong banner message\n\nMove the
`RemoteDocumentCallout` inside the `flyoutProviders` to ensure\nthat the
`services` are setup correctly. There was an inconsistency when\nopening
the flyout in Discover (which was showing `This attack\noriginates from
a linked project. Some features may not be available.`)\nand opening the
same flyout in a Dashboard where Discover is embedded\n(which was
showing `This attack originates from a remote cluster. Some\nfeatures
may not be available.`).\n\n#### Remove the `metadataCallout`\n\nRemove
the `EuiCallOut` for missing metadata when the `services` or\n`store`
aren't defined. This is for better consistency with the header\nand
footer sections of the flyout, which are currently both
returning\n`null`.\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"e46572362f52cd7769e787eeafce1e2b3abc06e9"}},"sourceBranch":"main","suggestedTargetBranches":["9.4"],"targetPullRequestStates":[{"branch":"main","label":"v9.5.0","branchLabelMappingKey":"^v9.5.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/268249","number":268249,"mergeCommit":{"message":"[Security
Solution] fix wrong banner shown in Discover document flyout because of
missing services (#268249)\n\n## Summary\n\nThis PR makes a super small
couple of changes:\n\n#### Fix wrong banner message\n\nMove the
`RemoteDocumentCallout` inside the `flyoutProviders` to ensure\nthat the
`services` are setup correctly. There was an inconsistency when\nopening
the flyout in Discover (which was showing `This attack\noriginates from
a linked project. Some features may not be available.`)\nand opening the
same flyout in a Dashboard where Discover is embedded\n(which was
showing `This attack originates from a remote cluster. Some\nfeatures
may not be available.`).\n\n#### Remove the `metadataCallout`\n\nRemove
the `EuiCallOut` for missing metadata when the `services` or\n`store`
aren't defined. This is for better consistency with the header\nand
footer sections of the flyout, which are currently both
returning\n`null`.\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"e46572362f52cd7769e787eeafce1e2b3abc06e9"}},{"branch":"9.4","label":"v9.4.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
@kibanamachine kibanamachine removed the backport missing Added to PRs automatically when the are determined to be missing a backport. label May 12, 2026
clintandrewhall pushed a commit that referenced this pull request May 12, 2026
…t because of missing services (#268249)

## Summary

This PR makes a super small couple of changes:

#### Fix wrong banner message

Move the `RemoteDocumentCallout` inside the `flyoutProviders` to ensure
that the `services` are setup correctly. There was an inconsistency when
opening the flyout in Discover (which was showing `This attack
originates from a linked project. Some features may not be available.`)
and opening the same flyout in a Dashboard where Discover is embedded
(which was showing `This attack originates from a remote cluster. Some
features may not be available.`).

#### Remove the `metadataCallout`

Remove the `EuiCallOut` for missing metadata when the `services` or
`store` aren't defined. This is for better consistency with the header
and footer sections of the flyout, which are currently both returning
`null`.

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels release_note:fix Team:Threat Hunting Security Solution Threat Hunting Team v9.4.2 v9.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants