Skip to content

[7.x] [SIEM] Remove placeholder from pinned event tooltips (#52361)#52390

Merged
andrew-goldstein merged 1 commit into
elastic:7.xfrom
andrew-goldstein:backport/7.x/pr-52361
Dec 6, 2019
Merged

[7.x] [SIEM] Remove placeholder from pinned event tooltips (#52361)#52390
andrew-goldstein merged 1 commit into
elastic:7.xfrom
andrew-goldstein:backport/7.x/pr-52361

Conversation

@andrew-goldstein
Copy link
Copy Markdown
Contributor

Backports the following commits to 7.x:

Similar to signals, pinned timeline events should be copied from source indexes, which are subject to ILM, to separate (space-aware) indexes (with different ILM), such that pinned events can be viewed in a timeline after the events have aged out of the original indexes.

The backend APIs and UI patterns in development now for signals can likely be reused to implement the above, but until then, the placeholder tooltip text for unpinned / pinned events, which mentions persistence, should be removed from the SIEM beta.

- [x] Changed the _unpinned_ event tooltip text from (sic) `This is event is NOT persisted with the timeline` to `Unpinned event`
- [x] Changed the pinned event tooltip text from `This event is persisted with the timeline` to `Pinned event`

elastic/siem-team#482
@andrew-goldstein andrew-goldstein added the backport This PR is a backport of another PR label Dec 6, 2019
@elasticmachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

@andrew-goldstein andrew-goldstein merged commit 1059283 into elastic:7.x Dec 6, 2019
@andrew-goldstein andrew-goldstein deleted the backport/7.x/pr-52361 branch December 6, 2019 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants