Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cell actions being added to more places in Security app #3296

Merged
merged 11 commits into from
May 22, 2023

Conversation

joepeeples
Copy link
Contributor

@joepeeples joepeeples commented May 17, 2023

Resolves #2953.

Previews:

@joepeeples joepeeples added Team: Threat Hunting Formerly Data Visibility v8.8.0 labels May 17, 2023
@joepeeples joepeeples self-assigned this May 17, 2023
@github-actions
Copy link

Documentation previews:

@joepeeples joepeeples marked this pull request as ready for review May 18, 2023 16:10
@semd semd requested a review from stephmilovic May 18, 2023 16:24

* *Filter In*: Add a filter that includes the selected value.
* *Filter Out*: Add a filter that excludes the selected value.
* *Add to timeline*: Launch Timeline and populate a query with the selected value.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have 2 kinds of actions which add filters to the Timeline:

  • Investigate in Timeline: Clears the Timeline, adds the cell filter(s) to timeline and automatically opens the timeline. It is used in the Detecion & Response dashboard, and in the Entity Analytics dashboard. (there are also "row actions" in the first column of the alerts/events tables that do the same thing, but those are not CellActions)

  • Add to Timeline: Adds the cell filter(s) to Timeline without clearing the previous values, and it does not open the timeline. It is used everywhere else, alerts/events table cells, visualizations legends, details flyouts...

@stephmilovic did I miss anything?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the clarification, @semd! I think we have Investigate in Timeline covered correctly in other parts of the docs, and this commit corrects the docs for Add to timeline: 13bcd00

Copy link
Contributor

@benironside benironside left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a few suggestions for your consideration, thanks! Good call on creating a dedicated spot to describe this feature

docs/dashboards/detection-response-dashboard.asciidoc Outdated Show resolved Hide resolved
docs/dashboards/entity-dashboard.asciidoc Outdated Show resolved Hide resolved
docs/detections/alerts-ui-manage.asciidoc Outdated Show resolved Hide resolved
docs/detections/alerts-ui-manage.asciidoc Outdated Show resolved Hide resolved
docs/detections/alerts-view-details.asciidoc Show resolved Hide resolved
docs/getting-started/security-ui.asciidoc Outdated Show resolved Hide resolved
joepeeples and others added 4 commits May 22, 2023 10:44
Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>
Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>
Copy link
Contributor

@semd semd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@nastasha-solomon nastasha-solomon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just have the one question - lgtm otherwise!

docs/getting-started/security-ui.asciidoc Outdated Show resolved Hide resolved
Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>
Copy link
Contributor

@jmikell821 jmikell821 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two small suggestions, then this is good to go. Thanks!

docs/getting-started/security-ui.asciidoc Outdated Show resolved Hide resolved
docs/getting-started/security-ui.asciidoc Outdated Show resolved Hide resolved
@joepeeples
Copy link
Contributor Author

@elasticmachine run elasticsearch-ci/docs

@joepeeples joepeeples merged commit 90ab9e4 into main May 22, 2023
@joepeeples joepeeples deleted the 2953-inline-cell-actions branch May 22, 2023 23:31
mergify bot pushed a commit that referenced this pull request May 22, 2023
* First draft

* Small edits

* Moar actions, edits

* Apply suggestions from Ben's review

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>

* Apply suggestions from Ben's review

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>

* Correct description for Add to timeline

* Update docs/getting-started/security-ui.asciidoc

* Update docs/getting-started/security-ui.asciidoc

Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>

* Apply suggestions from Janeen's review

Co-authored-by: Janeen Mikell Roberts <57149392+jmikell821@users.noreply.github.com>

---------

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>
Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>
Co-authored-by: Janeen Mikell Roberts <57149392+jmikell821@users.noreply.github.com>
(cherry picked from commit 90ab9e4)
joepeeples added a commit that referenced this pull request May 22, 2023
* First draft

* Small edits

* Moar actions, edits

* Apply suggestions from Ben's review

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>

* Apply suggestions from Ben's review

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>

* Correct description for Add to timeline

* Update docs/getting-started/security-ui.asciidoc

* Update docs/getting-started/security-ui.asciidoc

Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>

* Apply suggestions from Janeen's review

Co-authored-by: Janeen Mikell Roberts <57149392+jmikell821@users.noreply.github.com>

---------

Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com>
Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>
Co-authored-by: Janeen Mikell Roberts <57149392+jmikell821@users.noreply.github.com>
(cherry picked from commit 90ab9e4)

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>
@joepeeples joepeeples mentioned this pull request May 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team: Threat Hunting Formerly Data Visibility v8.8.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cell actions being added to more places in Security app
5 participants