[Logs UI] [Test Scenario] Log threshold alerts (count configuration)

[mgiota]

Summary

This test scenario covers count configurations for log threshold alerts.

Test requirements

Testing of alerting requires SSL. You can enable this with:

• yarn start --ssl
• yarn es snapshot --ssl
• ssl.verification_mode: none within the Filebeat configuration

There are also enhanced details here: https://github.com/elastic/observability-dev/issues/849#issuecomment-626770782.

Test cases

Configuration

• The count can be configured with multiple comparators
• Condition comparators should change based on the field type (numeric fields, aggregatable fields, and non-aggregatable fields should yield compatible comparators)
• Multiple conditions can be added
• Conditions can be removed
• Group by
  • One grouping can be set
  • Multiple groupings can be set
  • Groupings can be removed
• A chart preview can be toggled for each condition 🆕
  • This chart should be collapsed by default 🆕
  • Previews change based on whether a group by is set 🆕
  • When a threshold is configured this is displayed on the chart preview 🆕
• UI warning when a group by has been set
  • a UI warning appears when using unoptimised (anything that can evaluate 0 as a threshold) threshold comparators
  • no UI warning appears when using the more than comparator for the threshold

Triggering

• Alerts should fire when the configured condition(s) are met

Change history

7.14.0 (this)

• Performance improvements and a UI warning when a group by has been set with an unoptimised comparator ([Logs UI] Log threshold rule performance improvements #102650)

7.10.0

• Added chart previews ([Logs UI] Log alerts chart previews #75296)
• Added ratio configurations ([Logs UI] Log threshold ratio alerts #76867)
• Added timestamp context variable ([Logs UI] Add timestamp as a context variable to log threshold alerts #78932)

7.9.0 (#974)

• Added support for "group by" in logs alerts ([Logs UI] [Alerting] "Group by" functionality #68250)

7.8.0 (#849)

• Added initial logs alerts implementation ([Logs UI] Alerting #62806)

[elasticmachine]

Pinging @elastic/logs-metrics-ui (Team:logs-metrics-ui)