[Security Solution] Update Timeline tooltips to use action words / fewer words

[andrew-goldstein]

Update the row-level action button tooltips in Timeline to use action words / fewer words, per the EUI Guidelines which state:

Labels should provide a clear indication of that action that occurs when the user clicks the button. Prefer action words, and include an object when it is not clear from the context, for example, Add dashboard. Labels should be three words or fewer. If your label requires more words, consider using a text link instead.

1. Per the screenshot below, unpinned alerts and events currently display a tooltip that reads Unpinned event:

• Changing the tooltip above to Pin alert would provide a clear indication of the action that occurs when the user clicks the button
• When an alert is already pinned, changing the tooltip to Unpin alert would similarly provide a clear indication what happens when the button is clicked

2. The notes button tooltip currently reads Add notes for this event, per the screenshot below:

• Per the Labels should be three words or fewer guidance above, Add note would suffice

Kibana/Elasticsearch Stack version:

8.1.0

Steps to reproduce:

1. Add an alert from Security > Alerts to a timeline

2. Hover over an unpinned alert

Expected result

• The tooltip text is Pin alert

Actual result

• The tooltip text is Unpinned event

3. Pin an alert

4. Hover over the pinned alert

Expected result

• The tooltip text is Unpin alert

Actual result

• The tooltip text is Pinned event

5. Hover over the notes button

Expected result

• The tooltip text is Add note

Actual result

• The tooltip text is Add notes for this event

6. Add an event from Hosts > Events to a timeline

7. Hover over an unpinned event

Expected result

• The tooltip text is Pin event

Actual result

• The tooltip text is Unpinned event

8. Pin an event

9. Hover over the pinned event

Expected result

• The tooltip text is Unpin event

Actual result

• The tooltip text is Pinned event

10. Hover over the notes button

Expected result

• The tooltip text is Add note

Actual result

• The tooltip text is Add notes for this event

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[andrew-goldstein]

The fix for this issue is merged to:

• main / v8.3.0 [Security Solution] Updates Timeline tooltips to use action words / fewer words #132756

[ghost]

Hi @MadameSheema ,

We have validated above issue on 8.3.0 BC2 and it's fixed. 🟢

Build Details:

Version: 8.3.0 BC2
Build: 53231
Commit: 25476b531ba9f32292bde85508d342aa5e1c29eb

Screenshots:

Hence, we are closing this issue and marking this as QA Validated.

Thanks !