[Security Solution] Refactor forms logic on Rule Creation, Edit and Details pages, and overlap with Bulk Actions #151202
Labels
Feature:Rule Actions
Security Solution Rule Actions feature
Feature:Rule Creation
Security Solution Detection Rule Creation
Feature:Rule Details
Security Solution Detection Rule Details
refactoring
Team:Detection Rule Management
Security Detection Rule Management Team
Team:Detections and Resp
Security Detection Response Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
technical debt
Improvement of the software architecture and operational architecture
Creating this issue as an outcome of working #149885 and complexities in tracking down the root cause of stale events in the Edit Rule Actions flow as detailed in #142217.
It's been some time (~3 years) since the Rule Creation/Edit flows (and subsequently Rule Details as it's a read-only representation of the former) were created, and since then there have been continuous updates and enhancements to the underlying ES UI: Form lib (internal docs). This tech debt issue is for revisiting our architecture between these pages/flows, and refactoring to have a better integration between the form lib, the
trigger_actions_ui
components used for actions, and the different security components used here and within the Bulk Actions flyout.For additional context, please see the following issues/PR's:
And note that as per the form libs docs:
Please see these references of
useFormData
in theabout
,define
,schedule
, andactions
steps.Additionally, there are a few inconsistencies in how we manage errors between the
Bulk Actions
flyout UI and theEdit Rule
UI. Currently theEdit Rule
UI will validate the whole action on connector selection and display the error callout immediately (instead of waiting for form submission or loss of focus from the new fields just added), and theBulk Actions
UI does the opposite and doesn't always show the error and will fall back to showing an error toast from the failed http request (not always validating on submit, depends on form state).The text was updated successfully, but these errors were encountered: