Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Alerting] Editing stack rules should provide warning if fields have unexpected mapping #95523

Open
ymao1 opened this issue Mar 26, 2021 · 2 comments
Labels
estimate:small Small Estimated Level of Effort Feature:Alerting/RuleTypes Issues related to specific Alerting Rules Types Feature:Alerting Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) UX

Comments

@ymao1
Copy link
Contributor

ymao1 commented Mar 26, 2021

As part of this investigation, we have determined that the stack rules UI for index threshold and es query handle index pattern changes gracefully, perhaps a little too gracefully?

The UI filters out the fields available for the rule params based on mapping type, so only date type fields are shown in the timestamp selection, only numeric fields are shown in the metric agg selection, only keyword fields are shown in the group by selection. If after creating a rule, the mapping for a selected type changes (either deleted or changed to a different type), and you edit the rule type, there is no indication that the field you originally selected for the rule has changed or is missing. It is only if you want to change the field that you might (or might not) notice that the original field you selected is missing from the dropdown.

It might be helpful to provide some sort of warning when editing if the field you originally selected for the rule is no longer valid.

@ymao1 ymao1 added Feature:Alerting Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) labels Mar 26, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-alerting-services (Team:Alerting Services)

@gmmorris gmmorris added the Feature:Alerting/RuleTypes Issues related to specific Alerting Rules Types label Jul 1, 2021
@gmmorris gmmorris added loe:needs-research This issue requires some research before it can be worked on or estimated loe:medium Medium Level of Effort and removed loe:needs-research This issue requires some research before it can be worked on or estimated labels Jul 15, 2021
@gmmorris gmmorris added UX Debt UX estimate:small Small Estimated Level of Effort and removed UX Debt labels Aug 13, 2021
@gmmorris gmmorris removed the loe:medium Medium Level of Effort label Sep 2, 2021
@kobelb kobelb added the needs-team Issues missing a team label label Jan 31, 2022
@botelastic botelastic bot removed the needs-team Issues missing a team label label Jan 31, 2022
@mikecote
Copy link
Contributor

Linking with #95520.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
estimate:small Small Estimated Level of Effort Feature:Alerting/RuleTypes Issues related to specific Alerting Rules Types Feature:Alerting Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) UX
Projects
No open projects
Development

No branches or pull requests

5 participants