Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SecuritySolution] Add session ID to highlighted fields #132219

Conversation

janmonschke
Copy link
Contributor

Summary

In order to highlight the amount of alerts that were generated in the same session, we're adding the session (leader) id to the highlighted fields in the alert flyout. (see #131943)

Screenshot 2022-05-16 at 12 03 08

Note: The copy Session ID is still pending review from @paulewing

Checklist

Delete any items that are not applicable to this PR.

@janmonschke janmonschke added release_note:enhancement backport:skip This commit does not require backporting Team:Threat Hunting:Investigations Security Solution Investigations Team v8.3.0 labels May 16, 2022
@janmonschke janmonschke requested a review from a team as a code owner May 16, 2022 10:05
@janmonschke janmonschke self-assigned this May 16, 2022
@janmonschke
Copy link
Contributor Author

@elasticmachine merge upstream

@@ -9,6 +9,12 @@ export const mockAlertDetailsData = [
{ category: 'process', field: 'process.name', values: ['-'], originalValue: '-' },
{ category: 'process', field: 'process.pid', values: [0], originalValue: 0 },
{ category: 'process', field: 'process.executable', values: ['-'], originalValue: '-' },
{
category: 'process',
field: 'process.entry_leader.entity_id',
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's just confirm with the AWP team that this value is the best one for us to use. I think so, but want to make sure nothing has changed

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Confirmed with them offline 👍

Copy link
Contributor

@michaelolo24 michaelolo24 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code looks good, just want to get the confirmation that we're using the right field!

@janmonschke
Copy link
Contributor Author

@elasticmachine merge upstream

@janmonschke
Copy link
Contributor Author

@elasticmachine merge upstream

@janmonschke
Copy link
Contributor Author

@elasticmachine merge upstream

@kibana-ci
Copy link
Collaborator

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 5.0MB 5.0MB +180.0B

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @janmonschke

@janmonschke
Copy link
Contributor Author

Received an offline approval for the copy 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:skip This commit does not require backporting release_note:enhancement Team:Threat Hunting:Investigations Security Solution Investigations Team v8.3.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants