Introduce hook to rediect to alerts page from within security solution and implement in Detection Response dashboard

[jamster10]

Summary

Built upon @logeekal 's work, this PR adds the ability to navigate to the Alerts page with filters from anywhere within the application and thus requires the feature flag alertsPageFiltersEnabled

1. Hook for navigation:
   useNavigateToAlertsPageWithFilters returns a function that takes FilterItemObj | FilterItemObj[] and navigates the user to the Alert page.

2. Update Detection & Response :
   The dashboard has been updated to implement the above feature for all widgets with alert data: [SecuritySolution] Link to alerts page with certain filters applied #149022 - Also affecting the Host and User explore pages (alerts by Severity)

NOTE: Alerts by Severity is only affected with chartEmbeddablesEnabled DISABLED

3. Update DonutChart to take ownership of its onElementClick. It now takes a prop onDonutPartitionClicked that provides the name of the donut segment clicked.

Checklist

Delete any items that are not applicable to this PR.

• Any text added follows EUI's writing guidelines, uses sentence case text and includes i18n support
• Documentation was added for features that require explanation or tutorials
• Unit or functional tests were updated or added to match the most common scenarios

[logeekal]

@jamster10

[] array is not a valid value for a page filter type, so in this case if we want to select alerts of all severities then we should be adding severity page filter with selected options as empty array ([]) so that system knows that no value needs to be selected.

Suggested change

	: []),
	: [
	{
	title: 'Severity',
	selectedOptions: [],
	fieldName: 'kibana.alert.severity',
	}
	]),

[jamster10]

Hey @logeekal , I don't think this is problematic :P
The whole block starts with the spread operator:

...

...(severity
          ? [
              {
                title: 'Severity',
                selectedOptions: [severity],
                fieldName: 'kibana.alert.severity',
              },
            ]
          : [])

So the existence of severity determines which array gets spread. if the empty array gets spread ( ...[]) this results in nothing being added to the outer array as there is nothing to iterate over.

Quick article on it

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[michaelolo24]

I'm also noticing behavior that after clicking through to open the alerts page within a given filter (i.e open) and then returning to the detections and response dashboard to do it again with a different filter (i.e. acknowledged) the filters flicker from the new one acknowledged back to what was previously set open. Fyi @logeekal, I'm thinking this might be an issue with how the filters are saved on that page rather than the implementation here

[jamster10]

I'm also noticing behavior that after clicking through to open the alerts page within a given filter ...

Thanks for catching that, I should have noted it in the Summary. We traced it down to here:

src/plugins/controls/public/control_group/control_group_renderer.tsx

it uses a hook called useLifecycle
Notice in its onMount section is where a passed prop us usedgetCreationOptions . So the getCreationOptions` function gets called only once, on mount, and never again. Which is problematic if its parent rerenders.

Anyway, Jatin refactored

x-pack/plugins/security_solution/public/common/components/filter_group/index.tsx

with a solution, so main has it working correctly. I did need to update my branch though 🤦

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 909fbac

Failed CI Steps

• Security Solution Tests #3

Test Failures

• [job] [logs] Security Solution Tests #3 / timeline flyout button the (+) button popover menu owns focus

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id	before	after	diff
securitySolution	3783	3784	+1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
securitySolution	15.8MB	15.8MB	+8.1KB

Unknown metric groups

ESLint disabled line counts

id	before	after	diff
securitySolution	433	436	+3

Total ESLint disabled count

id	before	after	diff
securitySolution	513	516	+3

History

• 💚 Build #113881 succeeded e8d6647
• 💛 Build #113862 was flaky e7a1c8f
• 💔 Build #113857 failed 436c543
• 💚 Build #113623 succeeded 00f262c
• 💛 Build #113144 was flaky 58fe841
• 💛 Build #113092 was flaky 41e2b55

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @jamster10

[michaelolo24]

Thanks for making the changes, LGTM!

[semd]

LGTM!