Elasticsearch Query rule can group by multi-terms

[ersin-erdal]

Resolves: #163829

This PR allows multiple group-by terms to be selected in Elasticsearch query rule.

[ersin-erdal]

@elasticmachine merge upstream

[elasticmachine]

Pinging @elastic/response-ops (Team:ResponseOps)

[ymao1]

Ran into this while switching data view for the KQL query after selecting multiple group by terms:

Did not see this on main

Sep-13-2023.10-38-43.mp4

[ymao1]

nit: should use MAX_SELECTABLE_GROUP_BY_TERMS instead of 4 in message

[ersin-erdal]

Done

[ersin-erdal]

Ran into this while switching data view for the KQL query after selecting multiple group by terms:

Thanks for catching this, must be fixed now.

[ymao1]

@ersin-erdal Still seeing a little funky behavior:

Create DSL query, select an index and add some terms. Then go back and change the index selection. It looks like the group clears correctly, but once you click into it, the previous terms are still in the input but there's a validation error. I think the previous terms should be completely cleared out of that input?

[ersin-erdal]

@ersin-erdal Still seeing a little funky behavior:

Create DSL query, select an index and add some terms. Then go back and change the index selection. It looks like the group clears correctly, but once you click into it, the previous terms are still in the input but there's a validation error. I think the previous terms should be completely cleared out of that input?

Should be fixed this time :)
I didn't want to change the existing clear fields logic but it doesn't work with the new combobox...

[ymao1]

LGTM. Verified everything works as expected. Nice job!

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 2838b42

Failed CI Steps

• FTR Configs #6

Test Failures

• [job] [logs] FTR Configs #6 / serverless observability UI Configure Case "before all" hook in "Configure Case"

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
stackAlerts	204.0KB	204.0KB	-34.0B
triggersActionsUi	1.4MB	1.4MB	+336.0B
total			+302.0B

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id	before	after	diff
stackAlerts	21.0KB	21.5KB	+496.0B
triggersActionsUi	91.7KB	91.8KB	+79.0B
total			+575.0B

History

• 💚 Build #159686 succeeded e87ba7c
• 💔 Build #159617 failed a065b97
• 💚 Build #159324 succeeded abe55a7
• 💔 Build #159261 failed d8dc410
• 💚 Build #159015 succeeded 5dfcc9c
• 💚 Build #158927 succeeded 6384492

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @ersin-erdal