Skip to content

[DOCS] Response actions history updates #2448

@joepeeples

Description

@joepeeples

Description

Actions log / Actions history has several updates in 8.5, so this issue collects them and streamlines them into a single set of docs changes:

  • Filtering and searching (Epic/issue https://github.com/elastic/security-team/issues/3895) — Users can filter and search data in new ways in an endpoint's Actions Log:

    • Time range
    • Hostname
    • Action type
    • User name
    • Action status (pending, failed, success)
    • Persistent URL

    Each of these functionalities has its own issue/PR (linked in the epic above), but it'll probably be simpler to document them all at once.

    Some functionalities may already be documented, since this epic seems to have spanned a few releases.

  • "Response actions history" standalone page (PR [Security Solution][Endpoint][Response Actions] Action history page under security->manage kibana#140306) — There's now a standalone page for "Response actions history," appearing in the Manage nav menu section. Also still appears as a flyout in Endpoints context.

  • Renamed to "response actions history" (PR [Security Solution] Update Action history text to be Response actions history kibana#141805) — This PR updates and consolidates the names of the standalone page and the flyout version: "Response actions history"

    • Consider refactoring file names and anchor names using old "actions-log" name (and any other old names?). It won't be visible in HTML output but could still be misleading internally. On the other hand, changing any heading anchors would require redirects, which can impact user experience.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions