[SecuritySolution][Investigations] Add message about missing index in…

… data view in analyzer (elastic#122859) * chore: add message about missing index in data view * fix: typo Co-authored-by: Kibana Machine <[email protected]>
awahab07 · Jan 31, 2022 · f1a5e57 · f1a5e57
1 parent d07f49b
commit f1a5e57
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx
@@ -41,6 +41,14 @@ export const ResolverNoProcessEvents = () => (
       })}
     </EuiText>
     <EuiSpacer size="m" />
+    <EuiText size="s">
+      {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', {
+        defaultMessage: `In case you selected a different data view,
+          make sure your data view contains all of the indices that are stored in the source event at "{field}".`,
+        values: { field: 'kibana.alert.rule.parameters.index' },
+      })}
+    </EuiText>
+    <EuiSpacer size="m" />
     <EuiText size="s">
       {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.eventCategory', {
         defaultMessage: `You may also add the below to your timeline query to check for process events.