diff --git a/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.test.tsx b/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.test.tsx
index 70dd81ad48225..11f5719c7b930 100644
--- a/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.test.tsx
+++ b/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.test.tsx
@@ -46,7 +46,7 @@ describe('', () => {
expect(getByTestId(SEVERITY_VALUE_TEST_ID)).toBeInTheDocument();
});
- it('should render event kind as title if event.kind is not event', () => {
+ it('should render event details as title if event.kind is not event', () => {
const mockGetFieldsData = (field: string) => {
switch (field) {
case 'event.kind':
@@ -60,7 +60,7 @@ describe('', () => {
getFieldsData: mockGetFieldsData,
});
- expect(getByTestId(EVENT_HEADER_TEXT_TEST_ID)).toHaveTextContent('Alert');
+ expect(getByTestId(EVENT_HEADER_TEXT_TEST_ID)).toHaveTextContent('Event details');
});
it('should render event category as title if event.kind is event', () => {
diff --git a/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.tsx b/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.tsx
index 70c175c2403ce..76a9c17ff886e 100644
--- a/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.tsx
+++ b/x-pack/plugins/security_solution/public/flyout/document_details/right/components/event_header_title.tsx
@@ -8,7 +8,6 @@
import type { FC } from 'react';
import React, { memo, useMemo } from 'react';
import { EuiSpacer } from '@elastic/eui';
-import { startCase } from 'lodash';
import { i18n } from '@kbn/i18n';
import { FlyoutTitle } from '../../../shared/components/flyout_title';
import { DocumentSeverity } from './severity';
@@ -34,8 +33,6 @@ export const EventHeaderTitle: FC = memo(() => {
if (eventKind === 'event' && eventCategory) {
const fieldName = EVENT_CATEGORY_TO_FIELD[eventCategory];
eventTitle = getField(getFieldsData(fieldName));
- } else if (eventKind && eventKind !== null) {
- eventTitle = startCase(eventKind);
}
return (
eventTitle ??
diff --git a/x-pack/plugins/security_solution/public/flyout/document_details/right/utils/event_utils.tsx b/x-pack/plugins/security_solution/public/flyout/document_details/right/utils/event_utils.tsx
index be3a32fabee1a..6a0b84a7a1235 100644
--- a/x-pack/plugins/security_solution/public/flyout/document_details/right/utils/event_utils.tsx
+++ b/x-pack/plugins/security_solution/public/flyout/document_details/right/utils/event_utils.tsx
@@ -64,12 +64,12 @@ export const getEcsAllowedValueDescription = (fieldName: string, value: string):
// mapping of event category to the field displayed as title
export const EVENT_CATEGORY_TO_FIELD: Record = {
- authentication: '',
+ authentication: 'user.name',
configuration: '',
database: '',
driver: '',
email: '',
- file: '',
+ file: 'file.name',
host: 'host.name',
iam: '',
intrusion_detection: '',