[SecuritySolution][Investigations] Add message about missing index in…

… data view in analyzer (#122859) * chore: add message about missing index in data view * fix: typo Co-authored-by: Kibana Machine <[email protected]>
elastic · Jan 28, 2022 · 9f6c781 · 9f6c781
1 parent 2c900c6
commit 9f6c781
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx
@@ -41,6 +41,14 @@ export const ResolverNoProcessEvents = () => (
       })}
     </EuiText>
     <EuiSpacer size="m" />
+    <EuiText size="s">
+      {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', {
+        defaultMessage: `In case you selected a different data view,
+          make sure your data view contains all of the indices that are stored in the source event at "{field}".`,
+        values: { field: 'kibana.alert.rule.parameters.index' },
+      })}
+    </EuiText>
+    <EuiSpacer size="m" />
     <EuiText size="s">
       {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.eventCategory', {
         defaultMessage: `You may also add the below to your timeline query to check for process events.