Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lens does not support nested fields, we have to exclude them from the dropdown #150158

Closed
angorayc opened this issue Feb 2, 2023 · 3 comments
Closed
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team v8.7.0

Comments

@angorayc
Copy link
Contributor

angorayc commented Feb 2, 2023

Original issue: #147261

Screenshot 2023-02-02 at 11 44 15

A field is available in the selected data view but not available in Lens:
Screenshot 2023-02-02 at 11 43 45
Screenshot 2023-02-02 at 11 47 44
Screenshot 2023-02-02 at 11 45 51

This is because it's a nested type, and Lens does not support nested types:
Screenshot 2023-02-02 at 12 13 45

@botelastic botelastic bot added the needs-team Issues missing a team label label Feb 2, 2023
@angorayc angorayc added Team:Threat Hunting Security Solution Threat Hunting Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore and removed needs-team Issues missing a team label labels Feb 2, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@angorayc angorayc added the bug Fixes for quality problems that affect the customer experience label Feb 2, 2023
@angorayc angorayc self-assigned this Feb 2, 2023
@angorayc
Copy link
Contributor Author

angorayc commented Feb 2, 2023

Fixed in 11f18e8

angorayc added a commit that referenced this issue Feb 2, 2023
## Summary


Relevant issue: #136409

These are all behind feature flag `chartEmbeddablesEnabled`

---
### Changes:
1. Legends are all moved to the left side of the chart to avoid
overlapping with chart actions.
2. The second `group by` of Alerts Trend Chart is removed (as it is
always disabled).


---

### Events:
<img width="2545" alt="Screenshot 2023-01-25 at 15 33 27"
src="https://user-images.githubusercontent.com/6295984/214605761-2e08d848-feb3-42e3-9850-08cd7f8b9c99.png">

---
### Top N

<img width="2552" alt="Screenshot 2023-01-25 at 15 34 21"
src="https://user-images.githubusercontent.com/6295984/214605889-91f74c33-e8c4-43ac-b137-6098f4764a6d.png">

---

### No indices:
<img width="1671" alt="Screenshot 2022-12-21 at 17 03 05"
src="https://user-images.githubusercontent.com/6295984/208963467-ccbb6bf4-11b3-4bc8-b568-208dd0791828.png">

---

### Alerts - Trend
<img width="2548" alt="Screenshot 2023-01-25 at 15 34 52"
src="https://user-images.githubusercontent.com/6295984/214605993-ea1a2fe5-6f44-4c70-9152-79f76ed9e48f.png">

---

### ~Alerts - Treemap~ (Not included in this PR -
#149592)
**Big Difference after converting to Lens. Likely to have a redesign:**

Known issues:
1. Alerts tree map: Is not rendered exactly the same due to the limits
of dimension of Lens.
3. No value display in each legend item for alerts tree map
4. Background color cannot be decided by risk score


Before:
<img width="1661" alt="Screenshot 2023-01-10 at 12 00 51"
src="https://user-images.githubusercontent.com/6295984/211546444-f98b0f4a-0666-493c-b57e-934b3d154211.png">

After:
<img width="2550" alt="Screenshot 2023-01-25 at 15 35 16"
src="https://user-images.githubusercontent.com/6295984/214606117-7a1e78a4-8947-4d95-9994-2acb106ca3af.png">

---
### ~Alerts - Charts~ (Not included in this PR -
#149592)
**Lens does not support the
[design](elastic/security-team#5599). Likely
to have a redesign:**


<img width="2536" alt="Screenshot 2023-01-25 at 15 35 55"
src="https://user-images.githubusercontent.com/6295984/214606298-bcc97920-bb52-4367-901f-102a778799b6.png">

---

### Alerts - Table
<img width="1666" alt="Screenshot 2022-12-21 at 17 12 25"
src="https://user-images.githubusercontent.com/6295984/208964514-b39e40ae-ecb4-4e06-8cc5-32d63e28823a.png">

Known issues:
1. #149828
2. Unable to restore a column after hiding it.
3. #150048
4. #150158


---
### Alerts - Preview

Known issue:
There's no legend in alerts preview as its legend action, filter in,
filter out are not useful on rule creation page. -
#149220

<img width="2543" alt="Screenshot 2023-01-26 at 13 32 00"
src="https://user-images.githubusercontent.com/6295984/214848163-437ca866-46ee-47ee-a550-aa3b9c97eef6.png">





### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <[email protected]>
@angorayc angorayc closed this as completed Feb 2, 2023
@angorayc angorayc added the v8.7.0 label Feb 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team v8.7.0
Projects
None yet
Development

No branches or pull requests

2 participants