Dependencies on Kibana Alerting

[mikecote]

This is a meta issue to centralize the asks each team has on the alerting team. Feel free to add/remove items.

Stack

App Services

Owners: @ppisljar & @mikecote

• Support for limited concurrency Task Types [Task Manager] Support for limited concurrency Task Types #54916
• move user-related background task parameters from alerts to task manager itself [Discuss] move user-related background task parameters from alerts to task manager itself #56773
• Connector execution flyout Connector execution flyout #62003
• Ability to select a slack channel or person at execution time Ability to select a slack channel or person at action execution time #61998

Kibana App (Lens & Visualizations & Discover)

Owners: @timroes & @mikecote

• Expose data serice in executors Expose data service in the alert execution method #87990
• Give access to Saved Object references Allow usage of saved object references in alerts #87992
• Provide a viewInApp short URL for alerts Provide a viewInApp short URL for alerts #87993

Docs

Owners: @gchaps & @mikecote

• Review overall alerting documentation structure Review overall alerting documentation structure #90003

Dashboards and Visualizations

Owners: @lukeelmers & @YulNaumenko

• Internal tags in Alerts Request for alerting internal tags structure #58417
• Saving alert as a template?

Machine Learning

Owners: @peteharverson & @mikecote

• Users in the alerting context Users in the alerting context  #64588

Maps

Owners: @aaronjcaldwell & @YulNaumenko

• Ability to throttle alert instances until state changes Ability to throttle alert instances until action group changes #50077
• Allow alert executors to explicitly break throttle [Alerting] alert types can't schedule actions within the same action group without being throttled #83980
• Ability for alert type to define the context specific name for Resolved action group [Alerting UI] Ability for alert type to define the context specific name for Recovered action group #83981
• Bulk/Un-bulkable alerts + standard fields [Alerting] Research alert summaries / bulk-able actions #68828

Observability

APM

Owners: @sqren & @mikecote

• Improve loading speed of Alerting flyout [Alerting] Opening an alerting flyout is very slow #77472
• Ability to query for params Make alert params searchable #50213
• Support for "system tags" (tags that are not editable via the ui) Request for alerting internal tags structure #58417
• Hide unneeded fields to reduce clutter and simplify UX Update Create alert flow UX #69006
• Add support for default action messages [Alerting][Discuss] allow alerts to create default action parameters #66095 (comment)

Home Page

Owners: @formgeist & @pmuellr

• API to get all active instances from Observability consumers API to get all active instances from Observability consumers #70169

Logs & Metrics UI

Owners: @jasonrhodes & @mikecote

• Ability to fire actions when an alert instance is resolved Ability to fire actions when an alert instance is resolved #49405
• [Alerting] Show a warning when creating an alert if no actions are defined [Alerting] Show a warning when creating an alert if no actions are defined #61522
• UI ability to assign alert actions per action group [Meta] UI ability to assign alert actions per action group #64077
• Ability for alert / action types to define migrations Ability for alert / action types to define migrations #50216
• [Alerting] Add a required, programmatic message to actions [Alerting] Add a required, programmatic message to actions #64349
• [Alerting] Add outside range ("is not between") comparator to UI [Alerting] Add outside range ("is not between") comparator to UI #64220
• [Alerting] TypeScript checking for actionVariable definitions [Alerting] TypeScript checking for actionVariable definitions #62483
• Ability to throttle alert instances until state changes Ability to throttle alert instances until action group changes #50077
• Allow alerts to create default action parameters [Alerting][Discuss] allow alerts to create default action parameters #66095

Uptime

Owners: @mikecote and @shahzad31 (?)

• Allow action config to set default param values Allow action config to set default param values #50255
• Alert summaries / bulk-able actions [Alerting] Research alert summaries / bulk-able actions #68828

Stack Monitoring (#45571)

Owners: @chrisronline & @mikecote

• Ability to fire actions when an alert instance is resolved Ability to fire actions when an alert instance is resolved #49405
• Pre-configured Alerts Pre-configured Alerts #59813

Synthetics & RUM

Owners: @andrewvc & @mikecote

• UI ability to assign alert actions per action group [Meta] UI ability to assign alert actions per action group #64077

Security

Case

Owners: @XavierM & @mikecote

• Document requirements for developing a generic action type Document requirements for developing a generic action type #67864
• Ability to execute an action immediately on the server side Ability to execute an action immediately on the server side #67620
• Bi-directional action types [Actions] Bi-directional action types #51636
• It isn't possible to reuse a single connector across multiple actions It isn't possible to reuse a single connector across multiple actions #70083

Detection Engine (#50222)

Owners: @spong & @mikecote

• 1. Make alert params and action config searchable Make alert params searchable #50213
• 2. Bulk create, update, delete abilities for the alert client Bulk create, update, delete abilities for the rules client #53144
• 3. Ability for alert / action types to define migrations Ability for alert / action types to define migrations #50216
• 4. Expose access to Saved Object References array Allow usage of saved object references in alerts #87992
• 5. Ability run an alert immediately Ability run an alert immediately #50215
• 6. Ability to specify custom id for alerts and actions Ability to specify custom id for alerts and actions #50210
• 7. Ability to turn compression/gzip on for callCluster in alert and action executors Ability to turn compression/gzip on for callCluster in alert and action executors #50212
• 8. Ability to configure callCluster timeout in alert / action type executors Ability to configure callCluster timeout in alert / action type executors #50217
• 9. Users in the alerting context Users in the alerting context  #64588
• 10. Packaged alerts Packaged alerts #67293
• 11. Request for alerting internal tags structure Request for alerting internal tags structure #58417
• 12. Add a tie breaker field to alerts [Alerting] Add a tie breaker field to alerts  #62002
• 13. [Alerting][Event Log] Populate event log rule ECS fields with the Security specific rule data. [Alerting][Event Log] Populate event log rule ECS fields with the Security specific rule data. #101677

Cloud

Cloud Vanguard

Owners: @tobio & @mikecote

• Bi-directional action types [Actions] Bi-directional action types #51636

Cloud

Owners: @andrew-moldovan & @mikecote

• Cloud monitoring emails in basic Cloud monitoring emails in basic #67661
• Ability to register common variables that can be used in alert action templates Ability to register common variables that can be used in alert action templates #67660
• Cloud context in kibana alerting Cloud context in kibana alerting #101018

Other

Infra (#76914)

Owners: @flaper87 & @gmmorris

• Pager Duty action doesn't close an incident when an Alert Instance resolves [Actions] Pager Duty action uses the same default dedupkey for all Alerts when resolving #76908
• Ability to fire actions when an alert instance is resolved Ability to fire actions when an alert instance is resolved #49405
• There's no way to attach additional info to the PagerDuty incident [Actions] There's no way to attach additional info to the PagerDuty incident #76910

[elasticmachine]

Pinging @elastic/kibana-alerting-services (Team:Alerting Services)

[spong]

@mikecote -- @peluja1012 and I have re-prioritized the Detection Engine dependencies as part of 7.12 planning prep. No big surprises here, searching alertParams and bulk operations are highest priority in effort to speed up the Rules table and enable better Rules management (we're up to 451 prepackaged rules now!).

[gmmorris]

Removed from APM:

• Service maps health indicators: Indicate alert-based health status on Service nodes [APM] Service maps health indicators: Indicate alert-based health status on Service nodes #64144

@sqren confirmed this should be delivered by RAC. We can bring it back if RAC doesn't deliver the goods ;)