From e07fadcff36680f3ef848944edb8b8945517cefb Mon Sep 17 00:00:00 2001 From: Jan Monschke Date: Wed, 12 Jan 2022 18:49:55 +0100 Subject: [PATCH 1/2] chore: add message about missing index in data view --- .../public/resolver/view/resolver_no_process_events.tsx | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx index 5a743896518c2..07ea70440e5df 100644 --- a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx +++ b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx @@ -41,6 +41,14 @@ export const ResolverNoProcessEvents = () => ( })} + + {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', { + defaultMessage: `In case you selected a different data view, + make sure your data view contains one of the inidices that are stored in the source event at "{field}".`, + values: { field: 'kibana.alert.rule.parameters.index' }, + })} + + {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.eventCategory', { defaultMessage: `You may also add the below to your timeline query to check for process events. From 80c18ed8993d7eeb805328b7e1c11b17db7e0f25 Mon Sep 17 00:00:00 2001 From: Jan Monschke Date: Thu, 13 Jan 2022 11:49:19 +0100 Subject: [PATCH 2/2] fix: typo --- .../public/resolver/view/resolver_no_process_events.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx index 07ea70440e5df..c172d351c7356 100644 --- a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx +++ b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx @@ -44,7 +44,7 @@ export const ResolverNoProcessEvents = () => ( {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', { defaultMessage: `In case you selected a different data view, - make sure your data view contains one of the inidices that are stored in the source event at "{field}".`, + make sure your data view contains all of the indices that are stored in the source event at "{field}".`, values: { field: 'kibana.alert.rule.parameters.index' }, })}