-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SecuritySolution] Add session ID to highlighted fields #132219
[SecuritySolution] Add session ID to highlighted fields #132219
Conversation
@elasticmachine merge upstream |
@@ -9,6 +9,12 @@ export const mockAlertDetailsData = [ | |||
{ category: 'process', field: 'process.name', values: ['-'], originalValue: '-' }, | |||
{ category: 'process', field: 'process.pid', values: [0], originalValue: 0 }, | |||
{ category: 'process', field: 'process.executable', values: ['-'], originalValue: '-' }, | |||
{ | |||
category: 'process', | |||
field: 'process.entry_leader.entity_id', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's just confirm with the AWP team that this value is the best one for us to use. I think so, but want to make sure nothing has changed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Confirmed with them offline 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code looks good, just want to get the confirmation that we're using the right field!
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
💚 Build SucceededMetrics [docs]Async chunks
History
To update your PR or re-run it, just comment with: cc @janmonschke |
Received an offline approval for the copy 🎉 |
Summary
In order to highlight the amount of alerts that were generated in the same session, we're adding the session (leader) id to the highlighted fields in the alert flyout. (see #131943)
Note: The copy
Session ID
is still pending review from @paulewingChecklist
Delete any items that are not applicable to this PR.