[DOCS] Osquery enhancements to the Alerts table and alert details flyout

[nastasha-solomon]

Fixes #2060 and #2103.

Made a few updates:

• Updated step 1 to show that users can now run Osquery from the more actions menu.
• Updated step 7 to account for the new options to investigate Osquery results in Timeline options
• Refreshed the screenshot under step 8

Preview here.

[melissaburpo]

This looks great, thanks @nastasha-solomon!

[joepeeples]

A few suggestions, thanks!

[tomsonpl]

LGTM 👍

[jmikell821]

Only have two small nits - LGTM! 👍

[ghost]

Hi @jmikell821

Thanks for all the updates.
We have validated the Kibana documentation with reference to this PR and here is our observation on same.

🟢 User is now available to run the Osquery from the more actions menu as mentioned on the Step-1 in the documentation.

🔴 In the Step-3 the Screenshot of the Run Osquery is incorrect .

Actual Result

Expected Result

🟢 The Result format under Run Osquery is shown same as mentioned in the Step 7 where account for the new options to
investigate Osquery results in Timeline options is visible.

🔴 There is no Step-8 is mentioned in the documentation related to screenshot.

Screenshot

We will be revalidating this PR once the above issue get Fixed.

Thanks!

[nastasha-solomon]

Hi @akanshachoudhary-qasource thanks for checking this! I updated the screenshot under step 3 and verified with @tomsonpl that it was the correct one. Please take a look when you have a chance.

Also, would you mind elaborating on the eighth step that you said is missing? After users run the query, there's a number of things they can do with the results so I left the task open-ended to convey that.

[ghost]

Hi @nastasha-solomon

Thanks for the update.
we have validated the Documentation PR and all the changes made are good to go and complete ✔️

Please find the below observations

---

Hi @akanshachoudhary-qasource thanks for checking this! I updated the screenshot under step 3 and verified with @tomsonpl that it was the correct one. Please take a look when you have a chance.

• Required Screenshot is updated with respect to current UI of Kibana v8.3.0
  

---

Also, would you mind elaborating on the eighth step that you said is missing? After users run the query, there's a number of things they can do with the results so I left the task open-ended to convey that.

Apologies for the confusion, in first comment of this ticket, it is mentioned

• Refreshed the screenshot under step 8

and we thought there must be a Step-8 in documentation and we mentioned the same as there is no Step-8 on the Documentation.

---

Hence we are adding QA:Validated tag to it.

Thanks!