From 0035c2974f9fa096e8fa5b6e92a266f640a6f300 Mon Sep 17 00:00:00 2001 From: Jan Monschke Date: Fri, 28 Jan 2022 10:26:23 +0100 Subject: [PATCH] [SecuritySolution][Investigations] Add message about missing index in data view in analyzer (#122859) * chore: add message about missing index in data view * fix: typo Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com> (cherry picked from commit 9f6c78139e8c15fc685d71589e44481e89f06457) --- .../public/resolver/view/resolver_no_process_events.tsx | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx index 5a743896518c2..c172d351c7356 100644 --- a/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx +++ b/x-pack/plugins/security_solution/public/resolver/view/resolver_no_process_events.tsx @@ -41,6 +41,14 @@ export const ResolverNoProcessEvents = () => ( })} + + {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', { + defaultMessage: `In case you selected a different data view, + make sure your data view contains all of the indices that are stored in the source event at "{field}".`, + values: { field: 'kibana.alert.rule.parameters.index' }, + })} + + {i18n.translate('xpack.securitySolution.resolver.noProcessEvents.eventCategory', { defaultMessage: `You may also add the below to your timeline query to check for process events.