UX improvements for correlation engine

public/pages/Correlations/Correlations.scss

@@ -5,4 +5,9 @@
 
 .correlation_rule_field_condition .euiButtonGroup__buttons {
   box-shadow: none;
+}
+
+#sa-correlations-network .vis-tooltip {
+  background-color: #535353;
+  padding: 0px;
 }

public/pages/Correlations/components/CorrelationGraph.tsx

@@ -4,17 +4,41 @@
  */
 
 import React from 'react';
-import Graph from 'react-graph-vis';
+import Graph, { Edge, GraphEvents, Network, Node, Options } from 'react-graph-vis';
+import 'vis-network/dist/dist/vis-network.min.css';
+import { EuiLoadingChart } from '@elastic/eui';
 
-export const CorrelationGraph = ({ graph: { nodes, edges }, options, events }) => {
-  return (
+interface CorrelationGraphProps {
+  loadingData: boolean;
+  graph: {
+    nodes: Node[];
+    edges: Edge[];
+  };
+  options: Options;
+  events: GraphEvents;
+  getNetwork: (network: Network) => void;
+}
+
+export const CorrelationGraph: React.FC<CorrelationGraphProps> = ({
+  graph: { nodes, edges },
+  options,
+  events,
+  loadingData,
+  getNetwork,
+}) => {
+  return loadingData ? (
+    <div style={{ margin: '75px 47%' }}>
+      <EuiLoadingChart size="xl" className="chart-view-container-loading" />
+    </div>
+  ) : (
     <Graph
       key={`network`}
-      identifier={`network`}
+      identifier={`sa-correlations-network`}
       graph={{ nodes, edges }}
       options={options}
       events={events}
-      style={{ border: '1px solid' }}
+      style={{ border: '1px solid', backgroundColor: '#ffffff' }}
+      getNetwork={getNetwork}
     />
   );
 };

public/pages/Correlations/containers/CorrelationsContainer.tsx

@@ -10,7 +10,9 @@ import {
   defaultSeverityFilterItemOptions,
   emptyGraphData,
   getAbbrFromLogType,
+  getLabelFromLogType,
   getSeverityColor,
+  getSeverityLabel,
   graphRenderOptions,
 } from '../utils/constants';
 import {
@@ -29,6 +31,7 @@ import {
   EuiText,
   EuiEmptyPrompt,
   EuiButton,
+  EuiBadge,
 } from '@elastic/eui';
 import { CorrelationsExperimentalBanner } from '../components/ExperimentalBanner';
 import { FilterItem, FilterGroup } from '../components/FilterGroup';
@@ -45,6 +48,8 @@ import { DataStore } from '../../../store/DataStore';
 import { FindingItemType } from '../../Findings/containers/Findings/Findings';
 import datemath from '@elastic/datemath';
 import { ruleSeverity } from '../../Rules/utils/constants';
+import { renderToStaticMarkup } from 'react-dom/server';
+import { Network } from 'react-graph-vis';
 
 interface CorrelationsProps
   extends RouteComponentProps<
@@ -68,10 +73,13 @@ interface CorrelationsState {
   specificFindingInfo?: SpecificFindingCorrelations;
   logTypeFilterOptions: FilterItem[];
   severityFilterOptions: FilterItem[];
+  loadingGraphData: boolean;
 }
 
 export class Correlations extends React.Component<CorrelationsProps, CorrelationsState> {
   static contextType = CoreServicesContext;
+  private correlationGraphNetwork?: Network;
+
   constructor(props: CorrelationsProps) {
     super(props);
     this.state = {
@@ -80,6 +88,7 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
       logTypeFilterOptions: [...defaultLogTypeFilterItemOptions],
       severityFilterOptions: [...defaultSeverityFilterItemOptions],
       specificFindingInfo: undefined,
+      loadingGraphData: false,
     };
   }
 
@@ -153,10 +162,12 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
       const end = datemath.parse(this.endTime);
       const startTime = start?.valueOf() || Date.now();
       const endTime = end?.valueOf() || Date.now();
+      this.setState({ loadingGraphData: true });
       let allCorrelations = await DataStore.correlationsStore.getAllCorrelationsInWindow(
         startTime.toString(),
         endTime.toString()
       );
+      this.setState({ loadingGraphData: false });
       allCorrelations = allCorrelations.filter((corr) => {
         return this.shouldShowFinding(corr.finding1) && this.shouldShowFinding(corr.finding2);
       });
@@ -256,6 +267,7 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
         multi: 'html',
         size: 12,
       },
+      chosen: true,
     });
   }
 
@@ -264,23 +276,34 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
       from: f1.id,
       to: f2.id,
       id: `${f1.id}:${f2.id}`,
+      chosen: false,
     });
   }
 
-  private createNodeTooltip = (finding: CorrelationFinding) => {
-    const tooltip = document.createElement('div');
+  private createNodeTooltip = ({ detectionRule, timestamp, logType }: CorrelationFinding) => {
+    const tooltipContent = (
+      <div style={{ backgroundColor: '#535353', color: '#ffffff', padding: '8px' }}>
+        <EuiFlexGroup alignItems="center">
+          <EuiFlexItem grow={false}>
+            <EuiBadge color={getSeverityColor(detectionRule.severity)}>
+              {getSeverityLabel(detectionRule.severity)}
+            </EuiBadge>
+          </EuiFlexItem>
+          <EuiFlexItem grow={false}>
+            <strong>{getLabelFromLogType(logType)}</strong>
+          </EuiFlexItem>
+        </EuiFlexGroup>
+        <EuiSpacer size="s" />
+        <EuiText>{timestamp}</EuiText>
+      </div>
+    );
 
-    function createRow(text: string) {
-      const row = document.createElement('p');
-      row.innerText = text;
-      row.style.padding = '5px';
-      return row;
-    }
+    const tooltipContentHTML = renderToStaticMarkup(tooltipContent);
 
-    tooltip.appendChild(createRow(`Log type: ${finding.logType}`));
-    tooltip.appendChild(createRow(finding.timestamp));
+    const tooltip = document.createElement('div');
+    tooltip.innerHTML = tooltipContentHTML;
 
-    return tooltip;
+    return tooltip.firstElementChild;
   };
 
   private onTimeChange = ({ start, end }: { start: string; end: string }) => {
@@ -327,6 +350,7 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
     );
     this.setState({ specificFindingInfo });
     this.updateGraphDataState(specificFindingInfo);
+    this.correlationGraphNetwork?.selectNodes([id], false);
   };
 
   resetFilters = () => {
@@ -342,6 +366,36 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
     });
   };
 
+  setNetwork = (network: Network) => {
+    this.correlationGraphNetwork = network;
+  };
+
+  renderCorrelationsGraph(loadingData: boolean) {
+    return this.state.graphData.graph.nodes.length > 0 || loadingData ? (
+      <CorrelationGraph
+        loadingData={loadingData}
+        graph={this.state.graphData.graph}
+        options={{ ...graphRenderOptions }}
+        events={this.state.graphData.events}
+        getNetwork={this.setNetwork}
+      />
+    ) : (
+      <EuiEmptyPrompt
+        title={
+          <EuiTitle>
+            <h1>No correlations found</h1>
+          </EuiTitle>
+        }
+        body={<p>There are no correlated findings in the system.</p>}
+        actions={[
+          <EuiButton fill={true} color="primary" href={`#${ROUTES.CORRELATION_RULE_CREATE}`}>
+            Create correlation rule
+          </EuiButton>,
+        ]}
+      />
+    );
+  }
+
   render() {
     const findingCardsData = this.state.specificFindingInfo;
 
@@ -476,31 +530,7 @@ export class Correlations extends React.Component<CorrelationsProps, Correlation
               </EuiFlexGroup>
 
               <EuiSpacer />
-              {this.state.graphData.graph.nodes.length > 0 ? (
-                <CorrelationGraph
-                  graph={this.state.graphData.graph}
-                  options={{ ...graphRenderOptions }}
-                  events={this.state.graphData.events}
-                />
-              ) : (
-                <EuiEmptyPrompt
-                  title={
-                    <EuiTitle>
-                      <h1>No correlations found</h1>
-                    </EuiTitle>
-                  }
-                  body={<p>There are no correlated findings in the system.</p>}
-                  actions={[
-                    <EuiButton
-                      fill={true}
-                      color="primary"
-                      href={`#${ROUTES.CORRELATION_RULE_CREATE}`}
-                    >
-                      Create correlation rule
-                    </EuiButton>,
-                  ]}
-                />
-              )}
+              {this.renderCorrelationsGraph(this.state.loadingGraphData)}
             </EuiPanel>
           </EuiFlexItem>
         </EuiFlexGroup>

public/pages/Correlations/utils/constants.tsx

@@ -43,6 +43,7 @@ export const graphRenderOptions = {
     dragNodes: false,
     multiselect: true,
     tooltipDelay: 50,
+    hover: true,
   },
 };