-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Osquery] Fix small issues in alerts #128676
Conversation
Pinging @elastic/security-asset-management (Team:Asset Management) |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
💚 Build SucceededMetrics [docs]Async chunks
Unknown metric groupsESLint disabled line counts
Total ESLint disabled count
History
To update your PR or re-run it, just comment with: cc @tomsonpl |
(cherry picked from commit 5d9aaeb)
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
Summary
Small fix that enable saving query for later from the Alerts/Timeline flyout.
Added a flag to hide the fullscreen toggle on ResultsTable if we are on the OsqueryAction Flyout in Alerts/Timelines. It's a temporary solution, will be replaced by passing AddToTimeline functionality in 8.3.
Changed required permissions to run live queries
Fix wrong ''Agents selected'' text under Agents dropdown on Alerts view.