Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SecuritySolution][Bug] Fix to add empty values to timeline #138510

Merged
merged 2 commits into from
Aug 10, 2022

Conversation

logeekal
Copy link
Contributor

@logeekal logeekal commented Aug 10, 2022

Fixes: #118846

Issue: Add to Timeline action was not working for empty values.

timeline_investigation.mp4

Solution:
Empty values can be added in timeline with condition of NOT EXISTS and hence on Add to Timeline click, data provider is modified to add NOT EXISTS condition to the timeline. Please see demo below:

Screen.Recording.2022-08-10.at.15.33.35.mov

@logeekal logeekal requested review from a team as code owners August 10, 2022 13:30
@logeekal logeekal added Team:Threat Hunting Security Solution Threat Hunting Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore backport-v8.0.0 labels Aug 10, 2022
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@logeekal logeekal added release_note:skip Skip the PR/issue when compiling release notes backport:prev-minor Backport to the previous minor version (i.e. one version back from main) labels Aug 10, 2022
Copy link
Contributor

@janmonschke janmonschke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice fix!

@kibana-ci
Copy link
Collaborator

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 5.6MB 5.6MB +150.0B

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@logeekal logeekal enabled auto-merge (squash) August 10, 2022 16:33
@logeekal logeekal merged commit 07d1ec8 into elastic:main Aug 10, 2022
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Aug 10, 2022
…138510)

Fixes: elastic#118846

Issue: `Add to Timeline` action was not working for empty values.

https://user-images.githubusercontent.com/61860752/142180967-972a0438-154e-47c7-b058-be3abc4ac353.mp4

Solution:
Empty values can be added in timeline with condition of `NOT EXISTS` and hence on `Add to Timeline` click, data provider is modified to add `NOT EXISTS` condition to the timeline. Please see demo below:

https://user-images.githubusercontent.com/7485038/183914875-0b3c7e5f-7e12-40f2-a0c2-8b773434480b.mov

(cherry picked from commit 07d1ec8)
@kibanamachine
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
8.4

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit to kibanamachine/kibana that referenced this pull request Aug 10, 2022
…138510) (elastic#138556)

Fixes: elastic#118846

Issue: `Add to Timeline` action was not working for empty values.

https://user-images.githubusercontent.com/61860752/142180967-972a0438-154e-47c7-b058-be3abc4ac353.mp4

Solution:
Empty values can be added in timeline with condition of `NOT EXISTS` and hence on `Add to Timeline` click, data provider is modified to add `NOT EXISTS` condition to the timeline. Please see demo below:

https://user-images.githubusercontent.com/7485038/183914875-0b3c7e5f-7e12-40f2-a0c2-8b773434480b.mov

(cherry picked from commit 07d1ec8)

Co-authored-by: Jatin Kathuria <jtn.kathuria@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:prev-minor Backport to the previous minor version (i.e. one version back from main) release_note:skip Skip the PR/issue when compiling release notes Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team v8.4.0 v8.5.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Security Solution] "Add to timeline investigation" hover action is not working for empty values for alerts.
6 participants