Skip to content

Commit

Permalink
[EDR Workflows][Staged rollout] Add artifact channel to Alert flyout'…
Browse files Browse the repository at this point in the history
…s highlighted fields (elastic#208346)

## Summary

This PR adds `Endpoint.policy.applied.artifacts.global.channel` to the
highlighted fields of an alert. This field shows the users, which
artifact channel was used to update the rules on an Endpoint using
Elastic Defend integration.

Based on the structure of the highlighted fields, I think it makes sense
to add it to the 'always displayed fields', but not 100% sure on it, so
I'm happy to take suggestions.

<img width="731" alt="image"
src="https://github.com/user-attachments/assets/952dfc92-e9c4-4b38-8fba-8fc6a5e07ed8"
/>


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
  • Loading branch information
gergoabraham authored Jan 28, 2025
1 parent 6362048 commit 82d94f1
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,7 @@ const alwaysDisplayedFields: EventSummaryField[] = [
}),

// ** //
{ id: 'Endpoint.policy.applied.artifacts.global.channel' },
{ id: 'user.name' },
{ id: 'rule.name' },
{ id: 'cloud.provider' },
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1805,6 +1805,9 @@ describe('Exception helpers', () => {
label: 'Agent status',
};
}),
{
id: 'Endpoint.policy.applied.artifacts.global.channel',
},
{
id: 'user.name',
},
Expand Down

0 comments on commit 82d94f1

Please sign in to comment.