elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.78k stars 8.19k forks source link

[RAC] Option to add a new connector in the create new case flyout in the Alerts Page #114963

Open mgiota opened 2 years ago

mgiota commented 2 years ago

📝 Summary

When a user selects to attach an alert to a new case from the alerts page, in the connector dropdown of the flyout there's no option to add a new connector. In the Cases page this option is there and opens a Flyout where user can add a new connector. It would look weird to open a flyout on an existing flyout, so if we want to give the option to the user to interact with the connectors within the Alerts page, we should investigate how this should be done in a user friendly way.

Screenshot 2021-10-13 at 12 56 50

Enable RAC Observability

Here are the flags you need to enable in kibana.yml to be able to enable Alerts https://github.com/elastic/kibana/blob/master/x-pack/plugins/observability/README.md#rules-alerts-and-cases

Generate some test data

node scripts/es_archiver load x-pack/test/functional/es_archives/observability/alerts --kibana-url=http://elastic:changeme@localhost:5631/__UNSAFE_bypassBasePath --es-url=https://elastic:changeme@localhost:9200 --es-ca=node_modules/@kbn/dev-utils/certs/ca.crt

Once you get some data click on the overflow menu of an alert and from the options select Add to new Case. Flyout will open and you will be able to see the connectors dropdown.

✔️ Acceptance criteria

elasticmachine commented 2 years ago

Pinging @elastic/security-threat-hunting-cases (Team:Threat Hunting:Cases)

cnasikas commented 2 years ago

cc @monina-n @paulewing @asnehalb

elasticmachine commented 2 years ago

Pinging @elastic/response-ops-cases (Feature:Cases)

elasticmachine commented 2 years ago

Pinging @elastic/response-ops (Team:ResponseOps)