emma-raffenne commented 1 year ago

Description

This issue is about helping users triage metric threshold alerts. The details page should contain information about:

When did this symptom or issue start? What’s the situation and state now? How is it trending?
Has this happened before, when, and how frequently?
Is this alert scheduled to be muted? Was a notification sent to third party systems? (Note that the user may have seen an alert flyout for a specific alert, thus being "notified" via the UI as opposed to receiving a Slack or ServiceNow notification for example)
Has a case been created for it? In other words, is this already being investigated elsewhere?
which entities (hosts, host groups) are affected (link to new hosts views)?

User journey

Post MVP

What infra, services, etc. are also showing the same symptoms or are otherwise related to this alert and its entity? Note that this is regarding the 'vertical' application stack consisting of the infra, the middleware, and the app itself
What are the immediate dependencies for this entity? What is the downstream impact from this alert? Note that this is the 'horizontal' application dependency including dependent services, adjacent applications, etc. are impacted?
Which users or user groups, geos, locations are impacted?

The alert details view must be available from the alert notification, the alert flyout, and the alert list view.

Design

@maciejforcone please add details about your work here. ~~https://www.figma.com/file/HTI4gmoxanw4No6DbLiIqp/Alert-details-vision?node-id=79%3A60585&t=WeiwPugNY5wV3Nr3-1~~ https://www.figma.com/file/HTI4gmoxanw4No6DbLiIqp/Alert-details-vision?node-id=107-71056&t=Fa8aYO96gq9LgrGr-0

Acceptance criteria

[ ] alert details view consists of:
- [ ] overview (header part)
- [ ] main chart showing the field configured in this rule and alert annotations
- [ ] chart showing the "history" of this metric with alert annotations
- [ ] add a link to default message to make sure the user is able to navigate to the new alert details view

MVP (must have):

[ ] Meaningful name [title]
[ ] Alert summary
- [ ] Rule-related fields
[ ] Showing conditions
[ ] Main charts
- [ ] Alert time range + extra (use the magic)
- [ ] Sync chart pointer
- [ ] Alert annotation
[ ] Link to alert details in action variables

Nice to have:

[ ] Sources link
[ ] Flapping
[ ] Alert history when one condition
[ ] Alert history for the rest

Maybe:

[ ] Showing related warning annotation on the chart

Open questions Can we list the affected entities (hosts, host groups,...) and link to a filtered version of the new infrastructure view?

🧳 MVP

[x] elastic/kibana#151412
[x] https://github.com/elastic/kibana/issues/152438
[x] https://github.com/elastic/kibana/issues/152595
[x] https://github.com/elastic/kibana/issues/153202
[x] https://github.com/elastic/kibana/issues/153238
[x] #153850
[x] #153851
[x] https://github.com/elastic/kibana/issues/153877
[x] https://github.com/elastic/kibana/issues/153740
[x] #155354
[x] #155593
[x] https://github.com/elastic/kibana/issues/155691
[x] #155698
[x] #153867

🐞 Related bugs

[x] https://github.com/elastic/kibana/issues/153757
[x] https://github.com/elastic/kibana/issues/154451
[x] #153833
[ ] #153834

✨ Improvements/chores

[x] https://github.com/elastic/kibana/issues/154025
[ ] https://github.com/elastic/kibana/issues/152690
[ ] #153443

Dependencies

[x] https://github.com/elastic/kibana/issues/154126

XavierM commented 1 year ago

@emma-raffenne, is this issue mean to be for ResponseOps?

emma-raffenne commented 1 year ago

@emma-raffenne, is this issue mean to be for ResponseOps?

@XavierM no it isn't and from the top of my head this is a duplicate. Moving it to our project anyhow.

maryam-saeidi commented 1 year ago

MVP (must have):

[ ] Meaningful name [title]
[ ] Alert summary
- [ ] Rule-related fields
[ ] Showing conditions
[ ] Main charts
- [ ] Alert time range + extra (use the magic)
- [ ] Sync chart pointer
- [ ] Alert annotation
[ ] Link to alert details in action variables

Nice to have: (@katrin-freihofner feel free to update this section)

[ ] Sources link
[ ] Flapping
[ ] Alert history when one condition
[ ] Alert history for the rest
[ ] Showing related warning on the chart

katrin-freihofner commented 1 year ago

I'm going to remove the "inventory rule" part from this issue - it is out of scope. (At some point, it could be resolved by combining the rules https://github.com/elastic/kibana/issues/149928)