[Alert Detail Page] Log threshold rule type

[katrin-freihofner]

Problem description

This view supports our users in troubleshooting log threshold alerts (incl. ratio alerts). The details page should contain information about:

• When did this symptom or issue start? What’s the situation and state now? How is it trending?
• Has this happened before, when, and how frequently?
• Is this alert scheduled to be muted? Was a notification sent to third party systems? (Note that the user may have seen an alert flyout for a specific alert, thus being "notified" via the UI as opposed to receiving a Slack or ServiceNow notification for example)
• Has a case been created for it? In other words, is this already being investigated elsewhere?

User journey

Design

https://github.com/elastic/observability-design/issues/266

Acceptance criteria

• [x] alert details view consists of:
  • [x] overview (header part)
  • [x] main chart showing the log rate and the alert annotation
  • [x] chart showing the log rate "history" with alert annotations
  • [x] add a link to default message to make sure the user is able to navigate to the new alert details view

Open questions Is there a way to show which entities (hosts, host groups) are affected? https://discuss.elastic.co/t/rule-type-log-threshold/325436

Figma file

⚙️ Implementation tasks:

v8.8 🚀

• [x] https://github.com/elastic/kibana/issues/152738
• [x] https://github.com/elastic/kibana/issues/153095
• [x] https://github.com/elastic/kibana/issues/153103
• [x] https://github.com/elastic/kibana/issues/153565
• [x] https://github.com/elastic/kibana/issues/153567
• [x] https://github.com/elastic/kibana/issues/154845
• [x] https://github.com/elastic/kibana/issues/153675
• [x] https://github.com/elastic/kibana/issues/153946
• [x] https://github.com/elastic/kibana/issues/155022
• [x] elastic/kibana#155083
• [x] https://github.com/elastic/kibana/issues/155053
• [x] https://github.com/elastic/kibana/issues/153880 we will keep the alert details page behind the feature flag

v8.9 🔖

• [x] https://github.com/elastic/kibana/issues/152741
• [x] https://github.com/elastic/kibana/issues/154170
• [x] https://github.com/elastic/actionable-observability/issues/17
• [x] https://github.com/elastic/kibana/issues/155025

Dependencies

• [x] https://github.com/elastic/kibana/issues/155484

[elasticmachine]

Pinging @elastic/actionable-observability (Team: Actionable Observability)

[fkanout]

Questions for the v8.8 MVP meeting:

• Will we use the old design or a new one, like the[ Metric threshold] (NEW)(https://www.figma.com/file/HTI4gmoxanw4No6DbLiIqp/Alert-details-vision?node-id=79-60585&t=AiPvl5n2QEbqbXo6-0)
• Are we going to follow the same approach, a chart-per-condition?
• From a representational perspective, is the preview chart bar ok?
• No history chart when we have multiple conditions?
• We have two auxiliary charts from the inventory rule type. Would that work?

MVP v8.8

• New design
• New header/ Alert Summary
• Source filed: Default log view + source context

Stretched goals

• History chart ONLY when having one condition
• No aux charts (Ongoing discussion)

[katrin-freihofner]

Moved to new issue https://github.com/elastic/actionable-observability/issues/47