search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.68k stars 8.23k forks source link

[Security Solution] Rule creation UI: incorrect link for index patterns #163503

Open abdonpijpelink opened 1 year ago

abdonpijpelink commented 1 year ago

Kibana version: 8.9

Description of the problem including expected versus actual behavior: The Security rule creation UI allows you to create a rule based on index patterns or data views. Confusingly, Elastic has two different things called "index pattern": an Elasticsearch construct, and a Kibana construct (deprecated, now called "data view"). I think the link for "index patterns" (see red arrow in the screenshot) goes to the wrong docs. It points to API docs for the deprecated Kibana construct, but it should point to the ES construct.

I think a better page to link to could be https://www.elastic.co/guide/en/elasticsearch/reference/current/api-conventions.html#api-multi-index, or even better a new standalone page that explains what index patterns are in this context.

image

cc: @Arnovandevelde

elasticmachine commented 1 year ago

Pinging @elastic/security-detections-response (Team:Detections and Resp)

elasticmachine commented 1 year ago

Pinging @elastic/security-solution (Team: SecuritySolution)