[Security Solution][Question] Auto Redirection to ES|QL tab if used as Rule Template

[ghost]

Describe the bug: [Question] Auto Redirection to ES|QL tab if used as Rule Template

Kibana/Elasticsearch Stack version Version: 8.11.4 BC1 Commit: 4e90188951eb2dce4f4a0d45ba1a0b9ae9efe19d Build: 68328

Browser and Browser OS Version: Firefox for windows OS Version: 121.0

Elastic Endpoint Version: N/A

Original install method: None

Functional Area: ES|QL

Initial Setup:

• None

precondition

• Timeline Template with ES|QL Query should be available

Steps to reproduce

• Create Rule with timeline template using only ES|QL not kql or Lucene
• Alert should be generate from above rule
• Investigate any one alert
• Observed that timeline opens up with zero data under Query tab as timeline template query is in ES|QL not in KQL query

Question

• Should we handle the auto redirection to ES|QL tab after user investigate alert from rule with ES|QL query timeline template addition. OR this is been handled in documentation that user need to aware and self switch to ES|QL tab

Screen-Cast:

• template used in rule

https://github.com/elastic/kibana/assets/59917825/1c1dabed-8043-4aff-b73e-f740a3c7362f

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

[michaelolo24]

It's a good question @karanbirsingh-qasource and we can definitely be smarter about this. Will bring it up with @paulewing, but I think it's a good idea!