[Security Solution] Show data view names in the rule details

approksiu commented 1 month ago

Background

When creating a rule, the “Data View” option shows the underlying index patterns instead of the Data View name Data view name: Kibana Sample Data eCommerce: Rule creation:

User story

As a detection engineer, I want to interact with the data views in the rules UI by their name.

Acceptance criteria

[ ] When creating or editing a detection rule, and selecting dataviews as a Source user is presented with the list of Data view names, instead of index patterns.
[ ] Once the rule is saved, the Data view name is presented to the user in the Definition section.

elasticmachine commented 1 month ago

Pinging @elastic/security-detection-engine (Team:Detection Engine)

nicpenning commented 1 month ago

I mentioned this awhile back, FYI :https://github.com/elastic/kibana/issues/168909

approksiu commented 1 month ago

@nicpenning thanks! Added your issue to my tracking!

elastic / kibana