elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.77k stars 8.17k forks source link

[SLOs] Add link to "Explore in Discover" #186402

Closed afharo closed 1 month ago

afharo commented 3 months ago

Describe the feature: It would be very useful if SLOs provided a link to "Explore in Discover" the documents that make up the queries.

Describe a specific use case for the feature: When an SLO is violated, the alert takes the user to the SLO view. From there, there's no actionable steps to continue the investigation. Ideally, there should be an "Explore in Discover" button to open discover with the underlying data stream and query to see the documents that caused the SLO alert.

elasticmachine commented 3 months ago

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

maryam-saeidi commented 3 months ago

Hi @afharo,

By SLO view, do you mean the SLO alert details page, i.e.:

image

@benakansara @fkanout @maciejforcone I like the name that is suggested here: "Explore in Discover", maybe we can use that instead of "View related Logs" for the custom threshold, wdyt?

afharo commented 3 months ago

@maryam-saeidi, I found myself in this view, but the alert would also be a great place. For context: I started my investigation here&_a=()).

The term "Explore in Discover" is not mine. All kudos to Dashboards and Visualizations 😬 image image

afharo commented 3 months ago

@shahzad31 just told me about the "View events" button 😅.

That's what I was looking for and failed to find 🤣

benakansara commented 3 months ago

@benakansara @fkanout @maciejforcone I like the name that is suggested here: "Explore in Discover", maybe we can use that instead of "View related Logs" for the custom threshold, wdyt?

I also like "Explore in Discover" or "Explore data in Discover" for alert details page. Should we also move it to alert header left to "Snooze the rule" button? And we can add it to all alert detail pages.

maryam-saeidi commented 3 months ago

Should we also move it to alert header left to "Snooze the rule" button?

I think the current location is fine, or do you see an issue with it?

And we can add it to all alert detail pages.

How do you propose adding it to all alert details pages? I was thinking about adding this URL for each rule type separately in the alert summary section so they have control over the filters that they want to add.

kdelemme commented 3 months ago

@afharo in 8.14, we have a "View events" link in the Good vs Bad events chart on the SLO details page, that takes you to the discover app. That being said, I think it's a good idea to add the same link in the alert details image

benakansara commented 3 months ago

Should we also move it to alert header left to "Snooze the rule" button?

I think the current location is fine, or do you see an issue with it?

I was thinking to make it look consistent with other UIs like Dashboards. Current location is also fine.

And we can add it to all alert detail pages.

How do you propose adding it to all alert details pages? I was thinking about adding this URL for each rule type separately in the alert summary section so they have control over the filters that they want to add.

yes, the URL would be defined by rule type. I don't know yet how we can achieve what I suggested 😄 , but we can think about it if we want to move this link to header.

jasonrhodes commented 1 month ago

As this issue is about SLOs, and this functionality exists there, I will close this. Please open a new issue if we want to add this elsewhere.