elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.69k stars 8.12k forks source link

[Obs Alerting] Move "Related logs" to each chart with the correct filter #188091

Open maryam-saeidi opened 1 month ago

maryam-saeidi commented 1 month ago

Figma link

Currently, the Related logs are shown at the top like this: image

The idea is to move this close to each chart and adjust the filter so it matches that chart: image

Question

Acceptance criteria

elasticmachine commented 1 month ago

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

benakansara commented 1 month ago

Question: In which scenario different charts would be based on different documents in alert details page? or is the idea to move the link closer to charts even if they are based on same documents?

maryam-saeidi commented 1 month ago

Question: In which scenario different charts would be based on different documents in alert details page? or is the idea to move the link closer to charts even if they are based on same documents?

The data view and groups are shared between charts, but we might have multiple conditions, one with count aggregation and a specific filter. In such a case, we can use that filter for the related "View logs/documents" link.

Does this answer your question?

benakansara commented 1 month ago

ah yes we have additional filter in count aggregation apart from global filter. In this case, charts can be based on different data. If we only use global filters, then all charts will be based on same documents, is my understanding correct?

maryam-saeidi commented 1 month ago

If we only use global filters, then all charts will be based on same documents, is my understanding correct?

Yes.

The reason for this change is to make it clear that the filtered documents are the ones that we use to calculate the rule equation, not the actual logs of a specific service (especially in a metric use case).

jasonrhodes commented 3 weeks ago

We need to sync these changes with the planned changes for Alert Details, for RCA