elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.71k stars 8.12k forks source link

[Security Solution][Alert Details] - clicking on a value in the value column should open a preview #189864

Closed PhilippeOberti closed 1 week ago

PhilippeOberti commented 1 month ago

Description

In the alert details expandable flyout Table tab we show all the field/value pairs. Some of them (host.ip, host.name, kibana.alert.rule.name, user.name...) can be interacted with. The user can click on the value and the current behavior is to open the corresponding detailed page in a new tab (host detail, user detail, network detail, rule detail...)

To be consistent with the recent work that enabled host and user previews as well as alert previews throughout the flyout, we should apply the same logic here and open the preview panels instead of navigating to a new page. Users will still be able to navigate to the detailed pages after opening the previews, by clicking on the footer of those preview panels.

Current behavior

https://github.com/user-attachments/assets/eaf4fc9b-cc12-480f-9a8b-634886945d00

https://github.com/user-attachments/assets/5e18a5d5-471c-4366-8bf8-725d15575526

Desired behavior

https://github.com/user-attachments/assets/6edcf60c-0ef1-4be7-b30b-8a9c6f6e4b8e

Acceptance criteria

Notes

The network/ip flyout currently doesn't have a preview flyout. The work is logged in this ticket.

elasticmachine commented 1 month ago

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

elasticmachine commented 1 month ago

Pinging @elastic/security-solution (Team: SecuritySolution)

elasticmachine commented 1 month ago

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

christineweng commented 4 weeks ago

https://github.com/elastic/kibana/pull/190560 enables preview in table tab