opensearch-project / security-analytics-dashboards-plugin

Front end (UI) plugin to support security-analytics
Apache License 2.0
8 stars 41 forks source link

[UX] View correlations page improvements #828

Open xeniatup opened 7 months ago

xeniatup commented 7 months ago

Meta UX issue

The issue is tracking the individual tasks to improve view correlations user experience. See a more detailed description for each item below.

Note: the "Log types" search bar filter + multi-select popover experience on the Correlations page is identical to the respective experience with "Log types" filter on the "Correlation rules" page. There is an opportunity to contribute the customizations to OUI components.

Page layout:

Search bar filters:

Log types filter select popover:

Findings side panel

Visualization graph

TBD

Page layout

1.1 Implement search bar and move the time range to the page header (OuiPageHeader)

Current experience:

Screenshot 2023-12-04 at 4 50 00 PM

Proposed experience:

Screenshot 2023-12-04 at 4 53 51 PM

Search bar filters :

2.1 Indicate the number of available options for “Log types” and "Severity" search bar filters (badge) by passing numFilters in the OuiFilterGroup component.

Current experience:

Screenshot 2023-12-05 at 3 21 48 PM

Proposed experience:

Screenshot 2023-12-05 at 3 22 31 PM

2.2 Implement isClearable set to true for the "Log types" search bar filter when user makes selections that differ from the default ("Select all")

Current experience:

Screenshot 2023-12-05 at 3 23 42 PM

Proposed experience:

Screenshot 2023-12-05 at 3 24 09 PM

Log types filter select popover:

3.1 Implement OuiButtonGroups with type="single" prop for “Select all” and “Deselect all” options in the “Log types” selector popover.

Current experience:

Screenshot 2023-12-05 at 3 31 50 PM

Proposed experience:

Screenshot 2023-12-05 at 3 32 05 PM

3.2 Display "Select all" button to "Selected" by default.

Current experience:

Screenshot 2023-12-05 at 3 34 33 PM

Proposed experience:

Screenshot 2023-12-05 at 3 37 06 PM

3.3 Remove the checked property from the group label when at least one option within the group is unselected.

Current experience:

Screenshot 2023-12-05 at 3 43 03 PM

Proposed experience:

Screenshot 2023-12-05 at 1 23 57 PM

Findings side panel

4.1 Tighten up the spacing within correlated findings cards

Current experience:

Screenshot 2023-12-05 at 4 08 20 PM

Proposed experience:

Screenshot 2023-12-05 at 4 08 46 PM

4.2 Use compressed prop for the OuiDescriptionList description list items

Current experience:

Screenshot 2023-12-05 at 4 09 42 PM

Proposed experience:

Screenshot 2023-12-05 at 4 09 58 PM

4.3 Apply smaller font size and $ouiTextSubdued color to the time stamp for each finding

Current experience:

Screenshot 2023-12-05 at 4 09 42 PM

Proposed experience:

Screenshot 2023-12-05 at 4 09 58 PM

4.4 Add "Info" icon with a tooltip explaining the correlation score

Tooltip content: The score is based on the proximity of relevant findings in the threat scenario defined by the correlation rule.

Current experience:

Screenshot 2023-12-05 at 4 09 42 PM

Proposed experience:

Screenshot 2023-12-05 at 4 19 40 PM

4.5 Make the parent finding card sticky so it doesn't scroll with the rest of the side panel

Current experience:

Screenshot 2023-12-05 at 4 20 29 PM

Proposed experience:

Screenshot 2023-12-05 at 4 20 48 PM
dblock commented 2 weeks ago

Catch All Triage - 1 2 3 4 5 thanks for opening this, was this addressed in #855?