opensearch-project / security-analytics-dashboards-plugin

Front end (UI) plugin to support security-analytics
Apache License 2.0
8 stars 41 forks source link

[BUG]: "Indexes" field in "Create threat detector" flow gives a wrong impression that user can use frontend index patterns as a source for threat detection. #995

Open xeniatup opened 2 months ago

xeniatup commented 2 months ago

What is the bug? The "Indexes" field in "Create threat detector" flow gives a wrong impression that user can use frontend index patterns as a source for threat detection. https://playground.opensearch.org/app/opensearch_security_analytics_dashboards#/create-detector

Screenshot 2024-04-25 at 3 02 30 PM

What is the expected behavior? To clarify the meaning of the field, the field label should beSelect or input source indexes or aliases, and the helper text underneath the input should clarify that user can enter as a wildcard pattern to match multiple indexes as `Use as a wildcard pattern to match multiple sources.`

Screenshot 2024-04-25 at 3 04 08 PM