From fe9fb3ee3d226422a4ca2aa22577122e63ec6ed5 Mon Sep 17 00:00:00 2001
From: "Joey F. Poon" <joey.poon@elastic.co>
Date: Wed, 23 Mar 2022 18:16:48 -0500
Subject: [PATCH] [Security Solution] update blocklist form copy (#128385)

---
 .../management/pages/blocklist/translations.ts  | 10 +++++++++-
 .../pages/blocklist/view/blocklist.tsx          |  6 ++++--
 .../view/components/blocklist_form.tsx          | 17 ++++++++++++++++-
 3 files changed, 29 insertions(+), 4 deletions(-)

diff --git a/x-pack/plugins/security_solution/public/management/pages/blocklist/translations.ts b/x-pack/plugins/security_solution/public/management/pages/blocklist/translations.ts
index f7e4344cee23c..e905cef582964 100644
--- a/x-pack/plugins/security_solution/public/management/pages/blocklist/translations.ts
+++ b/x-pack/plugins/security_solution/public/management/pages/blocklist/translations.ts
@@ -15,7 +15,8 @@ export const DETAILS_HEADER = i18n.translate('xpack.securitySolution.blocklists.
 export const DETAILS_HEADER_DESCRIPTION = i18n.translate(
   'xpack.securitySolution.blocklists.details.header.description',
   {
-    defaultMessage: 'Add a blocklist to prevent selected applications from running on your hosts.',
+    defaultMessage:
+      'The blocklist prevents selected applications from running on your hosts by extending the list of processes the Endpoint considers malicious.',
   }
 );
 
@@ -61,6 +62,13 @@ export const VALUE_LABEL = i18n.translate('xpack.securitySolution.blocklists.val
   defaultMessage: 'Value',
 });
 
+export const VALUE_LABEL_HELPER = i18n.translate(
+  'xpack.securitySolution.blocklists.value.label.helper',
+  {
+    defaultMessage: 'Type or copy & paste one or multiple comma delimited values',
+  }
+);
+
 export const CONDITION_FIELD_TITLE: { [K in ConditionEntryField]: string } = {
   [ConditionEntryField.HASH]: i18n.translate('xpack.securitySolution.blocklists.entry.field.hash', {
     defaultMessage: 'Hash',
diff --git a/x-pack/plugins/security_solution/public/management/pages/blocklist/view/blocklist.tsx b/x-pack/plugins/security_solution/public/management/pages/blocklist/view/blocklist.tsx
index 45d76614ddce2..75d4b22fe16a1 100644
--- a/x-pack/plugins/security_solution/public/management/pages/blocklist/view/blocklist.tsx
+++ b/x-pack/plugins/security_solution/public/management/pages/blocklist/view/blocklist.tsx
@@ -18,14 +18,16 @@ const BLOCKLIST_PAGE_LABELS: ArtifactListPageProps['labels'] = {
     defaultMessage: 'Blocklist',
   }),
   pageAboutInfo: i18n.translate('xpack.securitySolution.blocklist.pageAboutInfo', {
-    defaultMessage: 'Add a blocklist to block applications or files from running on the endpoint.',
+    defaultMessage:
+      'The blocklist prevents selected applications from running on your hosts by extending the list of processes the Endpoint considers malicious.',
   }),
   pageAddButtonTitle: i18n.translate('xpack.securitySolution.blocklist.pageAddButtonTitle', {
     defaultMessage: 'Add blocklist entry',
   }),
   getShowingCountLabel: (total) =>
     i18n.translate('xpack.securitySolution.blocklist.showingTotal', {
-      defaultMessage: 'Showing {total} {total, plural, one {blocklist} other {blocklists}}',
+      defaultMessage:
+        'Showing {total} {total, plural, one {blocklist entry} other {blocklist entries}}',
       values: { total },
     }),
   cardActionEditLabel: i18n.translate('xpack.securitySolution.blocklist.cardActionEditLabel', {
diff --git a/x-pack/plugins/security_solution/public/management/pages/blocklist/view/components/blocklist_form.tsx b/x-pack/plugins/security_solution/public/management/pages/blocklist/view/components/blocklist_form.tsx
index 379b8f932ba9d..ff4325a38757d 100644
--- a/x-pack/plugins/security_solution/public/management/pages/blocklist/view/components/blocklist_form.tsx
+++ b/x-pack/plugins/security_solution/public/management/pages/blocklist/view/components/blocklist_form.tsx
@@ -21,6 +21,8 @@ import {
   EuiTitle,
   EuiFlexGroup,
   EuiFlexItem,
+  EuiToolTip,
+  EuiIcon,
 } from '@elastic/eui';
 import {
   OperatingSystem,
@@ -49,6 +51,7 @@ import {
   SELECT_OS_LABEL,
   VALUE_LABEL,
   ERRORS,
+  VALUE_LABEL_HELPER,
 } from '../../translations';
 import {
   EffectedPolicySelect,
@@ -165,6 +168,18 @@ export const BlockListForm = memo(
       return selectableFields;
     }, [selectedOs]);
 
+    const valueLabel = useMemo(() => {
+      return (
+        <div>
+          <EuiToolTip content={VALUE_LABEL_HELPER}>
+            <>
+              {VALUE_LABEL} <EuiIcon color="subdued" type="iInCircle" className="eui-alignTop" />
+            </>
+          </EuiToolTip>
+        </div>
+      );
+    }, []);
+
     const validateValues = useCallback((nextItem: ArtifactFormComponentProps['item']) => {
       const os = ((nextItem.os_types ?? [])[0] as OperatingSystem) ?? OperatingSystem.WINDOWS;
       const {
@@ -432,7 +447,7 @@ export const BlockListForm = memo(
           </EuiFlexGroup>
         </EuiFormRow>
         <EuiFormRow
-          label={VALUE_LABEL}
+          label={valueLabel}
           isInvalid={visited.value && !!errorsRef.current.value?.length}
           helpText={warningsRef.current.value}
           error={errorsRef.current.value}