Add ability for numeric values to open timeline and implement changes from design / product review #131827
Closed
4 of 6 tasks
Labels
backport:skip
This commit does not require backporting
enhancement
New value added to drive a business result
release_note:feature
Makes this part of the condensed release notes
SecuritySolution:QAAssist
Part of QA testing process for release
Team:Threat Hunting:Explore
Team:Threat Hunting
Security Solution Threat Hunting Team
v8.3.0
Based on conversation with @merilmathew , & @paulewing further changes to Detections Response dashboard are to be made:
Figma: https://www.figma.com/file/yGGkXDuUQzoR7faSVu6F9p/OOTB-Dashboard-for-analysts?node-id=520%3A94622
Bugs fixed in this ticket:
Enhancements:
Background Conversations:
QA:
Information about the view:
For 8.3 We are only building the sections noted in this document by the thumbs up (with green circle) further work is slated potentially for 8.4.
Please refer to that document for more information about this project, but find some things noted below:
Toggle Query (toggling seeing a specific table or chart has some UI problems noted here: [Security Solution] Query toggle, responsive design issues #131405. There are some hacky fixes in place to help mitigate this, but the cases and alerts chart have more problems around it.
Open/Acknowledged/Closed hyperlinks in alerts chart are not clickable as the app does not have the ability to route to those specific sections in Alerts page. (we can for open, but not closed or acknowledged, so we have opted to make none of them clickable
Same as above with hyperlinks in cases chart
Alert / Alert counts for each table have been requested to link to timelines. For eg:
clicking 7 would link to a timeline filtered by alerts by host.name: "Win 8"
View all other host alerts
to potentially be removed in favour of pagination showing remaining hosts. akin to this table:Permissions
If a user does not have case permissions, no case chart or tables will be seen.
If a user does not have alerts permissions, no alert chart or tables will be seen.
If a user has not pertinent permissions, they will see a no permissioned view.
The text was updated successfully, but these errors were encountered: