Commit graph

46 commits

Author SHA1 Message Date
ymao1
049135192e
[Alerting] Search alert (#88528)
* Adding es query alert type to server with commented out executor

* Adding skeleton es query alert to client with JSON editor. Pulled out index popoover into component for reuse between index threshold and es query alert types

* Implementing alert executor that performs query and matches condition against doc count

* Added tests for server side alert type

* Updated alert executor to de-duplicate matches and create instance for every document if threshold is not defined

* Moving more index popover code out of index threshold and es query expression components

* Ability to remove threshold condition from es query alert

* Validation tests

* Adding ability to test out query. Need to add error handling and it looks ugly

* Fixing bug with creating alert with threshold and i18n

* wip

* Fixing tests

* Simplifying executor logic to only handle threshold and store hits in action context

* Adding functional test for es query alert

* Types

* Adding functional test for query testing

* Fixing unit test

* Adding link to ES docs. Cleaning up logger statements

* Adding docs

* Updating docs based on feedback

* PR fixes

* Using ES client typings

* Fixing unit test

* Fixing copy based on comments

* Fixing copy based on comments

* Fixing bug in index select popover

* Fixing unit tests

* Making track_total_hits configurable

* Fixing functional test

* PR fixes

* Added unit test

* Removing unused import

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-01-29 07:45:00 -05:00
Rashmi Kulkarni
20f32d506f
JSON Body payload for the webhook connector in Alerts & Actions (#89253)
* fixes https://github.com/elastic/kibana/issues/74449


Co-authored-by: Patrick Mueller <pmuellr@gmail.com>
2021-01-26 14:20:42 -08:00
Aaron Caldwell
dc3e1b0cd6
[Docs] Add geo threshold and containment docs (#88783)
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-01-21 17:00:24 -07:00
Patrick Mueller
d3fa06b268
updates doc on action parameter variable mustache escaping (#88521)
Provides more detail on mustache variable escaping within action parameter templates.
2021-01-21 09:06:30 -05:00
Bill McConaghy
7efcdb8940
[DOCS] improving production documentation for task manager and alerting (#87484)
* improving production documentation for task manager and alerting

* calling it Kibana Task Manager to be more explicit

* addressing PR feedback
2021-01-06 09:57:18 -05:00
Bill McConaghy
6ad8a920ae
adding docs about distinction between two and three curly braces for action variable interpolation (#87302) 2021-01-05 09:42:37 -05:00
Peter Schretlen
9bc2fccb2d
use alerting concepts diagram with sequence, and update docs to explain the sequence (#86699) 2020-12-22 09:54:54 -05:00
Bill McConaghy
4a7071ea90
adding documentation of use of NODE_EXTRA_CA_CERTS env var (#84578) 2020-12-01 08:03:57 -05:00
Bill McConaghy
3af64cac34
removing beta callouts (#84510) 2020-11-30 09:56:00 -05:00
ymao1
8ca1e93763
[Actions] Microsoft Teams connector (#83169)
* First cut at adding teams connector

* Getting teams connector working

* Unit tests

* Updating docs

* PR comments

* PR comments

* Changing error to debug log

* Fixing imports

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2020-11-20 11:14:17 -05:00
Bill McConaghy
5375ea4135
Adding documentation for global action configuration options (#83557)
* Adding documentation for global action configuration options

* Update docs/user/alerting/defining-alerts.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* incorporating PR feedback

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-11-18 20:19:13 -05:00
Bill McConaghy
446cffeccf
renaming built-in alerts to Stack Alerts (#82873)
* renaming built-in alerts to Stack Alerts

* responding to PR feedback and adding glossary definition for stack alerts

* Update docs/glossary.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-11-10 07:21:52 -05:00
Bill McConaghy
6cf53a075c
[DOCS] Adding better documentation for required RBAC settings for alerting (#82375)
* Adding better documentation for required RBAC settings for alerting

* Bolding feature name and spelling out ampersand

* clarifying explanation of action privileges needed
2020-11-05 10:58:29 -05:00
Wylie Conlon
19dd9b4ff6
Fix example in docs (#82185) 2020-11-02 10:57:18 -05:00
Kaarina Tungseth
c77619352b
[DOCS] 7.10 Core UI changes (#80407)
* [DOCS] 7.10 screenCore UI changes

* Kibana access options

* Removed Kibana from Set up Kibana

* Removed rogue symbols

* Update docs/spaces/index.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/management/managing-beats.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Update docs/user/introduction.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Changed menu to main menu

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-10-22 09:06:51 -05:00
EamonnTP
af6d287653
Move observability content (#79978) 2020-10-13 16:08:48 +01:00
Christos Nasikas
3d9ea52803
[Actions][Jira] Set parent issue for Sub-task issue type (#78772) 2020-10-01 09:34:25 +03:00
Christos Nasikas
f2fc48dec8
[Docs][Actions] Add docs for Jira and IBM Resilient (#78316) 2020-09-25 16:45:19 +03:00
Patrick Mueller
791eb515b8
Update server-log.asciidoc (#77794)
This is a re-do of PR #74063, which was merged to the wrong branch

Co-authored-by: Nimex94 <34445912+Nimex94@users.noreply.github.com>
2020-09-17 15:01:39 -04:00
Yuliia Naumenko
6e0b20cbe3
Replaced whitelistedHosts with allowedHosts in actions ascii docs (#76731) 2020-09-04 10:33:49 -07:00
Yuliia Naumenko
60986d4f82
Updated ServiceNow description in docs and actions management UI to contains correct info (#76344)
* Updated ServiceNow description in documentation and Actions management create UI to contains correct info that ServiceNow

* fixed due to comments
2020-09-03 13:07:23 -07:00
Lisa Cawley
83fab293bc
[DOCS] Fixes typo in Alerting actions (#73756) 2020-07-30 13:20:07 -07:00
Yuliia Naumenko
5c5d75f6b0
Removed filtering for Case owned ServiceNow actions from the Management UI and make it usable for Alerts. Added documentation. (#71579)
* Removed filtering for Case owned ServiceNow actions from the Management UI and make it usable for Alerts. Added documentation.

* extended docs

* Fixed docs

* fixed connector page

* Changed SN variables components

* Fixed issues

* fixed order

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/servicenow.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* -

* fixed tests

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-07-15 11:01:34 -07:00
Yuliia Naumenko
2009447ab8
Added help text where needed on connectors and alert actions UI (#69601)
* Added help text where needed on connectors and alert actions UI

* fixed ui form

* Added index action type examples, fixed slack link

* Fixed email connector docs and links

* Additional cleanup on email

* Removed autofocus to avoid twice link click for opening in the new page

* Extended documentation for es index action type

* Fixed tests

* Fixed doc link

* fixed due to comments

* fixed due to comments

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update x-pack/plugins/actions/README.md

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update x-pack/plugins/actions/README.md

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update x-pack/plugins/triggers_actions_ui/README.md

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/email.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/index.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/action-types/slack.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Fixed due to comments

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-07-13 19:53:37 -07:00
Yuliia Naumenko
83c7d33120
Changed "Elastic" to "Elastic Alerts" in PagerDuty action doc. (#71184) 2020-07-09 07:58:05 -07:00
Yuliia Naumenko
57915e1641
ServiceNow push to Incident generic implementation (supporting both Case specific and generic Alerts) (#68464)
* Draft ServiceNow generic implementation

* simple working servicenow incident per alert

* fixed running times

* rely on externalId for update incident on the next execution

* Added consumer to the action type to be able to split ServiceNow for Cases and Alerts

* Added subActions support for ServiceNow action form

* Basic version for Alerts part for ServiceNow

* Keep Case ServiceNow functionality working

* Revert changes on app_router

* Fixed type checks

* Fixed language check issues

* Fixed actions unit tests

* Fixed functional tests

* Fixed jest tests

* fixed tests

* Copied case mappings to alerting plugin

* made consumer optional

* Cleanup tests

* more cleanup

* Fixed jest tests and type checks

* fixed tests

* fixed servicenow validation tests

* Added ServiceNow unit tests

* Removed consumer for actions

* fixed client side isCaseOwned support

* fixed failing tests

* fixed jest tests

* Fixed URL validation

* fixed due to comments

* fixed tests

* fixed jest tests

* Fixed due to comments. Moved ServiceNow filtering in case plugin to server side

* fixed mock for ServiceNow

* fixed consumer config

* fixed test

* fixed type check

* Fixed jest test

* fixed type check
2020-07-06 16:38:45 -07:00
Kaarina Tungseth
896b9cddbc
[DOCS] Updates for navigation redesign (#68709)
* [DOCS] Updates for navigation redesign

* Getting started

* Set up text

* Discover

* Dashboard, Graph, ML, Maps, APM, SIEM, Dev tools

* Dev Tools, Stack Monitoring, Management

* Management

* Final changes

* [DOCS] Updates for navigation redesign

* [DOCS] Updates CCR monitoring screenshots

* updates SIEM screenshot and Cases overview text

* Added Brandon's APM image

* [DOCS] Refines CCR shard screenshot

* Removed merge conflict image file

Co-authored-by: lcawl <lcawley@elastic.co>
Co-authored-by: Ben Skelker <ben.skelker@elastic.co>
2020-06-12 09:39:36 -05:00
Yuliia Naumenko
f6e93a19d3
Fixed pre-configured docs link points to the wrong page and functional tests configs (#68606)
* Fixed pre-configured docs link points to the wrong page and functional tests configs

* Fixed doc link
2020-06-09 07:00:31 -07:00
Mike Côté
642b6bd36a
Update wording (#67486) 2020-05-28 12:19:29 -04:00
gchaps
480c1527c8
[DOCS] Improves formatting in action types (#65932)
* [DOCS] Fixes formatting in action types

* [DOCS] Updates preconfigured connectors and alerts
2020-05-11 14:19:50 -07:00
Patrick Mueller
39427f5ed3
[Alerting] changes preconfigured actions config from array to object (#65397)
resolves https://github.com/elastic/kibana/issues/63171

Previously, preconfigured actions were specified as an array of action
properties.  This ended up being problematic when using the kibana keystore
for secrets, as you'd have to reference specific actions via index.

This changes preconfigured actions to be specified as an object, where the
property key is the id, and the body is the remainder of the action properties.

As access to preconfigured actions has leaked across the code base, it's
probably time to consider changing the internal representation from an array
to a Map, to provide easier access by action id.  For a future PR.
2020-05-07 15:12:01 -04:00
Yuliia Naumenko
74187fd80d
Extended alerting documentation with information about using Kibana keystore and action types for preconfigured connectors (#65201)
* Extended alerting documentation with information about using Kibana keystore and action types for preconfigured connectors

* Fixed due to comments and merged two preconfig pages

* Fixed due to review comments

* Update docs/user/alerting/action-types/index.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Fixed due to comments

* -

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-05-06 18:19:15 -07:00
Yuliia Naumenko
6dd5ba0e67
Updated alerting docs screenshots where necessary (#65354)
* Updated alerting docs screenshots where necessary

* Changed screenshots for management section

* fixed alt issue
2020-05-06 11:33:55 -07:00
Patrick Mueller
cb00e5e7bb
[Alerting] fix labels and links in PagerDuty action ui and docs (#64032)
resolves #63222, resolves #63768, resolves #63223

ui changes:

- adds an "(optional)" label after the API URL label
- changes help link to go to alerting docs and not watcher docs
- changes the label "Routing key" to "Integration key" to match other docs
- changes the order of the severity options to match other docs

doc changes:

- changes the reference of "Routing key" to "Integration key" to match other docs
- makes clearer that the API URL is optional
2020-05-04 08:48:57 -04:00
Yuliia Naumenko
6bf0e731b6
Extended existing alerting functionality to support preconfigured only action types (#64030)
* Extended existing alerting functionality to support preconfigured only action types

* fixed functional test

* Adding documentation

* Fixed UI part due to comments

* added missing tests

* fixed action type execution

* Fixed documentation

* Fixed due to comments

* fixed type checks

* extended isActionExecutable to check exact action id if it is in the preconfigured list
2020-04-24 14:38:28 -07:00
gchaps
a53d53369c
[DOCS] Fixes formatting in alerting doc (#64338) 2020-04-23 11:11:18 -07:00
gchaps
8ebd0c1b71
[DOCS] Fixes hierarchy in alerting and actions section (#64133) 2020-04-22 08:19:09 -07:00
gchaps
d45d78016a
[DOCS] Alerting PagerDuty benefits (#63652)
* [DOCS] Alerting PagerDuty benefits

* [DOCS] Fixes broken link

* [DOCS] Organization changes

* [DOCS] Changes to meet template and incorporate review comments

* [DOCS] Fixed formatting of bulleted list

* [DOCS] Incorporates review comments

* Update docs/user/alerting/action-types/pagerduty.asciidoc

Co-Authored-By: Mike Côté <mikecote@users.noreply.github.com>

* [DOCS] Fixes naming and other formatting issues

Co-authored-by: Mike Côté <mikecote@users.noreply.github.com>
2020-04-20 09:09:49 -07:00
Yuliia Naumenko
055d1fb7d4
[Alerting] Documentation for how to pre-configure connectors. (#63807)
* [Alerting] Documentation for how to pre-configure connectors.

* small fix

* Adjusted titles

* Fixed wrong link

* fixed warning

* Fixed ci issues

* [DOCS] Edits preconfigured connector docs

* Replaced words 'pre-configured' with 'preconfigured'

Co-authored-by: gchaps <chappell_5@yahoo.com>
2020-04-17 17:04:02 -07:00
Mike Côté
6c670b77f8
Split action types into own page (#63516)
* Split action types into own page

* Update docs/user/alerting/action-types.asciidoc

Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com>

* Apply changes based on feedback

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-04-15 15:54:36 -04:00
Mike Côté
e44cf28c98
Fix alerting documentation encryption key requirement (#63512)
* Fix documentation to indicate encryption key config required regardless if security is used or not

* Update docs/user/alerting/index.asciidoc

Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/user/alerting/index.asciidoc

Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com>

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-04-15 12:19:15 -04:00
Yuliia Naumenko
53ee20b306
Changed alerting wrong param name for help xpack.encrypted_saved_objects.encryptionKey to xpack.encryptedSavedObjects.encryptionKey (#63307) 2020-04-10 19:18:19 -07:00
Kaarina Tungseth
59c044ff00
[DOCS] Removed references to right (#62508) 2020-04-09 12:42:30 -05:00
Brandon Morelli
6985478a32
docs: fix rendering of bulleted list (#62855) 2020-04-09 08:22:00 -07:00
Peter Schretlen
09f1bae2ee
fix text error in diagrams (#62101) 2020-04-02 14:23:09 -04:00
Peter Schretlen
4e7c681f2b
Alerting user interface documentation and guide (#60256) 2020-03-27 16:45:24 -04:00