Skip to content

[Feature Request] Permit to disable similarity (case and alert) for some observable #1625

Closed
@To-om

Description

@To-om

Request Type

Feature Request

Problem Description

Some observables should not be used for similarity. The aim of this issue is to add an attribute "ignoreSimilarity" to observables. This attribute, if true, disables similarity for that observable.

The ignoreSimilarity field is also propagated to case observables when an alert is promoted to a case. The UI needs to display this attribute and make it editable in a case:

UI changes

  • FE - Display the ignoreSimilarity flag in alert observables list
  • FE -Display the ignoreSimilarity flag in case observables list
  • FE - Display the ignoreSimilarity flag in case observable detail page
  • FE - Allow setting the attribute in the bulk update dialog
  • FE - Hide Link section from observable details page if ignoreSimilarity is set to true
  • FE - Filter observable lists using ignoreSimilarity flag
  • FE - Add ignoreSimilarity option in observable creation dialog

API changes

  • BE - Add ignoreSimilary to the /api/describe v0 APIs (Search and dashboards)
  • BE - Add ignoreSimilary to the /api/describe v1 APIs
  • BE - Rely on ignoreSimilary for related cases
  • BE - Take ignoreSimilary into account in observable PATCH API
  • BE - Take ignoreSimilary into account in observable bulk PATCH API

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions