Skip to content

[Security Solution][DQD] Add New Historical Flyout Tab UI (Phase 1) #185882

Closed

Description

This is a ticket for actual implementation of first last UI from new DQD Historical Checks Story #184158.

Acceptance criteria:

Fully functional Historical Checks Tab UI

Final Description from PR:

Data Quality Dashboard Historical Results (Phase 1)

History tab (new):

  • view last 30 days of check results by default:
  • filter by historical checks by outcome (PASS/FAIL/ALL)
  • paginate all results (10 per page by default)
  • each result can be viewed in individually and independently expandable/collapsible accordion panel (collapsed by default)
  • each result contains an extended index stats panel with (custom, ecs and all fields counts)
  • each result contains index properties tabs (incompatible and same family)
  • check now checks and redirects to latest check tab with latest check info
  • switching from initial historical tab to latest check tab triggers latest check
  • subsequent switching back and forth between already open history or latest check tabs doesn't trigger a check
  • legacy data (before release of this [Security Solution][DQD] Persist new fields in results storage #185025) is supported with degraded view (same family tab is disabled with warning tooltip), incompatible tab tables are statically rendered from markdown

Latest checks list view (changes):

  • remove check index button icon from list view
  • add historical results button icon instead of check index button
  • historical results button icon directly opens history tab without going through latest check

UI Changes (before/after):

ESS Changes

Latest check expand icon

  • expand icon is replaced with check now icon (functionality is the same)
  • tooltip text is updated
  • this new icon is still opening the index check flyout tab (latest check tab)
    ess_before_after_0

Historical check icon (NEW)

  • inline check now functionality is removed
  • view history icon is added in its stead to open a flyout with history tab
  • tooltip text is updated
    ess_before_after_1

Flyout Header

  • "checked at" subheader is now shorter (milliseconds are removed)
  • Tabline with Latest check and History tabs is added (NEW)
    ess_before_after_2

History tab (NEW)

  • top left: filter by check outcome
  • top right: filter by date range
  • list of checks collapsed by default (individually separately controlled, multiple can be open at a time)
  • pagination (10,25,50). 10 by default
    ess_after_3

Individual check result view (NEW)

  • topline: extended index stats including new "custom", "ecs compliant" & "all fields".
  • incompatible fields and same family fields view (custom, ecs compliant and all fields view is unavailable in history tab)
    ess_after_4

Legacy check result view (NEW)

  • before this PR went to production [Security Solution][DQD] Persist new fields in results storage #185025 check result data contained information allowing to recreate detailed view of incompatible fields from markdown only (without same family fields)
  • we recreate incompatible field tables in degraded view from markdown
  • same family tab is permanently disabled with an explanation tooltip
  • action buttons still work as is for incompatible fields view
  • index stats panel is showing as for non-legacy result
    SCR-20241009-lmcu

No results

SCR-20241009-llzw

Loading view

ess_after_8

Error view

ess_after_9

Serverless Changes

Empty checks result badge (FIX)

  • previously empty pattern check result badge was marked as PASS which was incorrect. It was removed.
    serverless_before_after_0

Latest check expand icon

  • expand icon is replaced with check now icon (functionality is the same)
  • tooltip text is updated
  • this new icon is still opening the index check flyout tab (latest check tab)
    serverless_before_after_1

Historical check icon (NEW)

  • inline check now functionality is removed
  • view history icon is added in its stead to open a flyout with history tab
  • tooltip text is updated
    serverless_before_after_2

Flyout Header and Body Topline

  • "checked at" subheader is now shorter (milliseconds are removed)
  • Tabline with Latest check and History tabs is added (NEW)
  • Index Stats Panel is now also showing here just like in latest check tab (but without phase label as ilm is not available in serverless) (NEW)
    serverless_before_after_3

History tab (NEW)

  • top left: filter by check outcome
  • top right: filter by date range
  • list of checks collapsed by default (individually separately controlled, multiple can be open at a time)
  • pagination (10,25,50). 10 by default
    serverless_after_4

Individual check result view (NEW)

  • topline: extended index stats including new "custom", "ecs compliant" & "all fields" but excluding ilm phase label section.
  • incompatible fields and same family fields view (custom, ecs compliant and all fields view is unavailable in history tab)
    serverless_after_5

Legacy check result view (NEW)

  • before this PR went to production [Security Solution][DQD] Persist new fields in results storage #185025 check result data contained information allowing to recreate detailed view of incompatible fields from markdown only (without same family fields)
  • we recreate incompatible field tables in degraded view from markdown
  • same family tab is permanently disabled with an explanation tooltip
  • action buttons still work as is for incompatible fields view
  • index stats panel is showing as for non-legacy result
    SCR-20241009-lkhi

No results

SCR-20241009-ljwg

Loading view

serverless_after_9

Error view

serverless_after_10

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions