[ResponseOps][Rule] Create rules from visualizations

[cnasikas]

To improve the usability of Alerting, create alignment with the Dashboards++ vision, and increase visibility in Dashboards when using alerting we should be able to create a rule directly from a Visualization.

Wireframes: https://whimsical.com/alert-rules-as-part-of-dashboards-full-flow-v1-VkCJCApJc5hqVXVg6jQVPm

[elasticmachine]

Pinging @elastic/response-ops (Team:ResponseOps)

[Zacqary]

Based on the wireframes, I think we can implement this in the following milestones:

1. Create new rule from a dashboard visualization
2. View/edit rules from the dashboard in a flyout without linking to Stack Management
3. Display rule thresholds and alerts as a visualization layer
4. Add existing rule to a dashboard visualization
5. Create/add rules from Lens

Estimates:

Milestone 1: Create rule from dashboard

Low to moderate effort, 1-2 weeks. All the components and systems for this already exist, they just need to be hooked up. Rule form flyout needs to be exported into the dashboard application, and we need to add a new dashboard action to create a rule from a visualization. Possible difficulty in accurately filling in query language and parameters for all visualization types.

EDIT: Probably moderate effort closer to 2-2.5 weeks since we need to ensure queries can be constructed properly in ESQL

Milestone 2: View/edit rules from the dashboard without linking to Stack Management

Low effort, 1 week. We just need to take the existing Rule Details UI from Triggers Actions UI and export it as a flyout. Nothing new really needs to be figured out here. Edit Rule flyout can be exported pretty much for free.

Milestone 3: Display rule thresholds and alerts as a visualization layer

High effort, needs significant research and collaboration with the visualization team to accurately assess how long this would take. Because this significantly enhances the value of every other milestone, I recommend we work on this milestone in parallel to the others

Milestone 4: Add existing rule to a dashboard visualization

Moderate effort, 1.5-3 weeks. This doesn't make a lot of sense to implement until we've gotten the visualization layer working, but once that's done, I think it'll answer a lot of the open questions about how this works. Specifically, how do we determine which rules are compatible with existing visualizations? But the bulk of actually achieving this milestone is just developing a new Select Rule flyout and exporting it from Triggers Actions UI, which should be pretty straightforward.

Alternative: Add existing rule AS a dashboard visualization

The wireframe seems to be proposing that we let users apply an existing rule to a visualization they've already created. Maybe this isn't the best workflow? We'd have to determine if the data in an existing visualization even makes sense to layer an existing rule on top of, like if it's even querying the same parameters or anything. We could just allow the user to create a visualization from an existing rule, and to visualize that rule's historical data. We COULD implement this before Milestone 3 is achieved.

Milestone 5: Create/add rules from Lens

Low to moderate effort, 1-2 weeks. With everything working on the dashboard side, it shouldn't be too hard to just slot it all into Lens. I'm not sure it makes a lot of sense to do this until we have the visualization layer implemented. Being able to create rules from the dashboard before we're able to visualize them might have some value for the user, but I see less of it coming from Lens.