[Security Solution] Rule creation UI: incorrect link for index patterns #163503
Labels
bug
Fixes for quality problems that affect the customer experience
consider-next
Feature:Rule Creation
Security Solution Detection Rule Creation workflow
impact:high
Addressing this issue will have a high level of impact on the quality/strength of our product.
Team:Detection Engine
Security Solution Detection Engine Area
Team:Detections and Resp
Security Detection Response Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Kibana version:
8.9
Description of the problem including expected versus actual behavior:
The Security rule creation UI allows you to create a rule based on index patterns or data views. Confusingly, Elastic has two different things called "index pattern": an Elasticsearch construct, and a Kibana construct (deprecated, now called "data view"). I think the link for "index patterns" (see red arrow in the screenshot) goes to the wrong docs. It points to API docs for the deprecated Kibana construct, but it should point to the ES construct.
I think a better page to link to could be https://www.elastic.co/guide/en/elasticsearch/reference/current/api-conventions.html#api-multi-index, or even better a new standalone page that explains what index patterns are in this context.
cc: @Arnovandevelde
The text was updated successfully, but these errors were encountered: