[RAC] [Metrics UI] Include group name in the reason message

[mgiota]

📝 Sumamary

In the following table it looks like each alert appears twice. It turns out that these alerts refer to different hosts, but that is not apparent from the reason message.

✔️ Acceptance criteria

• the alert group name is included in the reason, e.g. as a prefix my-host: ... or my-container: ...

Notes

The grouping field is used as the alert id. This is already implemented for the log threshold id, which can serve as a blueprint here:

kibana/x-pack/plugins/infra/server/lib/alerting/log_threshold/reason_formatters.ts

Lines 29 to 44 in 7d6aba5

	export const getReasonMessageForGroupedCountAlert = (
	actualCount: number,
	expectedCount: number,
	comparator: Comparator,
	groupName: string
	) =>
	i18n.translate('xpack.infra.logs.alerting.threshold.groupedCountAlertReasonDescription', {
	defaultMessage:
	'{groupName}: {actualCount, plural, one {{actualCount} log entry} other {{actualCount} log entries} } ({translatedComparator} {expectedCount}) match the conditions.',
	values: {
	actualCount,
	expectedCount,
	groupName,
	translatedComparator: ComparatorToi18nMap[comparator],
	},
	});

kibana/x-pack/plugins/infra/server/lib/alerting/log_threshold/log_threshold_executor.ts

Lines 251 to 256 in 7d6aba5

	const alertInstance = alertInstanceFactory(
	UNGROUPED_FACTORY_KEY,
	getReasonMessageForUngroupedCountAlert(documentCount, count.value, count.comparator),
	documentCount,
	count.value
	);

[elasticmachine]

Pinging @elastic/logs-metrics-ui (Team:logs-metrics-ui)

[paulb-elastic]

Discussed in weekly meeting, this can be closed

[jasonrhodes]

@mgiota / @weltenwort can you work together to rewrite the description of this ticket (or log a new one and re-close this one) to reflect what we intend to do here for now? I know we want to index some fields—do we have a short list of the ones to start with that we could index in ECS format for now? Or do we want to push ECS field indexing to a future release?

[weltenwort]

ℹ️ I updated the description so it focuses on the reason message for now

[mgiota]

@weltenwort Can you check my comment here #115171 (comment)? I changed the reason format and moved the group at the end. Any objections on that?