Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution][threat hunting explore] EUI refresh: Remove custom color hex #204631

Open
wants to merge 13 commits into
base: main
Choose a base branch
from

Conversation

angorayc
Copy link
Contributor

@angorayc angorayc commented Dec 17, 2024

Summary

#202498
#202503

Running Kibana with the Borealis theme

In order to run Kibana with Borealis, you'll need to do the following:

  1. Set the following in kibana.dev.yml: uiSettings.experimental.themeSwitcherEnabled: true

  2. Run Kibana with the following environment variable set:
    KBN_OPTIMIZER_THEMES="borealislight,borealisdark,v8light,v8dark" yarn start

  3. This will expose a toggle under Stack Management > Advanced Settings > Theme version, which you can use to toggle between Amsterdam and Borealis.

Image


Explore

host_after users_after network_dns network_after

Dashboards

dashboard_overview dashboard_detection_response_2 dashboard_detection_response_1

Alerts

alerts_chart_collapsed summary trend counts treemap

Rules preview

Screenshot 2024-12-18 at 13 45 33

@angorayc angorayc added the ci:cloud-deploy Create or update a Cloud deployment label Dec 17, 2024
@angorayc angorayc added backport:skip This commit does not require backporting v9.0.0 labels Dec 18, 2024
@angorayc angorayc marked this pull request as ready for review December 19, 2024 13:08
@angorayc angorayc requested review from a team as code owners December 19, 2024 13:08
@angorayc angorayc requested a review from hop-dev December 19, 2024 13:08
@angorayc angorayc added the release_note:skip Skip the PR/issue when compiling release notes label Dec 19, 2024
Copy link
Contributor

@maxcold maxcold left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The change in getSeverityColor logic will change the color palette in Borealis quite drastically (medium severity will become pink for example). I don't think that's how we should handle the migration. We should rely on the new severity palette elastic/eui#8247 and decide what to do about the missing green color in this palette. Either continue using euiColorVis0 or accept our low severity alerts/vulnerabilities to be in blue, as "info" severity signals

export const SEVERITY_COLOR = {
critical: '#E7664C',
high: '#DA8B45',
medium: '#D6BF57',
low: '#54B399',
} as const;

export const getSeverityColor = (euiTheme: EuiThemeComputed) =>
({
critical: euiTheme.colors.vis.euiColorVis9,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Borealis data viz color palette changed, see https://docs.google.com/document/d/1IAKbasq1nDfqd2IU3KdP8cwD3uCCAwkIekKRq7zgyWg/edit?tab=t.0#heading=h.lgyarxm75dlu , so that vis9 is not red but yellow and vis5 is not yellow but pink. These colors don't work for severity
There is Severity Palette introduced by the EUI team #203387 , but it is missing green color, which is currently how our low severity alerts/vulnerabilities are being show. There is a discussion with Security solution on how to go about it, see https://elastic.slack.com/archives/C060SDYTZ96/p1734636026436679

Copy link
Contributor Author

@angorayc angorayc Dec 23, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @maxcold , I could find that we are adding more euiColorSeverity color for different severity levels. This PR might have to wait until those colors becomes available. Have we got a clear idea of which euiColorSeverity token should be used for critical, high, medium and low?

I thought this (Security/Vulnerability) was the mapping, but they were not in the list of euiColorSeverity
Image

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@angorayc the team is moving from the variety of colors illustrated by your screenshot to a unified palette available here elastic/eui#8247 , but I haven't seen exact colors defined for Security severity levels from this palette. If I understand correctly, it's what @codearos is doing currently with the design team

export const SEVERITY_COLOR = {
critical: '#E7664C',
high: '#DA8B45',
medium: '#D6BF57',
low: '#54B399',
} as const;

export const getSeverityColor = (euiTheme: EuiThemeComputed) =>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see that @CAWilson94 is doing a similar work here, so I wonder if there would be a value in extracting this logic into a more generic function/hook that could be moved into our common folder.

@elasticmachine
Copy link
Contributor

elasticmachine commented Dec 30, 2024

💚 Build Succeeded

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
securitySolution 6488 6486 -2

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 21.4MB 21.4MB +2.2KB

History

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:skip This commit does not require backporting ci:cloud-deploy Create or update a Cloud deployment EUI Visual Refresh release_note:skip Skip the PR/issue when compiling release notes v9.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants