Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS] Auto-tuning the date-time picker for event analyzer #2478

Closed
nastasha-solomon opened this issue Sep 20, 2022 · 2 comments
Closed

[DOCS] Auto-tuning the date-time picker for event analyzer #2478

nastasha-solomon opened this issue Sep 20, 2022 · 2 comments
Assignees
Labels
Feature: Analyze Event Analyze Event/Resolver feature Team: Docs Team: Threat Hunting Formerly Data Visibility v8.5.0

Comments

@nastasha-solomon
Copy link
Contributor

Description

In 8.5, the visual event analyzer automatically includes the entire process tree if a user tries to examine a timeframe (or part of the tree?) that has 0 process events in it. In addition, the user will be given a notice that events exist in a different time frame and a recommendation to adjust their selected time frame. The rec displays in the form of a toast message.

Related issues/PRs

Notes

  • If a user supplies a time range that results in 0 events, the request is retried without any time range at all. If the retry results in 1 or more event, that's shown that in analyzer. If there are still no events, the same empty message (the toast?) displays.
  • Might need to explain the results of the autotuning in Visual event analyzer docs.
@nastasha-solomon nastasha-solomon self-assigned this Sep 20, 2022
@jmikell821 jmikell821 added the Feature: Analyze Event Analyze Event/Resolver feature label Sep 28, 2022
@nastasha-solomon
Copy link
Contributor Author

Verified with @kqualters-elastic that can doc this enhancement in release notes only. Users might not encounter this functionally often. It only kicks in during the rare case that a user selects a time/date range without any events.
cc: @jmikell821 @benironside

@nastasha-solomon
Copy link
Contributor Author

Closing as this is doc'd in #2519.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature: Analyze Event Analyze Event/Resolver feature Team: Docs Team: Threat Hunting Formerly Data Visibility v8.5.0
Projects
None yet
Development

No branches or pull requests

2 participants