elastic/kibana

[Security Solution] Refine tooltip message for Related Integrations

Open

#153228 opened on Mar 15, 2023

View on GitHub
 (9 comments) (0 reactions) (0 assignees)TypeScript (19,065 stars) (8,021 forks)batch import
Feature:Prebuilt Detection RulesFeature:Related IntegrationsTeam: SecuritySolutionTeam:Detection Rule ManagementTeam:Detections and Respenhancementgood first issuesdh-linked

Description

Summary

The current tooltip message for related integrations is causing confusion among users. The message displayed is:

"Install and configure one or more of the below integrations to ingest the necessary data for this detection rule."

However, this message might lead users to believe that installing any single integration would be sufficient for the rule to function properly. In reality, certain rules may require multiple integrations to work correctly. To clarify the requirements, the tooltip message should be updated.

See the linked SDH for more detail.

Proposed Solution

Update the tooltip message to:

"One or more integrations may be required for this rule to work correctly. Please refer to the setup guide section of the rule for more information."

This new message will better inform users that multiple integrations might be necessary for the rule to function properly and direct them to the setup guide for more information.

Contributor guide