[Security Solution][Alert details] - bring back last alert status change to flyout #205224
+169
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Over a year ago, this PR added some information to the alert details flyout, to show when an alert's status (
closed
,open
oraknowledged
) had been modified last and by which user.Shortly after, this follow up PR removed the UI from the alert details flyout, as the information wasn't extremely important and was taking some valuable vertical space, pushing down below the
Highlighted fields
section, that users were finding very important.A few months later, we added the ability to persist which of the top sections (
About
,Investigation
,Visualizations
,Insights
andResponse
) were collapsed or expanded. That way the user wouldn't have to always collapse or expand sections they would often don't need.This PR brings back the alert's last status changes to the
About
section, as the vertical space is no longer a big issues, because users can now collapse the entireAbout
section.If data is not present, the last change UI is not shown
If the correct data is shown:
How to test
About
sectionChecklist