kibana icon indicating copy to clipboard operation
kibana copied to clipboard

[RCA] Add ESQL observation from investigation detail page

Open mgiota opened this issue 7 months ago • 1 comments

Depends on: https://github.com/elastic/kibana/issues/190320 (feel free to combine these issues if that makes the most sense)

Summary

Allow "add observation" UI component to support ES|QL queries. These queies can produce an observation of type data table, single metric view, or lens chart/visualization.

Acceptance criteria

  • "Add observation" component exists, as described in V1 mock up
  • In "add observation" component, you can type ES|QL and the results, either a data table, a single metric view, or (with additional help via Lens APIs) a Lens visualization can then be added to the investigation
  • NOTE: This version does not need the "Import from" button in the "Add observation" component

Design

The mockup for investigation UI is like this:

image

However, the left buttons there are specific to KQL only, which we won't implement at first. We should remove those and attempt to bring in the "ES|QL reference" and "Expand query editor" buttons to the right of the above design from logs explorer design, seen below:

Image Image Image

mgiota avatar Jul 17 '24 18:07 mgiota