diff --git a/explore-analyze/images/dashboards-alert-panel.png b/explore-analyze/images/dashboards-alert-panel.png new file mode 100644 index 0000000000..2dfcfd4024 Binary files /dev/null and b/explore-analyze/images/dashboards-alert-panel.png differ diff --git a/explore-analyze/toc.yml b/explore-analyze/toc.yml index b37f9b23f4..0e0de372d3 100644 --- a/explore-analyze/toc.yml +++ b/explore-analyze/toc.yml @@ -274,6 +274,7 @@ toc: - file: visualize/text-panels.md - file: visualize/image-panels.md - file: visualize/link-panels.md + - file: visualize/alert-panels.md - file: visualize/canvas.md children: - file: visualize/canvas/edit-workpads.md diff --git a/explore-analyze/visualize.md b/explore-analyze/visualize.md index d2b0a44319..ef52b97156 100644 --- a/explore-analyze/visualize.md +++ b/explore-analyze/visualize.md @@ -21,6 +21,7 @@ $$$panels-editors$$$ | Visualizations | [Lens](visualize/lens.md) | Create powerful [charts](visualize/supported-chart-types.md) in {{kib}}. This is the default editor. | | | [ES|QL](/explore-analyze/query-filter/languages/esql-kibana.md) | Create visualizations from ES|QL queries | | | [Maps](visualize/maps.md) | Create beautiful displays of your geographical data | +| | [Alerts](visualize/alert-panels.md) | View Observability or Security alerts in your dashboard | | | [Field statistics](visualize/field-statistics.md) | Add a field statistics view of your data to your dashboards | | | [Custom visualizations](visualize/custom-visualizations-with-vega.md) | Use Vega to create new types of visualizations | | | | | diff --git a/explore-analyze/visualize/alert-panels.md b/explore-analyze/visualize/alert-panels.md new file mode 100644 index 0000000000..29c5861299 --- /dev/null +++ b/explore-analyze/visualize/alert-panels.md @@ -0,0 +1,42 @@ +--- +applies_to: + stack: ga 9.1 + serverless: ga +products: + - id: kibana +--- + +# Alert panels + +To view alerts in a dashboard, add **Alerts** panels that show selected alerts. Each panel can display either **Observability** or **Security** alerts with the rule tags and rule types that you select. + +## Create an alerts panel + +1. From your dashboard, select **Add panel**. +2. In the **Add panel** flyout, select **Alerts**. The configuration flyout appears. +3. ({{stack}} deployments only) Under **Solution**, select either **Observability** or **Security** to specify the type of alerts you want to display. +4. Under **Filter by** select either **Rule tags** or **Rule types**. +5. (Optional) To use both types of filters, first define one filter, then use the boolean **+ OR** or **+ AND** options that appear to define the second filter. +5. Click **Save**. Your panel appears on the dashboard. + +:::{image} /explore-analyze/images/dashboards-alert-panel.png +:alt: An alerts panel on a dashboard +:screenshot: +::: + +## Take action on alerts + +There are several actions you can take on alerts in the alerts panel. Under **Actions**, click the three dots next to an alert to open a menu with the following options: + +- **View rule details**: Open the details page for the rule that created the alert. +- **View alert details**: Open the alert details flyout. +- (**Active** rules only) **Mark as untracked**: Change the alert's status from **Active** to **Untracked**. +- (**Active** rules only) **Mute**: Mute alerts from the associated rule. + +## Edit an alerts panel + +To edit an existing alerts panel, hover over the panel. Three buttons appear: + +- **Edit** {icon}`pencil`: Update which alerts appear in the panel. +- **Settings** {icon}`gear`: Update the panel's title or description, or add a custom time range. +- **More actions** {icon}`boxes_vertical`: Duplicate, maximize, copy to another dashboard, or remove the panel.