Skip to content

Creates alerts panel dashboard docs #2139

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Jul 18, 2025
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions explore-analyze/toc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -274,6 +274,7 @@ toc:
- file: visualize/text-panels.md
- file: visualize/image-panels.md
- file: visualize/link-panels.md
- file: visualize/alert-panels.md
- file: visualize/canvas.md
children:
- file: visualize/canvas/edit-workpads.md
Expand Down
1 change: 1 addition & 0 deletions explore-analyze/visualize.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ $$$panels-editors$$$
| Visualizations | [Lens](visualize/lens.md) | Create powerful [charts](visualize/supported-chart-types.md) in {{kib}}. This is the default editor. |
| | [ES|QL](/explore-analyze/query-filter/languages/esql-kibana.md) | Create visualizations from ES|QL queries |
| | [Maps](visualize/maps.md) | Create beautiful displays of your geographical data |
| | [Alerts](visualize/alert-panels.md) | View Observability or Security alerts in your dashboard |
| | [Field statistics](visualize/field-statistics.md) | Add a field statistics view of your data to your dashboards |
| | [Custom visualizations](visualize/custom-visualizations-with-vega.md) | Use Vega to create new types of visualizations |
| | | |
Expand Down
42 changes: 42 additions & 0 deletions explore-analyze/visualize/alert-panels.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
---
applies_to:
stack: ga
serverless: ga
products:
- id: kibana
---

# Alert panels

To view alerts in a dashboard, add **Alerts** panels that show selected alerts. Each panel can display either **Observability** or **Security** alerts with the rule tags and rule types that you select.
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't know if we should call out that Stack rules are folded under observability alerts

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you think? This is not my area is expertise so I'll defer to you on this. Feel free to suggest an edit


## Create an alerts panel

1. From your dashboard, select **Add panel**.
2. In the **Add panel** flyout, select **Alerts**. The configuration flyout appears.
3. Under **Solution**, select either **Observability** or **Security** to specify the type of alerts you want to display.
4. Under **Filter by** select either **Rule tags** or **Rule types**.
5. (Optional) To use both types of filters, first define one filter, then use the boolean **+ OR** or **+ AND** options that appear to define the second filter.
5. Click **Save**. Your panel appears on the dashboard.

:::{image} /explore-analyze/images/dashboards-alert-panel.png
:alt: An alerts panel on a dashboard
:screenshot:
:::

## Take action on alerts

There are several actions you can take on alerts in the alerts panel. Under **Actions**, click the three dots next to an alert to open a menu with the following options:

- **View rule details**: Open the details page for the rule that created the alert.
- **View alert details**: Open the alert details flyout.
- (**Active** rules only) **Mark as untracked**: Change the alert's status from **Active** to **Untracked**.
- (**Active** rules only) **Mute**: Mute alerts from the associated rule.

## Edit an alerts panel

To edit an existing alerts panel, hover over the panel. Three buttons appear:

- **Edit** (![pencil button](/explore-analyze/images/kibana-esql-icon-edit-visualization.svg "")): Update which alerts appear in the panel.
- **Settings** (![gear icon](/explore-analyze/images/kibana-gear_icon.png "")): Update the panel's title or description, or add a custom time range.
- **More actions** (three dots): Duplicate, maximize, copy to another dashboard, or remove the panel.
Loading