[SecuritySolution][Investigations] Add message about missing index in data view in analyzer (#122859)

* chore: add message about missing index in data view

* fix: typo

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
Jan Monschke 2022-01-28 10:26:23 +01:00 committed by GitHub
parent 2c900c65ba
commit 9f6c78139e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -41,6 +41,14 @@ export const ResolverNoProcessEvents = () => (
})}
</EuiText>
<EuiSpacer size="m" />
<EuiText size="s">
{i18n.translate('xpack.securitySolution.resolver.noProcessEvents.dataView', {
defaultMessage: `In case you selected a different data view,
make sure your data view contains all of the indices that are stored in the source event at "{field}".`,
values: { field: 'kibana.alert.rule.parameters.index' },
})}
</EuiText>
<EuiSpacer size="m" />
<EuiText size="s">
{i18n.translate('xpack.securitySolution.resolver.noProcessEvents.eventCategory', {
defaultMessage: `You may also add the below to your timeline query to check for process events.