kibana/x-pack/packages/observability
Maryam Saeidi 59982bfa5c
[Custom threshold] Add viewInApp URL to the custom threshold rule type (#171985)
Closes #171613

## Summary

This PR adds the viewInApp URL to the custom threshold rule type. This
URL will send the user to the log explorer with the selected data view
and the rule's query filter. If there is only one document aggregation,
then the filter related to this aggregation will be added as shown
below:

|Rule|Discover with pre-fill data|
|---|---|

|![image](2f08b4f4-e6cc-4d25-a48a-098db63b9ce6)|

For the ad-hoc data view, you should be able to see the selected index
pattern in discover similar to this:

<img
src="046493ae-ba59-46b7-a40f-68d1836d43f1"
width=400 />

### 🧪 How to test
- Check the viewInApp URL both in action variables and the alert table
for the following scenarios:
    - A rule with a persisted data view
    - A rule with an ad-hoc data view
    - A rule with count aggregation and filter
    - A rule with an optional query filter
    - A rule with non-count aggregation

In all the above scenarios, the starting time in the Discover should be
before the alert's start time.

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2023-12-01 16:44:10 +01:00
..
alert_details [Custom threshold] Add viewInApp URL to the custom threshold rule type (#171985) 2023-12-01 16:44:10 +01:00
alerting_test_data [Custom threshold] Remove CUSTOM_AGGREGATOR aggType from rule creation API (#171377) 2023-11-23 10:12:39 +01:00
get_padded_alert_time_range_util [Custom threshold] Add viewInApp URL to the custom threshold rule type (#171985) 2023-12-01 16:44:10 +01:00