Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution] Prepare Rule Management owned pages for Borealis #206122

Merged
merged 4 commits into from
Jan 14, 2025

Conversation

nikitaindik
Copy link
Contributor

@nikitaindik nikitaindik commented Jan 9, 2025

Resolves: #204737
Related PR (fixes severity indicator colors): #206276

Summary

This PR introduces some of the necessary changes to support the Borealis UI theme on Rule Management team-owned pages. You can find a list of what needs to be done in this issue description under "Requested Code Changes".

Changes in this PR

  • Replaced deprecated euiThemeVars with useEuiTheme.
  • Fixed incorrect "disabled" button color for the rule delete bulk action.

Changes that are needed, but are outside of this PR's scope

  • Fix incorrect severity colors in Borealis. Will be resolved by this Threat Hunting PR.
Scherm­afbeelding 2025-01-13 om 13 46 26
  • Fix rule execution status indicator appearing too dark in the Borealis theme. This issue will be addressed in EUI, but there is no draft PR yet, as discussions are still ongoing between the design team and EUI folks to determine the best approach.
borealis

Testing

You can find the theme switcher in "Stack Management" -> "Advanced Settings". Then you can test if everything looks correct in:

  • Amsterdam theme, light mode
  • Amsterdam theme, dark mode
  • Borealis theme, light mode
  • Borealis theme, dark mode

Work started on: 08-01-2025

@nikitaindik nikitaindik added release_note:skip Skip the PR/issue when compiling release notes backport:skip This commit does not require backporting v9.0.0 Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Rule Management Security Detection Rule Management Team EUI Visual Refresh labels Jan 9, 2025
@nikitaindik nikitaindik self-assigned this Jan 9, 2025
@nikitaindik nikitaindik force-pushed the preparing-for-borealis branch from 0d230db to 7e4c02a Compare January 13, 2025 11:31
@nikitaindik nikitaindik marked this pull request as ready for review January 13, 2025 12:52
@nikitaindik nikitaindik requested a review from a team as a code owner January 13, 2025 12:52
@nikitaindik nikitaindik requested a review from maximpn January 13, 2025 12:52
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

@nikitaindik nikitaindik requested review from dplumlee and removed request for maximpn January 13, 2025 13:11
Copy link
Contributor

@dplumlee dplumlee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM @nikitaindik, checked all pages owned by us in:

  • Amsterdam light
  • Amsterdam dark
  • Borealis light
  • Borealis dark

Aside from the severity and warning badges you mention in the description, I think there's some slightly iffy contrast things on the MITRE coverage overview page in dark mode but those are existing issues with our current theme as well, and there have been discussions related to that elsewhere.

Screenshot 2025-01-13 at 1 23 46 PM

If we really wanted to address it though, I think outlining the techniques in dark mode with a light border would help differentiate the empty techniques from the 1-3 techniques coloring, but I'll leave that up to you - we could probably do a more exhaustive update of the colors on that page at some point.

@nikitaindik nikitaindik force-pushed the preparing-for-borealis branch from 7e4c02a to fb0b784 Compare January 14, 2025 11:08
@nikitaindik
Copy link
Contributor Author

@dplumlee I agree. I think this needs a more comprehensive approach. Having five shades of the same color might be difficult to distinguish, especially for users with limited vision. These cards could be a good candidate for the severity palette currently being developed by EUI.

For now, I’ve applied light text to the darkest cards to improve contrast. Here’s how it looks in both Amsterdam and Borealis.

Amsterdam (left), Borealis (right)
Scherm­afbeelding 2025-01-14 om 11 44 40
Scherm­afbeelding 2025-01-14 om 11 44 51

@nikitaindik nikitaindik enabled auto-merge (squash) January 14, 2025 11:22
@elasticmachine
Copy link
Contributor

elasticmachine commented Jan 14, 2025

💔 Build Failed

Failed CI Steps

History

cc @nikitaindik

@nikitaindik nikitaindik merged commit 51ed29b into elastic:main Jan 14, 2025
8 checks passed
viduni94 pushed a commit to viduni94/kibana that referenced this pull request Jan 23, 2025
…lastic#206122)

**Resolves: elastic#204737**
**Related PR (fixes severity indicator colors): elastic#206276**

## Summary
This PR introduces some of the necessary changes to support the Borealis
UI theme on Rule Management team-owned pages. You can find a list of
what needs to be done in this
[issue](elastic#199715) description
under "Requested Code Changes".

## Changes in this PR
- Replaced deprecated `euiThemeVars` with `useEuiTheme`.
- Fixed incorrect "disabled" button color for the rule delete bulk
action.

## Changes that are needed, but are outside of this PR's scope
- Fix incorrect severity colors in Borealis. Will be resolved by this
Threat Hunting [PR](elastic#206276).
<img width="93" alt="Scherm­afbeelding 2025-01-13 om 13 46 26"
src="https://github.com/user-attachments/assets/d35407d7-77f9-4d7d-a6b8-3dfe4f8a0e9e"
/>

- Fix rule execution status indicator appearing too dark in the Borealis
theme. This issue will be addressed in EUI, but there is no draft PR
yet, as discussions are still ongoing between the design team and EUI
folks to determine the best approach.
<img width="326" alt="borealis"
src="https://github.com/user-attachments/assets/3324448c-be13-4074-bfdc-c6837fb2bc6c"
/>

## Testing
You can find the theme switcher in "Stack Management" -> "Advanced
Settings". Then you can test if everything looks correct in:
- Amsterdam theme, light mode
- Amsterdam theme, dark mode
- Borealis theme, light mode
- Borealis theme, dark mode

Work started on: 08-01-2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:skip This commit does not require backporting EUI Visual Refresh release_note:skip Skip the PR/issue when compiling release notes Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v9.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Security Solution] Test and fix EUI theme Borealis applied to Rule Management features
3 participants