Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SIEM] Table columns, number related design tweaks #48969

Merged
merged 11 commits into from
Oct 24, 2019

Conversation

stephmilovic
Copy link
Contributor

Summary

I realized I still had a couple issues open from the Product Design Meta I opened in April, so thought I'd get those small changes in.

Resolves https://github.com/elastic/siem-team/issues/253

  • Updated the relative times to timestamps in the Authentications Table

Resolves https://github.com/elastic/siem-team/issues/254

  • Right aligns numeral values in the Uncommon Processes Table and the DNS Table
  • I decided not to right align the draggable numeral values in the Auth table, it looked funky as the handles didn't line up

I also set the width on a few of these numeral value in some of the more crowded tables, I think it looks a bit better but I want to see what @MichaelMarcialis thinks.

Auth Table
Before:
auth-before

After:
auth-after

Uncommon Processes Table
Before:
uncommon-before

After:
uncommon-after

DNS Table
Before:
dns-before

After:
dns-after

Checklist

Use strikethroughs to remove checklist items you don't feel are applicable to this PR.

For maintainers

@stephmilovic stephmilovic added Team:SIEM v8.0.0 release_note:skip Skip the PR/issue when compiling release notes v7.5.0 labels Oct 22, 2019
@elasticmachine
Copy link
Contributor

Pinging @elastic/siem (Team:SIEM)

@MichaelMarcialis
Copy link
Contributor

While testing locally, it looks like relative time has been completely removed or is not working. Ideally, it would show relative time if it is within the last hour. If not, then it would switch to absolute time.

image

Copy link
Contributor

@MichaelMarcialis MichaelMarcialis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for taking care of this @stephmilovic. It's looking good. Left two small comments. Once updated, I can give it a LGTM :)

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@stephmilovic
Copy link
Contributor Author

Pushed a change to do relative time in past hour @MichaelMarcialis. Is there anywhere else besides the Auth table that you want to see this?
Screen Shot 2019-10-22 at 4 58 41 PM

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@MichaelMarcialis
Copy link
Contributor

MichaelMarcialis commented Oct 23, 2019

Pushed a change to do relative time in past hour @MichaelMarcialis. Is there anywhere else besides the Auth table that you want to see this?

Thanks, @stephmilovic. If we're talking about just the hosts and host details pages, I'd say we'd want that same relative/absolute time behavior on:

  • Hosts & Host Details Pages
    • Header (Last event subtitle)
    • Anomalies table (Timestamp)
  • Hosts Page
    • All hosts table (Last seen)
  • Host Details Page
    • Host details overview (First seen, Last seen)

If we're talking globally across SIEM, we'll probably want it to also behave this way on:

  • Network & IP Details Pages
    • Header (Last event subtitle)
    • Anomalies table (Timestamp)
  • IP Details Page
    • Overview (First seen, Last seen)
  • Timelines Page
    • All timelines table (Last modified)

Also, if we are indeed talking globally across SIEM, I imagine we'll want the following number-based table columns to also be right-aligned to match:

  • Network Page
    • Top DNS domains table (Total queries, Unique domains, DNS bytes in, DNS bytes out)
  • IP Details Page
    • Users table (Document count)

@stephmilovic
Copy link
Contributor Author

@MichaelMarcialis all your requested changes have been made. Some more screenshots:
Screen Shot 2019-10-23 at 8 06 46 AM
Screen Shot 2019-10-23 at 8 18 28 AM
Screen Shot 2019-10-23 at 8 41 52 AM
Screen Shot 2019-10-23 at 8 47 29 AM
Screen Shot 2019-10-23 at 8 48 53 AM

Copy link
Contributor

@MichaelMarcialis MichaelMarcialis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This all looks great to me. Thanks, @stephmilovic!

@elasticmachine
Copy link
Contributor

💔 Build Failed

@stephmilovic stephmilovic changed the title [SIEM] Table columns, numeral design tweaks [SIEM] Table columns, number related design tweaks Oct 23, 2019
@elasticmachine
Copy link
Contributor

💔 Build Failed

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

* - the raw date value (e.g. 2019-03-22T00:47:46Z)
*/

export const FormattedRelativePreferenceDate = ({ value }: { value?: string | number | null }) => {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ToFormattedRelativePreferenceDate or to RelativeFormattedPreferenceDate? That is the question!

Seems there's some dispute around if the Age modifier should be before or after Shape. Good to know us engineers aren't the only ones that care deeply about specificity... 😅

(I just learned this recently, so just a shameless plug for that wiki article -- no change necessary!)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Quite

Copy link
Member

@spong spong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for all these awesome fixes @stephmilovic! Checked out, tested locally, and performed a code review. Added a few infotainment comments, but no changes necessary. LGTM! 👍

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release_note:skip Skip the PR/issue when compiling release notes Team:SIEM v7.5.0 v7.6.0 v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants