[Logs UI] [Test Scenario] Log threshold alerts (ratio configuration)

[mgiota]

Summary

This test scenario covers ratio configurations for log threshold alerts.

Test requirements

Testing of alerting requires SSL. You can enable this with:

• yarn start --ssl
• yarn es snapshot --ssl
• ssl.verification_mode: none within the Filebeat configuration

There are also enhanced details here: https://github.com/elastic/observability-dev/issues/849#issuecomment-626770782.

Test cases

Configuration

• For both Query A and Query B: 🆕

  • Condition comparators should change based on the field type (numeric fields, aggregatable fields, and non-aggregatable fields should yield compatible comparators)
  • Multiple conditions can be added
  • Conditions can be removed
  • A chart preview can be toggled for each condition 🆕
    • This chart should be collapsed by default 🆕
    • Previews change based on whether a group by is set 🆕

• Group by

  • One grouping can be set
  • Multiple groupings can be set
  • Groupings can be removed

• UI warning when a group by has been set

  • no UI warning appears when using the more than comparator for the threshold
  • a UI warning appears when using unoptimised (anything that can evaluate 0 as a threshold) threshold

Triggering

• Alerts should fire when the configured ratio threshold is met 🆕

Change history

7.14.0 (this)

• Performance improvements and a UI warning when a group by has been set with an unoptimised comparator ([Logs UI] Log threshold rule performance improvements #102650)

7.10.0

• Added chart previews ([Logs UI] Log alerts chart previews #75296)
• Added ratio configurations ([Logs UI] Log threshold ratio alerts #76867)
• Added timestamp context variable ([Logs UI] Add timestamp as a context variable to log threshold alerts #78932)

7.9.0 (#974)

• Added support for "group by" in logs alerts ([Logs UI] [Alerting] "Group by" functionality #68250)

7.8.0 (#849)

• Added initial logs alerts implementation ([Logs UI] Alerting #62806)

[elasticmachine]

Pinging @elastic/logs-metrics-ui (Team:logs-metrics-ui)

[mgiota]

Regarding the UI warning
I used a less than comparator and the warning indeed appeared but I would expect it to appear above the Query A and Query B sections. I had to scroll down to realize that the warning was indeed there.

Shall we consider moving it closer to the Group by section?

[mgiota]

I opened a few UI bugs/chores

• [Logs UI] Log threshold rule type ratio/count dropdown stays open #106202
• [Logs UI] Log threshold rule type chart preview expands/collapses when interacting with the dropdowns #106208
• [Log UI] Move UI warning in the log threshold rule type closer to the group by section #106219