[Security Solution] [Exceptions] Auto-populate exception flyout with alert’s “highlighted fields” values

[WafaaNasr]

Summary

• Addresses https://github.com/elastic/security-team/issues/6405

Contents of this PR:

• Exports the getEventFieldsToDisplay function from the AlertSummary component, which retrieves the Highlighted Fields based on the Event data and Rule get_alert_summary_rows.tsx
• Introduces helper functions to populate the highlighted fields from the alertData in the add_exception_flyout component.
• Adds highlighted_fields_config.ts configuration file, which contains the fields to be filtered out from the Exceptions and the fields used to obtain the highlighted fields.
• Auto-populate the Rule Exception add_exception_flyout on initiation, if alertData is provided and listType is RuleException, with the highlighted fields from the Alert.

Screenshots

Checklist

• Unit or functional tests were updated or added to match the most common scenarios

[yctercero]

Reviewed code and pulled down to play around with it. LGTM!

I think it's worth adding a cypress test for it, but that can also be done after this goes in as there are unit tests here. I would just create a ticket to track some of the additional improvements we discussed around allowing all alert document fields to be available in the dropdown for a user when they're adding an exception from the alerts flow.

Thanks for adding this Wafaa!

[vitaliidm]

Thank you, @WafaaNasr for working on this feature. This should help a lot our customers in their workflows!

[vitaliidm]

Thanks for addressing comments and creating issues for discovered bugs

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 8655a2d
• Cloud Deployment

Failed CI Steps

• FTR Configs #45

Test Failures

• [job] [logs] FTR Configs #45 / discover/group3 discover sidebar renders field groups should show selected and available fields in text-based mode

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id	before	after	diff
securitySolution	4143	4144	+1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
securitySolution	10.8MB	10.8MB	+1.4KB

Unknown metric groups

ESLint disabled line counts

id	before	after	diff
enterpriseSearch	13	15	+2
securitySolution	410	414	+4
total			+6

Total ESLint disabled count

id	before	after	diff
enterpriseSearch	14	16	+2
securitySolution	493	497	+4
total			+6

History

• 💚 Build #135150 succeeded ace134a
• 💔 Build #135123 failed e78b92a
• 💔 Build #135081 failed 9519b5b
• 💔 Build #134789 failed 4daff25
• 💔 Build #134740 failed d6da91a

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @WafaaNasr

[PhilippeOberti]

LGTM for the threat-hunting-investigations team!