Skip to content

[9.2] [Cases] Enable auto-extraction by default and add user actions for observable actions (#236524)#238884

Merged
christineweng merged 1 commit intoelastic:9.2from
christineweng:backport/9.2/pr-236524
Oct 14, 2025
Merged

[9.2] [Cases] Enable auto-extraction by default and add user actions for observable actions (#236524)#238884
christineweng merged 1 commit intoelastic:9.2from
christineweng:backport/9.2/pr-236524

Conversation

@christineweng
Copy link
Contributor

Backport

This will backport the following commits from main to 9.2:

Questions ?

Please refer to the Backport tool documentation

…servable actions (elastic#236524)

## Summary

Ref: elastic#234007

This PR enables auto-extraction in alerts and adds activity entry for
observable actions (manually add/update/delete 1 observable, bulk add
from auto-extraction).

Before
Observable actions are not reflected in the activity tab

After

<img width="513" height="263" alt="image"
src="https://github.com/user-attachments/assets/28bf5e20-ed80-40b0-9100-24e5132902a9"
/>

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

---------

Co-authored-by: Michael Olorunnisola <michael.olorunnisola@elastic.co>
(cherry picked from commit 435b225)
@christineweng christineweng requested review from a team as code owners October 14, 2025 13:17
@christineweng christineweng added the backport This PR is a backport of another PR label Oct 14, 2025
@christineweng christineweng enabled auto-merge (squash) October 14, 2025 13:17
@christineweng christineweng merged commit aef27a9 into elastic:9.2 Oct 14, 2025
16 checks passed
@elasticmachine
Copy link
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #49 / alerting api integration security and spaces enabled - Group 2 Connectors webhook action OAuth2 client credentials should refresh the token once the previous one has expired
  • [job] [logs] FTR Configs #59 / endpoint Endpoint permissions: when running with user/role [t2_analyst] should display endpoint data on Host Details

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
cases 1174 1176 +2

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
cases 1.4MB 1.4MB +2.4KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
cases 140.8KB 141.0KB +234.0B
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

3 participants