Graylog2 / Graylog2/graylog2-server

Ability to Pivot from Alerts into Dashboards

Open
#8,255 0 comments 0 reactions 0 assignees View on GitHub
alerting feature search triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?
It would be extremely helpful to pivot from an alert, on any of the fields into a pre-built dashboard, like the current search has "Insert Into View". Any of the "Event Key" or "Additional fields" would be nice to have this ability. The ability would also need to pull in the time from the alert, and would be nice to have the option of Exact time of the alert, and the ability to add a window like "Search around" +/- 5 Seconds for instance, so they could see what is happening around the alert.

## Why?
In seeing the alert/event in the console, we need a way to pivot from the alert to quickly get to the data while retaining the time. Currently you can do this with a search and marking down the time, but is quite cumbersome and should be automated with a click/menu item.

## Your Environment

* Graylog Version: 3.3+

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.