Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ML] Add ability to view and edit filter lists for use in detector rules #20341

Closed
13 tasks done
peteharverson opened this issue Jun 29, 2018 · 2 comments
Closed
13 tasks done
Assignees

Comments

@peteharverson
Copy link
Contributor

peteharverson commented Jun 29, 2018

Filter lists are used in machine learning detector rules to supply the detector with domain knowledge that can improve the quality of the results. For example, a detector that performs a population analysis looking at bytes sent over IP addresses could benefit from a rule defining a list of IP addresses that the user knows to be 'safe'. Anomalous results for those IP addresses would then not be created.

Work has been done to redesign rules in elastic/elasticsearch#31110. This is a meta issue listing the features that need to be implemented in the UI to configure filter lists for use in the optional scope part of a rule, specifying a list of items as a filter on any of the 'partition', 'by' or 'over' field of the detector.

  • Display all the configured filter lists under the Settings page
  • Allow the filter list to be viewed showing
    • Filter ID
    • Description
    • List of items in the filter
    • Count of detectors using the filter
  • Allow the user to create a new filter list
  • Allow the user to edit an existing filter list
    • Add, edit or delete items
    • Edit description
  • Allow the user to delete a filter list if it is not being used by an detectors
  • Allow the user to search for items in the filter
  • Check permissions before allowing user to create, edit or delete a filter

Prototype design for the page for viewing and editing a filter list:

settings_filters2b

@elasticmachine
Copy link
Contributor

Pinging @elastic/ml-ui

@peteharverson
Copy link
Contributor Author

Closing meta issue as all items not addressed by #20769 and #21097

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants