Description
Background
As part of the ongoing effort to improve the Alert and Attack Discovery UX in Security Solution, we’ve introduced new capabilities that allow users to customize which fields are highlighted directly from the Alert flyout’s Overview tab. We’re also improving the Table tab experience by allowing users to prioritize how highlighted and pinned fields appear.
These updates are designed to reduce friction and streamline analyst workflows by:
- Enabling quick field edits without navigating away from the alert
- Making field organization more intuitive with sorting toggles
- Maintaining consistent behavior across views
What we need help with
We’d love your support in reviewing and polishing the UI text for these new features. Specifically, we need copy for:
The “Edit Highlighted Fields” modal
→ This includes title, description, placeholder, and any in-modal messaging.
Tooltip for highlighted fields
→ Should clearly explain what highlighted fields are and how they behave.
Success alert text
→ A short message confirming that the highlighted fields were updated successfully.
Toggle button labels in the Table tab
→ Users can toggle between field arrangements (e.g., “Show highlighted fields on top”).
These features aim to help analysts quickly access and customize key alert data without excessive navigation. Good copy here is essential to make the functionality intuitive.
Links:
Figma file with designs: https://www.figma.com/design/Chimc9hK29zXGCrMBb5frH/-8.----Comments-in-document---Timeline?node-id=9960-45522&t=BiUANgLPvFTsYXQ2-1
[Security Solution][Alert Details] - add ability to add custom highlighted fields from Overview tab #9377
[Security Solution][Alert Details] - show highlighted fields at the top of Table tab #9379