kibana_context
| fetch_event_annotations group={
event_annotation_group
annotations={manual_event_annotation time=”2021-12-12 12:34” color=”red” text=”My manual annotation”}
annotations={manual_event_annotation time=”2021-12-12 12:56” color=”green” text=”another manual annotation” icon=”checkmark”}
}
kibana_context
| fetch_event_annotations group={
event_annotation_group
dataView={loadDataView id=”1234”}
annotations={manual_event_annotation time=”2021-12-12 12:34” color=”red” text=”My manual annotation”}
annotations={manual_event_annotation time=”2021-12-12 12:56” color=”green” text=”another manual annotation” icon=”checkmark”}
annotations={query_event_annotation filter={kql “status.code>500”} color=”red” text=”500 error” fields=”agent.raw” fields=”host.raw”}
}
Phase 1
a. move fetching inside event_annotation plugin
b. utilize event_annotation_group expression following the simplified expression call from the design doc:
a. add data view as a dependency for event annotation group
b. display data view switcher in Lens UI
c. add Query based annotations (built UI, fetching logic according to the spec doc, adding expression integration)
Linking #62277