/*! Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
 * Licensed under the Elastic License 2.0; you may not use this file except in compliance with the Elastic License 2.0. */
(window.infra_bundle_jsonpfunction=window.infra_bundle_jsonpfunction||[]).push([[19],{240:function(e,a,t){"use strict";t.d(a,"a",(function(){return l}));const i=new RegExp("^([0-9\\.]*)\\s*("+["y","M","w","d","h","m","s","ms"].join("|")+")$"),r={ms:.001,s:1,m:60,h:3600,d:86400,w:604800,M:2592e3,y:30758400},l=e=>{const a=e.match(i);if(a)return parseFloat(a[1])*r[a[2]];throw new Error("Invalid interval string format.")}},548:function(e,a,t){"use strict";t.r(a);var i=t(2),r=t.n(i),l=t(35),s=t(78),n=t(11),o=t(37),c=t.n(o),u=t(76),d=t(1),m=t(243),f=t(7),p=t(54),b=t(38),g=t(21),h=t(55),y=t(309),v=t(75);const E="spike";var T=t(101),O=t(25),w=t(18),_=t(240);const A=e=>{let a=[];return e.forEach((e=>{const t=x(e);t&&(a=[...a,t])})),a},x=e=>{const{field:a,value:t,comparator:i}=e;switch(k(i)){case"term":return{term:{[a]:{value:t}}};case"match":return{match:{[a]:t}};case"match_phrase":return{match_phrase:{[a]:String(t)}};case"range":return{range:{[a]:{[{[h.a.LT]:"lt",[h.a.LT_OR_EQ]:"lte",[h.a.GT]:"gt",[h.a.GT_OR_EQ]:"gte"}[i]]:t}}};default:return}},F=[h.a.GT,h.a.GT_OR_EQ,h.a.LT,h.a.LT_OR_EQ,h.a.EQ,h.a.MATCH,h.a.MATCH_PHRASE],R=[h.a.NOT_EQ,h.a.NOT_MATCH,h.a.NOT_MATCH_PHRASE],j={[h.a.GT]:"range",[h.a.GT_OR_EQ]:"range",[h.a.LT]:"range",[h.a.LT_OR_EQ]:"range",[h.a.EQ]:"term",[h.a.MATCH]:"match",[h.a.MATCH_PHRASE]:"match_phrase",[h.a.NOT_EQ]:"term",[h.a.NOT_MATCH]:"match",[h.a.NOT_MATCH_PHRASE]:"match_phrase"},k=e=>j[e],S=({rule:e,alert:a})=>{const{services:t}=Object(g.b)(),{dataViews:s,logsShared:o}=t,[u,m]=Object(i.useState)(),[b,y]=Object(i.useState)(),[x,j]=Object(i.useState)(),k=Object(i.useMemo)((()=>Object(w.b)(h.g)(e.params)),[e]);Object(i.useEffect)((()=>{const e=e=>{const t=((e,a,t,i)=>{const{mustFilters:r,mustNotFilters:l,mustFiltersFields:s}=((e,a,t)=>{const{timeSize:i,timeUnit:r,criteria:l}=e,s=`${i}${r}`,n=1e3*Object(_.a)(s),o=Date.now(),c=o-n,u=l.filter((e=>F.includes(e.comparator))),d=l.filter((e=>R.includes(e.comparator)));return{rangeFilter:{range:{[a]:{gte:c,lte:o,format:"epoch_millis"}}},groupedRangeFilter:{range:{[a]:{gte:c-n,lte:o+n,format:"epoch_millis"}}},mustFilters:A(u),mustNotFilters:A(d),mustFiltersFields:u.map((e=>e.field))}})(e,a);return{bool:{filter:[...r,...i?i.filter((e=>!s.includes(e))).map((e=>{const a=Object(f.get)(t.fields[n.c],["groupByKeys",...e.split(".")],null);return a?{term:{[e]:{value:a}}}:null})).filter((e=>e)):[]],...l.length>0&&{must_not:l}}}})(k,e,a,k.groupBy);t&&y(t)};Object(h.f)(k)||(async()=>{const{timestampField:a,dataViewReference:t}=await o.logViews.client.getResolvedLogView(k.logView);if(t.id){const i=await s.get(t.id);m(i),e(a)}})()}),[k,a,s,o]);const S=a.fields["kibana.alert.rule.parameters"]&&a.fields["kibana.alert.rule.parameters"].timeSize&&a.fields["kibana.alert.rule.parameters"].timeUnit?c.a.duration(a.fields["kibana.alert.rule.parameters"].timeSize,a.fields["kibana.alert.rule.parameters"].timeUnit):c.a.duration(1,"m"),L=Math.max(1,S.asSeconds()/60),$=c()(a.start),C=a.fields[n.e]?c()(a.fields[n.e]):void 0,M={min:$.clone().subtract(15*L,"minutes"),max:C?C.clone().add(1*L,"minutes"):c()(new Date)},I={baselineMin:$.clone().subtract(13*L,"minutes").valueOf(),baselineMax:$.clone().subtract(2*L,"minutes").valueOf(),deviationMin:$.clone().subtract(1*L,"minutes").valueOf(),deviationMax:C?C.clone().subtract(1*L,"minutes").valueOf():$.clone().add(10*L,"minutes").isAfter(c()(new Date))?c()(new Date).valueOf():$.clone().add(10*L,"minutes").valueOf()},V=d.i18n.translate("xpack.infra.logs.alertDetails.logRateAnalysisTitle",{defaultMessage:"Possible causes and remediations"}),B=Object(p.useObservabilityAIAssistant)(),N=Object(i.useMemo)((()=>{var e;if(!(x&&(null===(e=x.significantFieldValues)||void 0===e?void 0:e.length)>0))return;const{logRateAnalysisType:a}=x,t=x.significantFieldValues.map((e=>Object.values(e).join(","))).join("\n"),i=`You are an observability expert using Elastic Observability Suite on call being consulted about a log threshold alert that got triggered by a ${a} in log messages. Your job is to take immediate action and proceed with both urgency and precision.\n      "Log Rate Analysis" is an AIOps feature that uses advanced statistical methods to identify reasons for increases and decreases in log rates. It makes it easy to find and investigate causes of unusual spikes or dips by using the analysis workflow view.\n      You are using "Log Rate Analysis" and ran the statistical analysis on the log messages which occured during the alert.\n      You received the following analysis results from "Log Rate Analysis" which list statistically significant co-occuring field/value combinations sorted from most significant (lower p-values) to least significant (higher p-values) that ${a===E?"contribute to the log rate spike":"are less or not present in the log rate dip"}:\n\n      ${a===E?'The median log rate in the selected deviation time range is higher than the baseline. Therefore, the results shows statistically significant items within the deviation time range that are contributors to the spike. The "doc count" column refers to the amount of documents in the deviation time range.':'The median log rate in the selected deviation time range is lower than the baseline. Therefore, the analysis results table shows statistically significant items within the baseline time range that are less in number or missing within the deviation time range. The "doc count" column refers to the amount of documents in the baseline time range.'}\n\n      Field name,Field value,Doc count,p-value\n      ${t}\n\n      Based on the above analysis results and your observability expert knowledge, output the following:\n      Analyse the type of these logs and explain their usual purpose (1 paragraph).\n      ${a===E?"Based on the type of these logs do a root cause analysis on why the field and value combinations from the analysis results are causing this log rate spike (2 parapraphs)":"Based on the type of these logs explain why the statistically significant field and value combinations are less in number or missing from the log rate dip with concrete examples based on the analysis results data which contains items that are present in the baseline time range and are missing or less in number in the deviation time range (2 paragraphs)"}.\n      ${a===E?"Recommend concrete remediations to resolve the root cause (3 bullet points).":""}\n\n      Do not mention indidivual p-values from the analysis results. Do not guess, just say what you are sure of. Do not repeat the given instructions in your output.`,r=(new Date).toISOString();return[{"@timestamp":r,message:{role:p.MessageRole.System,content:"You are logs-gpt, a helpful assistant for logs-based observability. Answer as\n          concisely as possible."}},{"@timestamp":r,message:{content:i,role:p.MessageRole.User}}]}),[x]);return u&&b?r.a.createElement(l.EuiPanel,{hasBorder:!0,"data-test-subj":"logRateAnalysisAlertDetails"},r.a.createElement(l.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},r.a.createElement(l.EuiFlexItem,{grow:!1},r.a.createElement(l.EuiTitle,{size:"xs"},r.a.createElement("h2",null,r.a.createElement(v.FormattedMessage,{id:"xpack.infra.logs.alertDetails.logRateAnalysis.sectionTitle",defaultMessage:"Log Rate Analysis"})))),r.a.createElement(l.EuiFlexItem,null,r.a.createElement(T.LogRateAnalysisContent,{dataView:u,timeRange:M,esSearchQuery:b,initialAnalysisStart:I,barColorOverride:Object(O.b)(O.a.color0),barHighlightColorOverride:Object(O.b)(O.a.color1),onAnalysisCompleted:e=>{var a;const t=Object(f.orderBy)(null==e||null===(a=e.significantTerms)||void 0===a?void 0:a.map((e=>({field:e.fieldName,value:e.fieldValue,docCount:e.doc_count,pValue:e.pValue}))),["pValue","docCount"],["asc","asc"]).slice(0,50),i=null==e?void 0:e.analysisType;j(t&&i?{logRateAnalysisType:i,significantFieldValues:t}:void 0)},appDependencies:Object(f.pick)(t,["application","data","executionContext","charts","fieldFormats","http","notifications","share","storage","uiSettings","unifiedSearch","theme","lens","i18n"])}))),r.a.createElement(l.EuiFlexGroup,{direction:"column",gutterSize:"m"},B.isEnabled()&&N?r.a.createElement(l.EuiFlexItem,{grow:!1},r.a.createElement(p.ContextualInsight,{title:V,messages:N})):null)):null};var L=t(52);function $(e,a,t,i,r,s){return{title:"Threshold Chart",visualizationType:"lnsXY",type:"lens",references:[],state:{visualization:{legend:{isVisible:!1,position:"right"},valueLabels:"hide",fittingFunction:"None",axisTitlesVisibilitySettings:{x:!1,yLeft:!1,yRight:!1},tickLabelsVisibilitySettings:{x:!0,yLeft:!0,yRight:!0},labelsOrientation:{x:0,yLeft:0,yRight:0},gridlinesVisibilitySettings:{x:!0,yLeft:!0,yRight:!0},preferredSeriesType:"bar_stacked",layers:[{layerId:"e6f553a0-9e36-4eea-8ecf-8261523c6f44",accessors:["607b2253-ed20-4f0a-bf62-07a1f846cca4"],position:"top",seriesType:"bar_stacked",showGridlines:!1,layerType:"data",xAccessor:"8ed7d473-ff48-4c90-be2c-ae46f3a11030",yConfig:[{forAccessor:"607b2253-ed20-4f0a-bf62-07a1f846cca4",color:"#6092c0"}]},{layerId:"62dfc313-3922-4870-b568-ff0818da38b3",layerType:"annotations",annotations:[{type:"manual",id:"ffe44253-a8c7-4755-821f-47be5bfac288",label:"Alert Line",key:{type:"point_in_time",timestamp:c()(i.from).toISOString()},lineWidth:3,color:a.colors.danger,icon:"alert"},{type:"manual",label:"Alert",key:{type:"range",timestamp:c()(i.from).toISOString(),endTimestamp:c()(i.to).toISOString()},id:"07d15b13-4b6c-4d82-b45d-9d58ced1c2a8",color:Object(l.transparentize)(a.colors.danger,.2)}],ignoreGlobalFilters:!0,persistanceType:"byValue"},{layerId:"90f87c46-9685-49af-b4ed-066eb65e2b39",layerType:"referenceLine",accessors:["7fb02af1-0823-4787-a316-3b05a4539d2c"],yConfig:[{forAccessor:"7fb02af1-0823-4787-a316-3b05a4539d2c",axisMode:"left",color:a.colors.danger,lineWidth:2,fill:t.fill}]}]},query:{query:s||"",language:"kuery"},filters:[],datasourceStates:{formBased:{layers:{"e6f553a0-9e36-4eea-8ecf-8261523c6f44":r,"90f87c46-9685-49af-b4ed-066eb65e2b39":{linkToLayers:[],columns:{"7fb02af1-0823-4787-a316-3b05a4539d2c":{label:"Threshold",dataType:"number",operationType:"static_value",isStaticValue:!0,isBucketed:!1,scale:"ratio",params:{value:t.value},references:[],customLabel:!0}},columnOrder:["7fb02af1-0823-4787-a316-3b05a4539d2c"],sampling:1,ignoreGlobalFilters:!1,incompleteColumns:{}}}},indexpattern:{layers:{}},textBased:{layers:{}}},internalReferences:[{type:"index-pattern",id:"d09436e6-20c0-4982-aaf6-b67ec371b27d",name:"indexpattern-datasource-layer-e6f553a0-9e36-4eea-8ecf-8261523c6f44"},{type:"index-pattern",id:"d09436e6-20c0-4982-aaf6-b67ec371b27d",name:"indexpattern-datasource-layer-90f87c46-9685-49af-b4ed-066eb65e2b39"},{type:"index-pattern",id:"d09436e6-20c0-4982-aaf6-b67ec371b27d",name:"xy-visualization-layer-62dfc313-3922-4870-b568-ff0818da38b3"}],adHocDataViews:{"d09436e6-20c0-4982-aaf6-b67ec371b27d":{id:"d09436e6-20c0-4982-aaf6-b67ec371b27d",title:e.pattern,timeFieldName:e.timestampField,sourceFilters:[],fieldFormats:{},runtimeFieldMap:{},fieldAttrs:{},allowNoIndex:!1,name:"adhoc"}}}}}function C({kql:e,index:a,threshold:t,timeRange:i,alertRange:s,height:n,interval:o="auto",filter:c=""}){const{lens:{EmbeddableComponent:u}}=Object(g.b)().services,{euiTheme:d}=Object(l.useEuiTheme)(),m=function(e,a,t,i,r,l,s){return $(e,a,i,r,{columns:{"8ed7d473-ff48-4c90-be2c-ae46f3a11030":{label:e.timestampField,dataType:"date",operationType:"date_histogram",sourceField:e.timestampField,isBucketed:!0,scale:"interval",params:{interval:l,includeEmptyRows:!0,dropPartials:!1}},"607b2253-ed20-4f0a-bf62-07a1f846cca4X0":{label:`Part of count(kql='${t}')`,dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___",filter:{query:t,language:"kuery"},params:{emptyAsNull:!1},customLabel:!0},"607b2253-ed20-4f0a-bf62-07a1f846cca4":{label:"document count",dataType:"number",operationType:"formula",isBucketed:!1,scale:"ratio",params:{formula:`count(kql='${t}')`,isFormulaBroken:!1},references:["607b2253-ed20-4f0a-bf62-07a1f846cca4X0"],customLabel:!0}},columnOrder:["8ed7d473-ff48-4c90-be2c-ae46f3a11030","607b2253-ed20-4f0a-bf62-07a1f846cca4","607b2253-ed20-4f0a-bf62-07a1f846cca4X0"],incompleteColumns:{},sampling:1},s)}(a,d,e,t,s,o,c);return r.a.createElement("div",null,r.a.createElement(u,{id:"logThresholdCountChart",style:{height:n},timeRange:i,attributes:m,viewMode:L.ViewMode.VIEW,noPadding:!0}))}function M({numeratorKql:e,denominatorKql:a,index:t,threshold:i,timeRange:s,alertRange:n,height:o,interval:c="auto",filter:u=""}){const{lens:{EmbeddableComponent:d}}=Object(g.b)().services,{euiTheme:m}=Object(l.useEuiTheme)(),f=function(e,a,t,i,r,l,s,n){return $(e,a,r,l,{columns:{"8ed7d473-ff48-4c90-be2c-ae46f3a11030":{label:e.timestampField,dataType:"date",operationType:"date_histogram",sourceField:e.timestampField,isBucketed:!0,scale:"interval",params:{interval:s,includeEmptyRows:!0,dropPartials:!1}},"607b2253-ed20-4f0a-bf62-07a1f846cca4X0":{label:"Part of ratio",dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___",filter:{query:t,language:"kuery"},params:{emptyAsNull:!1},customLabel:!0},"607b2253-ed20-4f0a-bf62-07a1f846cca4X1":{label:"Part of ratio",dataType:"number",operationType:"count",isBucketed:!1,scale:"ratio",sourceField:"___records___",filter:{query:i,language:"kuery"},params:{emptyAsNull:!1},customLabel:!0},"607b2253-ed20-4f0a-bf62-07a1f846cca4X2":{label:"Part of ratio",dataType:"number",operationType:"math",isBucketed:!1,scale:"ratio",params:{tinymathAst:{type:"function",name:"divide",args:["607b2253-ed20-4f0a-bf62-07a1f846cca4X0","607b2253-ed20-4f0a-bf62-07a1f846cca4X1"],location:{min:0,max:94},text:`count(kql='${t}') / count(kql='${i}')`}},references:["607b2253-ed20-4f0a-bf62-07a1f846cca4X0","607b2253-ed20-4f0a-bf62-07a1f846cca4X1"],customLabel:!0},"607b2253-ed20-4f0a-bf62-07a1f846cca4":{label:"ratio",dataType:"number",operationType:"formula",isBucketed:!1,scale:"ratio",params:{formula:`count(kql='${t}') / count(kql='${i}')`,isFormulaBroken:!1},references:["607b2253-ed20-4f0a-bf62-07a1f846cca4X2"],customLabel:!0}},columnOrder:["8ed7d473-ff48-4c90-be2c-ae46f3a11030","607b2253-ed20-4f0a-bf62-07a1f846cca4","607b2253-ed20-4f0a-bf62-07a1f846cca4X0","607b2253-ed20-4f0a-bf62-07a1f846cca4X1","607b2253-ed20-4f0a-bf62-07a1f846cca4X2"],incompleteColumns:{},sampling:1},n)}(t,m,e,a,i,n,c,u);return r.a.createElement("div",null,r.a.createElement(d,{id:"logThresholdRatioChart",style:{height:o},timeRange:s,attributes:f,viewMode:L.ViewMode.VIEW,noPadding:!0}))}var I=t(19),V=t(57),B=t.n(V);const N=r.a.lazy((()=>Promise.all([t.e(8),t.e(21)]).then(t.bind(null,545)))),H=e=>String(e);function D(e){if(!e.value||!e.comparator||!e.field)return"";switch(e.comparator){case h.a.MATCH:case h.a.EQ:return`${e.field} : "${e.value}"`;case h.a.NOT_MATCH:case h.a.NOT_EQ:return`NOT ${e.field} : "${e.value}"`;case h.a.MATCH_PHRASE:return`${e.field} : ${e.value}`;case h.a.NOT_MATCH_PHRASE:return`NOT ${e.field} : ${e.value}`;case h.a.GT:return`${e.field} > ${e.value}`;case h.a.GT_OR_EQ:return`${e.field} >= ${e.value}`;case h.a.LT:return`${e.field} < ${e.value}`;case h.a.LT_OR_EQ:return`${e.field} <= ${e.value}`;default:return""}}a.default=({rule:e,alert:a,setAlertSummaryFields:t})=>{const{logsShared:o,observabilityAIAssistant:v}=Object(g.b)().services,E=Object(u.useTheme)(),T=Object(m.c)(a.fields[n.R],a.fields[n.e]),O=a.fields[n.e]?c()(a.fields[n.e]).valueOf():void 0,w=`${e.params.timeSize}${e.params.timeUnit}`,_=function(e){switch(e){case h.a.GT:case h.a.GT_OR_EQ:return"above";default:return"below"}}(e.params.count.comparator),A=e.params.groupBy?e.params.groupBy.map((e=>{const t=Object(f.get)(a.fields[n.c],["groupByKeys",...e.split(".")],null);return t?`${e} : "${t}"`:null})).filter(f.identity).join(" AND "):"",{derivedDataView:x}=Object(b.useLogView)({initialLogViewReference:e.params.logView,logViews:o.logViews.client}),{hasAtLeast:F}=(()=>{var e;const{licensing:a}=Object(g.b)().services,t=B()(null!==(e=null==a?void 0:a.license$)&&void 0!==e?e:new I.Observable,null);return{getLicense:()=>t,hasAtLeast:Object(i.useCallback)((e=>{if(t)return t.isAvailable&&t.isActive&&t.hasAtLeast(e)}),[t])}})(),R=F("platinum");return Object(i.useEffect)((()=>{var i;const r=(null===(i=e.params.groupBy)||void 0===i?void 0:i.reduce(((e,t)=>({...e,[t]:Object(f.get)(a.fields[n.c],["groupByKeys",...t.split(".")],null)})),{}))||{},l=Object.entries(r).map((([e,a])=>({label:e,value:a})));t(l)}),[a.fields,e.params.groupBy,t]),r.a.createElement(p.ObservabilityAIAssistantProvider,{value:v},r.a.createElement(l.EuiFlexGroup,{direction:"column","data-test-subj":"logsThresholdAlertDetailsPage"},(()=>{if(Object(h.e)(e.params.criteria)){var t;const i=e.params.criteria[0].map((e=>D(e))).join(" AND "),o=e.params.criteria[1].map((e=>D(e))).join(" AND ");return r.a.createElement(l.EuiPanel,{hasBorder:!0,"data-test-subj":"logsRatioChartAlertDetails"},r.a.createElement(l.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},r.a.createElement(l.EuiFlexItem,{grow:!1},r.a.createElement(l.EuiTitle,{size:"xs"},r.a.createElement("h2",null,d.i18n.translate("xpack.infra.logs.alertDetails.chart.ratioTitle",{defaultMessage:"Ratio of QUERY A TO QUERY B"}))))),r.a.createElement(l.EuiFlexGroup,null,r.a.createElement(l.EuiFlexItem,{style:{maxHeight:120},grow:1},r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(y.a,{title:"Threshold breached",chartProps:{theme:E,baseTheme:s.LIGHT_THEME},comparator:h.c[e.params.count.comparator],id:"threshold-ratio-chart",threshold:e.params.count.value,value:Number(null===(t=a.fields[n.g])||void 0===t?void 0:t.toFixed(2)),valueFormatter:H})),r.a.createElement(l.EuiFlexItem,{grow:5},r.a.createElement(l.EuiSpacer,{size:"s"}),x&&r.a.createElement(M,{filter:A,numeratorKql:i,denominatorKql:o,threshold:{value:e.params.count.value,fill:_},timeRange:T,alertRange:{from:a.start,to:O},index:{pattern:x.getIndexPattern(),timestampField:x.timeFieldName||"@timestamp"},height:150,interval:w}))))}return null})(),(()=>{if(e.params.criteria&&!Object(h.e)(e.params.criteria)){const t=e.params.criteria.map((e=>D(e))).join(" AND "),i=e.params.criteria.map((e=>e.field&&e.comparator&&e.value?`${e.field}  ${h.b[e.comparator]} ${e.value}`:"")).filter((e=>e)).join(" AND ");return r.a.createElement(l.EuiPanel,{hasBorder:!0,"data-test-subj":"logsCountChartAlertDetails"},r.a.createElement(l.EuiFlexGroup,{direction:"column",gutterSize:"none",responsive:!1},r.a.createElement(l.EuiFlexItem,{grow:!1},r.a.createElement(l.EuiTitle,{size:"xs"},r.a.createElement("h2",null,d.i18n.translate("xpack.infra.logs.alertDetails.chart.chartTitle",{defaultMessage:"Logs for {criteria}",values:{criteria:i}}))))),r.a.createElement(l.EuiSpacer,{size:"l"}),r.a.createElement(l.EuiFlexGroup,null,r.a.createElement(l.EuiFlexItem,{style:{maxHeight:120},grow:1},r.a.createElement(l.EuiSpacer,{size:"s"}),r.a.createElement(y.a,{title:"Threshold breached",chartProps:{theme:E,baseTheme:s.LIGHT_THEME},comparator:h.c[e.params.count.comparator],id:"logCountThreshold",threshold:e.params.count.value,value:Number(a.fields[n.g]),valueFormatter:H})),r.a.createElement(l.EuiFlexItem,{grow:5},x&&r.a.createElement(C,{filter:A,kql:t,threshold:{value:e.params.count.value,fill:_},timeRange:T,alertRange:{from:a.start,to:O},index:{pattern:x.getIndexPattern(),timestampField:x.timeFieldName||"@timestamp"},height:150,interval:w}))))}return null})(),R?r.a.createElement(S,{rule:e,alert:a}):null,e&&1===e.params.criteria.length&&r.a.createElement(l.EuiFlexItem,null,r.a.createElement(N,{rule:{...e,params:{...e.params,timeSize:12,timeUnit:"h"}}}))))}}}]);