Kibana version: 8.7.1
Elasticsearch version: 8.7.1
Issue: We were previously using Elastic 8.6.2. The Alert result link (obtained from action variable :{{context.link}}) for Elasticsearch query types used to be shortened URLs. [Reference link: Elasticsearch query | Kibana Guide [8.7] | Elastic ]
We use: Elastic Query type alert rule -> KQL / Lucene
Sample:
/app/discover#/viewAlert/XXXXXXXXX?from=2023-05-08T08:09:27.979Z&to=2023-05-08T08:14:27.979Z&checksum=XXXXXXXX]
Once upgraded to Elastic 8.7.1, the alert result link in the alert message seems to be broken and too long. There is no hyperlink present as before. From my observation, if we use the filter functionality, the link is broken. If we filter using KQL/Lucene format, the link has hyperlink to the results in Kibana discover but they are too long.
Sample:
/app/r?l=DISCOVER_APP_LOCATOR&v=8.7.0&lz=N4IgJghgLhBqCWBTA7gZQA6IMYgFynjDxAEYAjAJgBYA2AdgpIFoTES6mqIBWLJgDjDcwTAJx1EVUYjABmMhEogANCCjwoAG0TEA1vAUA7CAH0AzhAC26bScgwTmgPYBzMyrXxLiAGJJNYAByVjq4nt5mMNYeZk4ArgBOWL7wmlCICe64ANoAuqoAZv5gPk4JltBZoAAW8QkmTgV2EACeeMAAvh2qCXGG6t5%2BiAEAshDo7SC1iQ1NkG34ai2YxM6GLjFYCfDoUJOxicnEiJYaABRgTljZAOQDiJFW6De5AHQAbhCacYivLohQAASdTOAEpQQBuEBdbogIrDMAAQSgUEy7VhX2cyECTgAkoYwIgAB54ApfMyIVTGbzEADSBggxgABKgntomQARaAQJkAGVc7lhRTSGSyeVUAEcfgkFqApRkFiAPJpGS44hB%2FnppW1YfcAEqq0KgAoJJyWYgUAAMFFkTEt3BYloAKiQaLhZBRcJbZK9%2BNxRAAtDxQJwW622%2B0sEhOy10d2e72%2B%2F1B2HwMyI7QJKB6h5xNJZVE%2FDpAA
We are reporting alert messages to slack channels etc., and it looks messy due to the broken links.
Is this the expected behavior? If so, how can we make the URL shortened? Otherwise, please help in fixing this issue.