Skip to content

Workflows: fix ai.agent examples in ai-driven-alert-triage.md, plus troubleshooting and ai-steps notes#6721

Open
benironside wants to merge 2 commits into
mainfrom
workflows-ai-agent-alert-triage-fix
Open

Workflows: fix ai.agent examples in ai-driven-alert-triage.md, plus troubleshooting and ai-steps notes#6721
benironside wants to merge 2 commits into
mainfrom
workflows-ai-agent-alert-triage-fix

Conversation

@benironside
Copy link
Copy Markdown
Contributor

@benironside benironside commented May 26, 2026

Closes #6720.

Sister fix to PR #6393 (which fixed the same two bugs on the RCA page). Applies Tinsae's pattern from the Slack thread to the alert-triage page, and adds two notes.

Changes

  1. ai-driven-alert-triage.md — four ai.agent blocks updated:
    • prompt:message: (4 occurrences).
    • agent-id: "{{ consts.agent_id }}" → literal agent-id: elastic-ai-agent (4 occurrences).
    • Dropped connector-id: "{{ consts.connector_id }}" (4 occurrences) — the agent encodes its connector.
    • Pruned the now-unused agent_id and connector_id keys from consts:.
    • Updated the prerequisites bullet to call out elastic-ai-agent as the default and ask users to substitute their agent ID.
  2. authoring-techniques/troubleshooting.md — new entry under "AI steps" covering templated top-level fields not resolving (agent-id, connector-id, inference-id, conversation-id). Links to the engine-side bug at elastic/security-team#17236.
  3. steps/ai-steps.md — extended the existing kebab-case important admonition with a paragraph noting that top-level fields don't currently resolve Liquid templating.

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes — Claude Opus 4.7 / Cursor
  • No

…roubleshooting and ai-steps notes

Sister fix to PR #6393 (which fixed the same two bugs on the RCA page).
Applies Tinsae's pattern from the Slack thread to the alert-triage page,
plus two general-purpose notes that #6393 left out of scope.

Closes #6720.

Changes:

- ai-driven-alert-triage.md: four ai.agent blocks updated. prompt: ->
  message: (4 occurrences). agent-id: "{{ consts.agent_id }}" -> literal
  agent-id: elastic-ai-agent (4 occurrences). Dropped templated
  connector-id (4 occurrences) — the agent encodes its connector.
  Pruned the now-unused agent_id and connector_id keys from consts:.
  Updated the prerequisites bullet to call out elastic-ai-agent as the
  default and ask users to substitute their agent ID.

- authoring-techniques/troubleshooting.md: new entry under "AI steps"
  covering templated top-level fields not resolving (agent-id,
  connector-id, inference-id, conversation-id). Links to the engine-side
  bug at elastic/security-team#17236.

- steps/ai-steps.md: extended the existing kebab-case important
  admonition with a paragraph noting that top-level fields don't
  currently resolve Liquid templating.

Co-authored-by: Cursor <cursoragent@cursor.com>
@benironside benironside self-assigned this May 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

  • Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

✅ Vale Linting Results

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

Rewrites the prose in two places to be clearer for readers who don't
yet have a strong Liquid mental model, and drops 4 em dashes per
review feedback.

- ai-steps.md admonition: replaces the abstract "don't currently
  resolve Liquid templating ... passed through literally" wording
  with a plain rule, a concrete contrast (what's written vs. what
  gets sent), and a positive correct-form example.

- troubleshooting.md (workflows-ts-ai-top-level-templating):
  Symptom uses parentheses for the "agent or connector" examples
  instead of em-dash asides. Cause names the mechanism (Liquid
  expressions aren't evaluated outside `with:`) up front, drops
  the unhelpful name/type/if/foreach mention, and follows with
  the concrete "arrives at the API as literal text" example.

The YAML comments inside the troubleshooting code block keep their
em dashes to match the existing in-file convention.

Co-authored-by: Cursor <cursoragent@cursor.com>
@benironside benironside marked this pull request as ready for review May 27, 2026 15:36
@benironside benironside requested review from a team as code owners May 27, 2026 15:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Workflows: sister fix for ai.agent examples in ai-driven-alert-triage.md

1 participant