[Investigate] Enhance discovered dashboards/visualization relevancy based on underlying data

[dominiqueclarke]

Overview

When SREs are responding to alerts, we want to surface the most helpful, relevant information as quickly as possible to reduce the time to resolution.

Often, our customers have already brought useful information together as part of a dashboard.

To aid in the investigation of the root cause of an alert, we will surface links to relevant dashboards in the alert details page.

This issue relates aims to increase the relevancy of suggested dashboard/visualizations by querying the underlying data for the visualization.

Feature

In #209046, we identified relevant dashboards and visualizations based on the presence of a grouping field matching an field in the alert document.

Finding matching keys is not enough. We need to understand whether the underlying data displayed by the lens visualization contains data for the value of that key. To do so, we'll need to transform the lens spec into a ES query and run a terms aggregation against the field. If there is data for that field within the time frame of the alert, we'll mark that dashboard as being relevant, as well as that specific lens visualization within the dashboard.

[elasticmachine]

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)