[8.19] [Observability] [Rules] Add telemetry for linked dashboards and investigation guide (#217502) (#220422)

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Observability] [Rules] Add telemetry for linked dashboards and
investigation guide
(#217502)](#217502)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Bena
Kansara","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-05-07T18:09:11Z","message":"[Observability]
[Rules] Add telemetry for linked dashboards and investigation guide
(#217502)\n\nPart of
https://github.com/elastic/kibana/issues/216491\n\nAdds telemetry for
linked dashboards and investigation guide fields that\nare coming soon:
https://github.com/elastic/kibana/issues/214522,\nhttps://github.com/elastic/kibana/issues/213024\n\n-
Number of rules with linked dashboards\n- Number of rules with non-empty
investigation guide\n\nTo test, you can use the following API call. The
result should include\ntwo new fields:
`count_rules_with_linked_dashboards`
and\n`count_rules_with_investigation_guide`\n\n```\nPOST
kbn:/internal/telemetry/clusters/_stats?apiVersion=2\n{\n
\"unencrypted\": true,\n \"refreshCache\": true\n}\n```\n\n### Note\nI
have added a comment to update one test
file\n(`x-pack/test/alerting_api_integration/common/lib/get_test_rule_data.ts`)\nonce
`artifacts` field is available in
schema.\n\n---------\n\nCo-authored-by: kibanamachine
<[email protected]>","sha":"23683e59c06a9e10f12a245c8a0c2d7f07563e03","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:obs-ux-management","backport:version","v9.1.0","v8.19.0"],"title":"[Observability]
[Rules] Add telemetry for linked dashboards and investigation
guide","number":217502,"url":"https://github.com/elastic/kibana/pull/217502","mergeCommit":{"message":"[Observability]
[Rules] Add telemetry for linked dashboards and investigation guide
(#217502)\n\nPart of
https://github.com/elastic/kibana/issues/216491\n\nAdds telemetry for
linked dashboards and investigation guide fields that\nare coming soon:
https://github.com/elastic/kibana/issues/214522,\nhttps://github.com/elastic/kibana/issues/213024\n\n-
Number of rules with linked dashboards\n- Number of rules with non-empty
investigation guide\n\nTo test, you can use the following API call. The
result should include\ntwo new fields:
`count_rules_with_linked_dashboards`
and\n`count_rules_with_investigation_guide`\n\n```\nPOST
kbn:/internal/telemetry/clusters/_stats?apiVersion=2\n{\n
\"unencrypted\": true,\n \"refreshCache\": true\n}\n```\n\n### Note\nI
have added a comment to update one test
file\n(`x-pack/test/alerting_api_integration/common/lib/get_test_rule_data.ts`)\nonce
`artifacts` field is available in
schema.\n\n---------\n\nCo-authored-by: kibanamachine
<[email protected]>","sha":"23683e59c06a9e10f12a245c8a0c2d7f07563e03"}},"sourceBranch":"main","suggestedTargetBranches":["8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217502","number":217502,"mergeCommit":{"message":"[Observability]
[Rules] Add telemetry for linked dashboards and investigation guide
(#217502)\n\nPart of
https://github.com/elastic/kibana/issues/216491\n\nAdds telemetry for
linked dashboards and investigation guide fields that\nare coming soon:
https://github.com/elastic/kibana/issues/214522,\nhttps://github.com/elastic/kibana/issues/213024\n\n-
Number of rules with linked dashboards\n- Number of rules with non-empty
investigation guide\n\nTo test, you can use the following API call. The
result should include\ntwo new fields:
`count_rules_with_linked_dashboards`
and\n`count_rules_with_investigation_guide`\n\n```\nPOST
kbn:/internal/telemetry/clusters/_stats?apiVersion=2\n{\n
\"unencrypted\": true,\n \"refreshCache\": true\n}\n```\n\n### Note\nI
have added a comment to update one test
file\n(`x-pack/test/alerting_api_integration/common/lib/get_test_rule_data.ts`)\nonce
`artifacts` field is available in
schema.\n\n---------\n\nCo-authored-by: kibanamachine
<[email protected]>","sha":"23683e59c06a9e10f12a245c8a0c2d7f07563e03"}},{"branch":"8.19","label":"v8.19.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <[email protected]>

Author: benakansara

x-pack/platform/plugins/private/telemetry_collection_xpack/schema/xpack_platform.json

@@ -1727,6 +1727,12 @@
         "count_rules_muted": {
           "type": "long"
         },
+        "count_rules_with_linked_dashboards": {
+          "type": "long"
+        },
+        "count_rules_with_investigation_guide": {
+          "type": "long"
+        },
         "count_mw_total": {
           "type": "long"
         },

x-pack/platform/plugins/shared/actions/server/usage/lib/actions_telemetry_util.ts

@@ -39,6 +39,7 @@ export function getActions(aggregation: ActionRefIdsAgg[] = []) {
   for (const a of aggregation) {
     const connectorId = a.key[0];
     const actionRef = a.key[1];
+    if (actionRef.startsWith('dashboard')) continue;
     actions.connectorIds[connectorId] = actionRef;
     actions.total++;
   }

x-pack/platform/plugins/shared/alerting/server/usage/alerting_usage_collector.ts

@@ -205,6 +205,8 @@ export function createAlertingUsageCollector(
           count_rules_with_tags: 0,
           count_rules_snoozed: 0,
           count_rules_muted: 0,
+          count_rules_with_linked_dashboards: 0,
+          count_rules_with_investigation_guide: 0,
           count_mw_total: 0,
           count_mw_with_repeat_toggle_on: 0,
           count_mw_with_filter_alert_toggle_on: 0,
@@ -294,6 +296,8 @@ export function createAlertingUsageCollector(
       count_rules_by_notify_when: byNotifyWhenSchema,
       count_rules_snoozed: { type: 'long' },
       count_rules_muted: { type: 'long' },
+      count_rules_with_linked_dashboards: { type: 'long' },
+      count_rules_with_investigation_guide: { type: 'long' },
       count_mw_total: { type: 'long' },
       count_mw_with_repeat_toggle_on: { type: 'long' },
       count_mw_with_filter_alert_toggle_on: { type: 'long' },

x-pack/platform/plugins/shared/alerting/server/usage/lib/get_telemetry_from_kibana.test.ts

@@ -239,6 +239,8 @@ describe('kibana index telemetry', () => {
           sum_rules_snoozed: { value: 11 },
           sum_rules_muted: { value: 12 },
           sum_rules_with_muted_alerts: { value: 13 },
+          sum_rules_with_linked_dashboards: { value: 5 },
+          sum_rules_with_investigation_guide: { value: 5 },
         },
       });
 
@@ -289,6 +291,8 @@ describe('kibana index telemetry', () => {
           warning: 5,
         },
         count_rules_with_tags: 10,
+        count_rules_with_linked_dashboards: 5,
+        count_rules_with_investigation_guide: 5,
         count_rules_by_notify_when: {
           on_action_group_change: 5,
           on_active_alert: 6,
@@ -337,6 +341,8 @@ describe('kibana index telemetry', () => {
           warning: 0,
         },
         count_rules_with_tags: 0,
+        count_rules_with_linked_dashboards: 0,
+        count_rules_with_investigation_guide: 0,
         count_rules_by_notify_when: {
           on_action_group_change: 0,
           on_active_alert: 0,
@@ -402,7 +408,7 @@ describe('kibana index telemetry', () => {
       const loggerCalls = loggingSystemMock.collect(logger);
       expect(loggerCalls.debug).toHaveLength(2);
       expect(loggerCalls.debug[0][0]).toEqual(
-        `query for getTotalCountAggregations - {\"index\":\"test\",\"size\":0,\"body\":{\"query\":{\"bool\":{\"filter\":[{\"term\":{\"type\":\"alert\"}}]}},\"runtime_mappings\":{\"rule_action_count\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def alert = params._source['alert'];\\n                if (alert != null) {\\n                  def actions = alert.actions;\\n                  if (actions != null) {\\n                    emit(actions.length);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_schedule_interval\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                int parsed = 0;\\n                if (doc['alert.schedule.interval'].size() > 0) {\\n                  def interval = doc['alert.schedule.interval'].value;\\n\\n                  if (interval.length() > 1) {\\n                      // get last char\\n                      String timeChar = interval.substring(interval.length() - 1);\\n                      // remove last char\\n                      interval = interval.substring(0, interval.length() - 1);\\n\\n                      if (interval.chars().allMatch(Character::isDigit)) {\\n                        // using of regex is not allowed in painless language\\n                        parsed = Integer.parseInt(interval);\\n\\n                        if (timeChar.equals(\\\"s\\\")) {\\n                          parsed = parsed;\\n                        } else if (timeChar.equals(\\\"m\\\")) {\\n                          parsed = parsed * 60;\\n                        } else if (timeChar.equals(\\\"h\\\")) {\\n                          parsed = parsed * 60 * 60;\\n                        } else if (timeChar.equals(\\\"d\\\")) {\\n                          parsed = parsed * 24 * 60 * 60;\\n                        }\\n                        emit(parsed);\\n                      }\\n                  }\\n                }\\n                emit(parsed);\\n              \"}},\"rule_throttle_interval\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                int parsed = 0;\\n                if (doc['alert.throttle'].size() > 0) {\\n                def throttle = doc['alert.throttle'].value;\\n\\n                if (throttle.length() > 1) {\\n                    // get last char\\n                    String timeChar = throttle.substring(throttle.length() - 1);\\n                    // remove last char\\n                    throttle = throttle.substring(0, throttle.length() - 1);\\n\\n                    if (throttle.chars().allMatch(Character::isDigit)) {\\n                      // using of regex is not allowed in painless language\\n                      parsed = Integer.parseInt(throttle);\\n\\n                      if (timeChar.equals(\\\"s\\\")) {\\n                        parsed = parsed;\\n                      } else if (timeChar.equals(\\\"m\\\")) {\\n                        parsed = parsed * 60;\\n                      } else if (timeChar.equals(\\\"h\\\")) {\\n                        parsed = parsed * 60 * 60;\\n                      } else if (timeChar.equals(\\\"d\\\")) {\\n                        parsed = parsed * 24 * 60 * 60;\\n                      }\\n                      emit(parsed);\\n                    }\\n                }\\n              }\\n              emit(parsed);\\n              \"}},\"rule_with_tags\":{\"type\":\"long\",\"script\":{\"source\":\"\\n               def rule = params._source['alert'];\\n                if (rule != null && rule.tags != null) {\\n                  if (rule.tags.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_snoozed\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def rule = params._source['alert'];\\n                if (rule != null && rule.snoozeSchedule != null) {\\n                  if (rule.snoozeSchedule.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_muted\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                if (doc['alert.muteAll'].value == true) {\\n                  emit(1);\\n                } else {\\n                  emit(0);\\n                }\"}},\"rule_with_muted_alerts\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def rule = params._source['alert'];\\n                if (rule != null && rule.mutedInstanceIds != null) {\\n                  if (rule.mutedInstanceIds.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}}},\"aggs\":{\"by_rule_type_id\":{\"terms\":{\"field\":\"alert.alertTypeId\",\"size\":33}},\"max_throttle_time\":{\"max\":{\"field\":\"rule_throttle_interval\"}},\"min_throttle_time\":{\"min\":{\"field\":\"rule_throttle_interval\"}},\"avg_throttle_time\":{\"avg\":{\"field\":\"rule_throttle_interval\"}},\"max_interval_time\":{\"max\":{\"field\":\"rule_schedule_interval\"}},\"min_interval_time\":{\"min\":{\"field\":\"rule_schedule_interval\"}},\"avg_interval_time\":{\"avg\":{\"field\":\"rule_schedule_interval\"}},\"max_actions_count\":{\"max\":{\"field\":\"rule_action_count\"}},\"min_actions_count\":{\"min\":{\"field\":\"rule_action_count\"}},\"avg_actions_count\":{\"avg\":{\"field\":\"rule_action_count\"}},\"by_execution_status\":{\"terms\":{\"field\":\"alert.executionStatus.status\"}},\"by_notify_when\":{\"terms\":{\"field\":\"alert.notifyWhen\"}},\"connector_types_by_consumers\":{\"terms\":{\"field\":\"alert.consumer\"},\"aggs\":{\"actions\":{\"nested\":{\"path\":\"alert.actions\"},\"aggs\":{\"connector_types\":{\"terms\":{\"field\":\"alert.actions.actionTypeId\"}}}}}},\"by_search_type\":{\"terms\":{\"field\":\"alert.params.searchType\"}},\"sum_rules_with_tags\":{\"sum\":{\"field\":\"rule_with_tags\"}},\"sum_rules_snoozed\":{\"sum\":{\"field\":\"rule_snoozed\"}},\"sum_rules_muted\":{\"sum\":{\"field\":\"rule_muted\"}},\"sum_rules_with_muted_alerts\":{\"sum\":{\"field\":\"rule_with_muted_alerts\"}}}}}`
+        `query for getTotalCountAggregations - {\"index\":\"test\",\"size\":0,\"body\":{\"query\":{\"bool\":{\"filter\":[{\"term\":{\"type\":\"alert\"}}]}},\"runtime_mappings\":{\"rule_action_count\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def alert = params._source['alert'];\\n                if (alert != null) {\\n                  def actions = alert.actions;\\n                  if (actions != null) {\\n                    emit(actions.length);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_schedule_interval\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                int parsed = 0;\\n                if (doc['alert.schedule.interval'].size() > 0) {\\n                  def interval = doc['alert.schedule.interval'].value;\\n\\n                  if (interval.length() > 1) {\\n                      // get last char\\n                      String timeChar = interval.substring(interval.length() - 1);\\n                      // remove last char\\n                      interval = interval.substring(0, interval.length() - 1);\\n\\n                      if (interval.chars().allMatch(Character::isDigit)) {\\n                        // using of regex is not allowed in painless language\\n                        parsed = Integer.parseInt(interval);\\n\\n                        if (timeChar.equals(\\\"s\\\")) {\\n                          parsed = parsed;\\n                        } else if (timeChar.equals(\\\"m\\\")) {\\n                          parsed = parsed * 60;\\n                        } else if (timeChar.equals(\\\"h\\\")) {\\n                          parsed = parsed * 60 * 60;\\n                        } else if (timeChar.equals(\\\"d\\\")) {\\n                          parsed = parsed * 24 * 60 * 60;\\n                        }\\n                        emit(parsed);\\n                      }\\n                  }\\n                }\\n                emit(parsed);\\n              \"}},\"rule_throttle_interval\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                int parsed = 0;\\n                if (doc['alert.throttle'].size() > 0) {\\n                def throttle = doc['alert.throttle'].value;\\n\\n                if (throttle.length() > 1) {\\n                    // get last char\\n                    String timeChar = throttle.substring(throttle.length() - 1);\\n                    // remove last char\\n                    throttle = throttle.substring(0, throttle.length() - 1);\\n\\n                    if (throttle.chars().allMatch(Character::isDigit)) {\\n                      // using of regex is not allowed in painless language\\n                      parsed = Integer.parseInt(throttle);\\n\\n                      if (timeChar.equals(\\\"s\\\")) {\\n                        parsed = parsed;\\n                      } else if (timeChar.equals(\\\"m\\\")) {\\n                        parsed = parsed * 60;\\n                      } else if (timeChar.equals(\\\"h\\\")) {\\n                        parsed = parsed * 60 * 60;\\n                      } else if (timeChar.equals(\\\"d\\\")) {\\n                        parsed = parsed * 24 * 60 * 60;\\n                      }\\n                      emit(parsed);\\n                    }\\n                }\\n              }\\n              emit(parsed);\\n              \"}},\"rule_with_tags\":{\"type\":\"long\",\"script\":{\"source\":\"\\n               def rule = params._source['alert'];\\n                if (rule != null && rule.tags != null) {\\n                  if (rule.tags.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_snoozed\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def rule = params._source['alert'];\\n                if (rule != null && rule.snoozeSchedule != null) {\\n                  if (rule.snoozeSchedule.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_muted\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                if (doc['alert.muteAll'].value == true) {\\n                  emit(1);\\n                } else {\\n                  emit(0);\\n                }\"}},\"rule_with_muted_alerts\":{\"type\":\"long\",\"script\":{\"source\":\"\\n                def rule = params._source['alert'];\\n                if (rule != null && rule.mutedInstanceIds != null) {\\n                  if (rule.mutedInstanceIds.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_with_linked_dashboards\":{\"type\":\"long\",\"script\":{\"source\":\"\\n               def rule = params._source['alert'];\\n                if (rule != null && rule.artifacts != null && rule.artifacts.dashboards != null) {\\n                  if (rule.artifacts.dashboards.size() > 0) {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}},\"rule_with_investigation_guide\":{\"type\":\"long\",\"script\":{\"source\":\"\\n               def rule = params._source['alert'];\\n                if (rule != null && rule.artifacts != null && rule.artifacts.investigation_guide != null && rule.artifacts.investigation_guide.blob != null) {\\n                  if (rule.artifacts.investigation_guide.blob.trim() != '') {\\n                    emit(1);\\n                  } else {\\n                    emit(0);\\n                  }\\n                }\"}}},\"aggs\":{\"by_rule_type_id\":{\"terms\":{\"field\":\"alert.alertTypeId\",\"size\":33}},\"max_throttle_time\":{\"max\":{\"field\":\"rule_throttle_interval\"}},\"min_throttle_time\":{\"min\":{\"field\":\"rule_throttle_interval\"}},\"avg_throttle_time\":{\"avg\":{\"field\":\"rule_throttle_interval\"}},\"max_interval_time\":{\"max\":{\"field\":\"rule_schedule_interval\"}},\"min_interval_time\":{\"min\":{\"field\":\"rule_schedule_interval\"}},\"avg_interval_time\":{\"avg\":{\"field\":\"rule_schedule_interval\"}},\"max_actions_count\":{\"max\":{\"field\":\"rule_action_count\"}},\"min_actions_count\":{\"min\":{\"field\":\"rule_action_count\"}},\"avg_actions_count\":{\"avg\":{\"field\":\"rule_action_count\"}},\"by_execution_status\":{\"terms\":{\"field\":\"alert.executionStatus.status\"}},\"by_notify_when\":{\"terms\":{\"field\":\"alert.notifyWhen\"}},\"connector_types_by_consumers\":{\"terms\":{\"field\":\"alert.consumer\"},\"aggs\":{\"actions\":{\"nested\":{\"path\":\"alert.actions\"},\"aggs\":{\"connector_types\":{\"terms\":{\"field\":\"alert.actions.actionTypeId\"}}}}}},\"by_search_type\":{\"terms\":{\"field\":\"alert.params.searchType\"}},\"sum_rules_with_tags\":{\"sum\":{\"field\":\"rule_with_tags\"}},\"sum_rules_snoozed\":{\"sum\":{\"field\":\"rule_snoozed\"}},\"sum_rules_muted\":{\"sum\":{\"field\":\"rule_muted\"}},\"sum_rules_with_muted_alerts\":{\"sum\":{\"field\":\"rule_with_muted_alerts\"}},\"sum_rules_with_linked_dashboards\":{\"sum\":{\"field\":\"rule_with_linked_dashboards\"}},\"sum_rules_with_investigation_guide\":{\"sum\":{\"field\":\"rule_with_investigation_guide\"}}}}}`
       );
       expect(loggerCalls.debug[1][0]).toMatchInlineSnapshot(`
         "Error executing alerting telemetry task: getTotalCountAggregations - ResponseError: search_phase_execution_exception
@@ -429,6 +435,8 @@ describe('kibana index telemetry', () => {
           warning: 0,
         },
         count_rules_with_tags: 0,
+        count_rules_with_linked_dashboards: 0,
+        count_rules_with_investigation_guide: 0,
         count_rules_by_notify_when: {
           on_action_group_change: 0,
           on_active_alert: 0,

x-pack/platform/plugins/shared/alerting/server/usage/lib/get_telemetry_from_kibana.ts

@@ -47,6 +47,8 @@ type GetTotalCountsResults = Pick<
   | 'count_rules_snoozed'
   | 'count_rules_muted'
   | 'count_rules_with_muted_alerts'
+  | 'count_rules_with_linked_dashboards'
+  | 'count_rules_with_investigation_guide'
   | 'count_connector_types_by_consumers'
   | 'throttle_time'
   | 'schedule_time'
@@ -230,6 +232,34 @@ export async function getTotalCountAggregations({
                 }`,
             },
           },
+          rule_with_linked_dashboards: {
+            type: 'long' as const,
+            script: {
+              source: `
+               def rule = params._source['alert'];
+                if (rule != null && rule.artifacts != null && rule.artifacts.dashboards != null) {
+                  if (rule.artifacts.dashboards.size() > 0) {
+                    emit(1);
+                  } else {
+                    emit(0);
+                  }
+                }`,
+            },
+          },
+          rule_with_investigation_guide: {
+            type: 'long' as const,
+            script: {
+              source: `
+               def rule = params._source['alert'];
+                if (rule != null && rule.artifacts != null && rule.artifacts.investigation_guide != null && rule.artifacts.investigation_guide.blob != null) {
+                  if (rule.artifacts.investigation_guide.blob.trim() != '') {
+                    emit(1);
+                  } else {
+                    emit(0);
+                  }
+                }`,
+            },
+          },
         },
         aggs: {
           by_rule_type_id: {
@@ -285,6 +315,8 @@ export async function getTotalCountAggregations({
           sum_rules_snoozed: { sum: { field: 'rule_snoozed' } },
           sum_rules_muted: { sum: { field: 'rule_muted' } },
           sum_rules_with_muted_alerts: { sum: { field: 'rule_with_muted_alerts' } },
+          sum_rules_with_linked_dashboards: { sum: { field: 'rule_with_linked_dashboards' } },
+          sum_rules_with_investigation_guide: { sum: { field: 'rule_with_investigation_guide' } },
         },
       },
     };
@@ -313,6 +345,8 @@ export async function getTotalCountAggregations({
       sum_rules_snoozed: AggregationsSingleMetricAggregateBase;
       sum_rules_muted: AggregationsSingleMetricAggregateBase;
       sum_rules_with_muted_alerts: AggregationsSingleMetricAggregateBase;
+      sum_rules_with_linked_dashboards: AggregationsSingleMetricAggregateBase;
+      sum_rules_with_investigation_guide: AggregationsSingleMetricAggregateBase;
     };
 
     const totalRulesCount =
@@ -347,6 +381,9 @@ export async function getTotalCountAggregations({
       count_rules_snoozed: aggregations.sum_rules_snoozed.value ?? 0,
       count_rules_muted: aggregations.sum_rules_muted.value ?? 0,
       count_rules_with_muted_alerts: aggregations.sum_rules_with_muted_alerts.value ?? 0,
+      count_rules_with_linked_dashboards: aggregations.sum_rules_with_linked_dashboards.value ?? 0,
+      count_rules_with_investigation_guide:
+        aggregations.sum_rules_with_investigation_guide.value ?? 0,
       count_connector_types_by_consumers: countConnectorTypesByConsumers,
       throttle_time: {
         min: `${aggregations.min_throttle_time.value ?? 0}s`,
@@ -392,6 +429,8 @@ export async function getTotalCountAggregations({
       count_rules_snoozed: 0,
       count_rules_muted: 0,
       count_rules_with_muted_alerts: 0,
+      count_rules_with_linked_dashboards: 0,
+      count_rules_with_investigation_guide: 0,
       count_connector_types_by_consumers: {},
       throttle_time: {
         min: '0s',