search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.61k stars 8.1k forks source link

[Security Solution] Values are not displayed in some fields on the alert table. However, the values are displaying in table tab when click on "view details" icon #106840

Closed ghost closed 10 months ago

ghost commented 3 years ago

Describe the bug Values are not displayed in some fields on the alert table. However, the values are displaying in table tab when click on "view details" icon

Build Details:

VERSION: 7.14.0 BC4
BUILD: 42656
COMMIT: 82a4f6a7fa23946667599787cdb1b2d82c1d0dfb
ARTIFACT: https://staging.elastic.co/7.14.0-b3779639/summary-7.14.0.html

Browser Details: N/A

Preconditions

  1. Kibana users should be logged in.
  2. endpoint should be installed.
  3. Alerts should be created say: mimikatz

Steps to Reproduce

  1. Navigate to Alerts tab of security.
  2. Add the below fields in alerts table: process.name.parent.text, process.executable.text, file.path.text, process.name.text, user.name.text
  3. Observe that no value is displayed in above columns.
  4. Now click on "view details" icon >.
  5. search the above fields and observe that value is displaying in above fields.

Actual Result Values are not displayed in some fields in the alert table. However, the values are displaying in table tab when click on "view details" icon

Expected Result Values should be displayed in fields on the alert table.

What's Working

What's Not Working

Screen-Shot

https://user-images.githubusercontent.com/61860752/127148005-e6f9c1f7-f37d-491a-899e-f8b5b1abed54.mp4

field_value

elasticmachine commented 3 years ago

Pinging @elastic/security-solution (Team: SecuritySolution)

ghost commented 3 years ago

@manishgupta-qasource Please review!!

elasticmachine commented 3 years ago

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

XavierM commented 3 years ago

@elastic/security-docs Let 's add this bug in the release notes

ghost commented 3 years ago

Hi @MadameSheema ,

We have validated this ticket on 7.15.0-SNAPSHOT build and found that issue is Still Occurring.

Build Details:

Version:7.15.0 SNAPSHOT
Commit:aa12d107c38c5cda96fc32bcd1f8226df172826a
Build:43370

Screenshot: fields

Thanks.

michaelolo24 commented 10 months ago

Not sure exactly when this was resolved, but this issue is no longer presenting