[Security Solution] The table format is broken under the Host > External Tab for columns having multiple values in the alert table

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.59k stars 8.1k forks source link

[Security Solution] The table format is broken under the Host > External Tab for columns having multiple values in the alert table #109796

Closed muskangulati-qasource closed 10 months ago

muskangulati-qasource commented 3 years ago

Description: The table format is broken under the Host > External Tab for columns having multiple values in the alert table

Build Details:

VERSION: 7.15.0 BC1
BUILD: 43636
COMMIT: d791226d9385122f33f4a5ca38fa5369012fbec3
ARTIFACT: https://staging.elastic.co/7.15.0-d9929120/summary-7.15.0.html

Browser Details: All

Preconditions:

Kibana user should be logged in.
Alerts should be triggered

Steps to Reproduce:

Navigate to the Hosts tab and select External alerts
Observe the table is not formatted for columns having multiple values

Impacted Test case: N/A

Actual Result: The table format is broken under the Host > External Tab for columns having multiple values in the alert table

Expected Result: The table format should not be broken under the Host > External Tab for columns having multiple values in the alert table

What's working: N/A

What's not working: N/A

Screenshot UIBrokenForAlertTable

Logs: N/A

elasticmachine commented 3 years ago

Pinging @elastic/security-solution (Team: SecuritySolution)

muskangulati-qasource commented 3 years ago

@manishgupta-qasource please review!!

elasticmachine commented 3 years ago

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

MadameSheema commented 3 years ago

Closing as this is the expected behaviour: https://eui.elastic.co/#/tabular-content/data-grid

MadameSheema commented 3 years ago

Reopen it since it is not related with the format of the header, it is related with the content of the column since is not properly formated.

muskangulati-qasource commented 3 years ago

Json file for the same: json.txt

NOTE:

It does not work for alerts table under Alerts Tab and Host > External Tab
Works fine for the timeline tab:

Thanks!

MadameSheema commented 3 years ago

@jonathan-buttner I think this issue may be directly related with: https://github.com/elastic/kibana/issues/108662, since as we can check on the json, the data it is formatted as a string and not as an array.

jonathan-buttner commented 3 years ago

Can you check the json in the discover app to see if it is stored in Elasticsearch as an array or a string?

MadameSheema commented 3 years ago

@muskangulati-qasource can you please provide Jonathan the above information? Thanks :)

muskangulati-qasource commented 3 years ago

Hi @jonathan-buttner,

Here is the screenshot from the JSON in Discover Tab: image (1)

Json file: Discover.txt

Please let us know if anything else is required from our end.

cc: @MadameSheema Thanks!

MadameSheema commented 3 years ago

This issue is going to be fixed on 7.15.1

MadameSheema commented 2 years ago

@jonathan-buttner any update on this? if you are currently working on this please remove the triage needed label, thanks!

MadameSheema commented 2 years ago

This issue was reported by @aarju as well.