[Security Solution] Inconsistency when wiping out queries during the detection rule creation flow

[MadameSheema]

Describe the bug:

• Inconsistency when resetting queries during the detection rule creation flow.

Kibana/Elasticsearch Stack version:

• 8.6.0-BC7

Steps to reproduce:

1. Navigate to rule management page
2. Click on Create new rule
3. Enter a custom query
4. Change the rule type

Current behavior:

• It seems the custom query entered it is maintained when you click on different rule types i.e. if you click on Machine Learning and you go back to Custom query or you select Threshold, you can see the query is maintained and not wiped out.
• But when the user selects Event Correlation or Indicator Match and changes to a type with Custom query you can see that the previous custom query entered is wiped out.

Expected behavior:

• In order to maintain consistency, it should behave equally for all the different rule types. I would say that we should not wipe out the query.

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[pborgonovi]

Validated latest 8.15 BC and behavior is still the same:

https://github.com/user-attachments/assets/38eae384-8f76-40a4-af80-717b17e1122a