elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.65k stars 8.23k forks source link

[Security Solution][Alert Detail] host and user expandable flyout don't apply filter in/out correctly when open within timeline #181863

Closed PhilippeOberti closed 6 months ago

PhilippeOberti commented 6 months ago

Describe the bug: When opening the host or user detail flyout with the expandableTimelineFlyoutEnabled feature flag enabled (rendering the expandable flyout), the cell actions aren't working as expected. For example the filter in and out values are applied to the alerts page instead of the timeline modal.

Steps to reproduce: Make sure you have the expandableTimelineFlyoutEnabled in your kibana.yml config file.

Steps to reproduce:

  1. Navigate to Security -> Alerts
  2. Open a host or user details flyout by clicking on a host or user value in the alerts table
  3. In the Observed data table, use the cell actions on a value to filter in or out
  4. Verify the filter is added to the alerts page
  5. Then open timeline for an alert
  6. Open a host or user details flyout by clicking on a host or user value in the timeline table
  7. In the Observed data table, use the cell actions on a value to filter in or out
  8. Verify the filter is added to the timeline

Actual behavior: Filters are applied to the alert page

Expected behavior: Filters should be applied to timeline

Screenshots (if relevant):

https://github.com/elastic/kibana/assets/17276605/e2d8a7da-ae72-4b2e-9740-ffce53338993

elasticmachine commented 6 months ago

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

PhilippeOberti commented 6 months ago

fixed in https://github.com/elastic/kibana/pull/182174