[Security Solution] Values under `Max anomaly score by job` is misaligned on Entities tab under Alert Details flyout.

[arvindersingh-qasource]

Describe the bug Values under Max anomaly score by job is misaligned on Entities tab under Alert Details flyout.

Build Details

VERSION: 8.14.0
BUILD: 73762
COMMIT: 2a492e1625f24336f3259b2b8df62b2b18127e81

Browser Details This issue is occurring on all browsers.

Preconditions

1. Kibana v8.14 must beavailable.
2. Alert with having Max anomaly score by job values must be present on kibana.

Steps to Reproduce

1. Navigate to Security -> Alerts
2. Open Alert Details flyout for per requisite Alert.
3. Scroll Down to Insights section.
4. Open flyout for Entities.
5. Observe that in User section, Values under Max anomaly score by job is misaligned on Entities tab under Alert Details flyout.

Actual Result Values under Max anomaly score by job is misaligned on Entities tab under Alert Details flyout.

Expected Result Values under Max anomaly score by job is should be properly aligned on Entities tab under Alert Details flyout.

What's Working

• N/A

What's Not Working

• N/A

Screenshot

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-detection-engine (Team:Detection Engine)

[arvindersingh-qasource]

@karanbirsingh-qasource Please review this ticket.

Thanks.

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[elasticmachine]

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

[PhilippeOberti]

@arvindersingh-qasource thank you for opening this ticket. I'm logging in to endpoint.dev and siem.dev and none of the alerts seem to have values for this Max anomaly score by job section.

Is there a way to easily reproduce this locally? If yes could you provide the steps?

Are you seeing this behavior on the user details page? The alert flyout is reusing the component from the Explore team, so if the issue happens on the user details page, we should move this ticket to the @elastic/security-threat-hunting-explore instead of @elastic/security-threat-hunting-investigations.

Thanks!

[PhilippeOberti]

@arvindersingh-qasource I can confirm that this issue is coming from the Explore component. The alert details flyout is just using the component as is. Here's a screenshot of that original component used on the user details page

I'm moving this to the @elastic/security-threat-hunting-explore team!