[Security Solution]Rule preview : failed to create alert suppressed timeline

[karanbirsingh-qasource]

Describe the bug Rule preview : failed to create alert suppressed timeline

Kibana/Elasticsearch Stack version

Version: 8.15.0
Commit: c616ed3da09e04c766be0d791373dc78c1231e12
Build:  76008

Preconditions

• NA

Steps to reproduce

• Create a rule or edit an existing one
• choose query type rule
• hit rule preview with appropriate time frame
• click on view details for the rule preview table
• expand details
• go to insights > correlation tab
• click on investigate in timeline
• observed that failed to create alert suppressed timeline

Expected Result

• investigate in timeline action should be disabled under rule preview fly out

Screen-Cast

https://github.com/user-attachments/assets/3084dfd6-4758-46ec-83ed-ec9593904f18

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[amolnater-qasource]

Reviewed and Assigned to @MadameSheema

[elasticmachine]

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[christineweng]

@karanbirsingh-qasource this should be fixed in 8.15 BC3 (merged 2 days ago). Could you please verify?

[christineweng]

@karanbirsingh-qasource following up on this bug, could you verify the fix?

[karanbirsingh-qasource]

Hi @christineweng

we have validated this issue on 8.15 Bc5 and found the issue to be fixed ✔️ . Now investigate in timeline button is removed for the suppressed alert section in alert fly-out.

Build Details:

Version: 8.15 BC5
Build: 76335
Commit: 393e3c436ffaa6d9f168f960b23306ff7c5130c7

Screen-Shot:

Hence we are closing this issue and adding "QA:Validate" to it.

thanks !!