[Security Solution] Error on expanding alert via session under events tab

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.66k stars 8.23k forks source link

[Security Solution] Error on expanding alert via session under events tab #191582

Closed muskangulati-qasource closed 2 weeks ago

muskangulati-qasource commented 2 months ago

Describe the bug Error on expanding alert via session under events tab

Kibana/Elasticsearch Stack version

VERSION: 8.16.0 SERVERLESS
BUILD: 77679
COMMIT: 6b091fe3b410eaae9d4805c0a3c0ea6168bf66b0

Preconditions

Endpoint alerts for linux with session should exist

Steps

Navigate to the Explore > Hosts > Events tab under security
Check the box for 'Show only external alerts'
Click on the session viewer for any alert
Expand alert and observe the flyout opens up with an error

Additional Details

Issue is not occurring on the alerts tab

Expected Result

The flyout should open to display details

Screen-Cast

https://github.com/user-attachments/assets/a5e09e91-1556-461a-bd2d-9b2fd30cd8e5

elasticmachine commented 2 months ago

Pinging @elastic/security-solution (Team: SecuritySolution)

PhilippeOberti commented 2 months ago

Thanks for opening this issue @muskangulati-qasource and for the detailed steps. I can reproduce this issue locally, I'm not sure what's happening yet but we'll take a look!

elasticmachine commented 2 months ago

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

elasticmachine commented 2 months ago

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

christineweng commented 3 weeks ago

@muskangulati-qasource this is fixed but I think it didn't make it in BC1. Could you please validate with 8.16 BC2?

MadameSheema commented 2 weeks ago

@muskangulati-qasource can you please validate it when you have the chance? Thanks!

muskangulati-qasource commented 2 weeks ago

Hi @MadameSheema,

We have validated the issue on the latest build and found the issue is fixed.

Please find below the testing details: Build Details:

VERSION: 8.16.0
BUILD: 79556
COMMIT: f02d1303b5230c357ac7e4c49c8adadd5f66af38

Screen Recording

https://github.com/user-attachments/assets/63dd215c-4e07-4ef0-966c-b6859b9d241d

Hence, we are closing this issue and marking it as 'QA Validated'.

Thank you