search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.81k stars 8.2k forks source link

[Security Solution] [Detection Engine] Preview logged requests is kept with empty lists when rule type is changed to a not supported one #196616

Open pborgonovi opened 6 days ago

pborgonovi commented 6 days ago

Describe the bug: Preview logged requests is kept in preview with empty lists when rule type is changed to a not supported one

Kibana/Elasticsearch Stack version: 8.16

Server OS version:

Browser and Browser OS versions:

Elastic Endpoint version:

Original install method (e.g. download page, yum, from source, etc.):

Functional Area (e.g. Endpoint management, timelines, resolver, etc.): Rule Preview

Steps to reproduce:

  1. Click create a new rule
  2. Select ES|QL and fill out the query field
  3. Check "Preview logged requests" checkbox on Rule Preview and click on Refresh button
  4. Change rule type to a not support one (e.g. Custom query)
  5. Fill out query fields
  6. Click Rule Preview Refresh button

Current behavior: Preview logged requests is kept in preview with empty lists

Expected behavior: Preview logged requests list should not be present

Screenshots (if relevant):

https://github.com/user-attachments/assets/11627ae9-e2b0-44fe-8666-64e59ec3c6c7

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context (logs, chat logs, magical formulas, etc.):

elasticmachine commented 6 days ago

Pinging @elastic/security-solution (Team: SecuritySolution)

elasticmachine commented 6 days ago

Pinging @elastic/security-detection-engine (Team:Detection Engine)

elasticmachine commented 6 days ago

Pinging @elastic/security-detections-response (Team:Detections and Resp)