diff --git a/x-pack/plugins/security_solution/public/detections/components/rules/query_preview/index.tsx b/x-pack/plugins/security_solution/public/detections/components/rules/query_preview/index.tsx
index ca4fba4a908ff..0efa5d5cff5ce 100644
--- a/x-pack/plugins/security_solution/public/detections/components/rules/query_preview/index.tsx
+++ b/x-pack/plugins/security_solution/public/detections/components/rules/query_preview/index.tsx
@@ -118,7 +118,7 @@ export const PreviewQuery = ({
     startDate: toTime,
     filterQuery: queryFilter,
     indexNames: index,
-    includeMissingData: false,
+    includeMissingData: true,
     histogramType: MatrixHistogramType.events,
     stackByField: 'event.category',
     threshold: ruleType === 'threshold' ? threshold : undefined,
diff --git a/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/use_preview_histogram.tsx b/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/use_preview_histogram.tsx
index b7c415615f97a..508268be1e05c 100644
--- a/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/use_preview_histogram.tsx
+++ b/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/use_preview_histogram.tsx
@@ -49,6 +49,7 @@ export const usePreviewHistogram = ({
       errorMessage: QUERY_PREVIEW_ERROR,
       filterQuery,
       histogramType: MatrixHistogramType.preview,
+      includeMissingData: true,
       indexNames: [`${DEFAULT_PREVIEW_INDEX}-${spaceId}`],
       stackByField: 'event.category',
       startDate,