[RAC] Observability alerts table reads from incorrect indices #109317
Labels
bug
Fixes for quality problems that affect the customer experience
Team:Threat Hunting
Security Solution Threat Hunting Team
Theme: rac
label obsolete
v7.15.0
📝 Summary
The introduction of the correct alias names in #108115 surfaced a problem with the way the
timeline
andindexFields
search strategies construct the indices. This causes the Observability table to remain empty even if alerts are present in the correct indices.✔️ Proposed solution
The text was updated successfully, but these errors were encountered: