[Security Solution] Misleading reset functionality for Data Views

[MadameSheema]

Describe the bug:

• Misleading reset functionality for Data Views

Kibana/Elasticsearch Stack version:

• Main (7f0a6cf)

Steps to reproduce:

1. Navigate to a view where Data View can be edited
2. Write a non-existing index pattern
3. Click on reset icon

Current behavior:

• The non-existing index pattern is not deleted

Expected behavior:

• The non-existing index pattern is deleted

Screenshots (if relevant):

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[MadameSheema]

The save button functionality is misleading as well, since when you add a non-existing pattern and you click on the save button the dialog is closed making the impression the wrong index has been saved. Do we need to track this behaviour on a different ticket or can be part of this one?

[stephmilovic]

The save button functionality is misleading as well, since when you add a non-existing pattern and you click on the save button the dialog is closed making the impression the wrong index has been saved. Do we need to track this behaviour on a different ticket or can be part of this one?

i will take care of both issues in the same PR

[stephmilovic]

I actually think this is an Eui bug with EuiComboBox. look how it works on their demo page:

The clear behavior does not clear invalid entries and i am not able to do so. i opened an issue with Eui: elastic/eui#5500

@MadameSheema I'm not sure if you want to close or wait until Eui closes their issue?

[MadameSheema]

@stephmilovic I would suggest keeping it open in order to give visibility to our users. What do you think?

[stephmilovic]

@MadameSheema I'd prefer to close it, it is exposed to the users through the EUI ticket elastic/eui#5498

Besides if user found this issue, they could read through the comments and see where EUI ticket is whether or not this ticket is closed

If you prefer to leave it open, can we remove me as assignee and remove it from the [Explore]( Security: Threat Hunting: Explore) board? otherwise it keeps showing up and does not really fit into any of our status categories