Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution]Dashboard not showing on import after tag auto generation #137948

Closed
ghost opened this issue Aug 3, 2022 · 6 comments
Closed
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Feature:Detection & Response Dashboard Security solution Detection & Response Dashboard feature fixed impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. QA:Validated Issue has been validated by QA Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team

Comments

@ghost
Copy link

ghost commented Aug 3, 2022

Describe the bug
Dashboard not showing on import after tag auto generation

Build Details:

Version:8.4.0 BC1
Commit:58f7eaf0f8dc3c43cbfcd393e587f155e97b3d0d
Build:54999

Steps

  • Build fresh kibana
  • Create a custom dashboard
  • Go to Stack management> Tag
  • Manage Security Solution tag and assign above custom dashboard
  • now import the custom dashboard and then delete it
  • now delete the Security Solution tag and generate a new one
  • now import the dashboard back
  • Observed that imported dashboard is not showing inside the security app as now we have two tag with same name but under tags we can see the attached SO

Screen-Cast

Tags.-.Elastic.Mozilla.Firefox.Private.Browsing.2022-08-03.15-11-28.mp4
@ghost ghost added bug Fixes for quality problems that affect the customer experience triage_needed Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. labels Aug 3, 2022
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@ghost ghost added the impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. label Aug 3, 2022
@ghost ghost assigned ghost and MadameSheema and unassigned ghost Aug 3, 2022
@MadameSheema MadameSheema removed their assignment Aug 3, 2022
@MadameSheema MadameSheema added Team:Threat Hunting Security Solution Threat Hunting Team Team:Threat Hunting:Explore labels Aug 3, 2022
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@semd
Copy link
Contributor

semd commented Aug 3, 2022

Not sure if this is a bug. The "problem" is that the original tag of the exported dashboard was deleted, when the dashboard is imported the original tag ID is not found so it is re-created, while there was another new tag with the same Security Solution name. Tags saved objects are not unique by name, so we end up with two Security Solution tags. This situation is rare but can happen under different circumstances.
The Dashboards landing page takes the first Security Solution tag it finds by creation date.
I will bring this to @paulewing.

@stephmilovic stephmilovic removed their assignment Aug 3, 2022
@stephmilovic stephmilovic added the Feature:Detection & Response Dashboard Security solution Detection & Response Dashboard feature label Apr 3, 2023
@semd
Copy link
Contributor

semd commented Apr 11, 2023

This PR is going to fix this bug by using all Security Solution tags to retrieve Security dashboards. #154174

@semd semd added the fixed label Apr 11, 2023
@MadameSheema
Copy link
Member

@karanbirsingh-qasource please validate the fix on current BC. Thanks.

@ghost
Copy link
Author

ghost commented May 8, 2023

Hi @MadameSheema

We have validated this issue on 8.8 BC2 and found the issue to be fixed ✔️ . Tag is not getting duplicate and dashboard import successfully.

Build Details:

Version: 8.8 BC2
Commit:33efd47ee6927b54b328e901fe31d31eae875325
Build:62857

Screen-Cast

part1_AdobeExpress.mp4

Hence we are Closing this issue and adding "QA:Source" tag to it.

thanks !!

@ghost ghost closed this as completed May 8, 2023
@ghost ghost added the QA:Validated Issue has been validated by QA label May 8, 2023
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Feature:Detection & Response Dashboard Security solution Detection & Response Dashboard feature fixed impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. QA:Validated Issue has been validated by QA Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team
Projects
None yet
Development

No branches or pull requests

4 participants