[Security Solution] Alert information is not displayed on Jira after adding the alert in jira connector even after enabling the "sync alert status with case status" option.

[ghost]

Description
Alert information is not displaying on Jira after added the alert in jira connector even after enable the "sync alert status with case status".

Build Details:

Version: 7.11.0 Snapshot
Commit:d0c88d5b23ab09511ed0edf803a1f47daf471a3d
Build number : 37305
Artifact: https://artifacts-api.elastic.co/v1/search/7.11.0-SNAPSHOT

Browser Details:
All

Preconditions:

1. Elastic stack should be up and running
2. Audit beat should be installed and running.
3. One connector like JIRA should be added.
4. Alert should be generated.

Steps to Reproduce:

1. Navigate to Detection tab of security.
2. Click on add to case icon.
3. Click on add to new case.
4. Enter the name and description.
5. Enable the "sync alert status with case status"
6. Select Jira connector from "External Incident Management System" drop down.
7. Now navigate to cases tab.
8. Click on created case.
9. Click on "Push as incident."
10. Now click on Jira incident link.
11. Observe that no information is displaying only "(added at 2020-12-16T11:49:49.864Z by elastic)" is displaying

Observation: Same scenario is working if disable the "sync alert status with case status".

Impacted Test case:
N/A

Actual Result:
Alert information is not displayed on Jira after adding the alert in jira connector even after enabling the "sync alert status with case status" option.

Expected Result:
Alert information should be displayed on Jira after adding the alert in jira connector after enabling the "sync alert status with case status" option.

What's working:
N/A

What's not working:
N/A

Screenshot:

[ghost]

@manishgupta-qasource Please review

[manishgupta-qasource]

Reviewed & assigned to @MadameSheema

[MadameSheema]

@XavierM @cnasikas can you please take a look at this?

[ghost]

Hi @cnasikas

We have validated this ticket on 7.11.0 BC3 and found that issue is Fixed . Alert information is displaying in incidents[Jira, IBM. Service Now] after adding the alert on cases.

Build Details:

Version: 7.11.0 BC3
Build: 37694
Commit: b9c97fb364139c48ef619140534af4eea195a629

Artifacts: https://staging.elastic.co/7.11.0-e9e2951f/summary-7.11.0.html

Screenshot:

Thanks!!

[muskangulati-qasource]

Hi @MadameSheema,

We tested this scenario on the latest 7.14.0-SNAPSHOT build and found that is on 7.14.0.

Build Details:

Version: 7.14.0-SNAPSHOT
Kibana Commit: 9838db392e7fcfc12f004b68fb1b09739f131148
Kibana Build Hash: 41559
Artifact Page : https://artifacts-api.elastic.co/v1/search/7.14.0-SNAPSHOT

Screenshot:

Hence, reopening this issue.

Thanks!

[MadameSheema]

@cnasikas can you please take a look at this? Thanks :)

[cnasikas]

Hi @MadameSheema @muskangulati-qasource. We changed the behaviour to show only the counts of the alerts attached to a case on #88655. We do not create comments for alerts on external services.

[MadameSheema]

Closing the issue since is the expected behaviour, thanks :)