Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"This rule has no exception" is displayed while page loading under exception tab when exception rule is already added. #99022

Closed
ghost opened this issue May 3, 2021 · 7 comments
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Feature:Rule Exceptions Security Solution Detection Rule Exceptions area fixed impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. QA:Validated Issue has been validated by QA Team:Detections and Resp Security Detection Response Team Team:Security Solution Platform Security Solution Platform Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.5.0

Comments

@ghost
Copy link

ghost commented May 3, 2021

Kibana version:
Kibana: 7.13.0

Elasticsearch version:
Elasticsearch: 7.13.0

Host OS and Browser version:
Windows 10 , All

Description
"This rule has no exception" is displayed while page loading under exception tab when exception rule is already added.

Preconditions

  1. Kibana Cloud build should be available
Commit : ac09c73a4a7998c770b50d39177c22036ae14375
Build : 40647
  1. Elastic Cloud Credentials should be saved to login.
  2. Exception should be saved under rule.

Steps

  1. Navigate to Detection tab of security app.
  2. Click on Rule for which exception is created.
  3. scroll down the page and move to Exceptions tab.
  4. "This rule has no exception" is displayed while loading the page.

Test data
N/A

Impacted Test case id
N/A

Actual Result
"This rule has no exception" is displayed while loading page under exception tab when exception rule is already added.

Expected Result
"This rule has no exception" should not displayed while loading page under exception tab when exception rule is already added.

What's working
N\A

What's not working
N\A

Screenshot
Endpoint_Rule_loading

Logs
N\A

@ghost ghost added the bug Fixes for quality problems that affect the customer experience label May 3, 2021
@botelastic botelastic bot added the needs-team Issues missing a team label label May 3, 2021
@ghost ghost added the Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. label May 3, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@botelastic botelastic bot removed the needs-team Issues missing a team label label May 3, 2021
@ghost ghost added v7.13.0 impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. labels May 3, 2021
@ghost
Copy link
Author

ghost commented May 3, 2021

@manishgupta-qasource : Please review the Bug.

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@MadameSheema
Copy link
Member

Thanks for reporting it @vipulsrivastava-qasource, can you please provide us the following information?

  1. What type of rule was?
  2. The exception was created from an alert or from the rule page?
  3. After the page was completely loaded, the message was displayed?

Thanks :)

@ghost
Copy link
Author

ghost commented May 3, 2021

Hi @MadameSheema,

Please find below the answers to the queries:

What type of rule was?

Rule was "Endpoint Security".

The exception was created from an alert or from the rule page?

The Exception was Created from alert and we added the endpoint exception for the Malware Alert.

After the page was completely loaded, the message was displayed?

This message is displayed only when the page is loading the data. After the page is loaded successfully this message is not displayed instead of correct exception details is shown.

Screenshot :

  • Exception is displayed after the page is loaded successfully

Endpoint_Exception_Data

Note : This issue is occurring only when the page is loading the data. After the page is loaded successfully this issue is not occurring.

Thanks!!.

@MadameSheema MadameSheema added impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. and removed triage_needed impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. labels May 5, 2021
@peluja1012 peluja1012 added Team:Detection Alerts Security Detection Alerts Area Team Feature:Rule Exceptions Security Solution Detection Rule Exceptions area labels Nov 9, 2021
@marshallmain marshallmain added impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. and removed impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. labels Mar 1, 2022
@marshallmain marshallmain added Team:Security Solution Platform Security Solution Platform Team and removed Team:Detection Alerts Security Detection Alerts Area Team labels Apr 14, 2022
@yctercero yctercero self-assigned this Sep 29, 2022
@yctercero
Copy link
Contributor

Should now be fixed in 8.5

@ghost
Copy link

ghost commented Oct 10, 2022

Hi Team,

We have validated above issue on 8.5.0 BC3 and it's fixed. 🟢

Build Details:

VERSION: 8.5.0
BUILD: 56932
COMMIT: 1bb0d052c8d6842b88665c8c489f3a2d4cf4b46a

Screen records:

Rules.-.Kibana.-.Google.Chrome.2022-10-10.12-29-02.mp4

Thanks !

@ghost ghost closed this as completed Oct 10, 2022
@ghost ghost added the QA:Validated Issue has been validated by QA label Oct 10, 2022
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Feature:Rule Exceptions Security Solution Detection Rule Exceptions area fixed impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. QA:Validated Issue has been validated by QA Team:Detections and Resp Security Detection Response Team Team:Security Solution Platform Security Solution Platform Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.5.0
Projects
None yet
Development

No branches or pull requests

6 participants