[SECURITY SOLUTIONS] Disable filter/drag & drop functionality when field is unmapped on t-grid #99150
Labels
bug
Fixes for quality problems that affect the customer experience
impact:medium
Addressing this issue will have a medium level of impact on the quality/strength of our product.
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Team:Threat Hunting
Security Solution Threat Hunting Team
In this #99130, we were able to disable popover action (filter/add to timeline etc...) and drag & drop inside of the details events when a field is unmapped. We need to do the same thing in a cell of t-grid.
Original comment:
Consider adding a similar check when rendering the field in the table view, because per the screenshot below,
process.created
will be rendered as a draggable / filterable item in the table, but Elasticsearch won't, for example return results for this field if it's added as a filter to the KQL bar:Originally posted by @andrew-goldstein in #99130 (comment)
The text was updated successfully, but these errors were encountered: