e.g. this dashboard
|
"markdown": "**Windows Overview** | [User Logon Information](#/dashboard/system-bae11b00-9bfc-11ea-87e4-49f31ec44891) | [Logon Failed and Account Lockout](#/dashboard/system-d401ef40-a7d5-11e9-a422-d144027429da) | [User Management Events](#/dashboard/system-71f720f0-ff18-11e9-8405-516218e3d268) | [Group Management Events](#/dashboard/system-bb858830-f412-11e9-8405-516218e3d268)", |
renders several links to other dashboards that simply do nothing in serverless projects.
The rendered link addresses look like this: https://<kibana_host>/app/security/dashboards/system-Windows-Dashboard?sourcerer=(default:(id:security-solution-default,selectedPatterns:!(%27logs-*%27)))&timerange=(global:(linkTo:!(),timerange:(from:%272025-04-21T04:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272025-04-22T03:59:59.999Z%27,toStr:now%2Fd)),timeline:(linkTo:!(),timerange:(from:%272025-04-20T17:37:46.678Z%27,kind:absolute,to:%272025-04-21T17:37:46.678Z%27)))&timeline=(activeTab:query,graphEventId:%27%27,isOpen:!f)#/dashboard/system-bae11b00-9bfc-11ea-87e4-49f31ec44891
The #/dashboard/system-bae11b00-9bfc-11ea-87e4-49f31ec44891 segment is what's being provided in the integration dashboard source.
This direct link works: https://<kibana_host>/app/security/dashboards/system-bae11b00-9bfc-11ea-87e4-49f31ec44891?sourcerer=(default:(id:security-solution-default,selectedPatterns:!(%27logs-*%27)))&timerange=(global:(linkTo:!(),timerange:(from:%272025-04-21T04:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272025-04-22T03:59:59.999Z%27,toStr:now%2Fd)),timeline:(linkTo:!(),timerange:(from:%272025-04-20T17:37:46.678Z%27,kind:absolute,to:%272025-04-21T17:37:46.678Z%27)))&timeline=(activeTab:query,graphEventId:%27%27,isOpen:!f)#/dashboard/system-d401ef40-a7d5-11e9-a422-d144027429da
Steps to reproduce
- Create a security serverless project. Note that this issue does not affect observability projects since link addresses are handled differently.
- Install the
system integration.
- Go to
Dashboards in the side nav bar.
- Open the
[System] Windows Overview dashboard.
- Click
User Logon Information, see that nothing happens.
Note that if you open the [System] Windows Overview dashboard from the Assets tab in the integration page, then the links work correctly.
e.g. this dashboard
integrations/packages/system/kibana/dashboard/system-Windows-Dashboard.json
Line 259 in 25b9fb3
The rendered link addresses look like this:
https://<kibana_host>/app/security/dashboards/system-Windows-Dashboard?sourcerer=(default:(id:security-solution-default,selectedPatterns:!(%27logs-*%27)))&timerange=(global:(linkTo:!(),timerange:(from:%272025-04-21T04:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272025-04-22T03:59:59.999Z%27,toStr:now%2Fd)),timeline:(linkTo:!(),timerange:(from:%272025-04-20T17:37:46.678Z%27,kind:absolute,to:%272025-04-21T17:37:46.678Z%27)))&timeline=(activeTab:query,graphEventId:%27%27,isOpen:!f)#/dashboard/system-bae11b00-9bfc-11ea-87e4-49f31ec44891The
#/dashboard/system-bae11b00-9bfc-11ea-87e4-49f31ec44891segment is what's being provided in the integration dashboard source.This direct link works:
https://<kibana_host>/app/security/dashboards/system-bae11b00-9bfc-11ea-87e4-49f31ec44891?sourcerer=(default:(id:security-solution-default,selectedPatterns:!(%27logs-*%27)))&timerange=(global:(linkTo:!(),timerange:(from:%272025-04-21T04:00:00.000Z%27,fromStr:now%2Fd,kind:relative,to:%272025-04-22T03:59:59.999Z%27,toStr:now%2Fd)),timeline:(linkTo:!(),timerange:(from:%272025-04-20T17:37:46.678Z%27,kind:absolute,to:%272025-04-21T17:37:46.678Z%27)))&timeline=(activeTab:query,graphEventId:%27%27,isOpen:!f)#/dashboard/system-d401ef40-a7d5-11e9-a422-d144027429daSteps to reproduce
systemintegration.Dashboardsin the side nav bar.[System] Windows Overviewdashboard.User Logon Information, see that nothing happens.Note that if you open the
[System] Windows Overviewdashboard from theAssetstab in the integration page, then the links work correctly.