Skip to content

[Security Solution][Threat Hunting] Columns component loses state on page reload #174713

@rylnd

Description

@rylnd

Summary

There appears to be an issue with the Columns component on the Alerts table(s). On page load, the persisted table preferences controlled by that component are not reflected in the Columns component, leading to complicated, confusing UX when interacting with those UI.

Context

I observed the following behaviors when investigating this bug; all of them are correct, save for the last one.

  1. ✅ Interaction with the Columns component causes the Alerts table to update and be in sync with the current Columns state (as represented in the Columns component)
  2. ✅ Interaction with the Columns component causes the column state (i.e. "column preferences/order") to be persisted to localStorage
  3. ✅ On page load, the column state in localStorage is applied to the Alerts table
  4. ❌ On page load, the Columns component does not load the column state from localStorage

Steps to Reproduce

  1. Generate a Security environment with some Alerts
  2. Navigate to an Alerts table (e.g. Security -> Alerts)
  3. Open the Columns component and make a change:
    Screenshot 2024-01-11 at 11 10 42 AM
    Screenshot 2024-01-11 at 11 25 55 AM
    Here I have moved host.name and user.name after @timestamp
  4. Reload the page
  5. Observe that the Columns component has been reset:
    Screenshot 2024-01-11 at 11 29 41 AM
  6. (Optional) Observe that the columns are still in the specified order:
    Screenshot 2024-01-11 at 11 28 28 AM

Metadata

Metadata

Assignees

No one assigned

    Labels

    Feature:Security Alert PageSecurity solution alert pageTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:ResponseOpsPlatform ResponseOps team (formerly the Cases and Alerting teams) t//Team:Threat HuntingSecurity Solution Threat Hunting TeamTeam:Threat Hunting:InvestigationsSecurity Solution Threat Hunting Investigations TeambugFixes for quality problems that affect the customer experiencev8.11.1

    Type

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions