-
Notifications
You must be signed in to change notification settings - Fork 8.6k
[Security Solution] Detection rule fails to install but does not show reason and the toast in the UI shows up as success #190753
Copy link
Copy link
Labels
9.1 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules areaQA:ValidatedIssue has been validated by QAIssue has been validated by QATeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experiencefixedimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.Addressing this issue will have a medium level of impact on the quality/strength of our product.
Metadata
Metadata
Assignees
Labels
9.1 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules areaQA:ValidatedIssue has been validated by QAIssue has been validated by QATeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experiencefixedimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.Addressing this issue will have a medium level of impact on the quality/strength of our product.
Type
Fields
Give feedbackNo fields configured for Bug.
Related to: #197246
Describe the bug:
Some detection rules uses Machine Learning, which is a licensed feature, when trying to install those rules in a cluster with the basic license it will fail, but the reason will not be given to the user and also the toast on the bottom of the screen is the success one, with the green bar, when it should be the error one, with the red bar.
Kibana/Elasticsearch Stack version:
8.15.0
Functional Area (e.g. Endpoint management, timelines, resolver, etc.):
Detection Rules
Steps to reproduce:
Current behavior:
The detection rule fails to install without given the reason and the toast in the bottom of the screen is the success one with the green bar.
According to the Elastic UI, this error is using the color
successand the iconTypecheckExpected behavior:
The detection rule fails to install, the reason is show to the user and the toast in the bottom of the screen should be the error one, with the red bar.
According to the Elastic UI it should use the color
dangerand the iconTypeerrorScreenshots (if relevant):
Response in the developer console: