-
Notifications
You must be signed in to change notification settings - Fork 8.6k
[Security Solution] Required fields are getting erased on rule PATCH #199665
Copy link
Copy link
Closed
Copy link
Labels
8.17 candidateFeature:Rule ManagementSecurity Solution Detection Rule Management areaSecurity Solution Detection Rule Management areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.Addressing this issue will have a medium level of impact on the quality/strength of our product.v8.16.1v8.17.0v9.0.0
Metadata
Metadata
Assignees
Labels
8.17 candidateFeature:Rule ManagementSecurity Solution Detection Rule Management areaSecurity Solution Detection Rule Management areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.Addressing this issue will have a medium level of impact on the quality/strength of our product.v8.16.1v8.17.0v9.0.0
Type
Fields
Give feedbackNo fields configured for Bug.
Summary
After sending a PATCH update to any rule that includes the
required_fieldsfield, the field is being erased.For example, I have a prebuilt rule with required fields:
I send a PATCH request to update its description:
After the PATCH, I retrieve the rule and find the required fields are missing: