Skip to content

[Security Solution] Unable to upgrade rules with missing base version #200904

@xcrzx

Description

@xcrzx

Epic: #174168
Related to: #200286

Summary

When a rule has a missing base version, the update to the version field is treated as a conflict, which blocks the update flow.

Steps to Reproduce

  1. Open any field in the update UI for a rule that has no base version.
  2. Attempt to resolve all conflicts and update the rule.

Expected Result

Users should be able to resolve conflicts and update the rule successfully.

Actual Result

Rule update is not possible, even after resolving all conflicts, due to an "invisible" conflict in the version field:

Image

Metadata

Metadata

Assignees

Labels

8.17 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.v8.16.2v8.17.0v8.18.0

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions