Skip to content

[SIEM] Missing welcome screen in 7.6 BC4 #56363

@tsg

Description

@tsg

Kibana version: 7.6.0 BC4

Describe the bug: It used to be that if you had no data in the Elasticsearch cluster, an intermediate page was blocking the app and was linking to Docs and Add Data button. This seems to be gone in BC4.

Steps to reproduce:

  1. Start a Cloud instance and don't send any data.
  2. Go to the SIEM app.

Screenshot 2020-01-30 at 11 43 16

Looking at the indices, I think this might actually be a change in APM, which seems to pre-create their indices:

 "apm-7.6.0-transaction-000001" : {
    "aliases" : {
      "apm-7.6.0-transaction" : {
        "is_write_index" : true
      }
    }
  }```

Since we match on `apm-*-transaction` by default, that disable the Welcome screen.

Metadata

Metadata

Assignees

Labels

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:SIEMbugFixes for quality problems that affect the customer experience

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions