-
Notifications
You must be signed in to change notification settings - Fork 8.6k
[Security Solution] Value lists cannot be deleted when the name of the uploaded file has a special character #86273
Copy link
Copy link
Closed
Labels
Feature:Rule Value ListsSecurity Solution Detection Rule Value Lists areaSecurity Solution Detection Rule Value Lists areaQA:ValidatedIssue has been validated by QAIssue has been validated by QATeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.Addressing this issue will have a high level of impact on the quality/strength of our product.v7.12.0
Metadata
Metadata
Assignees
Labels
Feature:Rule Value ListsSecurity Solution Detection Rule Value Lists areaSecurity Solution Detection Rule Value Lists areaQA:ValidatedIssue has been validated by QAIssue has been validated by QATeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.Addressing this issue will have a high level of impact on the quality/strength of our product.v7.12.0
Type
Fields
Give feedbackNo fields configured for issues without a type.
Describe the bug:
(Kibana/Elasticsearch Stack version:
Functional Area (e.g. Endpoint management, timelines, resolver, etc.):
Preconditions:
1000_words (1).csvSteps to reproduce:
Security > DetectionsManage detection rulesbuttonUpload value listsIcon trashRemove value listCurrent behavior:
Expected behavior:
Errors in browser console (if relevant):
{"message":"KQLSyntaxError: Expected \")\", AND, OR, whitespace but \"(\" found.\n(exception-list.attributes.list_type: item AND exception-list.attributes.entries.list.id:1000_words (1).csv) OR (exception-list-agnostic.attributes.list_type: item AND exception-list-agnostic.attributes.entries.list.id:1000_words (1).csv) \n----------------------------------------------------------------------------------------------------^: Bad Request","status_code":400}