Skip to content

[9.3] [Observability] [Alerting] Fix alert tags when source tags is a string (#259729)#259768

Merged
kibanamachine merged 2 commits intoelastic:9.3from
kibanamachine:backport/9.3/pr-259729
Mar 26, 2026
Merged

[9.3] [Observability] [Alerting] Fix alert tags when source tags is a string (#259729)#259768
kibanamachine merged 2 commits intoelastic:9.3from
kibanamachine:backport/9.3/pr-259729

Conversation

@kibanamachine
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 9.3:

Questions ?

Please refer to the Backport tool documentation

elastic#259729)

Resolves elastic#259504

When source documents have tags as a string instead of an array, the
spread syntax [...(additionalContext.tags ?? [])] iterates characters,
producing per-character tags on the alert (e.g. t, e, s, t, ...). This
PR normalizes tags to an array before merging with rule tags, fixing the
inventory threshold, metric threshold, and custom threshold executors.

(cherry picked from commit cd62e65)
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

@elasticmachine
Copy link
Copy Markdown
Contributor

⏳ Build in-progress, with failures

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #6 / Cloud Security Posture - Group 2 Test adding Cloud Security Posture Integrations CSPM AWS CIS_AWS Organization Manual Assume Role CIS_AWS Organization Manual Assume Role Workflow

cc @benakansara

@kibanamachine kibanamachine merged commit 235645c into elastic:9.3 Mar 26, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR Team:obs-ux-management

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants