Imported Alerts Cannot be Deleted

[milesflo]

Imported Alerts Cannot be Deleted

Request Type

Bug / Feature Request

Problem Description

Alerts that have either been Imported to a new Case or Merged into an existing Case cannot be deleted.

Steps to Reproduce

1. Ingest/Create 2 Alerts, A and B
2. Import Alert A to a Case
3. Merge Alert B to Case A
4. Delete Case A
5. View Alerts tab
6. Alerts A and B will be there, marked as Imported and impossible to delete

Possible Solutions

Deleted Cases should do a (optional?) cascading delete on relevant Alerts, assuming 1 Alert can only be imported to 1 Case.

Complementary information

^ Note that the selected alert cannot be Deleted, and that the Alerts count at the top has been marked as 0

Clicking on the link to the Alert produces the following error message:

Marking the alert as Unread yields the following:

Changes:

• Alert count reflects this alert being Unread
• Status is changed to "Updated" instead of imported
• Alert still cannot be Deleted now that it is Unread

Disclaimer, these screenshots were staged to redact PII

[ArnaudLhutereau]

Same problem when I transform an alert to a case :

1. Transform alert to case
2. Delete case
3. Go to the alert's list

Alert stays in but I can't delete it.

[EDIT] Bug is known, see issue #1123 but no current patch

[V1D1AN]

Hello , I have the same problem ..