Skip to content

[Security Solution] The copy action for values of a date type should be formatted in a way that is compliant with the in app date picker. #141111

Open
@kqualters-elastic

Description

Kibana version:
7.10+

Describe the bug:
Currently, when a user selects a cell in a table in the security solution app that is of a date mapping type, the raw, non timezone or format aware value is used. If a user goes to paste this value into the date picker found throughout the app, this results in an error as the format is not compatible, and a user must mentally adjust for timezones to get the intended data to appear.

Steps to reproduce:

  1. Open the alerts table.
  2. Select a timestamp cell, and click 'Copy to Clipboard'
  3. Paste this value into the date picker.

Expected behavior:
After removing the key part of the string pasted from the clipboard, the query works. Currently a user must change the format as well as adjust for timezones.

Screenshots (if relevant):
image
image

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context:
If fields of a date type used took account of user defined ui settings like this hook https://github.com/elastic/kibana/blob/main/x-pack/plugins/security_solution/public/resolver/view/panels/use_formatted_date.ts#L38 this process would be much less painful for a user. We also customize the behavior of the popover for fields that link to another, like linking host name to the host detail page or rule name to the rule detail page, so defining this behavior just for date type fields won't be very complicated.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    Team:Threat Hunting:InvestigationsSecurity Solution Investigations TeambugFixes for quality problems that affect the customer experienceimpact:lowAddressing this issue will have a low level of impact on the quality/strength of our product.

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions