Skip to content

[Osquery] Option to re-run a Pack from Live queries history page is not available. #179527

Open

Description

Describe the bug
Option to re-run a Pack from Live queries history page is not available.

Build Details

VERSION: 8.14.0
BUILD: 72779
COMMIT: ea309fdbf7ed02d5a8872daf56132b9e40e60982

Browser Details
This issue is occurring on all browsers.

Preconditions

  1. Kibana v8.13.0 should be available.
  2. Osquery integration must be installed with Agent Policy.
  3. Pre-built elastic pack must be loaded.
  4. Few Pack must be run.

Steps to Reproduce

  1. Navigate to Management -> Osquery -> Live Queries
  2. Under Live Queries History list.
  3. Observe that option to re-run a Pack from Live queries history page is not available.

Reference

Actual Result
Option to re-run a Pack from Live queries history page is not available.

Expected Result
Option to re-run a Pack from Live queries history page should be available.

What's Working

  • Option to re-run a Single Query from Live queries history page is available.

What's Not Working

  • N/A

Screen Shot
1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Labels

OsqueryTeam:Asset MgmtTeam:Defend Workflows“EDR Workflows” sub-team of Security SolutionbugFixes for quality problems that affect the customer experiencegroomingimpact:criticalThis issue should be addressed immediately due to a critical level of impact on the product.v8.14.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions