Skip to content

[Security Solution] Getting [request params]: Invalid value "undefined" supplied to "id" (400) for adding rule exception to Alert after importing rule. #190039

Open

Description

Describe the bug
Getting [request params]: Invalid value "undefined" supplied to "id" (400) for adding rule exception to Alert after importing rule.

Build Details

VERSION: 8.15.0
BUILD: 76360
COMMIT: 8aa0b59da12c996e3048d8875446667ee6e15c7f

Browser Details
This issue is occurring on all browsers.

Preconditions

  1. Kibana build lower the v8.15 must be available.
  2. Few Rules and Alerts must be created on the build.
  3. Upgrade the build to latest Kibana v8.15 build.

Steps to Reproduce

  1. Navigate to Security -> Rules -> Detection Rule (SIEM)
  2. Export the custom created pre requisite rule.
  3. Delete the custom created pre requisite rule.
  4. Import the custom created pre requisite rule which was exported in step-2.
  5. Navigate to Security -> Alerts.
  6. Click on ... option for the Alert respective to the pre requisite Alert.
  7. Select Add rule exception option.
  8. Add Exception Name and Click on Add rule exception.
  9. Observe that there will be an error [request params]: Invalid value "undefined" supplied to "id" (400).

Actual Result
Getting [request params]: Invalid value "undefined" supplied to "id" (400) for adding rule exception to Alert after importing rule.

Expected Result
There should be no error while adding Rule Exception.

What's Working

  • Issue is not occrring for Indicator Match Alert

What's Not Working

  • issue is occuring for Event Correlation , Custom Query , Threshold Alerts

Screenshot
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection EngineSecurity Solution Detection Engine AreaTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.v8.15.0

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions