Skip to content

[Osquery] Getting Internal Server Error while saving a Pack. #190975

Open

Description

Describe the bug
Getting Internal Server Error while saving a Pack.

Build Details

VERSION: 8.16.0
BUILD: 77469
COMMIT: 1f1a3594615afceda26308abf163497114b5858f

Browser Details
This issue is occurring on all browsers.

Preconditions

  1. Kibana v8.16.0 must be available.
  2. Multiple Agent Policies must be available.
  3. Osquery Manager Integration must be added to Agent Policies.

Steps to Reproduce

  1. Navigate to Management -> Osquery -> Packs
  2. Click on Add Pack button.
  3. Enter any name to pack.
  4. Under Scheduled agent policies (optional) select one Agent Policy.
  5. Under Partial Deployment (Shards) select another Agent Policy.
  6. Now Click on X button under Policy field.
  7. Click on Save Pack button and observe that it will ask for confirmation.
  8. Click on Save and Deploy Changes and observe that nothing will happen as there is error Policy is a required field in pack configuration.
  9. Again Under Partial Deployment (Shards) select another Agent Policy.
  10. Click on Save Pack button and observe that there will be Internal Server Error while saving a Pack.

Actual Result
Getting Internal Server Error while saving a Pack.

Expected Result
User should be able to save Pack with any Error message when all the required fields are present.

What's Working

  • N/A

What's Not Working

  • N/A

Screen Recording

Packs.-.Osquery.-.Elastic.-.Google.Chrome.2024-08-21.17-31-07.mp4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

OLM SprintOsqueryTeam:Asset MgmtTeam:Defend Workflows“EDR Workflows” sub-team of Security SolutionbugFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.v8.16.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions