Skip to content

[Defend Workflows]Response actions history tab status is mismatching with the alerts flyout response status #196292

Open

Description

Describe the bug:

  • Response actions history tab status is mismatching with the alerts flyout response status

Build Details:

VERSION: 9.0.0 PR shared by @tomsonpl
BUILD: 79377
COMMIT: 3a77c53

Login Credentials

Preconditions

  • Kibana should be running.
  • Add the Linux agent
  • Import these Rules
    Rules required.ndjson.zip
  • Enable all the rules
  • Trigger the alert by executing the 'ls' command on Linux endpoint

Steps to Reproduce

  • Now navigate to the Response Action history tab and check for the Failed status
  • Navigate to the rule of the alert whoms response action is failed
  • Find that alert and click on the alerts details Icon
  • Observe that the response action is showing as it is Successfull

Actual result

  • Response actions history tab status is mismatching with the alerts flyout response status

Expected Result

  • Response actions history tab and Alerts flyout responses should be same

Screen-cast

Response.actions.history.-.Kibana.Mozilla.Firefox.2024-10-15.17-40-24.mp4

Logs

  • N/A
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

OLM SprintTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Defend Workflows“EDR Workflows” sub-team of Security SolutionbugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.v8.16.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions