Skip to content

[Security Solution] Update flyout diff view for "My changes merged with Elastic's" changes #208085

Open
@approksiu

Description

Describe the bug:

When a user switches between the diff comparisons on the customized field that has update, the "My changes merged with Elastic's" diff changes to the same as "Update from Elastic". It looks like the proper versions are back when the page refresh happens.

Kibana/Elasticsearch Stack version:

VERSION: 9.0.0

Functional Area (e.g. Endpoint management, timelines, resolver, etc.):

Rule Update

Pre requisites:

  1. prebuiltRulesCustomizationEnabled flag is enabled
  2. Prebuilt rules are available
  3. At least one prebuilt rule has an update with updated field modified.

Steps to reproduce:

  1. Locate a prebuilt rule that has an available update to a modified field.
  2. Switch between different diffs in the left side of the flyout.

Current behavior:

When opening the "My changes merged with Elastic's" after viewing other diffs, the value in the diff changes and does not contain both "My" and Elastic's changes.

Expected behavior:
"My changes merged with Elastic's" stays the same (correct) when coming back to it after switching between different diff options.

Screenshots:

Diff_flyout_Screen.Recording.2025-01-23.at.16.24.43.mov

Metadata

Assignees

Labels

8.18 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.v8.18.0

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions