Skip to content

[Security Solution][Detections] Indicator Rules cannot be duplicated from the Rule Details page #90356

@rylnd

Description

@rylnd

Summary

When attempting to duplicate an Indicator Match rule from that rule's Details page, the action fails and an error toast is displayed:

Initial toast:
69cc1500-663e-11eb-a93b-d39c7477f8ec_-_Kibana
Expanded toast:
69cc1500-663e-11eb-a93b-d39c7477f8ec_-_Kibana

Other notes:

  • The rule can be duplicated from the rules table on the main Detections page
  • This does not appear to affect 7.10; I have only been able to reproduce on 7.11 master/7.12.

Metadata

Metadata

Labels

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.v7.12.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions