Search results

[Security Solution] Show deprecated bulk endpoints in Upgrade Assistant: some clean-up

backport:versionBackport to applied version labelsBackport to applied version labels

Feature:Rule ManagementSecurity Solution Detection Rule Management areaSecurity Solution Detection Rule Management area

release_note:skipSkip the PR/issue when compiling release notesSkip the PR/issue when compiling release notes

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

v8.18.0

v8.19.0

v9.0.0

v9.1.0

Status: Open (in progress).

elastic/kibananumber 209545

#209545 In elastic/kibana;

· banderror opened on Feb 4, 2025

[Security Solution] Add a banner to promote prebuilt rule customization in Serverless (DRAFT)

8.18 candidate

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

triage_needed

Status: Open.

#209000 In elastic/kibana;

· approksiu opened on Jan 30, 2025

[Security Solution] Rule can be saved without required fields in Severity or Risk Score override

bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experience

Feature:Detection RulesSecurity Solution rules and Detection EngineSecurity Solution rules and Detection Engine

impact:lowAddressing this issue will have a low level of impact on the quality/strength of our product.Addressing this issue will have a low level of impact on the quality/strength of our product.

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

triage_needed

Status: Open.

Bug

#206151 In elastic/kibana;

· pborgonovi opened on Jan 9, 2025

[Security Solution] Rule can be saved without a required ‘Source value’ in Severity override

bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experience

Feature:Detection RulesSecurity Solution rules and Detection EngineSecurity Solution rules and Detection Engine

impact:lowAddressing this issue will have a low level of impact on the quality/strength of our product.Addressing this issue will have a low level of impact on the quality/strength of our product.

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

triage_needed

Status: Open.

Bug

#206147 In elastic/kibana;

· pborgonovi opened on Jan 9, 2025

[Security Solution] Environment for testing prebuilt rule customization (documentation prep env)

backport:versionBackport to applied version labelsBackport to applied version labels

ci:cloud-deployCreate or update a Cloud deploymentCreate or update a Cloud deployment

ci:cloud-persist-deploymentPersist cloud deployment indefinitelyPersist cloud deployment indefinitely

ci:project-deploy-securityCreate a Security Serverless ProjectCreate a Security Serverless Project

ci:project-persist-deploymentPersist project deployment indefinitelyPersist project deployment indefinitely

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

release_note:skipSkip the PR/issue when compiling release notesSkip the PR/issue when compiling release notes

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

v9.0.0

Status: Open (in progress).

elastic/kibananumber 205909

#205909 In elastic/kibana;

· banderror opened on Jan 8, 2025

[Security Solution] Environment for testing prebuilt rule customization (exploratory testing env)

backport:versionBackport to applied version labelsBackport to applied version labels

ci:cloud-deployCreate or update a Cloud deploymentCreate or update a Cloud deployment

ci:cloud-persist-deploymentPersist cloud deployment indefinitelyPersist cloud deployment indefinitely

ci:project-deploy-securityCreate a Security Serverless ProjectCreate a Security Serverless Project

ci:project-persist-deploymentPersist project deployment indefinitelyPersist project deployment indefinitely

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

release_note:skipSkip the PR/issue when compiling release notesSkip the PR/issue when compiling release notes

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

v9.0.0

Status: Open (in progress).

elastic/kibananumber 205907

#205907 In elastic/kibana;

· banderror opened on Jan 8, 2025

[Security Solution] Environment for testing prebuilt rule customization (acceptance testing env)

backport:versionBackport to applied version labelsBackport to applied version labels

ci:cloud-deployCreate or update a Cloud deploymentCreate or update a Cloud deployment

ci:cloud-persist-deploymentPersist cloud deployment indefinitelyPersist cloud deployment indefinitely

ci:project-deploy-securityCreate a Security Serverless ProjectCreate a Security Serverless Project

ci:project-persist-deploymentPersist project deployment indefinitelyPersist project deployment indefinitely

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

release_note:skipSkip the PR/issue when compiling release notesSkip the PR/issue when compiling release notes

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

v9.0.0

Status: Open (in progress).

elastic/kibananumber 205906

#205906 In elastic/kibana;

· banderror opened on Jan 8, 2025

[Security Solution] Environment for testing prebuilt rule customization (Kseniia's demo env)

backport:versionBackport to applied version labelsBackport to applied version labels

ci:cloud-deployCreate or update a Cloud deploymentCreate or update a Cloud deployment

ci:cloud-persist-deploymentPersist cloud deployment indefinitelyPersist cloud deployment indefinitely

ci:project-deploy-securityCreate a Security Serverless ProjectCreate a Security Serverless Project

ci:project-persist-deploymentPersist project deployment indefinitelyPersist project deployment indefinitely

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

release_note:skipSkip the PR/issue when compiling release notesSkip the PR/issue when compiling release notes

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

v9.0.0

Status: Open (in progress).

elastic/kibananumber 205883

#205883 In elastic/kibana;

· banderror opened on Jan 8, 2025

[Security Solution] Add confirmation modals to Install all rules and Update all rules

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

triage_needed

Status: Open.

#204526 In elastic/kibana;

· approksiu opened on Dec 17, 2024

Failing test: Rules Management - Prebuilt Rules Management Integration Tests - ESS Env - Trial License.x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/management/trial_license_complete_tier/bootstrap_prebuilt_rules·ts - Rules Management - Prebuilt Rules - Prebuilt Rules Management @ess @serverless @skipInServerlessMKI Bootstrap Prebuilt Rules should install fleet packages required for detection engine to function

8.18 candidate

failed-testA test failure on a tracked branch, potentially flaky-testA test failure on a tracked branch, potentially flaky-test

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Status: Open.

#203632 In elastic/kibana;

· kibanamachine opened on Dec 10, 2024

Failing test: Rules Management - Prebuilt Rules Management Integration Tests - Serverless Env - Complete License.x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/management/trial_license_complete_tier/bootstrap_prebuilt_rules·ts - Rules Management - Prebuilt Rules - Prebuilt Rules Management @ess @serverless @skipInServerlessMKI Bootstrap Prebuilt Rules should skip installing fleet packages if they are already installed

8.18 candidate

failed-testA test failure on a tracked branch, potentially flaky-testA test failure on a tracked branch, potentially flaky-test

Feature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaSecurity Solution Prebuilt Detection Rules area

legit-flakeTest was triaged and marked as an actual flake.Test was triaged and marked as an actual flake.

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

Status: Open.

#202037 In elastic/kibana;

· kibanamachine opened on Nov 27, 2024

[Security Solution] Error During Rule Import When Associated Exception is Deleted

bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experience

impact:lowAddressing this issue will have a low level of impact on the quality/strength of our product.Addressing this issue will have a low level of impact on the quality/strength of our product.

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Team:Detection Rule ManagementSecurity Detection Rule Management TeamSecurity Detection Rule Management Team

Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response Team

triage_needed

Status: Open.

Bug

#201878 In elastic/kibana;

· pborgonovi opened on Nov 26, 2024