[Security Solution][Endpoint] Show "no activity log" callout consiste…

…ntly when no data on subsequent fetches (elastic#123039)

fixes elastic/issues/122922

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>

x-pack/plugins/security_solution/public/management/pages/endpoint_hosts/view/details/endpoint_activity_log.tsx

@@ -71,9 +71,16 @@ export const EndpointActivityLog = memo(
       [hasActiveDateRange, isPagingDisabled, activityLogLoading, activityLogSize]
     );
 
+    const doesNotHaveDataAlsoOnRefetch = useMemo(
+      () => !activityLastLogData?.data.length && !activityLogData.length,
+      [activityLastLogData, activityLogData]
+    );
+
     const showCallout = useMemo(
-      () => !isPagingDisabled && activityLogLoaded && !activityLogData.length,
-      [isPagingDisabled, activityLogLoaded, activityLogData]
+      () =>
+        (!isPagingDisabled && activityLogLoaded && !activityLogData.length) ||
+        doesNotHaveDataAlsoOnRefetch,
+      [isPagingDisabled, activityLogLoaded, activityLogData, doesNotHaveDataAlsoOnRefetch]
     );
 
     const loadMoreTrigger = useRef<HTMLInputElement | null>(null);
@@ -153,7 +160,7 @@ export const EndpointActivityLog = memo(
                     ref={loadMoreTrigger}
                   />
                 )}
-                {isPagingDisabled && !activityLogLoading && (
+                {isPagingDisabled && !activityLogLoading && !showCallout && (
                   <EuiText color="subdued" textAlign="center">
                     <p>{i18.ACTIVITY_LOG.LogEntry.endOfLog}</p>
                   </EuiText>

x-pack/plugins/security_solution/public/management/pages/endpoint_hosts/view/index.test.tsx

@@ -1028,6 +1028,57 @@ describe('when on the endpoint list page', () => {
         expect(activityLogCallout).not.toBeNull();
       });
 
+      it('should display a callout message if no log data also on refetch', async () => {
+        const userChangedUrlChecker = middlewareSpy.waitForAction('userChangedUrl');
+        reactTestingLibrary.act(() => {
+          history.push(
+            getEndpointDetailsPath({
+              page_index: '0',
+              page_size: '10',
+              name: 'endpointActivityLog',
+              selected_endpoint: '1',
+            })
+          );
+        });
+        const changedUrlAction = await userChangedUrlChecker;
+        expect(changedUrlAction.payload.search).toEqual(
+          '?page_index=0&page_size=10&selected_endpoint=1&show=activity_log'
+        );
+        await middlewareSpy.waitForAction('endpointDetailsActivityLogChanged');
+        reactTestingLibrary.act(() => {
+          dispatchEndpointDetailsActivityLogChanged('success', {
+            page: 1,
+            pageSize: 50,
+            startDate: 'now-1d',
+            endDate: 'now',
+            data: [],
+          });
+        });
+
+        const activityLogCallout = await renderResult.findByTestId('activityLogNoDataCallout');
+        expect(activityLogCallout).not.toBeNull();
+
+        // click refresh button
+        const refreshLogButton = await renderResult.findByTestId('superDatePickerApplyTimeButton');
+        userEvent.click(refreshLogButton);
+
+        await middlewareSpy.waitForAction('endpointDetailsActivityLogChanged');
+        reactTestingLibrary.act(() => {
+          dispatchEndpointDetailsActivityLogChanged('success', {
+            page: 1,
+            pageSize: 50,
+            startDate: 'now-1d',
+            endDate: 'now',
+            data: [],
+          });
+        });
+
+        const activityLogNoDataCallout = await renderResult.findByTestId(
+          'activityLogNoDataCallout'
+        );
+        expect(activityLogNoDataCallout).not.toBeNull();
+      });
+
       it('should not display scroll trigger when showing callout message', async () => {
         const userChangedUrlChecker = middlewareSpy.waitForAction('userChangedUrl');
         reactTestingLibrary.act(() => {