Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution] No resolver for alerts under the timeline tab. #91629

Closed
muskangulati-qasource opened this issue Feb 17, 2021 · 7 comments
Closed
Assignees
Labels
bug Fixes for quality problems that affect the customer experience impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting Security Solution Threat Hunting Team

Comments

@muskangulati-qasource
Copy link

Description
No resolver for alerts under the timeline tab.

Build Details:

Version: 7.12.0 SNAPSHOT
Build: 38790
Commit: 1fc8122c6d14bc9c988c3f068e2878e07665410f
Artifacts: https://artifacts-api.elastic.co/v1/search/7.12.0-SNAPSHOT/

Browser Details:
All

Preconditions:

  1. Cloud environment should exist.
  2. Elastic Endpoint should be installed.
  3. Alert should be generated.

Steps to Reproduce:

  1. Navigate to the Detection tab of security.
  2. Click on 'Investigate with timeline'
  3. Click on the analyzer
  4. Observe that no nodes show up for the alerts.

Impacted Test case:
N/A

Actual Result:
No resolver for alerts under the timeline tab.

Expected Result:
Resolver for alerts should show up under the timeline tab.

What's working:
N/A

What's not working:
N/A

Screenshot:
Timeline

NoDataFound

@muskangulati-qasource muskangulati-qasource added bug Fixes for quality problems that affect the customer experience Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. labels Feb 17, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@muskangulati-qasource
Copy link
Author

@manishgupta-qasource please review!

@manishgupta-qasource
Copy link

Reviewed & Assigned to @MadameSheema

@manishgupta-qasource manishgupta-qasource added the impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. label Feb 17, 2021
@michaelolo24 michaelolo24 self-assigned this Feb 17, 2021
@michaelolo24
Copy link
Contributor

Thanks for catching this. We have another issue for this here #90288 and an interim notification for users is coming in here #91561 until we put a long term solution in place.

@michaelolo24
Copy link
Contributor

This issue here: #92163 is the temporary fix we've put in place for this issue

@muskangulati-qasource
Copy link
Author

Hi @michaelolo24,

Thank you for the information.

We can close this if it is expected for now.

Thanks!

@MadameSheema MadameSheema added the Team:Threat Hunting Security Solution Threat Hunting Team label Feb 23, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting Security Solution Threat Hunting Team
Projects
None yet
Development

No branches or pull requests

5 participants