[Security Solution] Error on expanding alert via session under events tab

[muskangulati-qasource]

Describe the bug Error on expanding alert via session under events tab

Kibana/Elasticsearch Stack version

VERSION: 8.16.0 SERVERLESS
BUILD: 77679
COMMIT: 6b091fe3b410eaae9d4805c0a3c0ea6168bf66b0

Preconditions

• Endpoint alerts for linux with session should exist

Steps

• Navigate to the Explore > Hosts > Events tab under security
• Check the box for 'Show only external alerts'
• Click on the session viewer for any alert
• Expand alert and observe the flyout opens up with an error

Additional Details

• Issue is not occurring on the alerts tab

Expected Result

• The flyout should open to display details

Screen-Cast

https://github.com/user-attachments/assets/a5e09e91-1556-461a-bd2d-9b2fd30cd8e5

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[PhilippeOberti]

Thanks for opening this issue @muskangulati-qasource and for the detailed steps. I can reproduce this issue locally, I'm not sure what's happening yet but we'll take a look!

[elasticmachine]

Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[christineweng]

@muskangulati-qasource this is fixed but I think it didn't make it in BC1. Could you please validate with 8.16 BC2?

[MadameSheema]

@muskangulati-qasource can you please validate it when you have the chance? Thanks!

[muskangulati-qasource]

Hi @MadameSheema,

We have validated the issue on the latest build and found the issue is fixed.

Please find below the testing details: Build Details:

VERSION: 8.16.0
BUILD: 79556
COMMIT: f02d1303b5230c357ac7e4c49c8adadd5f66af38

Screen Recording

https://github.com/user-attachments/assets/63dd215c-4e07-4ef0-966c-b6859b9d241d

Hence, we are closing this issue and marking it as 'QA Validated'.

Thank you