Yara Tercero comments

Results 8 comments of


                                            Yara Tercero

[Security Solution]Definition text of Rule Exception is missing from add Rule Exception

This was removed in the new designs. @yiyangliu9286 - should this text be added back in?

[Security Solution]Definition text of Rule Exception is missing from add Rule Exception

After chatting with the team, I think we're going to add back in because it isn't totally intuitive in that endpoint exceptions are also run in detections.

Failing test: Security Solution Cypress.x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/detection_alerts/assignments/assignments·cy·ts - Alert user assignment - ESS & Serverless Basic rendering alert with many assignees (collapsed into badge) in alert's details flyout alert with many assignees (collapsed into badge) in alert's details flyout

Addressed in https://github.com/elastic/kibana/pull/173284

Failing test: Security Solution Cypress.x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/detection_alerts/assignments/assignments·cy·ts - Alert user assignment - ESS & Serverless Updating assignees (single alert) adding new assignees via `More actions` in alerts table adding new assignees via `More actions` in alerts table

@e40pud can we close this out? I think it was removed during refactor?

Failing test: Detection Engine - Exception Workflows Integration Tests - Serverless Env - Essentials Tier.x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/exceptions/workflows/basic_license_essentials_tier/rule_exceptions_execution·ts - Detection Engine - Exception workflows APIs @serverless @serverlessQA @ess rule exceptions execution creating rules with exceptions should be able to execute against an exception list that does include valid case sensitive entries and get back 0 alerts

We continue to not be able to reproduce locally. This seems to flake intermittently. If it's too noisy I'll move to skip. Thanks @rylnd for again confirming it's not a...

[DE][Custom Highlighted Fields] - follow up work required

Closing - out of date.

[Detection Engine] Update test file names

@elasticmachine merge upstream

[Security Solution] Allow users to edit concurrent_searches and items_per_search field for custom IM rules

@dplumlee @jpdjere could we put together a design doc (could just be a google doc or github issue) for opening up these fields? The "design" part being more a layout...