Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security Solution] Reloading same file with different type #81301

Open
MadameSheema opened this issue Oct 21, 2020 · 1 comment
Open

[Security Solution] Reloading same file with different type #81301

MadameSheema opened this issue Oct 21, 2020 · 1 comment
Assignees
@yiyangliu9286
Labels
Feature:Rule Value Lists Security Solution Detection Rule Value Lists impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. needs design Team:Detection Engine Security Solution Detection Engine Area Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Comments

@MadameSheema
Copy link
Member

Info:

  • Found during testing 7.9 branch
  • Commit 023bc67

Preconditon:

  • To have uploaded an exception list with type IP addresses

Steps to reproduce:

  1. Go to Security > Detections
  2. Click on "Manage detection rules"
  3. Upload the same list but now with type Keywords

Current behaviour:

  • The file is uploaded
  • The toaster with the information about the proper uploading is displayed
  • The exception list is not available for fields with type Keyboard

Expected behaviour:

  • TBD
@MadameSheema MadameSheema added bug Fixes for quality problems that affect the customer experience Team:Detections and Resp Security Detection Response Team labels Oct 21, 2020
@MindyRS MindyRS added the Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. label Oct 27, 2020
@peluja1012 peluja1012 added the impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. label Oct 28, 2020
@peluja1012 peluja1012 added the Feature:Rule Value Lists Security Solution Detection Rule Value Lists label Nov 17, 2020
@peluja1012 peluja1012 added the Team:Security Solution Platform Security Solution Platform Team label Mar 18, 2022
@yctercero yctercero added needs design and removed bug Fixes for quality problems that affect the customer experience labels May 10, 2022
@yctercero
Copy link
Contributor

@peluja1012

To me this doesn't feel like so much of a bug, but another ticket indicating that large value lists need to be revisited and the UX updated. The described outcome of the reproducible steps are as expected, though maybe we don't have the best user experience around it to make this make sense to the user. OR if we decide this isn't the functionality we want, then a new feature request could be put in. But it seems to me based on a number of tickets that the overall large value list experience is due for an update.

@yctercero yctercero added Team:Detection Engine Security Solution Detection Engine Area and removed Team:Security Solution Platform Security Solution Platform Team labels May 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@yiyangliu9286 yiyangliu9286

Labels
Feature:Rule Value Lists Security Solution Detection Rule Value Lists impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. needs design Team:Detection Engine Security Solution Detection Engine Area Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@peluja1012 @MindyRS @yctercero @MadameSheema @yiyangliu9286