Skip to content

Changing one alert’s status or selection in “False Positive” updates all alerts #1754

@mjabascal10

Description

@mjabascal10

Acknowledgements

Describe the bug

When modifying the status of a single alert (e.g., Open, In Review, Completed) inside Threat Management → Alerts → False Positive, the system updates the status of all alerts in the list instead of only the selected one.
Additionally, selecting one alert results in all alerts being selected simultaneously.

Regression Issue

  • Select this option if this issue appears to be a regression.

Expected Behavior

  • Changing the status of one alert should only update that specific alert.
  • Selecting one alert should only select that individual alert.
  • Alerts inside the False Positive view should behave independently.

Current Behavior

  • Updating the status of one alert updates the status of every alert in the False Positive list.
  • Selecting one alert causes all alerts to become selected.
  • Individual alert actions are not isolated.

Reproduction Steps

  1. Navigate to Threat Management → Alerts → False Positive.
  2. Select any alert.
  3. Change its status (Open, In Review, Completed).
  4. Observe that all alerts change status.
  5. Select a single alert.
  6. Observe that all alerts become selected.

Possible Solution

No response

Additional Information/Context

No response

UTMStack Version

11.2.2

Operating System and version

Ubuntu

Hypervisor and Version | Server Vendor and Model

Browser and version

Google Chrome

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

Status

🏗 In progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions