Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding field to Alerts view and sorting breaks table display. #198364

Open
ajoliveira opened this issue Oct 30, 2024 · 1 comment
Open

Adding field to Alerts view and sorting breaks table display. #198364

ajoliveira opened this issue Oct 30, 2024 · 1 comment
Labels
8.16 candidate bug Fixes for quality problems that affect the customer experience Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) v8.15.3

Comments

@ajoliveira
Copy link

Kibana version: 8.15/8.16

Elasticsearch version: 8.15/8.16

Server OS version: Elastic Cloud

Browser version: Chrome - 130.0.6723.58 (Official Build) (x86_64)

Browser OS version: Mac OS Sonoma 14.7

Original install method (e.g. download page, yum, from source, etc.): Elastic Cloud

Describe the bug:
In our Alerts view (Security Solution or Stack Management), it is possible to choose and add other fields to the table/grid view. Unfortunately, if you choose to sort on this newly added field, there is no way to recover the table/grid without editing the 'Local Storage' settings in the browser.

Steps to reproduce:

  1. Use field selector to pick a field (ex: cloud.availability_zone)
  2. Click on field header in table/grid to sort on it
  3. One of 2 things can/may happen:
  • table/grid disappears and only see a 'No results match your search criteria' message
  • pop-up in Kibana notes that your chosen field is not in the mapping and cannot be used for sorting

In both cases, at this point the 'sorting' request has been added to one of these 2 Browser Local Storage settings depending on which Alerts view you are working with:

Stack Management -> Alerts and Insights -> Alerts
stack-alerts-page-table

Security Solution -> Alerts
detection-engine-alert-table-securitySolution-alerts-page-gridView

In the case where the table/grid is still visible:

  • removing the field does not remove it from the sorting option
  • reloading the page or navigating away and back removes the table/grid completely

The only way to recover from this is to delete the Local Storage setting(s) noted above and reloading the Alerts page.

Expected behavior:

  • A consistent friendly message that field cannot be used for sorting
  • Allowing the headers and field selectors to remain visible so that the field can be removed
  • Correctly removing the field from 'sort' option if it is removed from field list/columns

Screenshots (if relevant):
Image

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context:

@ajoliveira ajoliveira added 8.16 candidate bug Fixes for quality problems that affect the customer experience Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) v8.15.3 labels Oct 30, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/response-ops (Team:ResponseOps)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
8.16 candidate bug Fixes for quality problems that affect the customer experience Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) v8.15.3
Projects
None yet
Development

No branches or pull requests

2 participants