Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution] Rule search box results will not display rule names with all special characters #156314

Closed
cybersecdiva opened this issue May 1, 2023 · 5 comments
Labels
bug Fixes for quality problems that affect the customer experience duplicate Feature:Rule Management Security Solution Detection Rule Management area impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Comments

@cybersecdiva
Copy link

Describe the bug:

Search results for rule names containing all special characters will not display

Kibana/Elasticsearch Stack version:

VERSION: 8.8.0 BC1
BUILD: 62765
COMMIT: d0327fc75720e56ee76b640f07ffd1b154a348a8

Preconditions:

  • Custom rule (s) containing all special characters should be created in the Security App
  • Custom rule (s) containing special characters + alpha characters combination should be created in the Security App

Steps to reproduce:

  1. Navigate to Security —> Manage —> Rules
  2. In rule search box key in rule name containing all special characters and press enter (observe results)
  3. Clear search box to perform the second rule search
  4. In rule search box key in rule name containing special characters + alpha characters combination

Current behavior:

The search results for rule names containing all special characters will not display unless there are alpha characters contained in the rule name

Expected behavior:

Search results with rule names containing special characters and special characters + alpha combination displays

Screenshots (if relevant):

Rule search box results of rule name containing all special characters:
Screenshot 2023-05-01 at 5 19 42 PM

Rule search box results of rule name containing special characters + alpha characters:
Screenshot 2023-05-01 at 5 21 18 PM

Screen recordings:

Bug.-.Search.for.rules.containing.special.characters.as.names.mp4
@cybersecdiva cybersecdiva added bug Fixes for quality problems that affect the customer experience triage_needed impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Rule Management Security Detection Rule Management Team v8.8.0 labels May 1, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@cybersecdiva
Copy link
Author

cybersecdiva commented May 1, 2023

FYI: @MadameSheema @spong and @MindyRS

@banderror banderror added Feature:Rule Management Security Solution Detection Rule Management area and removed triage_needed v8.8.0 labels May 3, 2023
@banderror banderror removed their assignment May 3, 2023
@cybersecdiva
Copy link
Author

Describe the bug:

Search results for rule names containing all special characters will not display

Kibana/Elasticsearch Stack version:

VERSION: 8.9.0 BC5
BUILD: 64715
COMMIT: beb56356c5c037441f89264361302513ff5bd9f8

Preconditions:

  • Custom rule (s) containing all special characters should be created in the Security App
  • Custom rule (s) containing special characters + alpha characters combination should be created in the Security App

Steps to reproduce:

  1. Navigate to Security —> Manage —> Rules
  2. In rule search box key in rule name containing all special characters and press enter (observe results)
  3. Clear search box to perform the second rule search
  4. In rule search box key in rule name containing special characters + alpha characters combination

Current behavior:

The search results for rule names containing all special characters will not display unless there are alpha characters contained in the rule name

Expected behavior:

Search results with rule names containing special characters and special characters + alpha combination displays

Screenshots (if relevant):

Rule search box results of rule name containing all special characters:
Screenshot 2023-07-28 at 5 35 50 PM

Rule search box results of rule name containing special characters + alpha characters:

Screenshot 2023-07-28 at 5 48 36 PM

Screen recordings:

Special.characters.search.rules.mp4

Conclusion:

Behavior is still occurring in 8.9.0 BC5 current release

@MadameSheema and @spong FYI: Updated Observations.

@pborgonovi
Copy link
Contributor

This issue is duplicate of #97094

Closing this one since it's already being tracked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience duplicate Feature:Rule Management Security Solution Detection Rule Management area impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Projects
None yet
Development

No branches or pull requests

4 participants