[Security Solution] Closing all alerts on the last page of alerts table shows an empty list

[damianpfister]

Describe the bug: Closing all alerts on the second page of alerts shows an empty list

Kibana/Elasticsearch Stack version: 8.10.2

Server OS version: ESS

Browser and Browser OS versions: Chrome Latest

Elastic Endpoint version: N/A

Original install method (e.g. download page, yum, from source, etc.): N/A

Functional Area (e.g. Endpoint management, timelines, resolver, etc.): Alert Management

Steps to reproduce:
When this customer closes a full list of alerts in the Security UI, that page remains empty until clicking back to the previous page, yet the page number drops suggesting no alerts exist at all.
The customer provided a video recording of this to show what they mean, along with a HAR file.
The workaround is a page refresh or clicking on "page 1" again.

Current behavior: When this customer closes a full list of alerts in the Security UI, that page remains empty until clicking back to the previous page, yet the page number drops suggesting no alerts exist at all.

Expected behavior: The page should not be empty

Screenshots (if relevant):
See https://github.com/elastic/sdh-security-team/issues/738

Errors in browser console (if relevant): N/A

Provide logs and/or server output (if relevant): N/A

Any additional context (logs, chat logs, magical formulas, etc.): N/A

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[damianpfister]

Any thoughts on what might be happening here @michaelolo24 @PhilippeOberti ?

[PhilippeOberti]

Haven't looked at why this is happening yet, but I can easily reproduce the issue locally.

Screen.Recording.2023-11-27.at.3.32.11.PM.mov

This seems like a pretty low priority to me as there are many workarounds:

• clicking on any other page in the pagination at the bottom of the table
• refresh the page

But we should look into it at some point!

[111andre111]

Probably related?
#171059

[elasticmachine]

Pinging @elastic/response-ops (Team:ResponseOps)

[michaelolo24]

Guessing the table fails to reset the current page to the new last page after closing the alerts. Guessing some state setting may neeed to be updated on close, like if pageX has no more data, go to pageX - 1 on alert status change...