[Security Solution] Error when exporting a rule that has an action referencing a deleted connector #178221
Labels
bug
Fixes for quality problems that affect the customer experience
Feature:Rule Actions
Security Solution Detection Rule Actions area
Feature:Rule Import/Export
Security Solution Detection Rule Import & Export workflow
impact:medium
Addressing this issue will have a medium level of impact on the quality/strength of our product.
needs product
Team:Detection Rule Management
Security Detection Rule Management Team
Team:Detections and Resp
Security Detection Response Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Epics: https://github.com/elastic/security-team/issues/1974 (internal), #179907
Related to: #198771, #198845, https://github.com/elastic/security-team/issues/8816 (internal)
Summary
Rule export gets blocked whenever there is a rule with configured action (for example send message to Slack) which references a removed connector (for example Slack connector). Rule export fails with an error
Error fetching objects to export
instead of exporting a rule and display a warning message.Steps to reproduce
Expected result:
Rule is exported without an action referencing deleted connector and a warning message is shown.
Actual result:
Rule export fails with an error
Needs product input on how to handle it. Should be consistent with #198771.
The text was updated successfully, but these errors were encountered: