[Security Solution] The 'is not one of' & 'is not' filters give 400 error

[muskangulati-qasource]

Describe the feature
The 'is not one of' & 'is not' filters give 400 error

Build Details:

VERSION: 7.14.0-SNAPSHOT
BUILD: 41559
COMMIT: 9838db392e7fcfc12f004b68fb1b09739f131148
ARTIFACT: https://artifacts-api.elastic.co/v1/search/7.14.0-SNAPSHOT

Preconditions

1. Elastic 7.14.0 environment should be deployed.

Steps to Reproduce

1. Navigate to Administration Tab under the Security
2. Go to Event Filtering Tab
3. Add the following values:
   'event.category' 'is not' or 'is not one of'
4. Save the entry
5. Observe an error is thrown for the exclude events

Test data
N/A

Impacted Test case(s)
N/A

Actual Result
The 'is not one of' & 'is not' filters give 400 error

Expected Result
The 'is not one of' & 'is not' filters should be successfully added.

What's Working
N/A

What's Not Working
The same issue occurs if we close the flyout and open it again.
All the entries are removed but the issue pop up still occurs

Screenshot

BugForEventFiltering.mp4

Logs:
N/A

[elasticmachine]

Pinging @elastic/security-onboarding-and-lifecycle-mgt (Team:Onboarding and Lifecycle Mgt)

[dasansol92]

Hi @muskangulati-qasource,
This issue is related to this one and has been fixed with this pr
Let me know if you have more questions on this,

Thanks

[muskangulati-qasource]

Hi @dasansol92,

Thank you for the update. Should we close this issue then?

Thanks!

[dasansol92]

I think you can close this or link this with the other one and close both together when those changes are available in 7.14 snapshot.
cc: @kevinlog

[muskangulati-qasource]

Sure @dasansol92,

For now, we are keeping this issue open, and once the changes are merged, we will test both scenarios to be sure :)

Thanks!

[manishgupta-qasource]

Reviewed & Assigned to @kevinlog

[muskangulati-qasource]

Hi @kevinlog,

We tested this scenario on the latest 7.14.0-SNAPSHOT build and found that this issue is fixed.

Please find below the whole testing details:

Build Details:

VERSION: 7.14.0-SNAPSHOT
BUILD: 41846
COMMIT: 3cfbe712030c898819006195e6c9ddae6cbd0a3a
ARTIFACT: https://artifacts-api.elastic.co/v1/search/7.14.0-SNAPSHOT

Screenshot

• Is Not:
  

• Is Not one of:
  

Hence, closing this issue & marking it as "Validated".

Thanks!!

[ghost]

Bug Conversion

• Test-Case updated:
  • https://elastic.testrail.io/index.php?/cases/view/147437

Thanks!