Skip to content

[Security Solution] [Entity Analytics] [Bug] For Process events, Preview session view panel shows error as Unable to display data. #259526

@arvindersingh-qasource

Description

@arvindersingh-qasource

Describe the bug:
For Process events, Preview session view panel shows error as Unable to display data.

Build Details

VERSION: 9.4.0 - SERVERLESS
BUILD: 99462
COMMIT: 77c713fcf94cfb6b56687191849e7e1614ec55fe

Pre-conditions:

  1. Kibana 9.4.0-snapshot must be available.
  2. Entity Risk Score and Entity Store must be enabled.
  3. Sessions Data for different process from entities should be present.

Steps to reproduce:

  1. Navigate to Security -> Explore -> Hosts.
  2. Navigate to Sessions tab.
  3. Open Session View for process event via session window icon under Actions column.
  4. Click on three line icon to open Preview session view panel flyout.
  5. Observe that For Process events, Preview session view panel shows error as Unable to display data.

Expected behavior:
For Process events, Preview session view panel should be populate correct process details without any error.

What's Working

  • For rule details flyout, Preview session view panel is populating correct process details without any errors.

Observations

Image
Screen.Recording.2026-03-25.at.12.28.39.PM.mov

Metadata

Metadata

Assignees

Labels

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Entity AnalyticsSecurity Entity Analytics TeambugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.triage_neededv9.4.0

Type

No fields configured for Bug.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions