# Kibana - Unable to sync case with alert

**URL:** https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219
**Category:** Kibana
**Tags:** elastic-stack-security, elastic-stack-alerting
**Created:** [December 13, 2023, 6:30am UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219 "2023-12-13T06:30:17Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![BigM1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigm1/32/87098_2.png) [@BigM1](https://discuss.elastic.co/u/BigM1)
#### Post date: [December 13, 2023, 6:30am UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/1 "2023-12-13T06:30:17Z")

</div>

Hello,

in Kibana, using the SIEM security alert. When i try to create a case and choses option to sync case with alert it throws error below:

"Detected an unhandled Promise rejection.

```
    Message: illegal_argument_exception
Root causes:
	illegal_argument_exception: unexpected metadata [op:updated_rules] in source

    Stack: Error: Internal Server Error"

```

Any ideals ?

---

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [December 13, 2023, 3:45pm UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/2 "2023-12-13T15:45:30Z")

</div>

Hi @BigM1,

Welcome back! Which version of Elastic are you using?

---

<div class="post-metadata">

### Author: ![BigM1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigm1/32/87098_2.png) [@BigM1](https://discuss.elastic.co/u/BigM1)
#### Post date: [December 13, 2023, 4:04pm UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/3 "2023-12-13T16:04:33Z")

</div>

Thanks @carly.richmond !

I'm using version "8.11.1"

---

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [December 13, 2023, 5:35pm UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/4 "2023-12-13T17:35:30Z")

</div>

Thanks for confirming. Have you recently upgraded at all?

I would recommend upgrading to 8.11.3 to see if that solves the issue. Otherwise it could be a good idea to raise an issue on the [GitHub repo](https://github.com/elastic/kibana) if the issue persists.

Hope that helps!

---

<div class="post-metadata">

### Author: ![BigM1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigm1/32/87098_2.png) [@BigM1](https://discuss.elastic.co/u/BigM1)
#### Post date: [December 13, 2023, 5:41pm UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/5 "2023-12-13T17:41:28Z")

</div>

Thanks @carly.richmond ! will try that

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 10, 2024, 5:41pm UTC](https://discuss.elastic.co/t/kibana-unable-to-sync-case-with-alert/349219/6 "2024-01-10T17:41:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.