Signal.rule.name empty?

Elastic Security SIEM
#1

Hello,

Just noticed signal.rule.name is empty for some rules? Elastic 7.9.2

image

The above screenshot is from the rule "VNC to the Internet" which I copied from the official " VNC (Virtual Network Computing) to the Internet" rule.

Elastic 7.9.2.

No idea what's causing this.

Grtz

Willem

#2

Hi @willemdh,

Was this rule created through the UI or via the API? This is a known bug that can occur when a rule is created through the API. https://github.com/elastic/kibana/issues/81319

Thanks,

Devin

#3

Hey @Devin_Hurley,

Thanks for your answer. I created all my rules with the gui.

Grtz

Willem

#4

Okay interesting. Can you export the "VNC to the Internet" rule and post it here?

Thanks,

Devin