"Unable to completely restore the URL" when viewing results from osquery in discover

Elastic Stack Kibana
1

Hey,

When investigating the results from osquery, I want to use the "View in Discover" button:

image
image2454×186 30 KB

It leads me to discover, but applies no filters and shows an error popup with the message "Unable to completely restore the URL". The URL is, for example, "/app/discover#/?_g=h@56697bc&_a=h@411c081", because I've enabled "state:storeInSessionStorage=true" in Advanced Settings. This may be the culprit here. If i reset this to false (which is the default), everything works!

The "View in Lens" Buttons work perfectly. I can even eventually get to the results in discover by first going to lens, and then choosing "Explore Data in Discover" from lens.

Is "state:storeInSessionStorage=true" expected to break things, or could this be a bug in the osquery UIs?

Thanks!

Edit: Shame on me for forgetting this - this is on 8.6.2.

2

Hi @nemhods ,

Afaik "state:storeInSessionStorage" was introduced as a workaround for url length limits issue in some legacy browsers, so I don't think it should break things.

What browser are you using?

Sound like an issue so far, but I will check internally and reply here.

Regards, Dima

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.