[Security Solution] The status after releasing shows 'Isolated' whereas it should show 'released'

[muskangulati-qasource]

Description:
The status after releasing shows 'Isolated' whereas it should show 'released'

Build Details:

VERSION: 7.14.0 BC1
BUILD: 42292
COMMIT: 071a74e02f82b79a4a10026b5c9e02d593112fd4
ARTIFACT: https://staging.elastic.co/7.14.0-8eba2f5f/summary-7.14.0.html

Browser Details:
All

Preconditions:

1. Kibana user should be logged in.
2. Endpoint should be deployed

Steps to Reproduce:

1. Navigate to the Endpoint Tab
2. Isolate the host
3. After some time, release the host
4. Observe that after the 'releasing' status, the status starts showing 'isolated'.

Impacted Test case:
N/A

Actual Result:
The status after releasing shows 'Isolated' whereas it should show 'released'

Expected Result:
The status after releasing should show 'released'

What's working:
N/A

What's not working:
N/A

Screen Recording:

IsolationStatus.mp4

Logs:
N/A

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-onboarding-and-lifecycle-mgt (Team:Onboarding and Lifecycle Mgt)

[muskangulati-qasource]

@manishgupta-qasource please review!

[manishgupta-qasource]

Reviewed & Assigned @kevinlog

[kevinlog]

@muskangulati-qasource does the Isolate status eventually clear?

This may be due to the lag time that the Endpoint list encounters due to our transform. This lag will speed up as we are increasing the intervals for the transform before we ship 7.14.

If the status does eventually clear, then we can look into what we can do to improve our pending logic.

fyi @paul-tavares @pzl @parkiino

What I believe is happening is that the Pending status clears because the Agent action returns the response. However, our transform hasn't returned the latest Endpoint metadata doc to reflect the Isolate status. When we release the faster transform before 7.14, this will be helped but it could still occur.

Any ideas about how we could make our pending logic a bit smarter?

[muskangulati-qasource]

Hi @kevinlog,

@muskangulati-qasource does the Isolate status eventually clear?

Yes, it clears out after some time.

Please let us know if anything is missing from our end.

Thanks!