[8.17] [Security Solution] Fixes exceptions list and actions being overwritten when using legacy prebuilt rule upgrade (#218519)

[dplumlee]

Backport

This will backport the following commits from main to 8.17:

• [Security Solution] Fixes exceptions list and actions being overwritten when using legacy prebuilt rule upgrade (#218519)

Questions ?

Please refer to the Backport tool documentation

[elasticmachine]

⏳ Build in-progress, with failures

• Buildkite Build
• Commit: 768371a

Failed CI Steps

• Detection Engine - Exceptions - Security Solution Cypress Tests #2

Test Failures

• [job] [logs] Detection Engine - Exceptions - Security Solution Cypress Tests #1 / Add exception using data views from rule details "before each" hook for "Creates an exception item and close all matching alerts" "before each" hook for "Creates an exception item and close all matching alerts"
• [job] [logs] Detection Engine - Exceptions - Security Solution Cypress Tests #2 / Add/edit exception from rule details rule without existing exceptions Cannot create an item to add to rule but not shared list as rule has no lists attached Cannot create an item to add to rule but not shared list as rule has no lists attached
• [job] [logs] Detection Engine - Exceptions - Security Solution Cypress Tests #1 / Close matching Alerts "before each" hook for "Should create a Rule exception item from alert actions overflow menu and close all matching alerts" "before each" hook for "Should create a Rule exception item from alert actions overflow menu and close all matching alerts"

History

• 💔 Build #301020 failed 1c75ec4