Skip to content

[Security Solution] Make prebuilt rules bootstrap errors visible#239521

Merged
maximpn merged 2 commits intoelastic:mainfrom
maximpn:troubleshoot-oom-tests
Oct 21, 2025
Merged

[Security Solution] Make prebuilt rules bootstrap errors visible#239521
maximpn merged 2 commits intoelastic:mainfrom
maximpn:troubleshoot-oom-tests

Conversation

@maximpn
Copy link
Copy Markdown
Contributor

@maximpn maximpn commented Oct 17, 2025

Partially addresses: #188090

Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.

@maximpn maximpn self-assigned this Oct 17, 2025
@maximpn maximpn added Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Rule Management Security Detection Rule Management Team labels Oct 17, 2025
@maximpn maximpn force-pushed the troubleshoot-oom-tests branch from e8c91c4 to ca7f7df Compare October 21, 2025 07:04
@maximpn maximpn changed the title [Security Solution] Toubleshoot prebuilt rules package OOM tests [Security Solution] Make prebuilt rules bootstrap errors visible Oct 21, 2025
@maximpn maximpn requested a review from nikitaindik October 21, 2025 07:07
@maximpn maximpn added release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules area labels Oct 21, 2025
@maximpn maximpn marked this pull request as ready for review October 21, 2025 07:09
@maximpn maximpn requested a review from a team as a code owner October 21, 2025 07:09
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

Copy link
Copy Markdown
Contributor

@nikitaindik nikitaindik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea! Changes LGTM.

@maximpn maximpn force-pushed the troubleshoot-oom-tests branch from 6730ee3 to 3cff4a6 Compare October 21, 2025 09:23
@maximpn maximpn enabled auto-merge (squash) October 21, 2025 09:23
@maximpn maximpn merged commit 9b8ef82 into elastic:main Oct 21, 2025
12 checks passed
@elasticmachine
Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

✅ unchanged

History

cc @maximpn

@kibanamachine
Copy link
Copy Markdown
Contributor

Starting backport for target branches: 8.19, 9.1, 9.2

https://github.com/elastic/kibana/actions/runs/18713186117

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Oct 22, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.

(cherry picked from commit 9b8ef82)
@kibanamachine
Copy link
Copy Markdown
Contributor

💔 Some backports could not be created

Status Branch Result
8.19
9.1
9.2 Backport failed because of merge conflicts

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 239521

Questions ?

Please refer to the Backport tool documentation

1 similar comment
@kibanamachine
Copy link
Copy Markdown
Contributor

💔 Some backports could not be created

Status Branch Result
8.19
9.1
9.2 Backport failed because of merge conflicts

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 239521

Questions ?

Please refer to the Backport tool documentation

maximpn added a commit to maximpn/kibana that referenced this pull request Oct 22, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.

(cherry picked from commit 9b8ef82)

# Conflicts:
#	x-pack/solutions/security/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/oom_testing/install_prebuilt_rules/install_prebuilt_rules.ts
maximpn added a commit to maximpn/kibana that referenced this pull request Oct 22, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.

(cherry picked from commit 9b8ef82)
@maximpn
Copy link
Copy Markdown
Contributor Author

maximpn commented Oct 22, 2025

💚 All backports created successfully

Status Branch Result
9.2
9.1
8.19

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

maximpn added a commit to maximpn/kibana that referenced this pull request Oct 22, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.

(cherry picked from commit 9b8ef82)
kibanamachine added a commit that referenced this pull request Oct 22, 2025
…le (#239521) (#240044)

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Security Solution] Make prebuilt rules bootstrap errors visible
(#239521)](#239521)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Maxim
Palenov","email":"maxim.palenov@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T11:32:11Z","message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v9.2.0","v9.1.3","v9.3.0","v8.19.6"],"title":"[Security
Solution] Make prebuilt rules bootstrap errors
visible","number":239521,"url":"https://github.com/elastic/kibana/pull/239521","mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},"sourceBranch":"main","suggestedTargetBranches":["9.2","9.1","8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239521","number":239521,"mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Maxim Palenov <maxim.palenov@elastic.co>
@maximpn maximpn deleted the troubleshoot-oom-tests branch October 22, 2025 13:28
@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Oct 23, 2025
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @maximpn

maximpn added a commit that referenced this pull request Oct 23, 2025
#239521) (#240046)

# Backport

This will backport the following commits from `main` to `9.2`:
- [[Security Solution] Make prebuilt rules bootstrap errors visible
(#239521)](#239521)

<!--- Backport version: 10.0.0 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Maxim
Palenov","email":"maxim.palenov@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T11:32:11Z","message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v9.2.0","v9.1.3","v9.3.0","v8.19.6"],"title":"[Security
Solution] Make prebuilt rules bootstrap errors
visible","number":239521,"url":"https://github.com/elastic/kibana/pull/239521","mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},"sourceBranch":"main","suggestedTargetBranches":["9.2","9.1","8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239521","number":239521,"mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
nickpeihl pushed a commit to nickpeihl/kibana that referenced this pull request Oct 23, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @maximpn

NicholasPeretti pushed a commit to NicholasPeretti/kibana that referenced this pull request Oct 27, 2025
…stic#239521)

**Partially addresses:** elastic#188090

## Summary

Prebuilt Rules bootstrap API endpoint may fail on a fresh deployment in Elastic Cloud. This PR rearranges assertions to provide an ability to view the error message.
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @maximpn

2 similar comments
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @maximpn

@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @maximpn

kibanamachine added a commit that referenced this pull request Oct 30, 2025
#239521) (#240045)

# Backport

This will backport the following commits from `main` to `9.1`:
- [[Security Solution] Make prebuilt rules bootstrap errors visible
(#239521)](#239521)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Maxim
Palenov","email":"maxim.palenov@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T11:32:11Z","message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v9.2.0","v9.1.3","v9.3.0","v8.19.6"],"title":"[Security
Solution] Make prebuilt rules bootstrap errors
visible","number":239521,"url":"https://github.com/elastic/kibana/pull/239521","mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},"sourceBranch":"main","suggestedTargetBranches":["9.2","9.1","8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239521","number":239521,"mergeCommit":{"message":"[Security
Solution] Make prebuilt rules bootstrap errors visible
(#239521)\n\n**Partially addresses:**
https://github.com/elastic/kibana/issues/188090\n\n##
Summary\n\nPrebuilt Rules bootstrap API endpoint may fail on a fresh
deployment in Elastic Cloud. This PR rearranges assertions to provide an
ability to view the error
message.","sha":"9b8ef8299d59fd31e29c91797ad4237eeba78604"}},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Maxim Palenov <maxim.palenov@elastic.co>
@kibanamachine kibanamachine added v9.1.7 and removed backport missing Added to PRs automatically when the are determined to be missing a backport. labels Oct 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules area release_note:skip Skip the PR/issue when compiling release notes Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.19.7 v9.1.3 v9.1.7 v9.2.1 v9.3.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants