Skip to content

Profiles registered with Base Event are not applied when Base Event attributes are deselected #147

@pagbabian-splunk

Description

@pagbabian-splunk

Version 2.79.3

When a profile is selected, normally the attributes are displayed for a class or object that has registered for that profile.

When a class is in view, and the Base Events are de-selected, profiles do not appear when checked in the browser.

E.g. - Display the Authentication class, de-selected Base Events from the drop-down selector, then check the Cloud profile. The api and cloud attributes don't show up. If you select Base Events, the base events are displayed, and then when the Cloud profile is selected, api and cloud appear.

Cloud is registered at the Base Event level, and so that may be related.

For other profiles, e.g. Incident - when Detection Finding is in view, and Base Events are de-selected, the Incident profile attributes appear, but the Cloud attributes do not. When the Base Event is selected, the Cloud attributes do appear.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions