Skip to content

[Security Solution] Prebuilt rules installation page shows "too_many_clauses" error #223399

New issue
New issue
Closed
Bug
#223240
Closed
[Security Solution] Prebuilt rules installation page shows "too_many_clauses" error#223399
Bug
#223240
Assignees
nikitaindik
Labels
9.1 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.v8.18.3v8.19.0v9.0.3v9.1.0
@nikitaindik

Description

@nikitaindik
nikitaindik
opened on Jun 11, 2025

Related to: #220875
PR: #223240

Summary

Start local dev environment on latest main go to "Add Elastic rules" page. A "too many clauses" error is shown and rules table is not getting populated.

Issue does not reproduce in a production Serverless project.

Image

Metadata

Metadata

Assignees

Labels

9.1 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experienceimpact:mediumAddressing this issue will have a medium level of impact on the quality/strength of our product.v8.18.3v8.19.0v9.0.3v9.1.0

Type

Bug

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions