[Security Solution] Event count is not preserved if sorting is done on empty columns under the timeline

[muskangulati-qasource]

Describe the bug
Event count is not preserved if sorting is done on empty columns under the timeline

Build Details:

Platform: Staging
Version: 7.10.2-SNAPSHOT
Commit: 733d0aa29750868a043ec307f27a0506d9a3ed62
Build number: 36123
Artifact: https://artifacts-api.elastic.co/v1/search/7.10.2-SNAPSHOT

Browser Details
All

Preconditions

1. Cloud environment on staging should exist.
2. Endpoint should be deployed and events should be generated.

Steps to Reproduce

1. Navigate to Kibana URL on Browser.
2. Click on the "Timeline" tab under Security from the left navigation bar.
3. Create a new timeline and observe the count of events.
4. Observe that if sorting is done for any empty column, the count of events is decreased and not preserved.

Test data
N/A

Impacted Test case(s)
N/A

Actual Result
Event count is not preserved if sorting is done on empty columns under the timeline

Expected Result
Event count should be preserved if sorting is done on any column under the timeline

What's Working
N/A

What's not Working
N/A

Screenshots

• Timeline data for default sorting:
  

-Timeline data after sorting with empty fields.

Logs
N/A

[muskangulati-qasource]

@manishgupta-qasource please review!

[manishgupta-qasource]

Reviewed & Assigned to @MadameSheema

[MadameSheema]

@XavierM can you please help to prioritise this? thanks :)

[muskangulati-qasource]

Hi @MadameSheema,

We have validated this ticket on both 7.10.2-BC1 & 7.11.0-BC2 builds and found that issue is now fixed:

Build details:

• Kibana version: 7.11.0-BC2

Build: 37605
Commit: a5126f7a280a6f4a27dc3aca65c1c89ccd1ac694

• Kibana version: 7.10.2-BC

BUILD 36136
COMMIT a0b793698735eb1d0ab1038f8e5d7a951524e929

Refer screenshots:

• Kibana version: 7.11.0-BC2

• Total count:
  

• After filtering:
  

• Kibana version: 7.10.2-BC

• Total count:
  

• After filtering:
  

Hence, we are closing this ticket!!

Thanks!