Skip to content

[9.4] [Security Solution][Endpoint] Fix: Disable isolate action when Endpoint version does not support host isolation (#290115) - #290551

Merged
paul-tavares merged 2 commits into
elastic:9.4from
paul-tavares:backport/9.4/pr-290115
Sep 15, 2026
Merged

paul-tavares merged 2 commits into
elastic:9.4from
paul-tavares:backport/9.4/pr-290115

Conversation

@paul-tavares

Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 9.4:

Questions ?

Please refer to the Backport tool documentation

…nt version does not support host isolation (elastic#290115)

## Summary

Disables the **Isolate host** response action when the target Endpoint's
metadata reports it does not support host isolation (i.e. the
`isolation` capability is absent from `metadata.Endpoint.capabilities`).
Previously the action was always enabled but a recent feature enables
users to disable host isolation via the policy, so we know need to check
the host's reported capabilities. Changes included:

- **Endpoint list** row actions and **Endpoint details** action menu
(`useEndpointActionItems`). The isolate item is disabled with the
"version not supported" tooltip when the host lacks the `isolation`
capability.
- **Alerts** isolate action (`useHostIsolationAction`). Now disables the
action with the same tooltip when the `isolation` capability is missing.

(cherry picked from commit 1ac93db)

# Conflicts:
#	x-pack/solutions/security/plugins/security_solution/public/common/components/endpoint/host_isolation/from_alerts/use_host_isolation_action.test.tsx
#	x-pack/solutions/security/plugins/security_solution/public/common/components/endpoint/host_isolation/from_alerts/use_host_isolation_action.tsx
@kibanamachine

Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 12.1MB 12.1MB +1.1KB

History

@paul-tavares
paul-tavares merged commit 34662a3 into elastic:9.4 Sep 15, 2026
33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants