[Security Solution] Preview button is disable when create a rule by a…

…dding only a filter without adding any query (#139179) (#139226) (#139275) (cherry picked from commit 0212338) Co-authored-by: Ievgen Sorokopud <[email protected]>
elastic · Aug 23, 2022 · 7ffc375 · 7ffc375
1 parent 247bcc6
commit 7ffc375
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/helpers.ts b/x-pack/plugins/security_solution/public/detections/components/rules/rule_preview/helpers.ts
@@ -5,6 +5,7 @@
  * 2.0.
  */
 
+import { isEmpty } from 'lodash';
 import { Position, ScaleType } from '@elastic/charts';
 import type { EuiSelectOption } from '@elastic/eui';
 import type { Type, Language, ThreatMapping } from '@kbn/securitysolution-io-ts-alerting-types';
@@ -207,7 +208,7 @@ export const getIsRulePreviewDisabled = ({
     return machineLearningJobId.length === 0;
   }
   if (ruleType === 'eql' || ruleType === 'query' || ruleType === 'threshold') {
-    return queryBar.query.query.length === 0;
+    return isEmpty(queryBar.query.query) && isEmpty(queryBar.filters);
   }
   if (ruleType === 'new_terms') {
     return newTermsFields.length === 0;