[Security Solution] [Bug] Alert processing analytics visualisation is not added correctly to the Case.

[arvindersingh-qasource]

Describe the bug:
Alert processing analytics visualisation is not added correctly to the Case.

Build Details

VERSION: 9.3.0
BUILD: 94544
COMMIT: bf8c75b853e390db94045bdc41c8fc553ac848b9

Pre-conditions:*

1. Kibana 9.3.0 must be running.
2. Attack Discovery data should be present on kibana.

Steps to reproduce:

1. Navigate to Security -> Value Report.
2. Under Alert processing analytics section, add visualization to a Case.
3. Navigate to the respective Case.
4. Observe that Alert processing analytics visualisation is not added correctly to the Case.

Expected behavior:
Alert processing analytics visualisation should be added correctly to the Case.

Observations

Screen.Recording.2025-12-23.at.4.59.31.PM.mov

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[arvindersingh-qasource]

@muskangulati-qasource Please review this ticket.

Thanks.

[muskangulati-qasource]

Reviewed and Assigned to @denar50
CC : @asnehalb

[stephmilovic]

I think the bug here is that sometimes the donut renders incorrectly, and then that incorrectly rendered donut got added to the case. The add to case functionality appears to be working correctly. Notice in your recording before adding to case that the donut is fully green despite the ratio being mostly yellow (14:2).

When the donut renders properly, it is added to a case as expected:

Screen.Recording.2026-01-08.at.2.27.50.PM.mov

The donut rendering bug is a race condition. I will work on resolving that. However, I want to make clear that the add to case functionality is working as expected. I'm going to lower the severity to medium