Github user justinleet commented on the issue:

    https://github.com/apache/metron/pull/803
  
    I made a metaalert with four entries
    
    ```
    957f20a3-d67b-407a-a593-09bdcbca19df
    b18e0949-9ac5-48e2-945f-74f9609667db
    8fb8f6cf-861f-4337-8d34-1becc9cecad9
    0c6543c8-c5b3-4540-ba83-b338b1aa52f0
    ```
    
    When I delete an alert, e.g. `0c6543c8-c5b3-4540-ba83-b338b1aa52f0`, the 
wrong alert is removed (in this case `957f20a3-d67b-407a-a593-09bdcbca19df`).
    
    The wrong alert is passed
    ```
    {
      "metaAlertGuid": "f5cd050c-7a7d-4562-bfc1-1ca5796fa1e4",
      "alerts": [
        {
          "guid": "957f20a3-d67b-407a-a593-09bdcbca19df",
          "sensorType": "snort",
          "index": ""
        }
      ]
    }
    ```
    
    It appears to always submit a request to remove the first alert, not the 
alert I choose in the UI (although I haven't extensively validated that)


---

Reply via email to