[BUG] Attempt to disable an active rule under a threat detector causes an error

[tomyerex]

What is the bug?

Attempt to disable an active rule under a threat detector causes an error: "[alerting_exception] kotlin.collections.EmptyMap cannot be cast to kotlin.collections.MutableMap"

How can one reproduce the bug?

Under "Threat detectors", "Active rules", an attempt to "Edit" and disable "Suspicious DNS Z Flag Bit Set", and "Save changes" causes an error "Failed to update detector:" -> "[alerting_exception] kotlin.collections.EmptyMap cannot be cast to kotlin.collections.MutableMap"

What is the expected behavior?

The active rule should be updated as disabled.

What is your host/environment?

Red Hat Enterprise Linux release 8.10 (Ootpa)
Opensearch 3.0.0 (dc4efa821904cc2d7ea7ef61c0f577d3fc0d8be9)
Opensearch Dashboards 3.0.0

Do you have any screenshots?

Do you have any additional context?

Add any other context about the problem.

[sandeshkr419]

This should be moved to https://github.com/opensearch-project/security-analytics?

[andrross]

Catch All Triage - 1 2

@AWSHurneyt Can a maintainer take a quick look at this?

[AWSHurneyt]

Tagging @Murali-Arigala to assign engineer.