Graylog2 / Graylog2/graylog2-server

Check if Dashboard-Connected Stream Exists When Installing Content Packs

Open
#15,107 0 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Expected Behavior
Say you have a Dashboard in a Content Pack that has been scoped to use only certain Streams. When you install that Content Pack, Graylog will detect the existence of the Stream(s) and the installed Dashboard will use them.

## Current Behavior
When you install a Content Pack that includes a Stream-scoped Dashboard, the Content Pack will create a new Stream with a new ID regardless if one exists already. If one was already present on the system, now you have 2 identically-named Streams but with different ID's.

## Possible Solution
Perform some form of Stream name/ID matching when installing Content Packs that include Streams, and if there is a match, do not create a new Stream and configure any objects connected to that Stream in the Content Pack to use the pre-existing Stream.

## Context
See: https://github.com/Graylog2/graylog-project-illuminate/issues/1227 for context & motivation.

This particularly affects customers migrating to Illuminate and Graylog Security. When the new Security Dashboards are installed, they are configured to search across all Streams because of this potential for Stream name duplication because of this issue.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.