opensearch-project / opensearch-project/alerting
[FEATURE] Custom Findings/Alerting index management
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 82
- Forks
- 133
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 9
Description
Is your feature request related to a problem?
Currently, index management job in Alerting is processing only Alerting's default findings and alerting indices. We have identical index management job in Security Analytics plugin, which is handling custom findings/alerting indices passed through DataSources monitor field.
What solution would you like?
Extend Alerting index management job to handle custom findings/alerting indices too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Compare Alerting’s index management job with the identical job in the Security Analytics plugin. Trace how custom findings and alerting indices are passed through the DataSources monitor field. Done means the Alerting job handles those custom indices as well as its defaults.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kotlin
- Domain
- backend, databases
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100