opensearch-project / opensearch-project/security-analytics
[FEATURE] Don't create system indices until security analytics is used
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 111
- Forks
- 111
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 13
Description
Is your feature request related to a problem?
Some of the system indices used by security analytics, such as .opensearch-sap-log-types-config, are created when the cluster starts. Others are created only when security analytics is used. All of these system indices should only be created when security analytics is used.
What solution would you like?
Create all security analytics system indices only when they are first used/needed. Do not create them when the cluster starts.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files or tests. Start by tracing security analytics system-index creation during cluster startup and the paths used when security analytics is first used; compare which indices are created in each path. Done means all security analytics system indices are deferred until first use and are still created when needed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100