You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What is the bug?
When creating detectors in security analytics on datastream indices, it detector creation fails with error: Can't upsert index template for concrete index. Also the datastream indices are not showing up in dropdown for Select indexes/aliases.
How can one reproduce the bug?
Steps to reproduce the behavior:
Go to security analytics -> create a detector.
enter the custom datastream index pattern (as datastreams are not showing up)
fill other details, click on next
Add alert trigger details and click on create detector.
What is the expected behavior?
The detector should be created successfully
What is your host/environment?
OS: linux
Version: 2.16.0
Plugins: security analytics
Additional Context
Detector is created successfully when using a specific data stream index instead of using the datastream name (pattern) to create detector
The text was updated successfully, but these errors were encountered:
When attempting to create a detector referencing a datastream name the following error is returned: [illegal_argument_exception] composable template [datastream] with index patterns [datastream_ds*], priority [150] would cause data streams [datastream_ds] to no longer match a data stream template
When attempting to create a detector referencing a datastream's backing index the detector is created but then the following error is presented:
What is the bug?
When creating detectors in security analytics on datastream indices, it detector creation fails with error: Can't upsert index template for concrete index. Also the datastream indices are not showing up in dropdown for
Select indexes/aliases
.How can one reproduce the bug?
Steps to reproduce the behavior:
What is the expected behavior?
The detector should be created successfully
What is your host/environment?
Additional Context
Detector is created successfully when using a specific data stream index instead of using the datastream name (pattern) to create detector
The text was updated successfully, but these errors were encountered: