Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ML] Improve processing of job groups in data recognizer wizard #48515

Closed
peteharverson opened this issue Oct 17, 2019 · 1 comment · Fixed by #49310
Closed

[ML] Improve processing of job groups in data recognizer wizard #48515

peteharverson opened this issue Oct 17, 2019 · 1 comment · Fixed by #49310
Assignees
Labels
enhancement New value added to drive a business result Feature:Anomaly Detection ML anomaly detection :ml v7.6.0

Comments

@peteharverson
Copy link
Contributor

Currently when creating anomaly detection jobs from a module in the data recognizer wizard, each job ends up with all of the groups referenced across all the jobs in the module. The processing of the groups should be changed so that only the group(s) assigned in the job configuration file are added to the job, with an extra control added to the wizard to optionally override the groups defined in the module so that, for example, an extra group can be added to the jobs.

For example, in the siem_auditbeat module, the linux_anomalous_process_all_hosts_ecs job is put into groups

  "groups": [
    "siem",
    "auditbeat",
    "process"
  ],

in the job configuration file, but after creation of the job in the wizard, is also placed in the network group which is used by other jobs in the module:

image

image

@peteharverson peteharverson added enhancement New value added to drive a business result :ml Feature:Anomaly Detection ML anomaly detection v7.6.0 labels Oct 17, 2019
@elasticmachine
Copy link
Contributor

Pinging @elastic/ml-ui (:ml)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:Anomaly Detection ML anomaly detection :ml v7.6.0
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants