Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Alerting] event log should work with data streams #62677

Closed
pmuellr opened this issue Apr 6, 2020 · 2 comments · Fixed by #154664
Closed

[Alerting] event log should work with data streams #62677

pmuellr opened this issue Apr 6, 2020 · 2 comments · Fixed by #154664
Assignees
@pmuellr
Labels
estimate:needs-research Estimated as too large and requires research to break down into workable issues Feature:EventLog Project:Serverless MVP R&D Research and development ticket (not meant to produce code, but to make a decision) Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams)

Comments

@pmuellr
Copy link
Member

pmuellr commented Apr 6, 2020 •
edited by mikecote
Loading

Kibana version: 7.8.0

There is an upcoming feature for elasticsearch called data streams that are a good fit for the event log indices. Other features are planning to use them, and starting to make some architectural changes for that, like apm.

Not sure if this will also be of any use, but se should also take a look at Elastic Package Manager to see if there is anything that would be helpful to us there. At first glance, I'd say no, but we may want to look at the naming conventions anyway.
@pmuellr pmuellr added Feature:Alerting Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) v7.8.0 labels Apr 6, 2020
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-alerting-services (Team:Alerting Services)

@pmuellr pmuellr mentioned this issue Apr 6, 2020
Closed
21 tasks
@pmuellr pmuellr added v7.8.1 and removed v7.8.0 labels Jun 17, 2020
@mikecote mikecote removed the v7.8.1 label Jun 24, 2020
@gmmorris gmmorris added the loe:needs-research This issue requires some research before it can be worked on or estimated label Jul 14, 2021
@gmmorris gmmorris added R&D Research and development ticket (not meant to produce code, but to make a decision) estimate:needs-research Estimated as too large and requires research to break down into workable issues labels Aug 13, 2021
@gmmorris gmmorris removed the loe:needs-research This issue requires some research before it can be worked on or estimated label Sep 2, 2021
@kobelb kobelb added the needs-team Issues missing a team label label Jan 31, 2022
@botelastic botelastic bot removed the needs-team Issues missing a team label label Jan 31, 2022
@mikecote mikecote mentioned this issue Apr 4, 2023
Closed
@mikecote mikecote mentioned this issue Apr 27, 2023
Merged
2 tasks
@mikecote mikecote moved this from Todo to In Progress in AppEx: ResponseOps - Execution & Connectors Apr 27, 2023
@kobelb
Copy link
Contributor

kobelb commented May 18, 2023

As discussed in #154266, this will be required for the Serverless offering.

pmuellr added a commit to pmuellr/kibana that referenced this issue May 25, 2023
@pmuellr
[ResponseOps] change event log to use datastream instead of indices a…
b6a1b80 
…nd aliases

resolves elastic#62677
@mikecote mikecote moved this from In Progress to In Review in AppEx: ResponseOps - Execution & Connectors May 30, 2023
pmuellr added a commit that referenced this issue Jun 7, 2023
@pmuellr
[ResponseOps] change event log to use a datastream (#154664)
001e816 
resolves #62677

Changes event log from using indices, aliases, and ILM manually, to
using data streams.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pmuellr pmuellr

Labels
estimate:needs-research Estimated as too large and requires research to break down into workable issues Feature:EventLog Project:Serverless MVP R&D Research and development ticket (not meant to produce code, but to make a decision) Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams)
Projects
No open projects
AppEx: ResponseOps - Execution & Connectors
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[ResponseOps] change event log to use a datastream pmuellr/kibana
5 participants
@pmuellr @gmmorris @kobelb @mikecote @elasticmachine