search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.62k stars 8.22k forks source link

[Stack Monitoring][Alerting] Stack monitoring should better handle scenarios when alerting rules cannot be created. #107426

Open ymao1 opened 3 years ago

ymao1 commented 3 years ago

The alerting framework currently does not allow alert creation if ES security is enabled but TLS between ES and Kibana is disabled (meaning API keys cannot be created). In this scenario, when a user tries to go to the Rules & Connector UI, they receive a warning message that prevents them from creating rules. However, if a user tries to create stack monitoring rules, they receive a 500 error toaster. It might be nice for stack monitoring to handle this case before user gets to the 500 errors.

Alerting offers an API (https://www.elastic.co/guide/en/kibana/master/get-alerting-framework-health-api.html) to check the health of the framework. If either is_sufficiently_secure or has_permanent_encryption_key is false, rules will not be able to be created.

elasticmachine commented 3 years ago

Pinging @elastic/stack-monitoring (Team:Monitoring)