elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.71k stars 8.12k forks source link

[Cloud Posture] convert score index to data stream #142463

Open CohenIdo opened 1 year ago

CohenIdo commented 1 year ago

Motivation As part of cloud posture plugin, we are using logs-cloud_security_posture.scores index as regular index (aka not a data stream) to write the current cluster score every 5 minutes. Due to the append-only nature of score indexes, I believe it is better to have the score index be a data stream. In addition, the current index is missing ILM policy, to smoothly support ILM is better to have data stream and not regular index.

** Before implementing, please read the following comment.

Definition of done

Out of scope

Related tasks/epics

Checklist

Please follow the following checklist in the beginning of your work, please comment with a suggested of high level solution. It should include:

Before closing this ticket

elasticmachine commented 1 year ago

Pinging @elastic/kibana-cloud-security-posture (Team:Cloud Security Posture)