Loading a package from Elasticsearch instead of the registry seems to lead to an incorrect cache, and create invalid ingest pipelines.
It seems when triggering a package install, after loading an invalid package in cache this lead to creating invalid ingest pipeline with the -default suffix
For example with the cisco_umbrella package
How to reproduce
On a fresh Kibana instance:
Install cisco_umbrella package
POST kbn:/api/fleet/epm/packages/cisco_umbrella/1.6.0
{
"force": true
}
# Should return only one pipeline without the `default` suffix
GET _ingest/pipeline/logs-cisco_umbrella.log-1.6.0*
Create a package policy using it
Restart Kibana
Update the package policy previously created (this will load the package in cache from ES instead of the registry)
Renstall cisco_umbrella package
POST kbn:/api/fleet/epm/packages/cisco_umbrella/1.6.0
{
"force": true
}
# Should return 2 pipeline and one with the `default` suffix
GET _ingest/pipeline/logs-cisco_umbrella.log-1.6.0*
Description
Loading a package from Elasticsearch instead of the registry seems to lead to an incorrect cache, and create invalid ingest pipelines.
It seems when triggering a package install, after loading an invalid package in cache this lead to creating invalid ingest pipeline with the
-default
suffixFor example with the
cisco_umbrella
packageHow to reproduce
On a fresh Kibana instance:
cisco_umbrella
packagecisco_umbrella
package