Should Kibana alerting rules fail to run whenever FAAD resources failed to install?

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.66k stars 8.23k forks source link

Should Kibana alerting rules fail to run whenever FAAD resources failed to install? #159037

Open mikecote opened 1 year ago

mikecote commented 1 year ago

The question came up recently when this scenario happened and alerts were not being persisted (nor displayed) in Kibana. While some notification mechanisms still work (per alert), others that rely on alerts-as-data don't (alert summaries, conditional actions, etc.).

I've created this issue to see if we should partially or entirely fail a rule execution to surface the severity that we have whenever Kibana fails to create or upgrade the necessary underlying assets.

elasticmachine commented 1 year ago

Pinging @elastic/response-ops (Team:ResponseOps)

pmuellr commented 1 year ago

Do we not already set a warning result for the rule execution in this case? For some reason, I thought we did. If we do, is it not enough? If we don't, seems like we should ...