Open stephmilovic opened 8 months ago
Pinging @elastic/security-solution (Team: SecuritySolution)
Pinging @elastic/security-detections-response (Team:Detections and Resp)
Pinging @elastic/security-detection-engine (Team:Detection Engine)
@nkhristinin could you please follow up on this issue as you explore some performance issues with sourcerer?
Pinging @elastic/security-threat-hunting (Team:Threat Hunting)
Pinging @elastic/security-threat-hunting-investigations (Team:Threat Hunting:Investigations)
Describe the bug:
I've noticed there are 3 places we are calling an expensive function
getSourcererDataView
and I want to make sure they are all necessary. I do not understand why this would be called more than once with the same index pattern, and it happens on page load. A lot has changed with sourcerer since I worked on it, so I'm not sure I should be the one to look into this and I do not know who owns it anymore. But I think someone should investigate as if this is being misused, it can lead to huge performance issues.