Open rylnd opened 11 months ago
Pinging @elastic/security-solution (Team: SecuritySolution)
Pinging @elastic/security-detection-engine (Team:Detection Engine)
@rylnd we'll catch up on this, but I think we may be looking to remove these endpoints for next major. As part of cleanup, I think it's important we fix this for 8.x.
Describe the bug: Our Detection Alerts Migration API is listed as a fully functional API on 8.x. However, when attempting to migrate a newer 8.x alerts index, the migration will not succeed.
Kibana/Elasticsearch Stack version: 8.x
Steps to reproduce:
Current behavior: If the instance does not contain an index template from 7.x alerts, the following error will be returned from the
create_migration
API:If the instance does contain a 7.x index template, then creation of the migration is allowed, but finalization will fail due to the reindex not completing successfully:
Expected behavior: The Create Migration API should reject an attempt to migrate newer indices, and the Migration Status API should not show newer indices as "outdated"