[Security Solution][Detection Engine] Profile individual rule types and reduce Kibana CPU/memory usage

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.65k stars 8.23k forks source link

[Security Solution][Detection Engine] Profile individual rule types and reduce Kibana CPU/memory usage #192755

Open marshallmain opened 2 months ago

marshallmain commented 2 months ago

Parent issue: https://github.com/elastic/security-team/issues/10106

We need to profile logic specific to each rule type to assess current performance and look for ways to reduce CPU and memory usage. This will translate to reduced costs for us and our customers and increase the number of rules that can run concurrently on each Kibana node.

Rule types:

[ ] Query
[ ] Threshold
[ ] Indicator match
[ ] ML
[ ] New Terms
[ ] EQL
[ ] EQL sequence
[ ] ESQL

elasticmachine commented 2 months ago

Pinging @elastic/security-detection-engine (Team:Detection Engine)