The consumer field in our Rules API is a common source of confusion and SDHs. Our current documentation only lists possible values but does not explain their meaning or their purpose. (Some of the values might even be deprecated.)
The name of the application or feature that owns the rule. For example: alerts, apm, discover, infrastructure, logs, metrics, ml, monitoring, securitySolution, siem, stackAlerts, or uptime.
Objective
We should improve the consumer field documentation for the Rule API. This includes the create rule API and the rule API response.
Issue
The
consumer
field in our Rules API is a common source of confusion and SDHs. Our current documentation only lists possible values but does not explain their meaning or their purpose. (Some of the values might even be deprecated.)Objective
We should improve the consumer field documentation for the Rule API. This includes the create rule API and the rule API response.
Links