opensearch-project / security-analytics

Security Analytics enables users for detecting security threats on their security event log data. It will also allow them to modify/tailor the pre-packaged solution.
Apache License 2.0
72 stars 74 forks source link

[FEATURE] Don't create system indices until security analytics is used #847

Open engechas opened 9 months ago

engechas commented 9 months ago

Is your feature request related to a problem? Some of the system indices used by security analytics, such as .opensearch-sap-log-types-config, are created when the cluster starts. Others are created only when security analytics is used. All of these system indices should only be created when security analytics is used.

What solution would you like? Create all security analytics system indices only when they are first used/needed. Do not create them when the cluster starts.

praveensameneni commented 8 months ago

Adding to backlog