Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[RAC][Rule Registry] Rename "rule registry" to "alerts as data" #111500

Closed
Tracked by #101016
banderror opened this issue Sep 8, 2021 · 4 comments
Closed
Tracked by #101016

[RAC][Rule Registry] Rename "rule registry" to "alerts as data" #111500

banderror opened this issue Sep 8, 2021 · 4 comments
Labels
discuss Team:Detection Alerts Security Detection Alerts Area Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Theme: rac label obsolete

Comments

@banderror
Copy link
Contributor

Parent ticket: #101016

Summary

As a plugin, rule_registry does not register rule types in Alerting Framework anymore, so the name is a little bit misleading.

There were conversations around renaming the plugin and some of its internal pieces, for example:

  • Plugin: alerts_as_data (to eventually be pulled into the alerting plugin, so not a long term thing)
  • RuleDataPluginService -> AlertsAsDataService
  • RuleDataClient -> SystemScopedAlertsClient
  • AlertsClient (with RBAC) -> UserScopedAlertsClient

This is an open discussion.
@banderror banderror added discuss Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Theme: rac label obsolete labels Sep 8, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@banderror banderror mentioned this issue Sep 8, 2021
Open
41 tasks
@banderror banderror added the Team:Detection Alerts Security Detection Alerts Area Team label Oct 11, 2021
@banderror
Copy link
Contributor Author

Hey everyone, FYI ownership of this ticket and other tickets related to rule_registry (like #101016) now goes to the Detection Alerts area (Team:Detection Alerts label). Please ping @peluja1012 and @marshallmain if you have any questions.

@marshallmain
Copy link
Contributor

Rule registry is now owned by @elastic/response-ops

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
discuss Team:Detection Alerts Security Detection Alerts Area Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Theme: rac label obsolete
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@banderror @elasticmachine @marshallmain