-
Notifications
You must be signed in to change notification settings - Fork 8.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove Detection Rule telemetry from Security Solution (8.0+) #119047
Conversation
Pinging @elastic/security-solution (Team: SecuritySolution) |
@elasticmachine merge upstream |
@pjhampton can you expound on this a bit? Is there an expected vs. actual level of interaction? |
Thanks, @rylnd. I have replied to you offline. |
@elasticmachine merge upstream |
💚 Build Succeeded
Metrics [docs]
History
To update your PR or re-run it, just comment with: cc @pjhampton |
@pjhampton we are tracking the broken telemetry as part of https://github.com/elastic/security-team/issues/1018#issuecomment-937323352 and will have it fixed as part of 8.0. As discussed offline, we expect that the downstream ingest process will be update to make this data more usable moving forward. |
@rylnd Sounds good. We have this planned on our end for 8.1 FF. |
Summary
I have opened this pull request for discussion.
From some internal wrangling, It seems based on RAC changes that Detection Rule telemetry is bust 8.0+.
After chatting with @stevewritescode we are making the case for removing it completely for these releases - this is because we have found there was been little to no interaction with the data from 7.13 (April 2020).
Related PRs:
There is a cross-team discussion as to the data we want to collect from 8.2 and index it in a way that is useful for technical and non-technical stakeholders.
For maintainers