Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] Log/show warning if there are no correlation rules installed/entered #646

Open
lacak-sk opened this issue Apr 24, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@lacak-sk
Copy link

Is your feature request related to a problem? Please describe.

If there are no correlation rules then no alerts can be generated and then in fact system can not provide expected functionality. Despite the fact that logs are collected.

Describe the solution you'd like

At lease write about that fact warning in "Settings/Application Logs" or show similar warning in panel CORRELATION RULES. Now is there only message "It feels lonely here..." which is not very descriptive. It will be more helpful if there will be more descriptive warning like "There are no correlation rules and therefore no alarms can be generated."

Describe alternatives you've considered

Provide some warning in case when no correlation rules are there. As far as I understand default correlation rules should be automatically downloaded but if it fails for some reason (as it is my case) then there should be some warning. May be also when download fails write about that in log.

@lacak-sk lacak-sk added the enhancement New feature or request label Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: 🆕 New
Development

No branches or pull requests

1 participant