kibana icon indicating copy to clipboard operation
kibana copied to clipboard

[ResponseOps] warnings/errors when deleting/disabling rules with no active alerts

Open pmuellr opened this issue 1 year ago • 2 comments

When you attempt to delete a rule that has not generated alerts, you'll get the following messages logged in Kibana:

ERROR - Error marking ruleIds <id> as untracked - No active alerts matched the query
WARN  - rulesClient.disable('<id>') - Could not write untrack events - No active alerts matched the query

This isn't really an error, nor something we need to warn about. AFAIK. It's just that the rule had no alerts.

I think we can change these to DEBUG instead ...

pmuellr avatar May 06 '24 20:05 pmuellr

Pinging @elastic/response-ops (Team:ResponseOps)

elasticmachine avatar May 06 '24 20:05 elasticmachine

cc @cnasikas

mikecote avatar May 09 '24 15:05 mikecote