Fail the flow the when detectot type is missing in the log types index (

opensearch-project#845) (opensearch-project#909) Signed-off-by: Megha Goyal <[email protected]> (cherry picked from commit 8d19912) Co-authored-by: Megha Goyal <[email protected]>
jowg-amazon · Mar 13, 2024 · aa4706d · aa4706d
1 parent efade2c
commit aa4706d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java b/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java
@@ -235,6 +235,11 @@ public void onFailure(Exception e) {
  }
 
  public void insertOrphanFindings(String detectorType, Finding finding, float timestampFeature, Map<String, CustomLogType> logTypes) {
+ if (logTypes.get(detectorType) == null) {
+ log.error("LogTypes Index is missing the detector type {}", detectorType);
+ correlateFindingAction.onFailures(new OpenSearchStatusException("LogTypes Index is missing the detector type", RestStatus.INTERNAL_SERVER_ERROR));
+ }
+
  Map<String, Object> tags = logTypes.get(detectorType).getTags();
  String correlationId = tags.get("correlation_id").toString();