add log info level for logging in cloud

dhurley14 · dhurley14 · commit 65364a5b1300 · 2021-02-01T17:34:15.000-05:00
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/signals/search_after_bulk_create.ts b/x-pack/plugins/security_solution/server/lib/detection_engine/signals/search_after_bulk_create.ts
@@ -70,6 +70,7 @@ export const searchAfterAndBulkCreate = async ({
     interval,
     buildRuleMessage,
   });
+  const tuplesToBeLogged = [...totalToFromTuples];
   logger.debug(buildRuleMessage(`totalToFromTuples: ${totalToFromTuples.length}`));
 
   while (totalToFromTuples.length > 0) {
@@ -294,5 +295,6 @@ export const searchAfterAndBulkCreate = async ({
     }
   }
   logger.debug(buildRuleMessage(`[+] completed bulk index of ${toReturn.createdSignalsCount}`));
+  toReturn.totalToFromTuples = tuplesToBeLogged;
   return toReturn;
 };
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/signals/signal_rule_alert_type.ts b/x-pack/plugins/security_solution/server/lib/detection_engine/signals/signal_rule_alert_type.ts
@@ -670,6 +670,21 @@ export const signalRulesAlertType = ({
               lastLookBackDate: result.lastLookBackDate?.toISOString(),
             });
           }
+
+          // adding this log line so we can get some information from cloud
+          logger.info(
+            buildRuleMessage(
+              `[+] Finished indexing ${result.createdSignalsCount}  ${
+                !isEmpty(result.totalToFromTuples)
+                  ? `signals searched between date ranges ${JSON.stringify(
+                      result.totalToFromTuples,
+                      null,
+                      2
+                    )}`
+                  : ''
+              }`
+            )
+          );
         } else {
           const errorMessage = buildRuleMessage(
             'Bulk Indexing of signals failed:',
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/signals/types.ts b/x-pack/plugins/security_solution/server/lib/detection_engine/signals/types.ts
@@ -5,7 +5,7 @@
  */
 
 import { DslQuery, Filter } from 'src/plugins/data/common';
-import moment from 'moment';
+import moment, { Moment } from 'moment';
 import { Status } from '../../../../common/detection_engine/schemas/common/schemas';
 import { RulesSchema } from '../../../../common/detection_engine/schemas/response/rules_schema';
 import {
@@ -263,6 +263,11 @@ export interface SearchAfterAndBulkCreateReturnType {
   createdSignalsCount: number;
   createdSignals: SignalHit[];
   errors: string[];
+  totalToFromTuples?: Array<{
+    to: Moment | undefined;
+    from: Moment | undefined;
+    maxSignals: number;
+  }>;
 }
 
 export interface ThresholdAggregationBucket extends TermAggregationBucket {

Original file line number	Diff line number	Diff line change
`@@ -70,6 +70,7 @@ export const searchAfterAndBulkCreate = async ({`
`70`	`70`	`interval,`
`71`	`71`	`buildRuleMessage,`
`72`	`72`	`});`
	`73`	`+ const tuplesToBeLogged = [...totalToFromTuples];`
`73`	`74`	logger.debug(buildRuleMessage(`totalToFromTuples: ${totalToFromTuples.length}`));
`74`	`75`
`75`	`76`	`while (totalToFromTuples.length > 0) {`
`@@ -294,5 +295,6 @@ export const searchAfterAndBulkCreate = async ({`
`294`	`295`	`}`
`295`	`296`	`}`
`296`	`297`	logger.debug(buildRuleMessage(`[+] completed bulk index of ${toReturn.createdSignalsCount}`));
	`298`	`+ toReturn.totalToFromTuples = tuplesToBeLogged;`
`297`	`299`	`return toReturn;`
`298`	`300`	`};`