Fail the flow the when detectot type is missing in the log types index (opensearch-project#845)

goyamegh · web-flow · commit 8d19912fe151 · 2024-02-14T14:54:41.000-08:00
Signed-off-by: Megha Goyal &lt;goyamegh@amazon.com&gt;
diff --git a/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java b/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java
@@ -229,6 +229,11 @@ public void onFailure(Exception e) {
     }
 
     public void insertOrphanFindings(String detectorType, Finding finding, float timestampFeature, Map<String, CustomLogType> logTypes) {
+        if (logTypes.get(detectorType) == null) {
+            log.error("LogTypes Index is missing the detector type {}", detectorType);
+            correlateFindingAction.onFailures(new OpenSearchStatusException("LogTypes Index is missing the detector type", RestStatus.INTERNAL_SERVER_ERROR));
+        }
+
         Map<String, Object> tags = logTypes.get(detectorType).getTags();
         String correlationId = tags.get("correlation_id").toString();
 
