[SIEM] hide siem data on empty string or _all (#47166) (#47219)

elastic · Oct 8, 2019 · a92e64f · a92e64f
1 parent 14bde81
commit a92e64f
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/x-pack/legacy/plugins/siem/server/graphql/source_status/resolvers.ts b/x-pack/legacy/plugins/siem/server/graphql/source_status/resolvers.ts
@@ -31,9 +31,21 @@ export const createSourceStatusResolvers = (libs: {
 } => ({
   SourceStatus: {
     async indicesExist(source, args, { req }) {
+      if (
+        args.defaultIndex.length === 1 &&
+        (args.defaultIndex[0] === '' || args.defaultIndex[0] === '_all')
+      ) {
+        return false;
+      }
       return libs.sourceStatus.hasIndices(req, args.defaultIndex);
     },
     async indexFields(source, args, { req }) {
+      if (
+        args.defaultIndex.length === 1 &&
+        (args.defaultIndex[0] === '' || args.defaultIndex[0] === '_all')
+      ) {
+        return [];
+      }
       return libs.fields.getFields(req, args.defaultIndex);
     },
   },