[Response Ops][Alerting] Investigate auto-healing when no write index is set for alerts as data alias #179829
Labels
Feature:Alerting/Alerts-as-Data
Issues related to Alerts-as-data and RuleRegistry
Feature:Alerting
research
Team:ResponseOps
Label for the ResponseOps team (formerly the Cases and Alerting teams)
We've run into multiple SDHs where concrete indices exist for an alerts-as-data resource but none of them are set as the write index for an alias. In this scenario we throw an error and alert resources fail to install. We should look into whether we can automatically pick a concrete index and set it as the write index to avoid these types of failures. It seems this scenario can occur when alerts indices are restored from snapshot.
Definition of Done
The text was updated successfully, but these errors were encountered: