Module readiness 

Data readiness of one rule: whether its index patterns resolve, whether its data view exists, and whether its related Fleet packages are installed and used. Reads run one at a time in a fixed order with fixed caps.

Structs

DataViewFacts

IntegrationFacts

PackageRow

PackageUse

PatternFacts

PatternRow

Readiness

RuleDataView

Enums

IndexSource

Where the rule takes its index patterns from.

PatternState

ReadinessFinding

Static finding codes, in output order.

Constants

PACKAGE_NAME_BYTES

The longest package name sent to Fleet. The grammar is ASCII, so this is both characters and bytes.

PATTERN_BYTES

The longest index pattern sent to Elasticsearch, in UTF-8 bytes.

Functions

rule_readiness

Read one rule and report whether it can see data. The rule read is primary; every later read is a part. At most 29 requests: 3 for the rule, 1 data view list, 16 patterns, 1 policy page, and 8 package reads.