Fail the flow the when detectot type is missing in the log types index (

#845) (#909) Signed-off-by: Megha Goyal <[email protected]> (cherry picked from commit 8d19912) Co-authored-by: Megha Goyal <[email protected]> (cherry picked from commit aa4706d)
opensearch-project · Mar 14, 2024 · 6438113 · 6438113
1 parent eb9649e
commit 6438113
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java b/src/main/java/org/opensearch/securityanalytics/correlation/VectorEmbeddingsEngine.java
@@ -229,6 +229,11 @@ public void onFailure(Exception e) {
     }
 
     public void insertOrphanFindings(String detectorType, Finding finding, float timestampFeature, Map<String, CustomLogType> logTypes) {
+        if (logTypes.get(detectorType) == null) {
+            log.error("LogTypes Index is missing the detector type {}", detectorType);
+            correlateFindingAction.onFailures(new OpenSearchStatusException("LogTypes Index is missing the detector type", RestStatus.INTERNAL_SERVER_ERROR));
+        }
+
         Map<String, Object> tags = logTypes.get(detectorType).getTags();
         String correlationId = tags.get("correlation_id").toString();