Skip to content

[Security Solution] Anomalies Tables only show data for installed ML Jobs #74697

@rylnd

Description

@rylnd

As part of #74582 I discovered some interesting behavior: when querying anomalies for our anomalies tables, we only include jobs that are currently installed.

My concern is that if anomalies persist after a job has been deleted, we may be inadvertently hiding those anomalies with this logic. This ticket is meant to track verification of the above.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:SIEMchoreenhancementNew value added to drive a business result

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions