Remove 1 year time bound limitation on vulnerability over time chart
What does this MR do and why?
This MR removes the 1-year time bound limitation on the vulnerability over time chart to address count inaccuracies across various charts and reports.
Context: The ES query on the vulnerabilities over time chart was time bounded for the last 1 year for performance reasons. However, this is causing count inaccuracies as reported in customer feedback (zendesk ticket).
Since the retention policy is not fully enabled and can take a longer time to roll out, we are removing this time bound limit.
Changes:
- Removed the
overriden_created_aftermethod fromCountOverTimeFinderthat was applying the 1-year limit - Updated the
executemethod to use the actualcreated_afterparameter fromsearch_paramsinstead of the overridden value - Updated the spec to reflect that the passed arguments are used directly without override
ES query performance
Details are available in #581319 (comment 2899313830)
How to set up and validate locally
- Ensure Elasticsearch is enabled and configured
- Create vulnerabilities with various creation dates (including those older than 1 year)
- Query the vulnerability over time chart
- Verify that vulnerabilities older than 1 year are now included in the results
Local Verification
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Closes #581319 (closed)