1.2 seconds upper bound for rules table on the UI to load without any rules The below is just the API
$ time ./get_prepackaged_rules_status.sh
{
"rules_custom_installed": 0,
"rules_installed": 0,
"rules_not_installed": 145,
"rules_not_updated": 0
}
real 0m0.513s
user 0m0.029s
sys 0m0.010s
3.842 seconds upper bound to install prepackaged rules via UI API calls below
$ time ./get_prepackaged_rules_status.sh
{
"rules_custom_installed": 0,
"rules_installed": 145,
"rules_not_installed": 0,
"rules_not_updated": 0
}
real 0m0.768s
user 0m0.029s
sys 0m0.011s
$
$
$
$
$
$ # below finds all the prepackaged rules and prints them out
$ time ./find_rule_by_filter.sh "alert.attributes.tags:%20%22__internal_immutable:true%22"
real 0m0.554s
user 0m0.032s
sys 0m0.012s
15 seconds for rules table to load on UI without any rules installed status api call below
$ time ./get_prepackaged_rules_status.sh
{
"rules_custom_installed": 0,
"rules_installed": 0,
"rules_not_installed": 145,
"rules_not_updated": 0
}
real 0m4.905s
user 0m0.029s
sys 0m0.010s
31 seconds to install all the prepackaged rules from the UI
status api call below
$ time ./get_prepackaged_rules_status.sh
{
"rules_custom_installed": 0,
"rules_installed": 145,
"rules_not_installed": 0,
"rules_not_updated": 0
}
real 0m5.107s
user 0m0.029s
sys 0m0.012s
$
$
$
$
$ # below finds all the prepackaged rules and prints them out
$ time ./find_rule_by_filter.sh "alert.attributes.tags:%20%22__internal_immutable:true%22"
real 0m1.997s
user 0m0.032s
sys 0m0.013s