[UII] Set up knowledge index entry for .integration_knowledge

x-pack/solutions/security/plugins/elastic_assistant/server/ai_assistant_data_clients/knowledge_base/index.ts

@@ -73,6 +73,7 @@ import { ASSISTANT_ELSER_INFERENCE_ID } from './field_maps_configuration';
 import { BulkOperationError } from '../../lib/data_stream/documents_data_writer';
 import { AUDIT_OUTCOME, KnowledgeBaseAuditAction, knowledgeBaseAuditEvent } from './audit_events';
 import { findDocuments } from '../find';
+import { ensureIntegrationKnowledgeIndexEntry } from '../../ai_assistant_service/integration_knowledge_helper';
 
 /**
  * Params for when creating KbDataClient in Request Context Factory. Useful if needing to modify
@@ -93,6 +94,7 @@ export interface KnowledgeBaseDataClientParams extends AIAssistantDataClientPara
   manageGlobalKnowledgeBaseAIAssistant: boolean;
   getTrainedModelsProvider: () => ReturnType<TrainedModelsProvider['trainedModelsProvider']>;
   elserInferenceId?: string;
+  telemetry: AnalyticsServiceSetup;
 }
 export class AIAssistantKnowledgeBaseDataClient extends AIAssistantDataClient {
   constructor(public readonly options: KnowledgeBaseDataClientParams) {
@@ -293,6 +295,19 @@ export class AIAssistantKnowledgeBaseDataClient extends AIAssistantDataClient {
         }
       }
 
+      // Ensure integration knowledge index entry exists first (synchronous)
+      try {
+        await ensureIntegrationKnowledgeIndexEntry(
+          this,
+          this.options.logger.get('integrationKnowledge'),
+          this.options.telemetry
+        );
+      } catch (error) {
+        this.options.logger.error(
+          `Failed to ensure integration knowledge index entry: ${error.message}`
+        );
+      }
+
       if (!ignoreSecurityLabs) {
         this.options.logger.debug(`Checking if Knowledge Base docs have been loaded...`);
 

x-pack/solutions/security/plugins/elastic_assistant/server/ai_assistant_service/index.ts

@@ -13,6 +13,7 @@ import type {
   ElasticsearchClient,
   KibanaRequest,
   SavedObjectsClientContract,
+  AnalyticsServiceSetup,
 } from '@kbn/core/server';
 import type { TaskManagerSetupContract } from '@kbn/task-manager-plugin/server';
 import type { MlPluginSetup } from '@kbn/ml-plugin/server';
@@ -95,6 +96,7 @@ export interface CreateAIAssistantClientParams {
   spaceId: string;
   currentUser: AuthenticatedUser | null;
   licensing: Promise<LicensingApiRequestHandlerContext>;
+  telemetry: AnalyticsServiceSetup;
 }
 
 export type CreateDataStream = (params: {
@@ -609,6 +611,7 @@ export class AIAssistantService {
       spaceId: opts.spaceId,
       manageGlobalKnowledgeBaseAIAssistant: opts.manageGlobalKnowledgeBaseAIAssistant ?? false,
       getTrainedModelsProvider: opts.getTrainedModelsProvider,
+      telemetry: opts.telemetry,
     });
   }
 

x-pack/solutions/security/plugins/elastic_assistant/server/ai_assistant_service/integration_knowledge_helper.ts

@@ -0,0 +1,91 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { AnalyticsServiceSetup, Logger } from '@kbn/core/server';
+import { IndexEntryType } from '@kbn/elastic-assistant-common';
+import { AIAssistantKnowledgeBaseDataClient } from '../ai_assistant_data_clients/knowledge_base';
+
+const INTEGRATION_KNOWLEDGE_INDEX_NAME = '.integration_knowledge';
+
+/**
+ * Checks if the integration knowledge index entry already exists
+ */
+export const checkIntegrationKnowledgeIndexEntryExists = async ({
+  kbDataClient,
+  logger,
+}: {
+  kbDataClient: AIAssistantKnowledgeBaseDataClient;
+  logger: Logger;
+}): Promise<boolean> => {
+  try {
+    const results = await kbDataClient.findDocuments({
+      page: 1,
+      perPage: 1,
+      filter: `type:index AND index:${INTEGRATION_KNOWLEDGE_INDEX_NAME}`,
+    });
+
+    const exists = results.total > 0;
+    logger.debug(`Integration knowledge index entry exists: ${exists}`);
+    return exists;
+  } catch (error) {
+    logger.debug(`Error checking integration knowledge index entry: ${error.message}`);
+    return false;
+  }
+};
+
+/**
+ * Ensures the integration knowledge index entry exists during Knowledge Base setup.
+ * Similar to loadSecurityLabs() but for Index Entries rather than Document Entries.
+ */
+export const ensureIntegrationKnowledgeIndexEntry = async (
+  kbDataClient: AIAssistantKnowledgeBaseDataClient,
+  logger: Logger,
+  telemetry: AnalyticsServiceSetup
+): Promise<boolean> => {
+  try {
+    logger.debug('Checking if integration knowledge index entry exists...');
+
+    const entryExists = await checkIntegrationKnowledgeIndexEntryExists({
+      kbDataClient,
+      logger,
+    });
+
+    if (!entryExists) {
+      logger.debug('Creating integration knowledge index entry...');
+
+      const entry = await kbDataClient.createKnowledgeBaseEntry({
+        knowledgeBaseEntry: {
+          type: IndexEntryType.value,
+          index: INTEGRATION_KNOWLEDGE_INDEX_NAME,
+          field: 'content',
+          name: 'Integration Knowledge',
+          description:
+            'Integration knowledge base containing semantic information about integrations installed via Fleet',
+          queryDescription:
+            'Use this tool to search for information about integrations, integration configurations, troubleshooting guides, and best practices',
+          global: true,
+          users: [],
+        },
+        telemetry,
+      });
+
+      if (entry) {
+        logger.info('Integration knowledge index entry created successfully');
+        return true;
+      } else {
+        logger.warn('Failed to create integration knowledge index entry');
+        return false;
+      }
+    } else {
+      logger.debug('Integration knowledge index entry already exists');
+      return true;
+    }
+  } catch (error) {
+    logger.error(`Error ensuring integration knowledge index entry: ${error.message}`);
+    return false;
+  }
+};

x-pack/solutions/security/plugins/elastic_assistant/server/routes/request_context_factory.ts

@@ -138,6 +138,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           spaceId: getSpaceId(),
           logger: this.logger,
           licensing: context.licensing,
+          telemetry: core.analytics,
           currentUser,
           elserInferenceId: params?.elserInferenceId,
           manageGlobalKnowledgeBaseAIAssistant:
@@ -159,6 +160,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           logger: this.logger,
           currentUser,
           adhocAttackDiscoveryDataClient: this.adhocAttackDiscoveryDataClient,
+          telemetry: core.analytics,
         });
       }),
 
@@ -177,6 +179,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           licensing: context.licensing,
           logger: this.logger,
           currentUser,
+          telemetry: core.analytics,
         });
       }),
 
@@ -187,6 +190,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           licensing: context.licensing,
           logger: this.logger,
           currentUser,
+          telemetry: core.analytics,
         });
       }),
 
@@ -197,6 +201,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           licensing: context.licensing,
           logger: this.logger,
           currentUser,
+          telemetry: core.analytics,
         });
       }),
 
@@ -207,6 +212,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           licensing: context.licensing,
           logger: this.logger,
           currentUser,
+          telemetry: core.analytics,
         });
       }),
 
@@ -218,6 +224,7 @@ export class RequestContextFactory implements IRequestContextFactory {
           logger: this.logger,
           currentUser,
           contentReferencesEnabled: params?.contentReferencesEnabled,
+          telemetry: core.analytics,
         });
       }),
     };