Is your feature request related to a problem?
Some of the system indices used by security analytics, such as .opensearch-sap-log-types-config, are created when the cluster starts. Others are created only when security analytics is used. All of these system indices should only be created when security analytics is used.

What solution would you like?
Create all security analytics system indices only when they are first used/needed. Do not create them when the cluster starts.