Skip to content

[Reporting] CSV reporting does not work on frozen indices even with Search enabled in Advanced settings #60737

@radoondas

Description

@radoondas

Kibana version: 7.5.+ (maybe sooner)

Elasticsearch version: 7.5.+

Server OS version: any

Browser version: any

Original install method (e.g. download page, yum, from source, etc.): ECE, ESS, other

Describe the bug:
CSV reporting is not providing any data from frozen indices.
Even search on frozen indices is enabled in Advanced settings.

When the index is back in unfrozen state, CSV reporting on that index is working as expected.

Steps to reproduce:
1 Add demo data
2. Freeze the demo data index
3. Enable search on frozen indices
4. Go on discovery & check the data is there
6. Save the saved search
6. Export from CSV -> Fails with error
Error: Expected _scroll_id in the following Elasticsearch response: {"took":0,"timed_out":false,"_shards":{"total":0,"successful":0,"skipped":0,"failed":0},"hits":{"total":{"value":0,"relation":"eq"},"max_score":0,"hits":[]}}
7. Create a Dashboard, add the saved search, save the dashboard, export csv from visualization > Fails with the same error

Same error in both cases.

Checking the Kibana logs we get the query:
POST /kibana_sample_data_logs/_search?scroll=30s&size=500

Kibana doesn’t pass the ignore_throttled=false

Expected behavior:
Reporting will search and get documents from frozen indices

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    Feature:Reporting:CSVReporting issues pertaining to CSV file exportbugFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.needs-teamIssues missing a team label

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions