Kibana version: 7.5.+ (maybe sooner)
Elasticsearch version: 7.5.+
Server OS version: any
Browser version: any
Original install method (e.g. download page, yum, from source, etc.): ECE, ESS, other
Describe the bug:
CSV reporting is not providing any data from frozen indices.
Even search on frozen indices is enabled in Advanced settings.
When the index is back in unfrozen state, CSV reporting on that index is working as expected.
Steps to reproduce:
1 Add demo data
2. Freeze the demo data index
3. Enable search on frozen indices
4. Go on discovery & check the data is there
6. Save the saved search
6. Export from CSV -> Fails with error
Error: Expected _scroll_id in the following Elasticsearch response: {"took":0,"timed_out":false,"_shards":{"total":0,"successful":0,"skipped":0,"failed":0},"hits":{"total":{"value":0,"relation":"eq"},"max_score":0,"hits":[]}}
7. Create a Dashboard, add the saved search, save the dashboard, export csv from visualization > Fails with the same error
Same error in both cases.
Checking the Kibana logs we get the query:
POST /kibana_sample_data_logs/_search?scroll=30s&size=500
Kibana doesn’t pass the ignore_throttled=false
Expected behavior:
Reporting will search and get documents from frozen indices
Thanks!
Kibana version: 7.5.+ (maybe sooner)
Elasticsearch version: 7.5.+
Server OS version: any
Browser version: any
Original install method (e.g. download page, yum, from source, etc.): ECE, ESS, other
Describe the bug:
CSV reporting is not providing any data from frozen indices.
Even search on frozen indices is enabled in Advanced settings.
When the index is back in unfrozen state, CSV reporting on that index is working as expected.
Steps to reproduce:
1 Add demo data
2. Freeze the demo data index
3. Enable search on frozen indices
4. Go on discovery & check the data is there
6. Save the saved search
6. Export from CSV -> Fails with error
Error: Expected _scroll_id in the following Elasticsearch response: {"took":0,"timed_out":false,"_shards":{"total":0,"successful":0,"skipped":0,"failed":0},"hits":{"total":{"value":0,"relation":"eq"},"max_score":0,"hits":[]}}7. Create a Dashboard, add the saved search, save the dashboard, export csv from visualization > Fails with the same error
Same error in both cases.
Checking the Kibana logs we get the query:
POST /kibana_sample_data_logs/_search?scroll=30s&size=500Kibana doesn’t pass the
ignore_throttled=falseExpected behavior:
Reporting will search and get documents from frozen indices
Thanks!