elastic / elastic/elastic-package
[ElasticSearch Transform] Deleted Documents Count Getting Doubled When All The IOC Expires
- Dominant language
- Go
- Stars
- 72
- Forks
- 141
- Avg merge
- 19h 42m
- Merged PRs (30d)
- 55
Description
IOC transformation is working well with the below combinations:
1. Some active and some expired documents in the latest index.
2. All active documents in the latest index.
3. Zero documents in the latest index.
But when all the documents get expired then the deleted documents counts get doubled in the latest index.
Please find some screenshots of the Issue below:
Discover -
Latest Index -
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by inspecting the IOC transformation and reproducing the all-documents-expired case, comparing its deleted-document count with the active, mixed, and zero-document cases listed in the report. Done means the latest index reports the correct deleted count when all IOC documents expire.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elasticsearch, go
- Domain
- data, search
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100