elastic / elastic/integrations
[Elasticsearch]: Transform issues with downsampled metrics
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
### Integration Name
Elasticsearch [elasticsearch]
### Dataset Name
logs-elasticsearch.index, metrics-elasticsearch.stack_monitoring.index*
### Integration Version
1.16.0
### Agent Version
8.17.1
### Agent Output Type
elasticsearch
### Elasticsearch Version
8.17.1
### OS Version and Architecture
Ubuntu Noble
### Software/API Version
_No response_
### Error Message
Getting an unavailable health status from the logs-elasticsearch.index_pivot-default-0.1.0 transform.
The following is noted in the transform messages tab:
Transform encountered an exception: [org.elasticsearch.search.aggregations.UnsupportedAggregationOnDownsampledIndex: Field [elasticsearch.index.primaries.docs.count] of type [aggregate_metric_double] is not supported for aggregation [top_metrics]]; Will automatically retry [1/-1]
### Event Original
none
### What did you do?
none
### What did you see?
Transform encountered an exception: [org.elasticsearch.search.aggregations.UnsupportedAggregationOnDownsampledIndex: Field [elasticsearch.index.primaries.docs.count] of type [aggregate_metric_double] is not supported for aggregation [top_metrics]]; Will automatically retry [1/-1]
### What did you expect to see?
For the transform to skip or otherwise gracefully handle downsampled indices.
### Anything else?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.