elastic / elastic/integrations

[Elasticsearch]: Transform issues with downsampled metrics

Open
#12,544 6 comments 0 reactions 0 assignees View on GitHub
Integration:elasticsearch needs:triage Team:Stack Monitoring
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Elasticsearch [elasticsearch]

### Dataset Name

logs-elasticsearch.index, metrics-elasticsearch.stack_monitoring.index*

### Integration Version

1.16.0

### Agent Version

8.17.1

### Agent Output Type

elasticsearch

### Elasticsearch Version

8.17.1

### OS Version and Architecture

Ubuntu Noble

### Software/API Version

_No response_

### Error Message

Getting an unavailable health status from the logs-elasticsearch.index_pivot-default-0.1.0 transform.
The following is noted in the transform messages tab:

Transform encountered an exception: [org.elasticsearch.search.aggregations.UnsupportedAggregationOnDownsampledIndex: Field [elasticsearch.index.primaries.docs.count] of type [aggregate_metric_double] is not supported for aggregation [top_metrics]]; Will automatically retry [1/-1]

### Event Original

none

### What did you do?

none

### What did you see?

Transform encountered an exception: [org.elasticsearch.search.aggregations.UnsupportedAggregationOnDownsampledIndex: Field [elasticsearch.index.primaries.docs.count] of type [aggregate_metric_double] is not supported for aggregation [top_metrics]]; Will automatically retry [1/-1]

### What did you expect to see?

For the transform to skip or otherwise gracefully handle downsampled indices.

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.