Skip to content

[Monitoring] [UI] Multiple logstash pipelines aggregations are broken #50054

Closed
@chrisronline

Description

@chrisronline

See #44914 (comment)

Something changed recently in ES, triggering a slew of test failures (elastic/kibana#52470, elastic/kibana#52471, elastic/kibana#52476).

The culprit seems to be using bucket_script aggregations somewhere under a nested aggregation. In this scenario, the bucket_script aggregation doesn't seem to ever run, as the response does not contain the data.

(Partial copy-paste from the comment linked above)
See this example here: https://gist.github.com/chrisronline/836dbbdb594d5848538e412236f32147

For 7.5 and below, the output is:

{
  "aggregations" : {
    "date_histo" : {
      "buckets" : [
        {
          "in_nested" : {
            "types" : {
              "buckets" : [
                {
                  "bs_value" : {
                    "value" : 1.0
                  }
                }
              ]
            }
          },
          "high_level_bs_value" : {
            "value" : 0.0
          }
        }
      ]
    }
  }
}

For 7.6 and above, the output is:

{
  "aggregations" : {
    "date_histo" : {
      "buckets" : [
        {
          "high_level_bs_value" : {
            "value" : 0.0
          }
        }
      ]
    }
  }
}

Luckily, we have good test coverage for this, but this needs to be a blocker for 7.6

I've pinged @polyfractal about this and he is currently investigating. It sounds like this is also affecting other aggregation types too.

cc @elastic/stack-monitoring

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions