[8.10] update data view docs for excluding cluster (#164904) (#165345)

# Backport

This will backport the following commits from `main` to `8.10`:
- [update data view docs for excluding cluster
(#164904)](https://github.com/elastic/kibana/pull/164904)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Nathan
Reese","email":"reese.nathan@elastic.co"},"sourceCommit":{"committedDate":"2023-08-31T14:27:03Z","message":"update
data view docs for excluding cluster
(#164904)\n\nhttps://github.com/elastic/elasticsearch/pull/97865
expands\r\nindex-pattern expressions to include a cluster alias for
purposes of\r\nexcluding an entire cluster from a cross-cluster search.
This allows\r\nusers to put the minus sign in front of the cluster
name\r\n(`-cluster_one:*`). The advantage to this change is that it
avoids\r\nsending any network calls to that cluster. Compare this to the
existing\r\nsyntax for excluding clusters, where the minus sign is in
front of the\r\nindex name (`cluster_one:-*`). The older syntax has to
send the request\r\nto the remote cluster, which if it is down (and
skip_unavailable=false),\r\nwill cause the search to fail.\r\n\r\nThis
PR updates the docs to reflect the new
syntax.\r\n\r\n---------\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"4b02740b32542b6e84ee7a8abec9cb355f70db35","branchLabelMapping":{"^v8.11.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Docs","release_note:skip","v8.10.0","v8.11.0"],"number":164904,"url":"https://github.com/elastic/kibana/pull/164904","mergeCommit":{"message":"update
data view docs for excluding cluster
(#164904)\n\nhttps://github.com/elastic/elasticsearch/pull/97865
expands\r\nindex-pattern expressions to include a cluster alias for
purposes of\r\nexcluding an entire cluster from a cross-cluster search.
This allows\r\nusers to put the minus sign in front of the cluster
name\r\n(`-cluster_one:*`). The advantage to this change is that it
avoids\r\nsending any network calls to that cluster. Compare this to the
existing\r\nsyntax for excluding clusters, where the minus sign is in
front of the\r\nindex name (`cluster_one:-*`). The older syntax has to
send the request\r\nto the remote cluster, which if it is down (and
skip_unavailable=false),\r\nwill cause the search to fail.\r\n\r\nThis
PR updates the docs to reflect the new
syntax.\r\n\r\n---------\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"4b02740b32542b6e84ee7a8abec9cb355f70db35"}},"sourceBranch":"main","suggestedTargetBranches":["8.10"],"targetPullRequestStates":[{"branch":"8.10","label":"v8.10.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.11.0","labelRegex":"^v8.11.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/164904","number":164904,"mergeCommit":{"message":"update
data view docs for excluding cluster
(#164904)\n\nhttps://github.com/elastic/elasticsearch/pull/97865
expands\r\nindex-pattern expressions to include a cluster alias for
purposes of\r\nexcluding an entire cluster from a cross-cluster search.
This allows\r\nusers to put the minus sign in front of the cluster
name\r\n(`-cluster_one:*`). The advantage to this change is that it
avoids\r\nsending any network calls to that cluster. Compare this to the
existing\r\nsyntax for excluding clusters, where the minus sign is in
front of the\r\nindex name (`cluster_one:-*`). The older syntax has to
send the request\r\nto the remote cluster, which if it is down (and
skip_unavailable=false),\r\nwill cause the search to fail.\r\n\r\nThis
PR updates the docs to reflect the new
syntax.\r\n\r\n---------\r\n\r\nCo-authored-by: Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"4b02740b32542b6e84ee7a8abec9cb355f70db35"}}]}]
BACKPORT-->

Co-authored-by: Nathan Reese <reese.nathan@elastic.co>
This commit is contained in:
Kibana Machine 2023-08-31 10:50:10 -04:00 committed by GitHub
parent fe93fa7b6e
commit 638b971055
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -143,10 +143,11 @@ all clusters having a name starting with `cluster_`:
`cluster_*:logstash-*,cluster_*:-logstash-old*`
```
To exclude a cluster having a name starting with `cluster_`:
Excluding a cluster avoids sending any network calls to that cluster.
To exclude a cluster with the name `cluster_one`:
```ts
`cluster_*:logstash-*,cluster_one:-*`
`cluster_*:logstash-*,-cluster_one:*`
```
Once you configure a {data-source} to use the {ccs} syntax, all searches and