github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-23 17:28:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

fixed output aggregate query. bucket_sort options incorrect. was always running max 10 results. (#143486)

Browse source 
Co-authored-by: Karl Godard <karlgodard@elastic.co>
This commit is contained in:
Karl Godard 2022-10-18 09:10:53 -07:00 • committed by GitHub
parent 34ad684839
commit aed3a07422
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

11
x-pack/plugins/session_view/server/routes/io_events_route.ts
View file

@ -79,7 +79,7 @@ export const searchProcessWithIOEvents = async (
? [
{
range: {
'@timestamp': {
[TIMESTAMP]: {
gte: range[0],
lte: range[1],
},
@ -105,13 +105,7 @@ export const searchProcessWithIOEvents = async (
custom_agg: {
terms: {
field: PROCESS_ENTITY_ID_PROPERTY,
},
aggs: {
bucket_sort: {
bucket_sort: {
size: PROCESS_EVENTS_PER_PAGE,
},
},
size: PROCESS_EVENTS_PER_PAGE,
},
},
},
@ -126,6 +120,7 @@ export const searchProcessWithIOEvents = async (
event: {
kind: EventKind.event,
action: EventAction.text_output,
id: bucket.key,
},
process: {
entity_id: bucket.key,

2
x-pack/plugins/session_view/server/routes/process_events_route.ts
View file

@ -133,7 +133,7 @@ export const fetchEventsAndScopedAlerts = async (
const processesWithIOEvents = await searchProcessWithIOEvents(client, sessionEntityId, range);
events = [...alertsBody.events, ...processesWithIOEvents, ...events]; // we place process events at the end, as they have proper cursor info. (putting the 'faked' io event indicators at end breaks pagination, since they lack a timestamp).
events = [...events, ...alertsBody.events, ...processesWithIOEvents];
}
return {