Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Missing fields in the csv report #43

Closed
zhongnansu opened this issue May 13, 2021 · 2 comments
Closed

[BUG] Missing fields in the csv report #43

zhongnansu opened this issue May 13, 2021 · 2 comments
Assignees
Labels
bug Something isn't working question Further information is requested
Milestone

Comments

@zhongnansu
Copy link
Member

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Plugins
Please list all plugins currently enabled.

Screenshots
If applicable, add screenshots to help explain your problem.

Host/Environment (please complete the following information):

  • OS: [e.g. iOS]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.


I am trying to create a CSV report based on a saved search that contains fields like @timestamp, A, B, C.D, C.E, F, etc. But the generated file only contains @timestamp, A, B, F - in the report all complex fields are missing.
In fact - the fields that mapped as object in my index are missed.
Why did this happen and how can I fix it?

Kibana v 7.10.0 from docker-image "amazon/opendistro-for-elasticsearch-kibana:1.12.0"

For example:

   {
        "_index" : "my_index",
        "_type" : "_doc",
        "_id" : "789be064-0758-4245-8ca1-6570df3bb5a7",
        "_score" : 1.0,
        "_source" : {
          "status" : "alert",     -   simple field = string
          "issue_uid" : 123,   -   simple field = number
          "created_at" : "2020-09-21T05:02:48.000+03:00",    -   simple field = date
          "alerts_count" : 2,   -   simple field = number
          "labels" : {       -   complex field = object 
            "kubernetes" : "cluster.k8s",    -  part of complex field  -  will be missed from CSV-report
            "statefulset" : "sts1"  -  part of complex field  -  will be missed from CSV-report
          }
        }
    }

This issue is submitted by @uzhinskiy
opendistro-for-elasticsearch/kibana-reports#363

@joshuali925
Copy link
Member

This issue is fixed and merged by opendistro-for-elasticsearch/kibana-reports#361. I'm able to reproduce with opendistro-1.13.2.0 but not the latest dev branch. The fix will be included in the next release

@joshuali925
Copy link
Member

joshuali925 commented May 14, 2021

Edit: I can see the issue now by selecting specific fields that are nested instead of capturing all fields. The issue is caused by the parsing logic in code, and will be fixed when opendistro-for-elasticsearch/kibana-reports#367 gets merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants