Tags: elastic/kibana
Tags
Tagging release 33fa57c as: deploy@1768218634, by jeanlouis.leysens@e… …lastic.co
[9.2] [ML] Disable ES|QL field stats for TS command (#247641) (#248343) # Backport This will backport the following commits from `main` to `9.2`: - [[ML] Disable ES|QL field stats for TS command (#247641)](#247641) <!--- Backport version: 9.6.6 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Quynh Nguyen (Quinn)","email":"[email protected]"},"sourceCommit":{"committedDate":"2026-01-08T18:16:45Z","message":"[ML] Disable ES|QL field stats for TS command (#247641)\n\n## Summary\n\nThis PR disables ES|QL field stats for TS command\n\n<img width=\"1675\" height=\"649\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/ea0ffa24-4dc6-434e-a86b-f2237285f8e3\"\n/>\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine <[email protected]>","sha":"5dd3032ce7378f1c126eb6c72ca15869d95a7c2c","branchLabelMapping":{"^v9.4.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix",":ml","Feature:File and Index Data Viz","backport:version","v9.3.0","v9.4.0","v9.2.4"],"title":"[ML] Disable ES|QL field stats for TS command","number":247641,"url":"https://github.com/elastic/kibana/pull/247641","mergeCommit":{"message":"[ML] Disable ES|QL field stats for TS command (#247641)\n\n## Summary\n\nThis PR disables ES|QL field stats for TS command\n\n<img width=\"1675\" height=\"649\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/ea0ffa24-4dc6-434e-a86b-f2237285f8e3\"\n/>\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine <[email protected]>","sha":"5dd3032ce7378f1c126eb6c72ca15869d95a7c2c"}},"sourceBranch":"main","suggestedTargetBranches":["9.3","9.2"],"targetPullRequestStates":[{"branch":"9.3","label":"v9.3.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.4.0","branchLabelMappingKey":"^v9.4.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/247641","number":247641,"mergeCommit":{"message":"[ML] Disable ES|QL field stats for TS command (#247641)\n\n## Summary\n\nThis PR disables ES|QL field stats for TS command\n\n<img width=\"1675\" height=\"649\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/ea0ffa24-4dc6-434e-a86b-f2237285f8e3\"\n/>\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine <[email protected]>","sha":"5dd3032ce7378f1c126eb6c72ca15869d95a7c2c"}},{"branch":"9.2","label":"v9.2.4","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Quynh Nguyen (Quinn) <[email protected]> Co-authored-by: Elastic Machine <[email protected]>
[9.1] chore: bump kube-stack Helm chart onboarding to 0.12.4 (#246211) ( #247529) # Backport This will backport the following commits from `main` to `9.1`: - [chore: bump kube-stack Helm chart onboarding to 0.12.4 (#246211)](#246211) <!--- Backport version: 10.2.0 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Roger Coll","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-12-16T12:18:25Z","message":"chore: bump kube-stack Helm chart onboarding to 0.12.4 (#246211)\n\n## Summary\n\nNew kube-stack version that fixes Chart uninstallation using Helm v4:\nhttps://github.com/open-telemetry/opentelemetry-helm-charts/pull/1967\n\nelastic-agent PR: elastic/elastic-agent#11541 +\nhttps://github.com/elastic/elastic-agent/pull/11481\n\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"2fcc30c5373578caa036bcac20c185f37dcd37ea","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport missing","v9.3.0","v9.1.9","backport:9.2"],"title":"chore: bump kube-stack Helm chart onboarding to 0.12.4","number":246211,"url":"https://github.com/elastic/kibana/pull/246211","mergeCommit":{"message":"chore: bump kube-stack Helm chart onboarding to 0.12.4 (#246211)\n\n## Summary\n\nNew kube-stack version that fixes Chart uninstallation using Helm v4:\nhttps://github.com/open-telemetry/opentelemetry-helm-charts/pull/1967\n\nelastic-agent PR: elastic/elastic-agent#11541 +\nhttps://github.com/elastic/elastic-agent/pull/11481\n\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"2fcc30c5373578caa036bcac20c185f37dcd37ea"}},"sourceBranch":"main","suggestedTargetBranches":["9.1"],"targetPullRequestStates":[{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/246211","number":246211,"mergeCommit":{"message":"chore: bump kube-stack Helm chart onboarding to 0.12.4 (#246211)\n\n## Summary\n\nNew kube-stack version that fixes Chart uninstallation using Helm v4:\nhttps://github.com/open-telemetry/opentelemetry-helm-charts/pull/1967\n\nelastic-agent PR: elastic/elastic-agent#11541 +\nhttps://github.com/elastic/elastic-agent/pull/11481\n\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"2fcc30c5373578caa036bcac20c185f37dcd37ea"}},{"branch":"9.1","label":"v9.1.9","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT-->
[8.19] [APM] Fix error count threshold api integration tests flakiness ( #247379) (#248106) # Backport This will backport the following commits from `main` to `8.19`: - [[APM] Fix error count threshold api integration tests flakiness (#247379)](#247379) <!--- Backport version: 9.6.6 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Alex Fernandez","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-12-23T18:03:54Z","message":"[APM] Fix error count threshold api integration tests flakiness (#247379)\n\n## Summary\n\nCloses #243856\n\n\n### Checklist\n\n- [x] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed","sha":"1e981ad5038101d2ed1a93969fd1c53d62eac603","branchLabelMapping":{"^v9.4.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["technical debt","release_note:skip","backport:all-open","ci:beta-faster-pr-build","v9.4.0","Team:obs-presentation"],"title":"[APM] Fix error count threshold api integration tests flakiness","number":247379,"url":"https://github.com/elastic/kibana/pull/247379","mergeCommit":{"message":"[APM] Fix error count threshold api integration tests flakiness (#247379)\n\n## Summary\n\nCloses #243856\n\n\n### Checklist\n\n- [x] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed","sha":"1e981ad5038101d2ed1a93969fd1c53d62eac603"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.4.0","branchLabelMappingKey":"^v9.4.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/247379","number":247379,"mergeCommit":{"message":"[APM] Fix error count threshold api integration tests flakiness (#247379)\n\n## Summary\n\nCloses #243856\n\n\n### Checklist\n\n- [x] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed","sha":"1e981ad5038101d2ed1a93969fd1c53d62eac603"}}]}] BACKPORT--> Co-authored-by: Alex Fernandez <[email protected]>
[9.2] [Infra] Fix legacy Infra search client to respect the frozen ti… …er setting (#246438) (#246583) # Backport This will backport the following commits from `main` to `9.2`: - [[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)](#246438) <!--- Backport version: 10.2.0 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Carlos Crespo","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-12-16T15:25:48Z","message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:version","v9.1.0","v8.19.0","v9.2.0","v9.3.0","ci:beta-faster-pr-build","Team:obs-presentation","v9.1.9"],"title":"[Infra] Fix legacy Infra search client to respect the frozen tier setting","number":246438,"url":"https://github.com/elastic/kibana/pull/246438","mergeCommit":{"message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12"}},"sourceBranch":"main","suggestedTargetBranches":["9.1","8.19","9.2"],"targetPullRequestStates":[{"branch":"9.1","label":"v9.1.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/246438","number":246438,"mergeCommit":{"message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12"}}]}] BACKPORT-->
[9.1] [Infra] Fix legacy Infra search client to respect the frozen ti… …er setting (#246438) (#246585) # Backport This will backport the following commits from `main` to `9.1`: - [[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)](#246438) <!--- Backport version: 10.2.0 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Carlos Crespo","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-12-16T15:25:48Z","message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:version","v9.1.0","v8.19.0","v9.2.0","v9.3.0","ci:beta-faster-pr-build","Team:obs-presentation","v9.1.9"],"title":"[Infra] Fix legacy Infra search client to respect the frozen tier setting","number":246438,"url":"https://github.com/elastic/kibana/pull/246438","mergeCommit":{"message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12"}},"sourceBranch":"main","suggestedTargetBranches":["9.1","8.19","9.2"],"targetPullRequestStates":[{"branch":"9.1","label":"v9.1.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/246438","number":246438,"mergeCommit":{"message":"[Infra] Fix legacy Infra search client to respect the frozen tier setting (#246438)\n\n## Summary\n\nBasically what this #245224 does,\nbut focusing only on the Infra plugin changes\n\n`has_data` endpoint will run this when the setting is not set\n\n```json\n{\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {}\n }\n }\n}\n```\n\nand this when the setting is set\n\n```json\nparams {\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"allow_no_indices\": true,\n \"terminate_after\": 1,\n \"ignore_unavailable\": true,\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n }\n }\n}\n```\n\nOther pages are affected by this change, but are not a source for the\nfrozen tier being hit because they don't run unbounded queries\n\n- Infra Inventory UI\n```json\nparams {\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"bool\": {\n \"filter\": [\n {\n \"term\": {\n \"data_stream.dataset\": \"hostmetricsreceiver.otel\"\n }\n }\n ]\n }\n }\n ]\n }\n },\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765824423511,\n \"lte\": 1765824723511,\n \"format\": \"epoch_millis\"\n }\n }\n },\n {\n \"exists\": {\n \"field\": \"host.name\"\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"groupings\": {\n \"composite\": {\n \"size\": 2000,\n \"sources\": [\n {\n \"groupBy0\": {\n \"terms\": {\n \"field\": \"host.name\"\n }\n }\n }\n ]\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"60s\",\n \"offset\": \"-57511ms\",\n \"extended_bounds\": {\n \"min\": 1765824423511,\n \"max\": 1765824723511\n }\n },\n \"aggregations\": {\n \"cpu_idle\": {\n \"terms\": {\n \"field\": \"state\",\n \"include\": [\n \"idle\",\n \"wait\"\n ]\n },\n \"aggs\": {\n \"avg\": {\n \"avg\": {\n \"field\": \"system.cpu.utilization\"\n }\n }\n }\n },\n \"cpu_idle_total\": {\n \"sum_bucket\": {\n \"buckets_path\": \"cpu_idle.avg\"\n }\n },\n \"cpuV2\": {\n \"bucket_script\": {\n \"buckets_path\": {\n \"cpuIdleTotal\": \"cpu_idle_total\"\n },\n \"script\": \"1 - params.cpuIdleTotal\",\n \"gap_policy\": \"skip\"\n }\n },\n \"__metadata__\": {\n \"top_metrics\": {\n \"size\": 1,\n \"metrics\": [\n {\n \"field\": \"host.name\"\n },\n {\n \"field\": \"host.ip\"\n },\n {\n \"field\": \"host.os.name\"\n },\n {\n \"field\": \"cloud.provider\"\n }\n ],\n \"sort\": {\n \"@timestamp\": \"desc\"\n }\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n }\n }\n}\n```\n- Metrics Explorer\n\n```json\n{\n \"allow_no_indices\": true,\n \"ignore_unavailable\": true,\n \"index\": \"remote_cluster:metrics-*,remote_cluster:metricbeat-*\",\n \"body\": {\n \"size\": 0,\n \"query\": {\n \"bool\": {\n \"must\": [\n {\n \"bool\": {\n \"filter\": [\n null,\n {\n \"range\": {\n \"@timestamp\": {\n \"gte\": 1765821298325,\n \"lte\": 1765824898325,\n \"format\": \"epoch_millis\"\n }\n }\n }\n ]\n }\n }\n ],\n \"filter\": [\n {\n \"bool\": {\n \"must_not\": [\n {\n \"terms\": {\n \"_tier\": [\n \"data_frozen\"\n ]\n }\n }\n ]\n }\n }\n ]\n }\n },\n \"aggs\": {\n \"histogram\": {\n \"date_histogram\": {\n \"field\": \"@timestamp\",\n \"fixed_interval\": \"30s\",\n \"offset\": \"0s\",\n \"extended_bounds\": {\n \"min\": 1765821298325,\n \"max\": 1765824898325\n }\n },\n \"aggregations\": {\n \"metric_0\": {\n \"avg\": {\n \"field\": \"system.cpu.total.norm.pct\"\n }\n },\n \"metric_1\": {\n \"avg\": {\n \"field\": \"kubernetes.pod.cpu.usage.node.pct\"\n }\n },\n \"metric_2\": {\n \"avg\": {\n \"field\": \"docker.cpu.total.pct\"\n }\n }\n }\n },\n \"metricsets\": {\n \"terms\": {\n \"field\": \"metricset.name\"\n }\n }\n }\n }\n}\n```\n\n---------\n\nCo-authored-by: Nathan L Smith <[email protected]>\nCo-authored-by: kibanamachine <[email protected]>\nCo-authored-by: Caue Marcondes <[email protected]>\nCo-authored-by: Elastic Machine <[email protected]>\nCo-authored-by: Coen Warmer <[email protected]>","sha":"aedfb94b2118c1e925e5678c585ab2093b04ed12"}}]}] BACKPORT--> Co-authored-by: Elastic Machine <[email protected]> Co-authored-by: Tiago Costa <[email protected]>
PreviousNext