search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.73k stars 8.14k forks source link

[RAM] Investigate the feasibility of sorting by errored actions in the event log list #142142

Open JiaweiWu opened 1 year ago

JiaweiWu commented 1 year ago

When we implemented event log KPIs to resolve this issue: https://github.com/elastic/kibana/issues/138058. We initially wanted the ability to sort on the errored actions field of the event log list. However, due to the nature of the error actions being a computed value, we were unable to create an aggregation that reliably allowed for filtering, sorting, and paginating of the aggregation at the same time.

Therefore, we would like to investigate the feasibility of storing errored actions as a metric property of the event log document. Which would let us aggregate on this field like the other sortable fields.

elasticmachine commented 1 year ago

Pinging @elastic/response-ops (Team:ResponseOps)