parsedmarc
parsedmarc copied to clipboard
Dashboard date_histogram error with elasticsearch 8.0 or higher
When using Elastic search version =>8.0
, the is an error for the date interval
Elasticsearch err:[1:512] [date_histogram] unknown field [interval] did you mean [fixed_interval]?
Is there an updated query (json) file? or any configuration I should fix either in grafana or elasticsearch?
Same issue.
Good news, I believe to have fixed this issue. I am testing this out with Elastic 8.3.4 & 8.4 and Grafana 9.0
hi I found out that some panels won't work anymore then, sayaing the interval must be non null non empty Some panels are OK, some are not.
Same here
A workaround has been outlined in https://github.com/debricked/dmarc-visualizer/issues/41#issuecomment-1425415494:
RUN sed -i 's/fixed_interval/interval/g' /var/lib/grafana/dashboards/Grafana-DMARC_Reports.json
Looks like this was partly fixed with #366 but there are a few remaining places needing changing to support elasticsearch v8 breaking changes:
The
date_histogram
aggregation’s interval parameter is no longer valid.Details It is now an error to specify the interval parameter to the
date_histogram
aggregation or the compositedate_histogram
source. Instead, please use eithercalendar_interval
orfixed_interval
as appropriate.