Unable to generate CSV from Discover query -> [index_closed_exception]

Elastic Stack Kibana
1

we are using Kibana 7.3.0

I'm trying to download CSV output from a Discover query.

I saved the query, went to Share -> CSV Reports -> Generate CSV ... it spins for a few seconds and then returns an error that it can't generate the CSV.

When I navigate to Management -> Reporting, I see the failed report.

The full error message is

Unable to generate report

[index_closed_exception] closed, with { index_uuid="MshOUSAbTmiJnTYgxz5keA" & index="reindexed-v7-prod-metrics-2019.02.12" } :: {"path":"/prod-metrics-*/_search","query":{"scroll":"30s","size":500},"body":"{"stored_fields":["@timestamp","vendor","message"],"query":{"bool":{"filter":[{"multi_match":{"query":"dhcp","type":"best_fields","lenient":true}}],"must_not":,"should":,"must":[{"range":{"@timestamp":{"format":"strict_date_optional_time","gte":"2019-12-30T11:00:00.000Z","lte":"2019-12-30T11:30:00.000Z"}}}]}},"script_fields":{},"_source":{"excludes":,"includes":["@timestamp","vendor","message"]},"docvalue_fields":,"sort":[{"@timestamp":{"unmapped_type":"boolean","order":"desc"}}],"version":true}","statusCode":400,"response":"{"error":{"root_cause":[{"type":"index_closed_exception","reason":"closed","index_uuid":"MshOUSAbTmiJnTYgxz5keA","index":"reindexed-v7-prod-metrics-2019.02.12"}],"type":"index_closed_exception","reason":"closed","index_uuid":"MshOUSAbTmiJnTYgxz5keA","index":"reindexed-v7-prod-metrics-2019.02.12"},"status":400}"}

any help is appreciated.

2

It seems like your CSV report is hitting closed indices - are there closed indices included in the index pattern you used in Discover? If yes please create an index pattern that only includes the open indices you actually want to look into or open all indices matching your index pattern - e.g. POST /reindexed-v7-prod-metrics-2019.02.12/_open (but there might be others).

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.