OpenSearch logging system: Known issues

[pburkholder]

In order to keep customers up-to-date with known issues with our new Opensearch-based logging system, we have documented the issues reported to us here.

If you encounter an issue not listed below, please describe it in an email to [email protected].

Update on the CSV reports missing Timestamp issue, there's a potentially easier workaround

1. Export the saved search
2. Edit the .ndjson file and add "timestamp" the config like below
   a. Before: {"attributes":{"columns":["data.clusterName","data.realmId","data.type"....
   b. After: {"attributes":{"columns":["timestamp","data.clusterName","data.realmId","data.type"
3. Import the .ndjson file back to saved objects. Now you can see the timestamp column and it's visible in the CSV report.

Known Issues

Preview Give feedback

1. Until Wednesday, November 26: Some logs may not be visible in the new system, and this is expected until we complete ingesting historical logs and start ingesting real-time logs. Update: As of Dec 3, 2024, live ingest is working.
2. Generating CSV reports results in error -- Insufficient permissions opensearch-boshrelease#128
   squad-success +1
   
3. Issues with database log imports opensearch-boshrelease#130
   squad-success +1
   
4. [BUG] Reporting menu link doesn't appear in mobile or small window views opensearch-project/dashboards-reporting#57
   bug +1
   
5. Attribute label changes may break imported searches opensearch-boshrelease#139
   +0
6. CSV reports missing the Time field [BUG] opensearch-project/dashboards-reporting#335
   bug +1