Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Reporting documentation: ES configuration, avoiding Token expiration #208257

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

tsullivan
Copy link
Member

Summary

Closes #201281
Closes #200653

@tsullivan tsullivan added release_note:skip Skip the PR/issue when compiling release notes docs backport:prev-minor Backport to (8.x) the previous minor version (i.e. one version back from main) labels Jan 24, 2025
@tsullivan tsullivan requested a review from a team as a code owner January 24, 2025 18:59
Copy link
Contributor

A documentation preview will be available soon.

Request a new doc build by commenting
  • Rebuild this PR: run docs-build
  • Rebuild this PR and all Elastic docs: run docs-build rebuild

run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.

If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.

Reporting relies on Elasticsearch to install a mapping template for the data stream that stores reports. Ensure that Elasticsearch allows built-in
templates to be installed by keeping the `stack.templates.enabled` setting at the default value of `true`. For more information, see
{ref}/index-management-settings.html#stack-templates-enabled[Index management settings].

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure where is a great place to organize this information; it seems to minor to place at the top. I'm open to suggestions.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see what you mean. Maybe we could add it to the end? If you agree, you can commit my suggestion on line 34. It's an anchor link for this heading to match the rest of the headings


* You can work around this error by creating smaller reports: instead of one report covering a large time range, create multiple reports that cover segmented time ranges.
* Another workaround would be to increase `xpack.security.authc.token.timeout`, which is set to `20m` by default.
* To avoid token expirations completely, use a type of authentication that doesn't expire (such as Basic auth) or run the export using scripts that query Elasticsearch directly.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I copied this text directly from the GH issue, so the word choices are probably not the best in its first draft.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Tim! I've suggested a few changes for readability


The thing to note about this type of error is that the deployment is stable, it's just the size of a requested report is too large to complete within the time allowed by the authentication token available to the Reporting task.

==== Avoiding token expiration
Copy link
Contributor

@wajihaparvez wajihaparvez Jan 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this heading is causing the build to fail. I've changed the heading level to see if it works.

@tsullivan tsullivan added v8.15.0 v8.16.0 backport:version Backport to applied version labels v8.17.0 v8.18.0 and removed backport:prev-minor Backport to (8.x) the previous minor version (i.e. one version back from main) labels Jan 24, 2025

This means that the deployment is stable, but the size of the requested report is too large to complete within the time allowed by the authentication token available to the Reporting task.

=== Avoiding token expiration
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@wajihaparvez this section should be a sub-section of Token expiration. When I tried using ==== to give it a level-4 heading, I encountered an asciidoctor error of WARNING: user/reporting/reporting-csv-troubleshooting.asciidoc: line 97: section title out of sequence: expected level 3, got level 4. What needs to be done here?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you need a [float] before this section. I'll add one and we can wait to see if that fixes the build error

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! That did fix the problem for me locally

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like it worked!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:version Backport to applied version labels docs release_note:skip Skip the PR/issue when compiling release notes v8.15.0 v8.16.0 v8.17.0 v8.18.0
Projects
None yet
2 participants