[Stack Monitoring] Remove unexpected docs from persistentMetricsetsQu…

…ery portion of health API response (#134976)
elastic · Jun 23, 2022 · ecc1ec9 · ecc1ec9
1 parent 88c25a9
commit ecc1ec9
Showing 1 changed file with 41 additions and 25 deletions.
diff --git a/...ns/monitoring/server/routes/api/v1/_health/monitored_clusters/monitored_clusters_query.ts b/...ns/monitoring/server/routes/api/v1/_health/monitored_clusters/monitored_clusters_query.ts
@@ -56,11 +56,37 @@ export const monitoredClustersQuery = ({ timeRange, timeout }: QueryOptions) =>
 };
 
 /**
- * some metricset documents use a stable ID to maintain a single occurence of
+ * some metricset documents use a stable ID to maintain a single occurrence of
  * the documents in the index. we query those metricsets separately without
  * a time range filter
  */
 export const persistentMetricsetsQuery = ({ timeout }: QueryOptions) => {
+  const shardMatches = [
+    {
+      term: {
+        type: 'shards',
+      },
+    },
+    {
+      term: {
+        'metricset.name': 'shard',
+      },
+    },
+  ];
+
+  const logstashStateMatches = [
+    {
+      term: {
+        type: 'logstash_state',
+      },
+    },
+    {
+      term: {
+        'metricset.name': 'node',
+      },
+    },
+  ];
+
   const metricsetsAggregations = {
     elasticsearch: {
       terms: {
@@ -71,18 +97,7 @@ export const persistentMetricsetsQuery = ({ timeout }: QueryOptions) => {
         shard: lastSeenByIndex({
           filter: {
             bool: {
-              should: [
-                {
-                  term: {
-                    type: 'shards',
-                  },
-                },
-                {
-                  term: {
-                    'metricset.name': 'shard',
-                  },
-                },
-              ],
+              should: shardMatches,
             },
           },
         }),
@@ -98,27 +113,28 @@ export const persistentMetricsetsQuery = ({ timeout }: QueryOptions) => {
         node: lastSeenByIndex({
           filter: {
             bool: {
-              should: [
-                {
-                  term: {
-                    type: 'logstash_state',
-                  },
-                },
-                {
-                  term: {
-                    'metricset.name': 'node',
-                  },
-                },
-              ],
+              should: logstashStateMatches,
             },
           },
         }),
       },
     },
   };
 
+  // Outer query on expected types to avoid catching kibana internal collection documents containing source_node.uuid
   return {
     timeout: `${timeout}s`,
+    query: {
+      bool: {
+        filter: [
+          {
+            bool: {
+              should: shardMatches.concat(logstashStateMatches),
+            },
+          },
+        ],
+      },
+    },
     aggs: {
       clusters: {
         terms: clusterUuidTerm,