diff --git a/alerting/src/main/kotlin/org/opensearch/alerting/transport/TransportGetWorkflowAlertsAction.kt b/alerting/src/main/kotlin/org/opensearch/alerting/transport/TransportGetWorkflowAlertsAction.kt index 633c76141..b95e2b18d 100644 --- a/alerting/src/main/kotlin/org/opensearch/alerting/transport/TransportGetWorkflowAlertsAction.kt +++ b/alerting/src/main/kotlin/org/opensearch/alerting/transport/TransportGetWorkflowAlertsAction.kt @@ -246,7 +246,7 @@ class TransportGetWorkflowAlertsAction @Inject constructor( searchRequest.source().sort(sortBuilder).size(tableProp.size).from(tableProp.startIndex) } queryBuilder.must(QueryBuilders.termsQuery("_id", associatedAlertIds)) - queryBuilder.must(QueryBuilders.termQuery(Alert.STATE_FIELD, Alert.State.AUDIT)) + queryBuilder.must(QueryBuilders.termQuery(Alert.STATE_FIELD, Alert.State.AUDIT.name)) searchRequest.source().query(queryBuilder) val response: SearchResponse = client.suspendUntil { search(searchRequest, it) } associatedAlerts.addAll(parseAlertsFromSearchResponse(response)) diff --git a/alerting/src/main/kotlin/org/opensearch/alerting/workflow/CompositeWorkflowRunner.kt b/alerting/src/main/kotlin/org/opensearch/alerting/workflow/CompositeWorkflowRunner.kt index 1de6c87e4..a4cee80d0 100644 --- a/alerting/src/main/kotlin/org/opensearch/alerting/workflow/CompositeWorkflowRunner.kt +++ b/alerting/src/main/kotlin/org/opensearch/alerting/workflow/CompositeWorkflowRunner.kt @@ -305,7 +305,7 @@ object CompositeWorkflowRunner : WorkflowRunner() { SearchRequest(getDelegateMonitorAlertIndex(dataSources, workflow, monitorCtx.alertIndices!!.isAlertHistoryEnabled())) val queryBuilder = boolQuery() queryBuilder.must(QueryBuilders.termQuery("execution_id", executionId)) - queryBuilder.must(QueryBuilders.termQuery("state", getDelegateMonitorAlertState(workflow))) + queryBuilder.must(QueryBuilders.termQuery("state", getDelegateMonitorAlertState(workflow).name)) val noErrorQuery = boolQuery() .should(boolQuery().mustNot(existsQuery(Alert.ERROR_MESSAGE_FIELD))) .should(termsQuery(Alert.ERROR_MESSAGE_FIELD, ""))