Fix PIT issue (elastic#176699)

fkanout · Mar 4, 2024 · bd31a5b · bd31a5b
1 parent d4dce2f
commit bd31a5b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/x-pack/plugins/security_solution/server/lib/telemetry/receiver.ts b/x-pack/plugins/security_solution/server/lib/telemetry/receiver.ts
@@ -450,7 +450,6 @@ export class TelemetryReceiver implements ITelemetryReceiver {
       pit: { id: pitId },
       search_after: searchAfter,
       size: telemetryConfiguration.telemetry_max_buffer_size,
-      expand_wildcards: ['open' as const, 'hidden' as const],
     };
 
     let response = null;
@@ -461,7 +460,7 @@ export class TelemetryReceiver implements ITelemetryReceiver {
 
         if (numOfHits > 0) {
           const lastHit = response?.hits.hits[numOfHits - 1];
-          searchAfter = lastHit?.sort;
+          query.search_after = lastHit?.sort;
         } else {
           fetchMore = false;
         }
@@ -807,6 +806,7 @@ export class TelemetryReceiver implements ITelemetryReceiver {
       await this.esClient.openPointInTime({
         index: `${indexPattern}*`,
         keep_alive: keepAlive,
+        expand_wildcards: ['open' as const, 'hidden' as const],
       })
     ).id;