PPL and data stream indexes failing

[ewingate00]

What happened: When trying to query a data stream with backing indexes using PPL, the query times out and never returns results (See screenshot below). If you query the data stream backing index directly, it works, however we are trying to query all backing indexes within the data stream.

Querying the data stream eks_usw2dev:

Querying one of the data stream backing indexes directly:

Also worth mentioning that if I test the PPL query directly in Opensearch Dev tools, it works and returns results:
POST /_plugins/_ppl { "query": "source=eks_usw2dev | fields @timestamp,message | head 10" }

What you expected to happen: When searching the data stream using PPL, results should be returned. I should not have to individually reference the backing indexes.

How to reproduce it (as minimally and precisely as possible): Query a data stream index using PPL.

Anything else we need to know?: Nothing else.

Environment: prod

• Grafana version: AWS managed Grafana v10.4.1
• OpenSearch version: AWS Opensearch service v 2.15.0
• Plugin version: 2.24.0

[idastambuk]

Hi @ewingate00 I can't reproduce this - when I query a data stream by name, I don't get an error in my test environment.
The error string itself makes me wonder if this is related to the setup of your datasource. What did you put for the Index name, time field and pattern?