From f447612da7590baf8130a1e888cd27b177c6806d Mon Sep 17 00:00:00 2001
From: Or Ouziel <or.ouziel@elastic.co>
Date: Mon, 18 Apr 2022 17:25:57 +0300
Subject: [PATCH] use index with keyword mappingg

---
 .../public/pages/findings/use_findings.ts                       | 1 +
 .../public/pages/findings/use_findings_count.ts                 | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings.ts b/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings.ts
index cf101c2a8445d..8754bdf390ef7 100644
--- a/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings.ts
+++ b/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings.ts
@@ -78,6 +78,7 @@ export const getFindingsQuery = ({
   from,
   sort,
 }: Omit<UseFindingsOptions, 'error'>) => ({
+  index,
   query,
   size,
   from,
diff --git a/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings_count.ts b/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings_count.ts
index e29944d94a929..5a9e0411910e6 100644
--- a/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings_count.ts
+++ b/x-pack/plugins/cloud_security_posture/public/pages/findings/use_findings_count.ts
@@ -29,7 +29,7 @@ export const getFindingsCountAggQuery = ({ index, query }: Omit<FindingsBaseQuer
   track_total_hits: true,
   body: {
     query,
-    aggs: { count: { terms: { field: 'result.evaluation' } } },
+    aggs: { count: { terms: { field: 'result.evaluation.keyword' } } },
   },
 });