From dba32a1c5b5a03909d855ea099a7a0c7fc41dc7c Mon Sep 17 00:00:00 2001
From: wanjunlei <wanjunlei@yunify.com>
Date: Wed, 24 Jun 2020 16:26:51 +0800
Subject: [PATCH] fix bug total result of auditing time topology error

---
 pkg/simple/client/auditing/elasticsearch/elasticsearch.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/simple/client/auditing/elasticsearch/elasticsearch.go b/pkg/simple/client/auditing/elasticsearch/elasticsearch.go
index ee7e972e6..7b8ef64a2 100644
--- a/pkg/simple/client/auditing/elasticsearch/elasticsearch.go
+++ b/pkg/simple/client/auditing/elasticsearch/elasticsearch.go
@@ -123,7 +123,7 @@ func (es *Elasticsearch) CountOverTime(filter *auditing.Filter, interval string)
 	if err := json.Unmarshal(raw, &agg); err != nil {
 		return nil, err
 	}
-	histo := auditing.Histogram{Total: int64(len(agg.Buckets))}
+	histo := auditing.Histogram{Total: resp.Hits.Total}
 	for _, b := range agg.Buckets {
 		histo.Buckets = append(histo.Buckets,
 			auditing.Bucket{Time: b.Key, Count: b.DocCount})