[Data] Take into account failure-store selector

src/platform/packages/shared/kbn-es-query/src/utils.test.ts

@@ -30,5 +30,17 @@ describe('util tests', () => {
     it('should validate CCS pattern', () => {
       expect(isCCSRemoteIndexName('*:logstash-{now/d-2d}')).toBe(true);
     });
+
+    it('should not validate selctor with wildcard', () => {
+      expect(isCCSRemoteIndexName('my-data-stream::*')).toBe(false);
+    });
+
+    it('should not validate index name with selector', () => {
+      expect(isCCSRemoteIndexName('my-data-stream::failures')).toBe(false);
+    });
+
+    it('should not validate wildcard with selector', () => {
+      expect(isCCSRemoteIndexName('-logs-*::data')).toBe(false);
+    });
   });
 });

src/platform/packages/shared/kbn-es-query/src/utils.ts

@@ -42,7 +42,7 @@ export function getDataViewFieldSubtypeMulti(field: HasSubtype) {
  * The index name is assumed to be individual index (no commas) but can contain `-`, wildcards,
  * datemath, remote cluster name and any other syntax permissible in index expression component.
  *
- * 2024/10/11 Implementation taken from https://github.com/smalyshev/elasticsearch/blob/main/server/src/main/java/org/elasticsearch/transport/RemoteClusterAware.java
+ * 2025/01/21 Implementation taken from https://github.com/smalyshev/elasticsearch/blob/main/server/src/main/java/org/elasticsearch/transport/RemoteClusterAware.java
  *
  * @param indexExpression
  */
@@ -52,6 +52,11 @@ export function isCCSRemoteIndexName(indexExpression: string): boolean {
     // Thus, whatever it is, this is definitely not a remote index.
     return false;
   }
+
+  const idx = indexExpression.indexOf(':');
+  // Check to make sure the remote cluster separator ':' isn't actually a selector separator '::'
+  const isSelector = indexExpression.startsWith('::', idx);
+
   // Note remote index name also can not start with ':'
-  return indexExpression.indexOf(':') > 0;
+  return idx > 0 && !isSelector;
 }