[CI] MixedClusterEsqlSpecIT test {stats.Count_or_null SYNC} failing

[elasticsearchmachine]

Build Scans:

• elasticsearch-periodic #3429 / 8.11.4_bwc
• elasticsearch-periodic #3425 / 8.11.4_bwc

Reproduction Line:

./gradlew ":x-pack:plugin:esql:qa:server:mixed-cluster:v8.11.4#javaRestTest" -Dtests.class="org.elasticsearch.xpack.esql.qa.mixed.MixedClusterEsqlSpecIT" -Dtests.method="test {stats.Count_or_null SYNC}" -Dtests.seed=5DFF98C723FD59A7 -Dtests.bwc=true -Dtests.locale=nb -Dtests.timezone=Africa/Lubumbashi -Druntime.java=22

Applicable branches:
main

Reproduces locally?:
N/A

Failure History:
See dashboard

Failure Message:

org.elasticsearch.client.ResponseException: method [POST], host [http://[::1]:38859], URI [/_query?format=cbor&pretty=true&error_trace=true], status line [HTTP/1.1 400 Bad Request]
Warnings: [No limit defined, adding default limit of [500]]
¿eerror¿jroot_cause�¿dtypevverification_exceptionfreasonxãFound 2 problems
line 2:9: aggregate function's field must be an attribute or literal; found [n > 0 OR NULL] of type [Or]
line 2:31: aggregate function's field must be an attribute or literal; found [n < 0 OR NULL] of type [Or]kstack_tracey
áorg.elasticsearch.xpack.esql.analysis.VerificationException: Found 2 problems
line 2:9: aggregate function's field must be an attribute or literal; found [n > 0 OR NULL] of type [Or]
line 2:31: aggregate function's field must be an attribute or literal; found [n < 0 OR NULL] of type [Or]
	at org.elasticsearch.xpack.esql.analysis.Analyzer.verify(Analyzer.java:113)
	at org.elasticsearch.xpack.esql.analysis.Analyzer.analyze(Analyzer.java:107)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$analyzedPlan$2(EsqlSession.java:143)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$preAnalyze$5(EsqlSession.java:168)
	at [email protected]/org.elasticsearch.action.ActionListener$2.onResponse(ActionListener.java:177)
	at org.elasticsearch.xpack.esql.session.EsqlSession.preAnalyzeIndices(EsqlSession.java:206)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$preAnalyze$6(EsqlSession.java:166)
	at [email protected]/org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236)
	at [email protected]/org.elasticsearch.action.ActionListener$4.onResponse(ActionListener.java:330)
	at [email protected]/org.elasticsearch.action.support.RefCountingListener.finish(RefCountingListener.java:121)
	at [email protected]/org.elasticsearch.core.AbstractRefCounted$1.closeInternal(AbstractRefCounted.java:117)
	at [email protected]/org.elasticsearch.core.AbstractRefCounted.decRef(AbstractRefCounted.java:69)
	at [email protected]/org.elasticsearch.action.support.RefCountingRunnable.close(RefCountingRunnable.java:116)
	at [email protected]/org.elasticsearch.action.support.RefCountingListener.close(RefCountingListener.java:114)
	at org.elasticsearch.xpack.esql.session.EsqlSession.preAnalyze(EsqlSession.java:176)
	at org.elasticsearch.xpack.esql.session.EsqlSession.analyzedPlan(EsqlSession.java:141)
	at org.elasticsearch.xpack.esql.session.EsqlSession.optimizedPlan(EsqlSession.java:290)
	at org.elasticsearch.xpack.esql.session.EsqlSession.physicalPlan(EsqlSession.java:298)
	at org.elasticsearch.xpack.esql.session.EsqlSession.optimizedPhysicalPlan(EsqlSession.java:306)
	at org.elasticsearch.xpack.esql.session.EsqlSession.execute(EsqlSession.java:111)
	at org.elasticsearch.xpack.esql.execution.PlanExecutor.esql(PlanExecutor.java:67)
	at org.elasticsearch.xpack.esql.plugin.TransportEsqlQueryAction.doExecuteForked(TransportEsqlQueryAction.java:102)
	at org.elasticsearch.xpack.esql.plugin.TransportEsqlQueryAction.lambda$doExecute$0(TransportEsqlQueryAction.java:86)
	at [email protected]/org.elasticsearch.action.ActionRunnable$3.doRun(ActionRunnable.java:73)
	at [email protected]/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)
	at [email protected]/org.elasticsearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:33)
	at [email protected]/org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:983)
	at [email protected]/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	at java.base/java.lang.Thread.run(Thread.java:1583)
ÿÿdtypevverification_exceptionfreasonxãFound 2 problems
line 2:9: aggregate function's field must be an attribute or literal; found [n > 0 OR NULL] of type [Or]
line 2:31: aggregate function's field must be an attribute or literal; found [n < 0 OR NULL] of type [Or]kstack_tracey
áorg.elasticsearch.xpack.esql.analysis.VerificationException: Found 2 problems
line 2:9: aggregate function's field must be an attribute or literal; found [n > 0 OR NULL] of type [Or]
line 2:31: aggregate function's field must be an attribute or literal; found [n < 0 OR NULL] of type [Or]
	at org.elasticsearch.xpack.esql.analysis.Analyzer.verify(Analyzer.java:113)
	at org.elasticsearch.xpack.esql.analysis.Analyzer.analyze(Analyzer.java:107)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$analyzedPlan$2(EsqlSession.java:143)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$preAnalyze$5(EsqlSession.java:168)
	at [email protected]/org.elasticsearch.action.ActionListener$2.onResponse(ActionListener.java:177)
	at org.elasticsearch.xpack.esql.session.EsqlSession.preAnalyzeIndices(EsqlSession.java:206)
	at org.elasticsearch.xpack.esql.session.EsqlSession.lambda$preAnalyze$6(EsqlSession.java:166)
	at [email protected]/org.elasticsearch.action.ActionListenerImplementations$ResponseWrappingActionListener.onResponse(ActionListenerImplementations.java:236)
	at [email protected]/org.elasticsearch.action.ActionListener$4.onResponse(ActionListener.java:330)
	at [email protected]/org.elasticsearch.action.support.RefCountingListener.finish(RefCountingListener.java:121)
	at [email protected]/org.elasticsearch.core.AbstractRefCounted$1.closeInternal(AbstractRefCounted.java:117)
	at [email protected]/org.elasticsearch.core.AbstractRefCounted.decRef(AbstractRefCounted.java:69)
	at [email protected]/org.elasticsearch.action.support.RefCountingRunnable.close(RefCountingRunnable.java:116)
	at [email protected]/org.elasticsearch.action.support.RefCountingListener.close(RefCountingListener.java:114)
	at org.elasticsearch.xpack.esql.session.EsqlSession.preAnalyze(EsqlSession.java:176)
	at org.elasticsearch.xpack.esql.session.EsqlSession.analyzedPlan(EsqlSession.java:141)
	at org.elasticsearch.xpack.esql.session.EsqlSession.optimizedPlan(EsqlSession.java:290)
	at org.elasticsearch.xpack.esql.session.EsqlSession.physicalPlan(EsqlSession.java:298)
	at org.elasticsearch.xpack.esql.session.EsqlSession.optimizedPhysicalPlan(EsqlSession.java:306)
	at org.elasticsearch.xpack.esql.session.EsqlSession.execute(EsqlSession.java:111)
	at org.elasticsearch.xpack.esql.execution.PlanExecutor.esql(PlanExecutor.java:67)
	at org.elasticsearch.xpack.esql.plugin.TransportEsqlQueryAction.doExecuteForked(TransportEsqlQueryAction.java:102)
	at org.elasticsearch.xpack.esql.plugin.TransportEsqlQueryAction.lambda$doExecute$0(TransportEsqlQueryAction.java:86)
	at [email protected]/org.elasticsearch.action.ActionRunnable$3.doRun(ActionRunnable.java:73)
	at [email protected]/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)
	at [email protected]/org.elasticsearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:33)
	at [email protected]/org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:983)
	at [email protected]/org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	at java.base/java.lang.Thread.run(Thread.java:1583)
ÿfstatus���ÿ

Issue Reasons:

• [main] 2 consecutive failures in test test {stats.Count_or_null SYNC}
• [main] 2 consecutive failures in step 8.11.4_bwc
• [main] 2 consecutive failures in pipeline elasticsearch-periodic
• [main] 2 failures in test test {stats.Count_or_null SYNC} (100.0% fail rate in 2 executions)
• [main] 2 failures in step 8.11.4_bwc (100.0% fail rate in 2 executions)
• [main] 2 failures in pipeline elasticsearch-periodic (100.0% fail rate in 2 executions)

Note:
This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

[elasticsearchmachine]

Pinging @elastic/es-analytical-engine (Team:Analytics)