Search code examples
elasticsearchkibanafilebeatelk

Kibana shows The data you are seeing might be incomplete or wrong

Configuring my elk stack => Kibana, elasticsearch and filebeat. All working fine but, when i wanted to view the logs on kibana, i recieved this error

1 of 8 shards failed The data you are seeing might be incomplete or wrong.

See response:

    {
      "took": 332,
      "timed_out": false,
      "_shards": {
        "total": 9,
        "successful": 8,
        "skipped": 8,
        "failed": 1,
        "failures": [
          {
            "shard": 0,
            "index": ".apm-agent-configuration",
            "node": "_KJoEVfvT9W8-ezUwcdPlg",
            "reason": {
              "type": "illegal_argument_exception",
              "reason": "Trying to retrieve too many docvalue_fields. Must be less 
                than or equal to: [100] but was [136]. This limit can be set by 
                 changing the [index.max_docvalue_fields_search] index level 
                   setting."
            }
          }
        ]
      },
      "hits": {
        "total": 0,
        "max_score": 0,
        "hits": []
      }
    }

Please, any idea to this?

Solution

  • The problem can be solved by changing the index.max_docvalue_fields_search setting for that index:

    PUT .apm-agent-configuration/_settings
{
  "index.max_docvalue_fields_search": 200
}