Big terms ignored in terms aggregation?

Elastic Stack Elasticsearch
1

Hello all,

I designed the following simple data table count, in order to count the H_message string field.

Capture du 2016-09-08 17:40:46.png1280×894 44.2 KB

After some hours of searching, I realized that only "short" fields are taken in account.

When the H_message string field is too long, it is simply ignored.

Any idea ? Kibana bug or my fault ?

Thanks in advance,
Marc

2

The data that Kibana shows is powered by elasticsearch, Kibana doesn't impose any limits on the data that would cause this. I'll push this question over to the elasticsearch category for that reason.