Canvas Expression failures

Elastic Stack Kibana
1

Hi,

While using kibana canvas we are facing this error
"Expression failed with the message:

[essql] > Unexpected error from Elasticsearch: search_phase_execution_exception - Partial shards failure"

image
image1511×548 119 KB

i dont know why it happens but problem randomly happens on different elements

this is an example of kql and expression

filters
| essql
query="SELECT ,
CASE
WHEN LastBatchStatus = 'Failed' THEN 'red'
WHEN CurrentStatus = 'Overtime' THEN '#f5c542'
WHEN CurrentStatus = 'Failed' THEN 'red'
WHEN BatchControl = 'Kurulumlar baslamamistir.' THEN '#f5c542'
ELSE '#AAB8C2'
END AS LastBatchStatus
FROM "other-logs"
WHERE host.hostname = 'p3gop21'
ORDER BY "@timestamp" DESC
LIMIT 1"
| mapColumn "LastBatchStatus" expression={getCell "LastBatchStatus"}
| render
containerStyle={containerStyle backgroundColor={getCell "LastBatchStatus"} border={getCell "LastBatchStatus"} opacity="0.5"} css=".canvasRenderEl{
display: none;
}"

beyond expression failure it works really fine can someone explain why it happens?

2

as you see below it happens randomly

image
image1526×553 117 KB

3

Hi everyone,

problem was about my kibana query 'FROM "other-logs*"' this metric has too many indexes so data to eliminate was huge. I cleaned old indexes and now it works fine. Now i need to switch other-logs* wild card to something like other-logs-$date to inspect only last index