# Canvas Expression failures

**URL:** <https://discuss.elastic.co/t/canvas-expression-failures/358489>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring\
**Created:** [April 30, 2024, 11:41am UTC](https://discuss.elastic.co/t/canvas-expression-failures/358489 "2024-04-30T11:41:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ercan\_OLMEZ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ercan_olmez/32/122219_2.png) [@Ercan\_OLMEZ](https://discuss.elastic.co/u/Ercan_OLMEZ)\
**Post date:** [April 30, 2024, 11:41am UTC](https://discuss.elastic.co/t/canvas-expression-failures/358489/1 "2024-04-30T11:41:10Z")

</div>

Hi,

While using kibana canvas we are facing this error  
"Expression failed with the message:

[essql] \> Unexpected error from Elasticsearch: search\_phase\_execution\_exception - Partial shards failure"

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/7/670709990847584bdc3d7a6eba15a8c3c501d0ac.png)

i dont know why it happens but problem randomly happens on different elements

this is an example of kql and expression

filters  
| essql  
query="SELECT _,  
CASE  
WHEN LastBatchStatus = 'Failed' THEN 'red'  
WHEN CurrentStatus = 'Overtime' THEN '#f5c542'  
WHEN CurrentStatus = 'Failed' THEN 'red'  
WHEN BatchControl = 'Kurulumlar baslamamistir.' THEN '#f5c542'  
ELSE '#AAB8C2'  
END AS LastBatchStatus  
FROM "other-logs_"  
WHERE host.hostname = 'p3gop21'  
ORDER BY "@timestamp" DESC  
LIMIT 1"  
| mapColumn "LastBatchStatus" expression={getCell "LastBatchStatus"}  
| render  
containerStyle={containerStyle backgroundColor={getCell "LastBatchStatus"} border={getCell "LastBatchStatus"} opacity="0.5"} css=".canvasRenderEl{  
display: none;  
}"

beyond expression failure it works really fine can someone explain why it happens?

---

<div class="post-metadata">

**Author:** ![Ercan\_OLMEZ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ercan_olmez/32/122219_2.png) [@Ercan\_OLMEZ](https://discuss.elastic.co/u/Ercan_OLMEZ)\
**Post date:** [April 30, 2024, 11:45am UTC](https://discuss.elastic.co/t/canvas-expression-failures/358489/2 "2024-04-30T11:45:20Z")

</div>

as you see below it happens randomly

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e0e81db8232d4c7353cdc1574bf17e94b8c415d9.png)

---

<div class="post-metadata">

**Author:** ![Ercan\_OLMEZ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ercan_olmez/32/122219_2.png) [@Ercan\_OLMEZ](https://discuss.elastic.co/u/Ercan_OLMEZ)\
**Post date:** [May 7, 2024, 2:09am UTC](https://discuss.elastic.co/t/canvas-expression-failures/358489/3 "2024-05-07T02:09:02Z")

</div>

Hi everyone,

problem was about my kibana query 'FROM "other-logs\*"' this metric has too many indexes so data to eliminate was huge. I cleaned old indexes and now it works fine. Now i need to switch other-logs\* wild card to something like other-logs-$date to inspect only last index