Confusion Regarding Unstable Bucket-ing in Kibana Visualizations

[LeeDr (Lee Drengenberg)]

I tried a similar chart but didn't reproduce your problem. But I know I have seen other posts like this. Here's one;

Different Results Based on Aggregation Size

@Shane_Daniel, I agree that the results that you mentioned do sound suspect, and would like to investigate it further, but need to be able to reproduce the issue. I tried to recreate what you described above. I assume it's because the demo data changed since you set this up. (see image to make sure I didn't screw anything up) [image]

In it, they used the advanced JSON input field to set the "shard_size": 0 but I'm trying that and it's giving me an error. I'm still looking into it.