Logstash successfully imported 1m docs from my csv file - perfectly.
Using dev console GET /_cat/indices?v says my index has 1m docs - perfect.
I goto the discover tab and the most docs it will display are 27k. I set the time frame to show all docs). I have previously created and deleted this index name to import sample data.
Is this issue Kibana or Elasticsearch? How do I get the 1m docs to show in Discover tab.
Is it possible that not all of your documents have a @timestamp field?
If you click on the button beneath the chart, you should be able to see the actual request that is made to Elasticsearch. Perhaps you could try grabbing that request and sending it in Console. Could you let us know what the result of doing that is?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.