Docs count in elasticsearch and hits in kibana don't match


#1

I just started using elasticsearch and kibana this week.

Here is the document count of my index (day based):

-> curl localhost:9200/_cat/indices/squid-2016.05.15*?v
health status index pri rep docs.count docs.deleted store.size pri.store.size
yellow open squid-2016.05.15 5 1 9039596 0 7.1gb 7.1gb

Here is what Kibana shows:

So why the difference in the count/hits? Notice the search bar in kibana does not have any query. I was expecting to see 9039596 hits but I see 9703102.

Can someone please help.

Thanks.


(Lukas Olson) #2

Hmm, this could possibly be a timezone issue. Which version of Kibana are you using?

I would recommend switching away from using an index pattern that uses the "Use event times to create index names" option, because it may produce unreliable results. Kibana is now intelligent enough when you use a wildcard index pattern to only query the indices associated with your given time range.


#3

Hey Lucas,

Appreciate your quick response. I'm using Kibana 4.1.1

My index contains time-based events.


(system) #4