# ELK 6.1.1 indices document count mismatch

**URL:** <https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701>\
**Category:** Elasticsearch\
**Created:** [February 6, 2018, 6:33pm UTC](https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701 "2018-02-06T18:33:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![m1chael](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/m1chael/32/22590_2.png) [@m1chael](https://discuss.elastic.co/u/m1chael)\
**Post date:** [February 6, 2018, 6:33pm UTC](https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701/1 "2018-02-06T18:33:48Z")

</div>

Hello.

I am running two ELK servers, one is running 5.5.3 and my new one is running 6.1.1.

Now I started last week to index all data in my database which is the source for both servers. Eventually I will retire the 5.5.3 server.

This morning is saw a clear mismatch in the indices document count.

examples:  
index B1 has 5886 docs, but there should be 6791 docs  
index B2 has 2,248,598 docs, but there should be 2,389,518 docs  
index B3 has 72,547 docs, but there should be 74.283 docs

and so on. I have about 8 indices synced with my database (MSSQL 2014) so far, all them show way less documents then they should be.  
I double checked everything with the synced indices in 5.5.3 and found that is correct in there.

So only 6.1.1 show me a problem.

I use logstash to index the data from my database. The sql-statement in the conf-file is the same.  
The logfile doesn't show any error.

Any help is greatly appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 6, 2018, 6:33pm UTC](https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701/2 "2018-03-06T18:33:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
