Error searching, probably (Global Serach plugin) error. ELK 7.9.1

[mdecastrosimon]

When I am trying to search any word withous specify the field I am obtaining this error:

search_phase_execution_exception
all shards failed
Error: Bad Request at Fetch._callee3$ (http://127.0.0.1:5601/33912/bundles/core/core.entry.js:34:109213) at l (http://127.0.0.1:5601/33912/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:155323) at Generator._invoke (http://127.0.0.1:5601/33912/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:155076) at Generator.forEach.e.<computed> [as next] (http://127.0.0.1:5601/33912/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:155680) at fetch_asyncGeneratorStep (http://127.0.0.1:5601/33912/bundles/core/core.entry.js:34:102354) at _next (http://127.0.0.1:5601/33912/bundles/core/core.entry.js:34:102670)

[thomasneirynck]

@mdecastrosimon

Can you try if your search works against Elasticsearch directly (without using the Kibana toolbar).

e.g. in Dev-tools, run

GET myindexpattern/_search?q=foobar

Does it return results or return shard errors?

[JulGor (Julio)]

I got that same problem once and it resulted that I had to change the value of the setting "indices.query.bool.max_clause_count" in my elasticsearch.yml file.

I don't know why, but when you use Discover from Kibana, it doesn't return the real error and return that string. If you go to the Dev console and launch the same query, you should get back an error like: "failed to create query: field expansion for [*] matches too many fields, limit: 1024, got: 1067"

I hope this helps.