# Explain me what is all wrong in Devtool?

**URL:** <https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975>\
**Category:** Elasticsearch\
**Created:** [August 14, 2017, 2:08pm UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975 "2017-08-14T14:08:02Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Beuhlet\_Reseau](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Post date:** [August 14, 2017, 2:08pm UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/1 "2017-08-14T14:08:02Z")

</div>

Hello,

I upload lots of data in my els cluster.

When i display indice in kibana (GET indices) i find anormal result no ?

It's normal for you ? :

`green open cra-2017.08.14 eu_NMngAQrmySQVz7_XWqA 3 1 690924 173436 295.5mb 147.2mb`

So, that means Els have stored 690 924 lines and deleted 173 436 ??!!

---

<div class="post-metadata">

**Author:** ![Beuhlet\_Reseau](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Post date:** [August 14, 2017, 2:44pm UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/2 "2017-08-14T14:44:01Z")

</div>

It's seems when i delete field "message" in logstash conf, This increments the counter of deleted rows on kibana

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [August 16, 2017, 4:56pm UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/3 "2017-08-16T16:56:19Z")

</div>

I moved your post to Elasticsearch channel since this is about the data reported by Elasticsearch.

Can you describe the exact steps you took to delete field "message" ? Maybe attach your logstash.conf. I would think that changing your logstash.conf only impacts new docs added to Elasticsearch and doesn't do any deletes.

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [August 16, 2017, 5:02pm UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/4 "2017-08-16T17:02:01Z")

</div>

It looks like you have either deleted and/or updated documents in the index, as both these actions would cause the deleted counter to be incremented. Are you letting Elasticsearch assign document ids, or do you set there in the indexing pipeline?

---

<div class="post-metadata">

**Author:** ![Beuhlet\_Reseau](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Post date:** [August 17, 2017, 11:25am UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/5 "2017-08-17T11:25:35Z")

</div>

Ok thank you all

I delete message field so, i see it's a counter, not the total lines.

It's all good 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 14, 2017, 11:25am UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975/6 "2017-09-14T11:25:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.