Filter is occasionally including wrong results

Elastic Stack Elasticsearch
1

Cluster summary:

8 GB RAM
240 GB storage
1 node
2 zones
Version 7.4.2

46 shards

Query:

{
  "query": {
    "bool": {
      "filter": [
        {
          "term": {
            "id": "uuid"
          }
        },
        {
          "term": {
            "type": "text"
          }
        },
        {
          "nested": {
            "path": "accounts",
            "query": {
              "bool": {}
            }
          }
        }
      ]
    }
  },
  "from": 0,
  "size": "10",
  "sort": [
    {
      "createdAt": "asc"
    }
  ]
}

Mappings for searched fields

{
  "mapping": {
    "properties": {
      "type": {
        "type": "keyword"
      },
      "id": {
        "type": "keyword"
      }
    }
  }
}

Some times this query is returning results which should have been filtered by by the two term filters. There are no warnings in the logs. The index has ~80k documents, and is reporting ~75MB of data. There never seems to be a CPU/Mem event that coincides with this bard result. I have setup all the mappings for this index, they haven't been inferred. Around the last time this happened, it is reported that Search Rate went to 1/s, and indexing rate to 0.2/s, and JVM at 70% - these don't seem especially high?

We are using https://elastic-builder.js.org to generate the above query, so can rule our any threading issues with overlapping queries.

I should add that this is happening on another index in the same cluster. And I am unable to reproduce when using the devtools in Kibana.

Any ideas what could be causing this, or how to fix?

More details on the index:

General
Health green
Primaries 1
Docs Count 81144
Storage Size 73.6mb
Aliases none
Status open
Replicas 1
2

Can anyone help with this?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.