I have set up a test environment recently with an Elasticsearch cluster, a Logstash and a Kibana server.
I use it to monitor serveral ESXi hosts, collecting their messages. Everything works fine, I have build up a dashboard, created the visualizations by my own.
My problem I have encountered is that while viewing the dashboard, it doesn't show all data from all hosts.
In this image visible are only 11 hosts and only debug messages. We have added 15 hosts and we are not only receiving debug messages.
Inspecting the visualization there are clearly more hosts than before. There are 14 hosts. (One host is down so it won't log anything)
Also there are clearly more than just debug messages.
I have tried to fix it by recreating the diagrams, but nothing worked.
Does anyone know how to fix this?