Kibana Dashboard not showing all data

[steven97]

I have set up a test environment recently with an Elasticsearch cluster, a Logstash and a Kibana server.
I use it to monitor serveral ESXi hosts, collecting their messages. Everything works fine, I have build up a dashboard, created the visualizations by my own.

My problem I have encountered is that while viewing the dashboard, it doesn't show all data from all hosts.

In this image visible are only 11 hosts and only debug messages. We have added 15 hosts and we are not only receiving debug messages.

Inspecting the visualization there are clearly more hosts than before. There are 14 hosts. (One host is down so it won't log anything)

Also there are clearly more than just debug messages.

I have tried to fix it by recreating the diagrams, but nothing worked.
Does anyone know how to fix this?

Thanks

[rijinmp (Rijin)]

Try to confirm all hosts logs are present in discover menu.

search your all host names in discover menu consisting search engine .

if any hosts are not present here , that means... that hosts's logs are not shipping to elasticsearch

[steven97]

I can confirm that all logs are visible in the Discover Menu. Except the host being down, all hosts have sent logs.

Also when in the dashboard, I can filter to exclude hosts or message types showing the remaining messages, but again not all hosts.

Removing the filter only shows debug messages.

[steven97]

I have found the problem: The donut pie charts and the table were split by using "significant terms" instead of "terms" for the aggregation. Having this changed, everything is now shown.

Thanks anyway.