Can you tell us what version of Kibana you're using and how you created the rollup jobs? Did you use the Kibana interface or the API? If you used Kibana maybe you could post a screenshot of the rollup configuration.
When you're looking at this data, I think you're look at in in Discover? Do these values change when you select a smaller time range? I'm not sure what version of Kibana this changed in, but you used to see text below the histogram in Discover that showed the duration of each bar. You can manually set that as well but you may be using the Auto time interval.
Well, for the first time i noticed it while creating a visualization, then i check the values in Discover.
Values are not changing, they are same. I do not see any reasonable explanation why i am getting values like this.
But what I also found is that if you look at the rollup date with some visualization the data appears correct. As I noted in that issue I filed, I can create a Data Table in Lens and the data appears as I expect. Please see if this also gives you the expected results.
I'm reaching out to a few other people for suggestions in debugging your issue. You mentioned that;
How many different devices do you have rollup jobs for?
Do any of your rollup jobs have 1 hour intervals?
Are the index names, and the rollup index names all unique enough that they couldn't interfere with each other?
Was this problematic rollup job created before the other working ones, or after? I'm thinking there must be something different either about the input data or the rollup job configuration itself. Have you tried deleting this rollup job and the rollup index and re-creating it?
Around 200 devices.
Yes, i have 1h interval too. There it is even more strange, records i have in 5min are missing in 1h and opposite.
5min is called 5min-stats, 1h is called 1h-stats
Yes, i tried to delete the job and create it again, but same results.