Kibana dont show all messages in datatable


(Oleg Gorelikov) #1

Hello!
I created saved search, where i have messages with word "Ошибка". In this search i see all messages - its correct:

Then i need to see agregation by sum of this message in visualization. When i created visualization i see not all messages in this agregation

Can anyone help me?


(Oleg Gorelikov) #2

I found this messages. These strings having one value - "Missing". Why?


(Bhavya R M) #3

Hi,

You have the missing values enabled on your aggregation which is visible in your visualization editor. So missing is displaying the count of documents without the message.keyword in the last 24 hours.

https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-missing-aggregation.html

You can also create a visualization using a saved search. Can you please try saving your search query in discover and creating a visualization based on it?

Thanks,
Bhavya