KIbana Pie Chart Duplicates

Using a Pie Chart with a metric of Count and Terms under the Split Slices Bucket. The same term is listed on two slices. The underlying data is in elastic search and was loaded from data that was originally in SQL. The term count in SQL is 57184 for the term HARD INOP.. However the pie chart has HARD INOP listed twice. Once with a count of 54,802 and once with a count of 2,382.

Could you provide a screenshot?

GET /hadoopalarmevents-v1/_search
{ "query" : {
"term" : {
"ReportCategory" :
"HARD INOP"
}
}
}
{
"took": 2,
"timed_out": false,
"_shards": {
"total": 5,
"successful": 5,
"failed": 0
},
"hits": {
"total": 92662,
"max_score": 1.6108929,
"hits": [
{

Believe I found the answer just now.. Spaces in front of one of the values

GET /hadoopalarmevents-v1/alarms/_search
{
"size": 0,
"aggs": {
"distinct_categories": {
"terms": {
"field": "ReportCategory",
"size": 1000
}
}
}
}

{
"took": 11,
"timed_out": false,
"_shards": {
"total": 5,
"successful": 5,
"failed": 0
},
"hits": {
"total": 461172,
"max_score": 0,
"hits": []
},
"aggregations": {
"distinct_categories": {
"doc_count_error_upper_bound": 0,
"sum_other_doc_count": 0,
"buckets": [
{
"key": "SOFT INOP",
"doc_count": 183893
},
{
"key": "WARNING",
"doc_count": 151290
},
{
"key": "HARD INOP",
"doc_count": 92662
},
{
"key": "ARRHYTHMIA",
"doc_count": 24153
},
{
"key": "CRITICAL",
"doc_count": 8476
},
{
"key": "HARD INOP ",
"doc_count": 606
},
{
"key": "UNKNOWN",
"doc_count": 92
}
]
}
}
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.