# Kibana stops fetching the data from indices

**URL:** <https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109>\
**Category:** Kibana\
**Created:** [October 24, 2017, 6:01pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109 "2017-10-24T18:01:06Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 6:01pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/1 "2017-10-24T18:01:07Z")

</div>

Hi guys,  
I have strange issue that the kibana stops fetching the data from elastic search cluster. Logstash and elastic cluster works fine I can see new indices created and the new data comes in every second.  
please help  
Thanks  
T

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 24, 2017, 6:55pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/2 "2017-10-24T18:55:30Z")

</div>

You probably need to provide some additional information if anyone is going to be able to help. What version are you running? Is there anything in the logs? How have you identifierad that no data is fetched?

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 7:00pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/3 "2017-10-24T19:00:11Z")

</div>

Im running 5.3.1 for all ELK. There is nothing in the logs. It used to work just fine and we saw the data every 15 mins but I dont see it any more even longer period like 1 hour 1 week or more. As I said elasticsearch and logstash are working fine  
thanks

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 24, 2017, 7:04pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/4 "2017-10-24T19:04:32Z")

</div>

What is the status of Kibana? What does it look like when you open a dashboard? How long time period are you looking at? Does it improve if you show a smaller time period?

What is the size and specification of your cluster? How much data do you have in it?

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 7:25pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/5 "2017-10-24T19:25:22Z")

</div>

What is the status of Kibana? up and running (connected to elasticsearch)  
What does it look like when you open a dashboard? please check attachment  
How long time period are you looking at? different periods  
Does it improve if you show a smaller time period? no  
What is the size and specification of your cluster? 4 nodes with sharding  
How much data do you have in it? 50G  
keep in mind that the ELK had been working for around 4months until yesterday  
thanks!  
kibana|690x370

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 8:26pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/6 "2017-10-24T20:26:13Z")

</div>

I actually got this error when trying to reconfigure the same index pattern that used to work  
Oct 24 13:23:04 node-79-ny kibana: {"type":"response","@timestamp":"2017-10-24T20:23:04Z","tags":[],"pid":18203,"method":"get","statusCode":404,"req":{"url":"/elasticsearch/dsp-log-ec173\_2017-10-24/_mapping/field/\*?_=1508876584172&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true","method":"get","headers":{"host":"[kibana.x.x.x.x.com](http://kibana.x.x.x.x.com)","x-real-ip":"x.x.x.x","x-forwarded-for":"x.x.x.x","x-forwarded-proto":"http","connection":"close","accept":"application/json, text/plain, _/_","kbn-version":"5.3.1","user-agent":"Mozilla/5.0 (X11; Linux x86\_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/60.0.3112.78 Chrome/60.0.3112.78 Safari/537.36","referer":"[http://kibana.x.x.x.x.com/app/kibana","accept-encoding":"gzip](http://kibana.x.x.x.x.com/app/kibana%22,%22accept-encoding%22:%22gzip), deflate","accept-language":"en-US,en;q=0.8"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1","referer":"[http://kibana.x.x.x.x.com/app/kibana"},"res":{"statusCode":404,"responseTime":11,"contentLength":9},"message":"GET](http://kibana.x.x.x.x.com/app/kibana%22%7D,%22res%22:%7B%22statusCode%22:404,%22responseTime%22:11,%22contentLength%22:9%7D,%22message%22:%22GET) /elasticsearch/dsp-log-ec173\_2017-10-24/_mapping/field/\*?_=1508876584172&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true 404 11ms - 9.0B"}

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 8:27pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/7 "2017-10-24T20:27:56Z")

</div>

basically Kibana is unable to fetch mapping eventhough the elasticsearch cluster does have the indices matching the pattern

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 24, 2017, 8:31pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/8 "2017-10-24T20:31:41Z")

</div>

Can you provide the full output of the [cluster stats API](https://www.elastic.co/guide/en/elasticsearch/reference/5.6/cluster-stats.html) so we can get a better feel for the health and state of the cluster?

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 24, 2017, 10:18pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/9 "2017-10-24T22:18:27Z")

</div>

here you go  
{  
"\_nodes" : {  
"total" : 4,  
"successful" : 4,  
"failed" : 0  
},  
"cluster\_name" : "es173",  
"timestamp" : 1508883456135,  
"status" : "yellow",  
"indices" : {  
"count" : 6,  
"shards" : {  
"total" : 44,  
"primaries" : 26,  
"replication" : 0.6923076923076923,  
"index" : {  
"shards" : {  
"min" : 1,  
"max" : 10,  
"avg" : 7.333333333333333  
},  
"primaries" : {  
"min" : 1,  
"max" : 5,  
"avg" : 4.333333333333333  
},  
"replication" : {  
"min" : 0.0,  
"max" : 1.0,  
"avg" : 0.6  
}  
}  
},  
"docs" : {  
"count" : 163834008,  
"deleted" : 0  
},  
"store" : {  
"size" : "134.5gb",  
"size\_in\_bytes" : 144432793904,  
"throttle\_time" : "0s",  
"throttle\_time\_in\_millis" : 0  
},  
"fielddata" : {  
"memory\_size" : "0b",  
"memory\_size\_in\_bytes" : 0,  
"evictions" : 0  
},  
"query\_cache" : {  
"memory\_size" : "0b",  
"memory\_size\_in\_bytes" : 0,  
"total\_count" : 0,  
"hit\_count" : 0,  
"miss\_count" : 0,  
"cache\_size" : 0,  
"cache\_count" : 0,  
"evictions" : 0  
},  
"completion" : {  
"size" : "0b",  
"size\_in\_bytes" : 0  
},  
"segments" : {  
"count" : 799,  
"memory" : "510.7mb",  
"memory\_in\_bytes" : 535602271,  
"terms\_memory" : "473.8mb",  
"terms\_memory\_in\_bytes" : 496856599,  
"stored\_fields\_memory" : "27.2mb",  
"stored\_fields\_memory\_in\_bytes" : 28604872,  
"term\_vectors\_memory" : "0b",  
"term\_vectors\_memory\_in\_bytes" : 0,  
"norms\_memory" : "587.6kb",  
"norms\_memory\_in\_bytes" : 601728,  
"points\_memory" : "7.8mb",  
"points\_memory\_in\_bytes" : 8222372,  
"doc\_values\_memory" : "1.2mb",  
"doc\_values\_memory\_in\_bytes" : 1316700,  
"index\_writer\_memory" : "15.3mb",  
"index\_writer\_memory\_in\_bytes" : 16109724,  
"version\_map\_memory" : "52.7kb",  
"version\_map\_memory\_in\_bytes" : 54042,  
"fixed\_bit\_set" : "0b",  
"fixed\_bit\_set\_memory\_in\_bytes" : 0,  
"max\_unsafe\_auto\_id\_timestamp" : 1508829067807,  
"file\_sizes" : { }  
}  
},  
"nodes" : {  
"count" : {  
"total" : 4,  
"data" : 4,  
"coordinating\_only" : 0,  
"master" : 4,  
"ingest" : 4  
},  
"versions" : [  
"5.3.2",  
"5.3.1"  
],  
"os" : {  
"available\_processors" : 96,  
"allocated\_processors" : 96,  
"names" : [  
{  
"name" : "Linux",  
"count" : 4  
}  
],  
"mem" : {  
"total" : "124.9gb",  
"total\_in\_bytes" : 134208143360,  
"free" : "9.2gb",  
"free\_in\_bytes" : 9893441536,  
"used" : "115.7gb",  
"used\_in\_bytes" : 124314701824,  
"free\_percent" : 7,  
"used\_percent" : 93  
}  
},  
"process" : {  
"cpu" : {  
"percent" : 2  
},  
"open\_file\_descriptors" : {  
"min" : 701,  
"max" : 737,  
"avg" : 719  
}  
},  
"jvm" : {  
"max\_uptime" : "15.2h",  
"max\_uptime\_in\_millis" : 54778055,  
"versions" : [  
{  
"version" : "1.8.0\_121",  
"vm\_name" : "OpenJDK 64-Bit Server VM",  
"vm\_version" : "25.121-b13",  
"vm\_vendor" : "Oracle Corporation",  
"count" : 4  
}  
],  
"mem" : {  
"heap\_used" : "3.8gb",  
"heap\_used\_in\_bytes" : 4169504552,  
"heap\_max" : "7.7gb",  
"heap\_max\_in\_bytes" : 8303673344  
},  
"threads" : 960  
},  
"fs" : {  
"total" : "844.3gb",  
"total\_in\_bytes" : 906565025792,  
"free" : "414.2gb",  
"free\_in\_bytes" : 444796755968,  
"available" : "371.2gb",  
"available\_in\_bytes" : 398651236352  
},  
"plugins" : [],  
"network\_types" : {  
"transport\_types" : {  
"netty4" : 4  
},  
"http\_types" : {  
"netty4" : 4  
}  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 25, 2017, 9:54am UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/10 "2017-10-25T09:54:47Z")

</div>

You have mixed versions in the cluster, so you should first make sure all the nodes are on exactly the same version as Elasticsearch can not move shards from newer versions to older. You may also want to increase the heap size a bit as it seems to be only around 2GB per node.

---

<div class="post-metadata">

**Author:** ![tomindo](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tomindo](https://discuss.elastic.co/u/tomindo)\
**Post date:** [October 26, 2017, 9:12pm UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/11 "2017-10-26T21:12:06Z")

</div>

this issue has been fixed  
Thanks

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 27, 2017, 8:27am UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/12 "2017-10-27T08:27:38Z")

</div>

What was the issue?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 24, 2017, 8:27am UTC](https://discuss.elastic.co/t/kibana-stops-fetching-the-data-from-indices/105109/13 "2017-11-24T08:27:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
