# More data return when do one query

**URL:** <https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148>\
**Category:** Kibana\
**Created:** [July 7, 2020, 11:32am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148 "2020-07-07T11:32:51Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bo\_bo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bo_bo/32/67280_2.png) [@bo\_bo](https://discuss.elastic.co/u/bo_bo)\
**Post date:** [July 7, 2020, 11:32am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/1 "2020-07-07T11:32:51Z")

</div>

i want do some queries in elasticsearch  
when i do this by kibana, it returns like this:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/4/a493b19d8afdb451bdf611d1ead1efed6849f696.png)

but when i do queries in console with these sentences:

```auto
GET /doujiangv4-2020-07-05/_search/
{
  "query":{
    "bool" : {
      "must": [
        {"match": { "#time": "2020-07-05" }},
        {"match": { "#event_name": "SERVER_HEARTBEAT" }}
      ]
    }
  }
}

```

i got more pieces:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/d/8d032c2240269856a0daafc62fd506a5d7e5185f.png)  
it's **864** , instead of **576** which number appear in kibana  
why 😕?  
what would i do if i want the number to be **576**

---

<div class="post-metadata">

**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Post date:** [July 7, 2020, 12:08pm UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/2 "2020-07-07T12:08:55Z")

</div>

Kibana's discover tab has a button in the upper right to get debug information _somewhere_ in there you can get the query it issued. Sorry I can't be more precise. I dont remember it well.

Anyway, my guess is that the query you made by hand doesn't match the kibana one.

---

<div class="post-metadata">

**Author:** ![defalt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/defalt/32/71379_2.png) [@defalt](https://discuss.elastic.co/u/defalt)\
**Post date:** [July 7, 2020, 12:30pm UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/3 "2020-07-07T12:30:39Z")

</div>

You can find the query which was executed by kibana here:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fdb4dbc4f5dc4200770fd7a2552fe9ccad53b7e3.jpeg)  
Scroll down and you will find something like this:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/2/028c1034b114d2bea64c0264aaaff287e1daab1f.png)

---

<div class="post-metadata">

**Author:** ![bo\_bo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bo_bo/32/67280_2.png) [@bo\_bo](https://discuss.elastic.co/u/bo_bo)\
**Post date:** [July 8, 2020, 2:11am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/4 "2020-07-08T02:11:54Z")

</div>

thank you for your answer

---

<div class="post-metadata">

**Author:** ![bo\_bo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bo_bo/32/67280_2.png) [@bo\_bo](https://discuss.elastic.co/u/bo_bo)\
**Post date:** [July 8, 2020, 2:12am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/5 "2020-07-08T02:12:28Z")

</div>

thank you very much for your help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 5, 2020, 2:12am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148/6 "2020-08-05T02:12:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.