Not all the datas are returned

Elastic Stack Elasticsearch
1

Hi Team,

I have ELK stack deployed using docker swarm, when I query data I couldn't retrive all the data. I have multi-tenant kibana indices such as Admin-tenant can view all the data and individual-tenant where team/ins data are available using DLS function.

My Issue is I couldn't view some group of data either on discover, dev-tools and elasticsearch curl query, but I could see the data on individual tenant. Data groups with lesser documents in indicies are not visible. Is there something on ES setting that I can update to retrive all the documents?

ES version : 7.10.1
Kibana: 7.10.1

Best,
Yash

2

How are you securing your cluster?

3

@Christian_Dahlqvist , Thanks for your prompt reply, Our cluster is secured using Searchguard.

4

Then I would recommend raising the issue with them.

5

Thanks for an update, I will contact the SG

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.