In the quick count feature of kibana, it shows you stats based on buckets on a field. Usually it is limited to 500 or whatever the system is configured to use. If the search returned 1 million records, it is only showing the stats for 500 records.
Does anyone how kibana chooses those 500 records? Is it the 500 newest records? or 500 oldest records?