# Reporting - CSV Export: contains partial data

**URL:** <https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052>\
**Category:** Kibana\
**Tags:** kql-kibana-query-language\
**Created:** [August 20, 2021, 9:14am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052 "2021-08-20T09:14:05Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [August 20, 2021, 9:14am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/1 "2021-08-20T09:14:05Z")

</div>

Hi Team,

we have execute any query, it gives results and we save it by x name and when we generate csv then records are not getting saved in csv file. Sometimes partial results are getting saved. We have also tried after increasing xpack.reporting.csv.maxSizeBytes filed in kibana yml file but same results.

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [August 24, 2021, 6:19am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/2 "2021-08-24T06:19:14Z")

</div>

kindly help me out.

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [August 25, 2021, 2:51pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/3 "2021-08-25T14:51:36Z")

</div>

What does your query look like? How many records does it return? How large is the resulting CSV?

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [September 2, 2021, 10:05am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/4 "2021-09-02T10:05:19Z")

</div>

Its not dependent on any particular query. Its coming on all queries. When we are executing any query and added 2-3 filters and getting 3-4 results then we are saving it and then go to share link, generate csv and when we open csv no record is coming. Sometimes we are getting partial records if results are 40-50 and sometimes no record is coming in csv.

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [September 2, 2021, 3:16pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/5 "2021-09-02T15:16:09Z")

</div>

We need a starting point to troubleshoot even if its happening in multiple places. Is there one query you'd like to start with?

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [September 3, 2021, 11:05am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/6 "2021-09-03T11:05:04Z")

</div>

@mattkime Here is sample query which will return only 1 result for given time period. But still when i am downloading report am getting only header even its not resulting single result as said previously.

```auto
http://logs.xyz.com/app/discover#/view/4286d6e0-fede-11eb-9c79-65fe7f190617?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:'2021-08-09T06:00:00.000Z',to:'2021-08-16T22:00:00.000Z'))&_a=(columns:!(datacenter,request-id,target-response-time-ms,response-status,request-path,x-forwarded-for),filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:logstash,key:environment,negate:!f,params:(query:production),type:phrase),query:(match_phrase:(environment:production))),('$state':(store:appState),meta:(alias:!n,disabled:!f,index:logstash-apigee-request,key:proxy,negate:!f,params:(query:schwab-indices),type:phrase),query:(match_phrase:(proxy:schwab-indices)))),index:logstash-apigee-request,interval:auto,query:(language:kuery,query:'(%22fc54d8eb-0441-424c-afbf-e645f3b34f4f%22)'),sort:!())

```

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [September 9, 2021, 11:36am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/7 "2021-09-09T11:36:19Z")

</div>

can someone provide there input regarding issue. Need expertise on it.

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [September 9, 2021, 7:28pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/8 "2021-09-09T19:28:05Z")

</div>

Hi, which version of Kibana do you have?

There is an open bug that CSV Export does not include frozen indices. This may be what is affecting you: [https://github.com/elastic/kibana/issues/109167](https://github.com/elastic/kibana/issues/109167)

If that is not the issue, could you show us the status of your data indices with:  
`GET /_cat/indices/<data_indices>*?v`

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [September 10, 2021, 7:47am UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/9 "2021-09-10T07:47:15Z")

</div>

Thanks @tsullivan thats what i am looking for yes we have frozen indices in our cluster. We are using kibana 7.9.3 version.

---

<div class="post-metadata">

**Author:** ![krish0608](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krish0608/32/6797_2.png) [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Post date:** [September 13, 2021, 12:05pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/10 "2021-09-13T12:05:21Z")

</div>

Is there any workaround for that? Kindly do let me know.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 11, 2021, 12:05pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052/11 "2021-10-11T12:05:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
