Rollup Aggregation Mismatch in results

Elastic Stack Elasticsearch
1

ELK - 7.4.1
I have indices in the form of clicks-2019-07-01 date format.

I created an index as clicks-2019-07* and rollup with the aggregation to find the value count of specific term id.
Index: clicks-2019-07* gives - 90k documents and value for id '0000' as 498 (count) I used 30d interval.

Now I decided to do it for the whole complete year, where I used index
clicks-2019-0* which is supposed to calculate for the 9 months.
But I actually got,
Index: clicks-2019-0* gives - 27k documents and value for id '0000' as 198(count)

which is supposed to be higher. Please let me know, how to I aggregate for a field with minimum 90 days where indices are as in datewise.

Thanks in advance

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.