Search_phase_execution_exception and error on dashboard visualizations

Please i a new to kibana, i am getting the error below when i try to visualise. I have no idea what the error is about. i need help solving this, please.

search_phase_execution_exception

Error
at Fetch._callee3$ (https://10.0.2.10/kibana/36063/bundles/core/core.entry.js:6:59535)
at l (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740520)
at Generator._invoke (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740273)
at Generator.forEach.e. [as next] (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740877)
at fetch_asyncGeneratorStep (https://10.0.2.10/kibana/36063/bundles/core/core.entry.js:6:52652)
at _next (https://102.220.188.146:64297/kibana/36063/bundles/core/core.entry.js:6:52968)

Hello,

It's unfortunately really difficult to say without a few more details. A few questions:

  • What data are you trying to visualize?
  • What are you trying to do when this error occurs?
  • What version of Kibana are you on?

Regards,
Aaron

thank you.

i am trying to visualize honeypot data. it was working well b4 and all of a sudden I open my dashboard and thats what I see

and when i try to visualize, i get a pop up that says search error. when i click it, it shows the error i sent in the previous message.
I can visualize old data but not recent data.

Kibana version: 7.10.1

Thank you

Hello,

I'd try to look very closely at the differences between the old data that works and the new data that doesn't work. A few questions to consider:

  • Are the visualizations using an index pattern that matches multiple indexes?
  • Is the new data coming in shaped differently than the old data?
  • Does the new data have different fields, missing fields or are fields mapped differently?
  • What happens if you try to create a new visualization using just new data?
  • Are you using dynamic mappings when the data is ingested?

Let me know how that goes!

Regards,
Aaron

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.