Search_phase_execution_exception and error on dashboard visualizations

Elastic Stack Kibana
1

Please i a new to kibana, i am getting the error below when i try to visualise. I have no idea what the error is about. i need help solving this, please.

search_phase_execution_exception

Error
at Fetch._callee3$ (https://10.0.2.10/kibana/36063/bundles/core/core.entry.js:6:59535)
at l (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740520)
at Generator._invoke (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740273)
at Generator.forEach.e. [as next] (https://10.0.2.10/kibana/36063/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380:1740877)
at fetch_asyncGeneratorStep (https://10.0.2.10/kibana/36063/bundles/core/core.entry.js:6:52652)
at _next (https://102.220.188.146:64297/kibana/36063/bundles/core/core.entry.js:6:52968)

2

Hello,

It's unfortunately really difficult to say without a few more details. A few questions:

  • What data are you trying to visualize?
  • What are you trying to do when this error occurs?
  • What version of Kibana are you on?

Regards,
Aaron

3

thank you.

i am trying to visualize honeypot data. it was working well b4 and all of a sudden I open my dashboard and thats what I see

honey
honey870×629 12.8 KB

and when i try to visualize, i get a pop up that says search error. when i click it, it shows the error i sent in the previous message.
I can visualize old data but not recent data.

Kibana version: 7.10.1

Thank you

4

Hello,

I'd try to look very closely at the differences between the old data that works and the new data that doesn't work. A few questions to consider:

  • Are the visualizations using an index pattern that matches multiple indexes?
  • Is the new data coming in shaped differently than the old data?
  • Does the new data have different fields, missing fields or are fields mapped differently?
  • What happens if you try to create a new visualization using just new data?
  • Are you using dynamic mappings when the data is ingested?

Let me know how that goes!

Regards,
Aaron