please we need help on this. we have elasticsearch running with over 2 billion documents (32 GB ram, 4.5 cpu and 16 gb heap) and over 700 shards
we tried making these changes but ended up rebuilding kibana as it was no longer responding we had some luck as we increased the number slowly slowly... but it didn't worked..
Is there any other way to do it or any other dropdown visualization we can use??
or how about fixing this control visualization. I think the way it should work is it should pull the data from the index patten of the time defined... instead of pulling all the data at once... from all indices which is causing this issue....
please let me know.