# TooManyBuckets Exception **URL:** \ **Category:** Elasticsearch\ **Created:** [April 22, 2020, 5:28am UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176 "2020-04-22T05:28:27Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [April 22, 2020, 5:28am UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/1 "2020-04-22T05:28:27Z")
Hey I am using ES 7.3 with Kibana. I encountered this error in a few visualisations and I cannot figure out what is wrong. For example - I am trying to visual a time line of Bytes read/write per host. ![2020-04-22 15_13_36-Window](https://us1.discourse-cdn.com/elastic/original/3X/f/0/f0317e97c6d3e2c486f9e78bd7c846339b73f2a7.png) But I am getting this error : ```auto org.elasticsearch.search.aggregations.MultiBucketConsumerService$TooManyBucketsException: Trying to create too many buckets. Must be less than or equal to: [12000] but was [12001]. This limit can be set by changing the [search.max_buckets] cluster level setting. ``` I tried increasing the max buckets to 12000, but it still fails. What I know - - Multiple indices are searched as my index pattern covers a few indices and not just one. - If I reduce the time filter the visualisation works. e.g. from 'Today' to 'Last 1 hour' So, the questions are: What is wrong? What should I check? How should I fix this? I read a few previous discussions, but couldn't find any ones that could help me. Thanks ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [April 22, 2020, 6:05am UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/2 "2020-04-22T06:05:37Z")
What are you settings for those buckets? What is the cardinality if the ComputerName field? ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [April 22, 2020, 7:14am UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/3 "2020-04-22T07:14:48Z")
Hi @Christian_Dahlqvist Thanks for your reply. Cardinality is around 500 unique values. Settings - ![2020-04-22 17_10_17-SCVMM - Disk IO Reads per VM - Unisys Kibana and 8 more pages - Profile 1 - Micr](https://us1.discourse-cdn.com/elastic/original/3X/e/2/e29aefb6711efee46af0b1548b815d3ae5ec4b58.png) Tried playing with the size parameter. How is it affecting the visualisation? Thank you ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [April 22, 2020, 7:21am UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/4 "2020-04-22T07:21:30Z")
What about the date histogram? Do you have fixed size buckets? ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [April 22, 2020, 11:41pm UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/5 "2020-04-22T23:41:29Z")
Hi @Christian_Dahlqvist Yes, time buckets are set to timestamp per 10 minutes. Although I tried to set it to 5 minutes. Thanks! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 20, 2020, 11:41pm UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176/6 "2020-05-20T23:41:31Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.