Transform group by showing data that's not in the original index

Matt_McGovern · March 31, 2022, 5:51pm

I've got a tranform set up that has multiple group fields and aggregations. The first group by field shows data in the resulting index that is not anywhere in the original index. It starts with the text: deleterulebyrule-success|data: then follows with json. Is this something to do with the deleting of records because of the transform's retention?

system · April 28, 2022, 5:52pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Using a "missing" field option in a group by statement in a Data Transform Elasticsearch	3	855	March 13, 2020
Transforms group by on 2 different data fields having same value Kibana transforms	3	275	July 18, 2023
Tophits on transform group by a field not all field Kibana transforms	16	1351	January 12, 2021
Transform is not created when a particular field is not available in the index Kibana transforms	3	368	September 15, 2022
Trying to create tranform job which would not go through all documents Kibana transforms	4	309	April 27, 2023

Transform group by showing data that's not in the original index

Related topics