We are currently experiencing issues with Kibana where we are unable to open or create dashboards and visualizations. Additionally, saved searches from the Discover tab are not loading as expected. We encounter a white screen when attempting to open any dashboard.
As a temporary workaround, we are accessing dashboards via Stack Management → Saved Objects.
Please refer to the screenshot below for more details.
Requesting your assistance in resolving this issue at the earliest.
When we check through inspect we found the error: "all shards failed: search_phase_execution_exception\n\tCaused by:\n\t\tillegal_argument_exception: Result window is too large, from + size must be less than or equal to: [10000] but was [150000]"
Getting white screen while opening the dashboards. Please find the below snap for the more details.
The error message indicates that the result window size for your query exceeds the maximum allowed limit of 10,000 documents.
What is the error in Elasticsearch & Kibana logs?
Maybe for dashboard try to filter it using last 5 minutes & see if it works as the default time set of last 15m/1h/1d might be causing > 10k documents.
You can consider using the "search_after" parameter for deep pagination. This approach is more efficient for large datasets and avoids the limitations of the "from + size" approach.
Hi @anagha03. It sounds like you may have modified the savedobjects:listinglimit in your Advanced Settings to be higher than 10,000. Setting this value higher than 10,000 is not supported and is likely causing the issue. Reduce this setting to 10,000 or lower and I think this may resolve the issue.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.
