Whether search record fully

[narasiman1986 (narasiman)]

i have one doubt. i am displaying the record in kibana shows as follows

i am sending screenshot as follows

in the screen shot top left shows the total number of records 1,791,751 hits (all records).

i am search specific text as follows 11067

in that kibana bottom message as "these are the first 10000 documents matching your search, refine your search to see others"

whether kibana search only first 10000 records or whole i mentioned in the screen shot as "1,791,751 records please let me know

[Nathan_Reese]

All searching is done in Elasticsearch. Kibana is only a fancy GUI that sits on top of the Elasticsearch API. The search to Elasticsearch returns the first X matching documents and a total number of all matching documents (http://nocf-www.elastic.co/guide/en/elasticsearch/reference/current/search-request-body.html for more information). The 1,791,751 number is just the hits.total number returned from Elasticsearch. The displayed documents are just the contents returned in hits.hits from Elasticsearch.