elasticsearch Kibana显示您看到的数据可能不完整或错误,elasticsearch,kibana,filebeat,elk,elasticsearch,Kibana,Filebeat,Elk" /> elasticsearch Kibana显示您看到的数据可能不完整或错误,elasticsearch,kibana,filebeat,elk,elasticsearch,Kibana,Filebeat,Elk" />

elasticsearch Kibana显示您看到的数据可能不完整或错误

elasticsearch Kibana显示您看到的数据可能不完整或错误,elasticsearch,kibana,filebeat,elk,elasticsearch,Kibana,Filebeat,Elk,配置我的麋鹿堆栈=>Kibana、elasticsearch和filebeat。一切正常,但当我想查看kibana上的日志时,我收到了这个错误 8个碎片中有1个失败 您看到的数据可能不完整或错误 See response: { "took": 332, "timed_out": false, "_shards": { "total": 9,

配置我的麋鹿堆栈=>Kibana、elasticsearch和filebeat。一切正常,但当我想查看kibana上的日志时,我收到了这个错误

8个碎片中有1个失败 您看到的数据可能不完整或错误

See response:

    {
      "took": 332,
      "timed_out": false,
      "_shards": {
        "total": 9,
        "successful": 8,
        "skipped": 8,
        "failed": 1,
        "failures": [
          {
            "shard": 0,
            "index": ".apm-agent-configuration",
            "node": "_KJoEVfvT9W8-ezUwcdPlg",
            "reason": {
              "type": "illegal_argument_exception",
              "reason": "Trying to retrieve too many docvalue_fields. Must be less 
                than or equal to: [100] but was [136]. This limit can be set by 
                 changing the [index.max_docvalue_fields_search] index level 
                   setting."
            }
          }
        ]
      },
      "hits": {
        "total": 0,
        "max_score": 0,
        "hits": []
      }
    }

请问您对此有何想法?

可以通过更改该索引的
索引。max\u docvalue\u fields\u search
设置来解决此问题:

PUT .apm-agent-configuration/_settings
{
  "index.max_docvalue_fields_search": 200
}

单击Inspect并复制/粘贴Kibana从ES.Okay获得的响应。请删除注释,正确设置查询格式并更新您的question@Val.更新了问题。请看。谢谢,也很高兴看到这个查询。您可以在Kibana开发工具中运行它,然后您的查询将神奇地工作。您的查询将超时:{“statusCode”:502,“error”:“Bad Gateway”,“message”:“Client request timeout”}。。。您的集群是否过载?再试一次?现在完成@Val。。非常感谢你。但我需要你在kibana上可视化的索引日志方面的知识。很酷,很高兴它有帮助!那么请随便问另一个问题