elasticsearch - Kibana 显示 The data you are seeing might be incomplete or wrong

Question

配置我的 elk stack => Kibana、elasticsearch 和 filebeat。一切正常，但是，当我想查看 kibana 上的日志时，我收到了这个错误

8 个分片中有 1 个失败 您看到的数据可能不完整或有误。

See response:

    {
      "took": 332,
      "timed_out": false,
      "_shards": {
        "total": 9,
        "successful": 8,
        "skipped": 8,
        "failed": 1,
        "failures": [
          {
            "shard": 0,
            "index": ".apm-agent-configuration",
            "node": "_KJoEVfvT9W8-ezUwcdPlg",
            "reason": {
              "type": "illegal_argument_exception",
              "reason": "Trying to retrieve too many docvalue_fields. Must be less 
                than or equal to: [100] but was [136]. This limit can be set by 
                 changing the [index.max_docvalue_fields_search] index level 
                   setting."
            }
          }
        ]
      },
      "hits": {
        "total": 0,
        "max_score": 0,
        "hits": []
      }
    }

请问，对此有什么想法吗？

Answer 1

可以通过更改该索引的 index.max_docvalue_fields_search 设置来解决该问题:

PUT .apm-agent-configuration/_settings
{
  "index.max_docvalue_fields_search": 200
}