ElasticSearch data viz is not working as expected

  • What Grafana version and what operating system are you using? - 7.5.4

  • What are you trying to achieve? I’m trying to vizualize specific excerpts of the logs. I need to display performance of the specific entity on the graph.

  • How are you trying to achieve it? I added a new panel, and used ES6 cluster. I used the KQL to fetch the data.

  • What happened?
    application: app1 AND severity: 3 AND labels: Partner157 does not work
    application: app1 AND severity: 3 does work

  • What did you expect to happen?
    I expect application: app1 AND severity: 3 AND labels: Partner157 query to work: i expect the data points to be on the graph. Instead nothing is shown

  • Can you copy/paste the configuration(s) that you are having problems with?
    Before I can share more I’d like to know if it’s a known limitation

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

No errors. Good request and good response: 200 code. No data is returned in case of application: app1 AND severity: 3 AND labels: Partner157 . In case of application: app1 AND severity: 3 the correct data is returned.

All queries were triple checked before creating this post.

  • Did you follow any online instructions? If so, what is the URL?

Lucene query not working as expected
How to effectively use the Elasticsearch data source in Grafana and solutions to common pitfalls | Grafana Labs

Thank you

1 Like