Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Visualize] Offering terms-agg on timestamp fields is a footgun? OOM potential. #59188

Closed
markharwood opened this issue Mar 3, 2020 · 3 comments
Labels
enhancement New value added to drive a business result Feature:Visualizations Generic visualization features (in case no more specific feature label is available) Team:Visualizations Visualization editors, elastic-charts and infrastructure

Comments

@markharwood
Copy link
Contributor

We currently let users configure visualizations with a terms aggregation on a millisecond-resolution date field. This can cause memory problems given the number of unique values.

Is this analysis ever useful? I suspect the cluster-killing costs outweigh the number of edge cases where it is useful (it would need a very selective query to reduce the number of matches). Most of the time I imagine users actually want a date histogram rather than a terms agg.

Would it make sense to remove this sort of selection in the visualization config UI?

@markharwood markharwood added bug Fixes for quality problems that affect the customer experience Feature:Visualizations Generic visualization features (in case no more specific feature label is available) labels Mar 3, 2020
@timroes timroes added enhancement New value added to drive a business result Feature:Lens Team:Visualizations Visualization editors, elastic-charts and infrastructure and removed bug Fixes for quality problems that affect the customer experience labels Mar 11, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-app (Team:KibanaApp)

@mbondyra mbondyra changed the title Offering terms-agg on timestamp fields is a footgun? OOM potential. [Visualize] Offering terms-agg on timestamp fields is a footgun? OOM potential. Aug 31, 2021
@mbondyra
Copy link
Contributor

mbondyra commented Aug 31, 2021

Setting terms aggregation on a date field is not possible in Lens, so the problem can only happen for Visualize editors. Removing Lens label.

@stratoula
Copy link
Contributor

We don't plan to male this change for the legacy visualizations so I am closing this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:Visualizations Generic visualization features (in case no more specific feature label is available) Team:Visualizations Visualization editors, elastic-charts and infrastructure
Projects
None yet
Development

No branches or pull requests

5 participants