Graylog2 / graylog2-server

Free and open log management
https://www.graylog.org
Other
7.37k stars 1.06k forks source link

Search page (Log Table Widget) pagination stops changing the page contents after a certain number of pages #20644

Open drewmiranda-gl opened 2 weeks ago

drewmiranda-gl commented 2 weeks ago

When using the pagination for a Message Table widget, the contents of the message table stop changing. In the example I recorded below I hit a limit at page 66.

https://github.com/user-attachments/assets/c2c417c1-df7e-4051-ae54-c13587882162

Expected Behavior

Either pagination does not show pages that cannot be viewed, or pagination for the applicable page shows the proper log messages

Current Behavior

Pagination breaks after a certain number of pages.

Possible Solution

Steps to Reproduce (for bugs)

1. 2. 3. 4.

Context

https://community.graylog.org/t/absolute-date-range-not-working/33769

Your Environment

Please let me know if there are any questions.

linuspahl commented 2 weeks ago

This might be related to https://github.com/Graylog2/graylog2-server/issues/18947, can you check if the response for the last request (/api/views/searchjobs/.../.../status) contains an error like this one?

image
drewmiranda-gl commented 2 weeks ago

Yep! That's exactly it:

{
    "execution": {
        "done": true,
        "cancelled": false,
        "completed_exceptionally": true
    },
    "errors": [
        {
            "type": "result_window_limit",
            "description": "Result window is too large, [from + size] must be less than or equal to: [10000]. This limit can be set by changing the [index.max_result_window] index level setting, but it is recommended to use more advanced methods in order to get distant chunks of results (i.e. scroll or search after)",
            "search_type_id": "1ab94da5-0d53-4f72-b3dd-7fd4bbc4309a",
            "result_window_limit": 10000,
            "query_id": "f61480d0-217d-4e88-b73c-7a34963e4a19"
        }
    ]
}
drewmiranda-gl commented 6 days ago

Thinking more about this, opened a FR that is related, though we can still fix this as well as implement the proposed FR:

https://github.com/Graylog2/graylog2-server/issues/20717