What is causing my dashboards to throw error "The search job terminated unexpectedly" when choosing a large time range?

[DavidHourani]

Hello,

I am having a problem when loading my dashboards for long time ranges.

The error "The search job terminated unexpectedly." is appearing after a minute or so (when the views are at about 40-50%). The message is sort of random. Sometimes it appears on all views, sometimes some, sometimes none.

My searches are quite simple "index=..." with 2 lookups. If I run the dashboard for a smaller time range, I don't have a problem. It's only for large time ranges.

Any idea what I can do to fix this ?

Best regards,
David

[DavidHourani · Accepted solution]

The searches I was using weren't very optimized since I was using "| dedup _raw" right after "index=Cars" Had to apply my filters before using the dedup and that made it a lot faster and now searches are not causing anymore errors.

[markthompson]

You say this is happening on the dashboard, does it happen when you use the search functionality?

If so, is there a certain date which causes it to error?

[DavidHourani]

No it does not happen when I run a search. It's only happening on the dashboard..