When you get a negative value, can you get the raw query and the raw data returned and paste it here, please. Here’s a how to guide on how to use Chrome Dev Tools to do that.
i’ve solved the issue. The problem was that my metrics shipped to Logstash without any modifications in it.
But when i ship metrics directly in ES, the problem went away.
Dont know why it happened.
Thank you for a reply anyway.