Can I change total_fields.limit from logstash's output?


(Cam Kidman) #1

Hi there,

I've got the following in my elasticsearch configuration file:

output {
  elasticsearch { hosts => ["https://...."]
    index => "production-%{+YYYY.MM.dd}"
  }
  stdout { codec => rubydebug }
}

I'm running into the field limit of 1000 and I'm not sure how to increase that dynamically from logstash's configuration. I looked a little and found that I can use a template, but I can't find logstash's default template anywhere, and I'd like to use that with the one modification. Is there a configuration option I can specify in the output right in the logstash config?

Thanks in advance!


(system) #2

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.