Hi all, I have some trouble with a particular pipeline.
I'm trying to index events from our F5 waf, however i get this error on every event.
I dont understand why elasticsearch decided that there are more than 1000 fields when past events that did manage to get in show at max 10 fields.
I'm quite the the end of the rope so any help would be appreciated
you can increase this limit with:
I'd like to highlight this part of the guide:
The limit is in place to prevent mappings and searches from becoming too large. Higher values can lead to performance degradations and memory issues, especially in clusters with a high load or few resources.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.