Data view - number of Index timeout issue

Elastic Stack Elasticsearch
1

I have large index with high volume of data. one shard is 20gig,

Lets say
two index per day from six month = 360 index with billions of record combine.

when I run following it timesout

select x,y,z from myidex-*  
where @timestamp >  now() - interval 5 minutes

But if I run following it works

select  x,y,z from mydex-2023.04*  
where @timestamp > now()  - interval 5 minutes

is it because myindex-* data view has 360 index
and myindex-2023.04 only has handful of index for it ?

2

anyone has experience with such issue? or any view on this matter.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.