Getting max bytes length exceeded exception error, how to fix and prevent?

Elastic Stack Elasticsearch
1

How can I fix this, please? Also, using Logstash, and is there a way to prevent this going forward?

Elasticsearch 6.3.2
Logstash 6.3.2

[2019-01-10T08:17:20,763][DEBUG][o.e.a.s.TransportSearchAction] [lmpau0629] [3259244] Failed to execute fetch phase
org.elasticsearch.transport.RemoteTransportException: [yyyyyy][10.xxx.xxx.xxx:9300][indices:data/read/search[phase/fetch/id]]
Caused by: org.elasticsearch.common.io.stream.NotSerializableExceptionWrapper: max_bytes_length_exceeded_exception: bytes can be at most 32766 in length; got 56515

==================================

All of the keyword fields have the ignore_above setting.

    "message": {
      "type": "text",
      "fields": {
        "keyword": {
          "type": "keyword",
          "ignore_above": 256
        }
      }
    },
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.