# ILM Lifecycle limit of total fields

**URL:** <https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420>\
**Category:** Elasticsearch\
**Created:** [October 27, 2020, 10:47am UTC](https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420 "2020-10-27T10:47:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [October 27, 2020, 10:47am UTC](https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420/1 "2020-10-27T10:47:21Z")

</div>

Created ILM successfully couple of weeks ago for multi topics but one of topics I am getting error messages on logstash log - limit of total field 1000 for footy-000013.

I added below:  
PUT micky\_aaa\_footy\*/\_settings  
{  
"index.lifecycle.name":  
"micky\_aaa\_footy\_policy",  
"index.mapping.total.fields.limit": 2000  
}

Above is working ok from 000001 to 0000012 but failed on 0000013.

[2020-10-27T08:32:17,831][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x24d85d3a], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"oC8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,831][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x4276faa6], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"oy8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,831][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x65a26454], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"pi8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,831][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x5ff5b935], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"qS8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,831][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x67d1e0ed], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"rC8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,832][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x7dec653b], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"ry8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,832][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x3c81c07c], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"si8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,832][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x353042e2], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"tS8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T08:32:17,832][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"micky\_aaa\_footy-alias", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x38a57dd9], :response=\>{"index"=\>{"\_index"=\>"micky\_aaa\_footy-000013", "\_type"=\>"\_doc", "\_id"=\>"uC8vaXUBlXxylKoIulX0", "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Limit of total fields [1000] in index [micky\_aaa\_footy-000013] has been exceeded"}}}}  
[2020-10-27T09:35:29,157][INFO][org.apache.kafka.clients.FetchSessionHandler] [Consumer clientId=logstash-0, groupId=logstash] Node 0 was unable to process the fetch footy with (sessionId=1268431334, epoch=31638): INVALID\_FETCH\_SESSION\_EPOCH.  
[root@aaa-mmtt-elk02 ~]#

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 24, 2020, 10:47am UTC](https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420/2 "2020-11-24T10:47:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.