Kibana - maximum amount of values in the DSL terms search

Elastic Stack Kibana
1

Hi! I'm trying to do a DSL filter in Kibana, in order to filter by a large amount of values on a specific field. For this, I'm using this syntax:

{
  "query": {
    "bool": {
      "filter": {
        "terms": {
          "ip": [
            "185.231.86.130",
            "166.24.243.98",
            "155.171.113.115"
          ]
        }
      }
    }
  }
}

My question is: what's the maximum number of values that I can include inside the Terms part? Is it the same as the one defined for Elasticsearch, or does Kibana have a specific limitation in the DSL filter functionality?

Thanks a lot in advance for your support!

2

I am not aware of any additional safeguards on the Kibana side. Are you experiencing any issues?

3

Hi Maja!

Some customers were complaining that they could not complete the search when the amount of values was high, but maybe that was just performance. I will address this to my ELK DevOps team then, so they can confirm what's the limitation on the ELK side (65K as default or lower, if they somehow decided to limit on their side).

Thanks so much!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.