Limit of total fields [1000] has been exceeded- elasticsearch_metrics

Elastic Stack Elasticsearch
1

Im attempting to reroute elasticsearch metrics (via metricbeat) from my primary cluster to a monitoring cluster. Monitoring cluster is running 7.13.1 on Centos 8 - main is 7.11.1.

Hitting this error when I restart metricbeat on a primary cluster member:

systemd-entrypoint[12048]: [2021-06-14T13:56:34,764][INFO ][o.e.a.b.TransportShardBulkAction] [elastic0] [elasticsearch_metrics-2021.06.14][0] mapping update rejected by primary
systemd-entrypoint[12048]: java.lang.IllegalArgumentException: Limit of total fields [1000] has been exceeded

On the primary where these indexes currently live I looked at the index in question - only has 894 fields so it's not clear why this error is happening.

I tried creating a template for 'elasticsearch_metrics-*' with the following to no avail

{
  "template": {
    "settings": {
      "index.mapping.total_fields": {
             "limit": "10000"
        }
     }
   }

Is there some global setting I've missed?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.