Query_string performance

[baltendo]

I added also a thread in Elasticsearch:

Query_string performance issue

Hi! Initially I posted this issue in Kibana but I was asked to post it here as well: Kibana: Query_string performance We recently upgraded Elasticsearch and Kibana from 5.3.0 to 5.4.0 and since then we experience performance issues with dashboards and visualizations. Here is the query that is generated by Kibana for a visualization on the .monitoring-es-2-* index: { "query": { "bool": { "must": [ { "query_string": { "analyze_wildcard": true, …

But the problem with the duplicated query_string blocks is on Kibana side I guess?

BTW: We just found a workaround to improve the performance by disabling the _all field and using the index.query.default_field which prevents Elasticsearch from looking into every "queryable" field.