Significance of the property ignore_above>256 in ElasticSearch

Varun_S · October 21, 2019, 1:56pm

Hi,

I have created index with default configuration . Ex:- 1 shard and ignore_above>256.

But when i am pushing string which has more than 300 characters, Elaticsearch is indexing the data and also all 300 characters are visible in Kibana.

Can you please help me to understand what is the significance of the property ignore_above>256. If i am not wrong according to the property ignore_above256 if i am pushing the data which has more than 256 characters, data should be truncated. Can you please help me here.

Regards,
Varun S

dadoonet · October 21, 2019, 2:24pm

Elasticsearch does not modify the source document. That's why you can see it entirely.

If you try to run a Terms aggregation on this field you will see that it has been truncated though.

Varun_S · October 22, 2019, 11:35am

Hi @dadoonet,

Thanks for your reply..

If i explicitly set the value for the property ignore_above>300 for a field, If i use the same field in the aggregation. Then the data will be truncated?

dadoonet · October 22, 2019, 12:03pm

Yes.

Varun_S · October 22, 2019, 2:28pm

Hi @dadoonet,

Thanks for your reply.

system · November 19, 2019, 2:28pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.