We came across an error where the query for Dashborad threw for Too_many_buckets_exception. We looked into couple of queries on elastic community and found that in Elasticseach 7.X the value for max_buckets is 10000 and the query is failing because it needs more buckets. If we increase the value to 15000 it works fine by the below command
"search.max_buckets": <increase that number more than 10000>
However, we have couple of concern that we would like to clarify:
- Previously the limit for max_bucket was unlimited in Elasticseach 6.X, why it is set to 10000 in Elasticseach 7.X ?
- What the risk/impact of incresing the max_buckets. What can be the maximum value that can be set to it?
- Is there any way to tune max_buckets ?
Thanks and Regards,