elk报错：[syslogs] index has exceeded [1000000]

报错内容：
The length of [日志详情.keyword] field of [fDc4RoIBa4doANsQMBzx] doc of [elk-xbtstu-tj-prod-2022.07.28][syslogs] index has exceeded [1000000] -maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!

解决方法

curl -XPUT "http://ip:port/_settings" -H 'Content-Type: application/json' -d' {
    "index" : {
        "highlight.max_analyzed_offset" : 100000000
    }
}'