当前位置：网站首页>elk报错：[syslogs] index has exceeded [1000000]

elk报错：[syslogs] index has exceeded [1000000]

2022-07-30 06:33:00 【Jiangxl~】

报错内容：
The length of [日志详情.keyword] field of [fDc4RoIBa4doANsQMBzx] doc of [elk-xbtstu-tj-prod-2022.07.28][syslogs] index has exceeded [1000000] -maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!
在这里插入图片描述

解决方法

curl -XPUT "http://ip:port/_settings" -H 'Content-Type: application/json' -d' {
    "index" : {
        "highlight.max_analyzed_offset" : 100000000
    }
}'

原网站

版权声明
本文为[Jiangxl~]所创，转载请带上原文链接，感谢
https://jiangxl.blog.csdn.net/article/details/126054361