elk报错：[syslogs] index has exceeded [1000000]

报错内容：
The length of [日志详情.keyword] field of [fDc4RoIBa4doANsQMBzx] doc of [elk-xbtstu-tj-prod-2022.07.28][syslogs] index has exceeded [1000000] -maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!

解决方法

curl -XPUT "http://ip:port/_settings" -H 'Content-Type: application/json' -d' {
    "index" : {
        "highlight.max_analyzed_offset" : 100000000
    }
}'

  

 

  
1
  
2
  
3
  
4
  
5
 

文章来源: jiangxl.blog.csdn.net，作者：Jiangxl~，版权归原作者所有，如需转载，请联系作者。

原文链接：jiangxl.blog.csdn.net/article/details/126054361