mirror of
https://github.com/status-im/infra-nimbus.git
synced 2025-02-24 03:18:09 +00:00
This avoids errors like this: ``` failed to create query: field expansion matches too many fields, limit: 1024, got: 1046 ``` Which is caused by default being a wildcard, that causes querying of available fields, which in case of Nimbus logs is more than 1024. This could be fixed by increasing `max_clasue_count`, but a cleaner solution is simply limiting queries without a field specified to `json.msg`. https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-modules.html#dynamic-index-settings https://www.elastic.co/guide/en/kibana/7.17/upgrade-assistant-api-default-field.html Signed-off-by: Jakub Sokołowski <jakub@status.im>