关于kibana 查询出现 x分片有 x 个失败
打开控制台查看接口返回出现
The length of [msg] field of [pAuVMXYBWMKQqimE8lSp] doc of [filebeat-7.6.0-2020.12.05] index has exceeded [1000000] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!"
type: "illegal_argument_exception
这个主要原因是在message字段超出了字符偏移量上限,可通过设置参数index.highlight.max_analyzed_offset
来调整,建议修改代码不要打印太大的日志
PUT /filebeat*/_settings
{
"index" : {
"highlight.max_analyzed_offset" : 6000000
}
}
或
curl -XPUT "127.0.0.1:9200/filebeat*/_settings" -H 'Content-Type: application/json' -d '{
"index" : {
"highlight.max_analyzed_offset" : 1000000
}
}'