Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to add custom fields configured via append_fields to be added to default_fields #14949

Closed
urso opened this issue Dec 5, 2019 · 2 comments
Labels
libbeat Stalled Team:Integrations Label for the Integrations team

Comments

@urso
Copy link

urso commented Dec 5, 2019

Predefined fields can be included/excluded to index.query.default_field in the template if include_in_default_field is configured. The same setting should be available for custom fields added via append_fields.

Elasticsearch indices.query.bool.max_clause_count limits the number of clauses (default 1024). For each field in default_fields a clause will be generated. If we hit a limit of 1024 entries in the template, we should also log a warning pointing users at the Elasticsearch docs 1

@urso
Copy link
Author

urso commented Dec 5, 2019

@andresrc andresrc added Team:Integrations Label for the Integrations team and removed Team:Beats labels Mar 6, 2020
@botelastic
Copy link

botelastic bot commented Feb 4, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@botelastic botelastic bot added the Stalled label Feb 4, 2021
@botelastic botelastic bot closed this as completed Mar 6, 2021
@zube zube bot added [zube]: Done and removed [zube]: Inbox labels Mar 6, 2021
@zube zube bot removed the [zube]: Done label Jun 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
libbeat Stalled Team:Integrations Label for the Integrations team
Projects
None yet
Development

No branches or pull requests

2 participants