Bump maxmimum fields to 6k

mmguero-dev · Oct 7, 2024 · 54902c5 · 54902c5
1 parent 6015ff5
commit 54902c5
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/api/project/__init__.py b/api/project/__init__.py
@@ -743,7 +743,7 @@ def fields():
             s = SearchClass(
                 using=databaseClient,
                 index=index_from_args(args),
-            ).extra(size=5000)
+            ).extra(size=6000)
             for hit in [x['_source'] for x in s.execute().to_dict().get('hits', {}).get('hits', [])]:
                 if (fieldname := malcolm_utils.deep_get(hit, ['dbField2'])) and (fieldname not in fields):
                     if debugApi:

diff --git a/dashboards/templates/composable/component/zeek.json b/dashboards/templates/composable/component/zeek.json
@@ -2,7 +2,7 @@
   "template": {
     "settings" : {
       "index" : {
-        "mapping.total_fields.limit" : "5000",
+        "mapping.total_fields.limit" : "6000",
         "mapping.nested_fields.limit" : "250",
         "max_docvalue_fields_search" : "200"
       }

diff --git a/dashboards/templates/composable/component/zeek_ot.json b/dashboards/templates/composable/component/zeek_ot.json
@@ -2,7 +2,7 @@
   "template": {
     "settings" : {
       "index" : {
-        "mapping.total_fields.limit" : "5000",
+        "mapping.total_fields.limit" : "6000",
         "mapping.nested_fields.limit" : "250",
         "max_docvalue_fields_search" : "200"
       }

diff --git a/dashboards/templates/malcolm_beats_template.json b/dashboards/templates/malcolm_beats_template.json
@@ -29,7 +29,7 @@
   "template" :{
     "settings" : {
       "index" : {
-        "mapping.total_fields.limit" : "5000",
+        "mapping.total_fields.limit" : "6000",
         "mapping.nested_fields.limit" : "250",
         "max_docvalue_fields_search" : "200"
       }

diff --git a/dashboards/templates/malcolm_template.json b/dashboards/templates/malcolm_template.json
@@ -31,7 +31,7 @@
   "template" :{
     "settings" : {
       "index" : {
-        "mapping.total_fields.limit" : "5000",
+        "mapping.total_fields.limit" : "6000",
         "mapping.nested_fields.limit" : "250",
         "max_docvalue_fields_search" : "200"
       }