August 27, 2021

index.max_result_window(Graylog)

Issue,

Elasticsearch exception [type=illegal_argument_exception, reason=Result window is too large, from + size must be less than or equal to: [10000] but was [100000]. See the scroll api for a more efficient way to request large data sets. This limit can be set by changing the [index.max_result_window] index level setting.].

Solution,

curl -XPUT "http://localhost:9200/_all/_settings" -d '{ "index" : { "max_result_window" : 100000 } }' -H "Content-Type: application/json"