Disable fielddata for _id field by default (since it is deprecated and can be memory-intensive) · c1a88977cf - securityonion - CSEC Git

CSEC_PUBLIC/securityonion

0 Fork 0

mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-10-08 07:15:27 +02:00

weslambert authored and

GitHub committed 2022-01-05 15:23:52 -05:00

1 parent 2f9672d3ea

commit c1a88977cf

1 file changed

+2

									
										salt/elasticsearch/defaults.yaml
									
		+2
		
												View File
												
				@@ -56,6 +56,8 @@ elasticsearch:

				      query:

				        bool:

				          max_clause_count: 1500

				      id_field_data:

				        enabled: false