Disable fielddata for _id field by default (since it is deprecated and can be memory-intensive) · c1a88977cf - securityonion - CSEC Git

CSEC_PUBLIC/securityonion

mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-28 07:28:00 +02:00

Disable fielddata for _id field by default (since it is deprecated and can be memory-intensive)

This commit is contained in:

weslambert

2022-01-05 15:23:52 -05:00

committed by

GitHub

parent 2f9672d3ea

commit c1a88977cf

1 changed files with 2 additions and 0 deletions

									
										salt/elasticsearch/defaults.yaml
									
		+2
		
												View File
												
					@@ -56,6 +56,8 @@ elasticsearch:

					      query:

					      query:

					        bool:

					        bool:

					          max_clause_count: 1500

					          max_clause_count: 1500

					      id_field_data:

					        enabled: false