API - Search limits - Unable to perform search query

[gsmith]

Hello,

@weird-oecophylla

However, the same behovior is back once I try to get more than approximately 5000 size json result.

So when 5000 JSON requests is reached you get "Unable to perform search query’? I believe anytime a query is performed this would be done by Elasticsearch. I haven’t done a API call in a while but I have received this error before. It was either a configuration in my Index template settings or resources.

As for

@weird-oecophylla

But the problem keeps running for value above 5000 lines.

I assume you trying to limit the amount of request below 5000?

@weird-oecophylla to be honest, you have went beyond my scope of knowledge on this issue. Unfortunately I don’t have a setup in my lab to test this out for you but I did noticed something similar to this situation in the forum. Perhaps it might help.

API response limit in json

Hi! I have similar problem as in But my version of graylog is newest stabile I have 2 nodes with 2.4.3 version: Node ID: a79139b1-eb44-4fd4-b028-3bb2022fe4fa Version: 2.4.3+2c41897, codename Wildwuchs and Node ID: 9d619de9-d9a1-40d5-a2f2-21d0866ebc19 Version: 2.4.3+2c41897, codename Wildwuchs for resolve json limit I have upgrade graylog today. But in json response i get: message[‘total_results’] = 988 (as example) and length of messages array = 150 (with any relative timerange) …