Hello, I have problem with change “max_result_window” on Graylog 4.2.8. I changed all of my indices (where # = 1-12) with this command: curl -XPUT “ http://localhost:9200/graylog_#/_settings ” -d ‘{ “index” : { “max_result_window” : 500000 } }’ -H “Content-Type: application/json” but after this I …

I found solution: after I used this command: curl -XPUT “ http://localhost:9200/_all/_settings ” -d ‘{ “index” : { “max_result_window” : 50000 } }’ -H “Content-Type: application/json” I am able to see more than 10k logs.

Max_result_window increase problem

Graylog Central (peer support)

gsmith (GSmith) May 4, 2022, 11:03pm 2

Hello && Welcome

I would like to help you but… With the lack of information given I’m not able to help you any further.
Just a side note increasing the max_result_window to 500000 is not a good idea, This would result in lots of issues.
To help you further please take a look at this post.

Topic		Replies	Views
Max_result_window increase Graylog 4.0.5+d95b909 Graylog Central (peer support)	17	3445	April 27, 2021
Problems with max size window Graylog Central (peer support)	4	359	July 18, 2019
Configure index.max_result_window Graylog Central (peer support)	7	4366	March 26, 2019
Increase index.max_result_window Graylog Central (peer support)	13	18987	September 15, 2020
Elastic search max_result_window setting limitation Graylog Central (peer support)	1	256	June 6, 2023

Max_result_window increase problem

Related topics