-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
3.6.0, 3.7.0-alpha1, 3.6.1, 3.6.2, 3.6.3
-
None
-
Not defined
Context:
The variable import fails on too large values with the following error:
{
"textPayload": "[116]: index [optimize-process-instance-simpleprocess_v8], type [_doc], id [4503599627370750], message [ElasticsearchException[Elasticsearch exception [type=illegal_argument_exception, reason=Document contains at least one immense term in field=\"variables.value.lowercaseField\" (whose UTF8 encoding is longer than the max length 32766), all of which were skipped. Please correct the analyzer to not produce such terms. The prefix of the first immense term is: '[49, 50, 51, 52, 53, 54, 55, 56, 57, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 48]...', original message: bytes can be at most 32766 in length; got 84002]]; nested: ElasticsearchException[Elasticsearch exception [type=max_bytes_length_exceeded_exception, reason=bytes can be at most 32766 in length; got 84002]];]",
"insertId": "ca3qm1qisxi0dzuo",
"resource": {
"type": "k8s_container",
},
"timestamp": "2021-12-09T10:04:32.095304816Z",
"severity": "INFO",
"labels": {
This is due to the ignore_above setting not being applied to the subfields of the variable value.
AT:
- ignore_above needs to get applied to all multifields with type keyword of the variable value