diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 0c65b003f5c4..1a968f386a07 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -10,7 +10,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Affecting all Beats* -- Fixes filestream logging the error "filestream input with ID 'ID' already exists, this will lead to data duplication[...]" on Kubernetes when using autodiscover. {pull}41585[41585] +- Fix metrics not being ingested, due to "Limit of total fields [10000] has been exceeded while adding new fields [...]". The total fields limit has been increased to 12500. No significant performance impact on Elasticsearch is anticipated. {pull}41640[41640] *Auditbeat* @@ -27,6 +27,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Removed deprecated Cylance from Beats. See <> for migration options. {pull}38037[38037] - Removed deprecated Bluecoat from Beats. See <> for migration options. {pull}38037[38037] - Introduce input/netmetrics and refactor netflow input metrics {pull}38055[38055] +- Fixes filestream logging the error "filestream input with ID 'ID' already exists, this will lead to data duplication[...]" on Kubernetes when using autodiscover. {pull}41585[41585] *Heartbeat* diff --git a/libbeat/template/load_test.go b/libbeat/template/load_test.go index 8f6b1837d9a2..db82384539c9 100644 --- a/libbeat/template/load_test.go +++ b/libbeat/template/load_test.go @@ -170,7 +170,7 @@ func TestFileLoader_Load(t *testing.T) { "refresh_interval": "5s", "mapping": mapstr.M{ "total_fields": mapstr.M{ - "limit": 10000, + "limit": defaultTotalFieldsLimit, }, }, "query": mapstr.M{ diff --git a/libbeat/template/template.go b/libbeat/template/template.go index 5663a55c9cb5..f68b56987fdb 100644 --- a/libbeat/template/template.go +++ b/libbeat/template/template.go @@ -35,7 +35,7 @@ import ( var ( // Defaults used in the template defaultDateDetection = false - defaultTotalFieldsLimit = 10000 + defaultTotalFieldsLimit = 12500 defaultMaxDocvalueFieldsSearch = 200 defaultFields []string