详细报错如下
Request to Elasticsearch failed: {"error":
{"root_cause":[{"type":"illegal_argument_exception",
"reason":"The length of [message] field of [rjxwrXYBmdQ8ALlqPuhB] doc of [logstash-hqjc-2020.12.29] index has exceeded [1000000] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!"}],
"type":"search_phase_execution_exception","reason":"all shards failed","phase":"query","grouped":true,"failed_shards":[{"shard":0,"index":"logstash-hqjc-2020.12.29","node":"jpDWNewHSf-yzxcTAWQ14g","reason":{"type":"illegal_argument_exception","reason":"The length of [message] field of [rjxwrXYBmdQ8ALlqPuhB] doc of [logstash-hqjc-2020.12.29] index has exceeded [1000000] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!"}}],"caused_by":{"type":"illegal_argument_exception","reason":"The length of [message] field of [rjxwrXYBmdQ8ALlqPuhB] doc of [logstash-hqjc-2020.12.29] index has exceeded [1000000] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!","caused_by":{"type":"illegal_argument_exception","reason":"The length of [message] field of [rjxwrXYBmdQ8ALlqPuhB] doc of [logstash-hqjc-2020.12.29] index has exceeded [1000000] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the [index.highlight.max_analyzed_offset] index level setting. For large texts, indexing with offsets or term vectors is recommended!"}}}
点击编辑索引
如图
如下图添加索引配置即可
保存刷新kibana报错解决