Skip to content

Do you know: how to increase the maximum async search response size in Kibana?

Each week, a new “Do You Know” will be posted on our Elastic Technical Knowledge Hub to share useful knowledge to improve the observability using Elasticsearch. These topics originate from day-to-day challenges we solved for our clients. A stepwise description helps you to successfully implement solutions on improving the performance of your deployment and get the best monitoring of your applications using dashboards and alerting.

This week I will discuss: how to increase the maximum async search response size in Kibana.

Background

It may occur that you run a search in Kibana that returns several hundred documents. All together, the response may be larger than 10 MB. If so, Elasticsearch returns an error message. To avoid this, you can increase the response size by setting the maximum async search response size to a higher value. In this example, I increase the response size to 50 MB.

Solution

Go to the Dev Tool in Kibana and put in the following command:

PUT /_cluster/settings 
{
  "persistent": { 
    "search.max_async_search_response_size":"50mb"
  }
}

Need help with your Elastic challenges? Contact our experts.

With our 25+ Elastic certified consultants, Devoteam is your partner for developing and implementing Monitoring & Observability solutions that facilitate optimal IT control, from Business & IT Operations dashboards to centralized logging and proactive alerting.