Result window is too large, from + size must be less than or equal to: [10000] but was [500000]. ...

1、报错

Result window is too large, from + size must be less than or equal to: [10000] but was [500000]. See the scroll api for a more efficient way to request large data sets. This limit can be set by changing the [index.max_result_window] index level setting.

2、原因

2.1 查询结果中 hits.total.value 值最大为10000的限制

2.2 分页查询 from 大于 10000 时的数据异常

3、解决方法

修改 max_result_window 设置的最大索引值

// kibana直接修改
PUT /demo-test/_settings
{
  "index":{
    "max_result_window": 500000000
  }
}