Bug ID 1182737: BIG-IQ global configuration documents are not stored in ES due to maximum limit reached

Last Modified: Feb 24, 2025

Affected Product(s):
BIG-IQ Platform(all modules)

Known Affected Versions:
8.2.0, 8.2.0.1

Opened: Oct 20, 2022

Severity: 3-Major

Symptoms

The following error can be seen in /var/log/tokumon/current: 2022-10-10_13:04:18.38501 [SEVERE] es: _index:global command:index status:400 _id:https://localhost/mgmt/cm/global/tasks/deploy-app-service/8c722b61-da2f-4660-89f9-5d1c9b91fade error:{""type"":""illegal_argument_exception"",""reason"":""Limit of total fields [5000] in index [global] has been exceeded""} see searchd log for complete error.

Impact

Using the global search, the global records are not listed.

Conditions

Search filter in Applications -> Application Deployments works when searched with existing column values but does not work when searched with values other than those mentioned in columns.

Workaround

Execute the following steps: 1. Change /usr to read/write: #mount -o remount,rw /usr 2. Change to the directory: #cd /usr/share/rest/tokumon/config/modules 3. Make a copy of global.js: #cp global.js global.js.orig 4. Edit global.js using nano,vi, etc 5. Under "mappings"."properties"."_value", add the following line json element/object ,"body": { "enabled": false } 6. Save and quit 7. Force tokumon to delete and rebuild all indices: #bigstart kill tokumond NOTE: If tokumon begins restarting constantly, there is a likely syntax error in the changes made in step 5. Stop tokumond (bigstart stop tokumond) and repeat step 5 to find the error. If the problem persists, revert the file to the copy made in step 3. #cp global.js.orig global.js #bigstart kill tokumond 8. Ensure /usr is set to readonly: #mount -o remount,ro /usr"

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips