Graylog2 / Graylog2/graylog2-server

ratelimit or limit queries to elasticsearch

Open
#8,308 0 comments 3 reactions 0 assignees View on GitHub
elasticsearch feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What & Why
Have the ability to ratelimit the search for users OR be able to deny queries that will create a high load on the storage backend.

Ratelimit should be X per time OR the ability that a new search can be only done if the previous returned.

The ability to deny queries that are known to be bad for the cluster would be the other option.

Both have the goal to avoid storage/elasticsearch down because of uneducated queries or impatience of users.

## Your Environment

* Graylog Version: 3.3

[z#843492]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.