This still appears to be happening in 5.4
I am trying the following query
and if I set the size to “No Limit” and look in the query inspector the size attribute in the request is set to 500
{"search_type":"query_then_fetch","ignore_unavailable":true,"index":"logs*","max_concurrent_shard_requests":256} {"size":0,"query":{"bool":{"filter":[{"range":{"@timestamp":{"gte":"1552048546355","lte":"1552070146355","format":"epoch_millis"}}},{"query_string":{"analyze_wildcard":true,"query":"datacenter: achm*"}}]}},"aggs":{"4":{"terms":{"field":"datacenter.keyword","size":500,"order":{"_count":"desc"},"min_doc_count":1},"aggs":{"3":{"terms":{"field":"http_status_code","size":500,"order":{"_key":"desc"},"min_doc_count":1},"aggs":{"2":{"date_histogram":{"interval":"1m","field":"@timestamp","min_doc_count":0,"extended_bounds":{"min":"1552048546355","max":"1552070146355"},"format":"epoch_millis"},"aggs":{}}}}}}}} "
if I then set size to 1000 I get the following:
{"search_type":"query_then_fetch","ignore_unavailable":true,"index":"logs*","max_concurrent_shard_requests":256} {"size":0,"query":{"bool":{"filter":[{"range":{"@timestamp":{"gte":"1552048355483","lte":"1552069955483","format":"epoch_millis"}}},{"query_string":{"analyze_wildcard":true,"query":"datacenter: achm*"}}]}},"aggs":{"4":{"terms":{"field":"datacenter.keyword","size":1000,"order":{"_count":"desc"},"min_doc_count":1},"aggs":{"3":{"terms":{"field":"http_status_code","size":1000,"order":{"_key":"desc"},"min_doc_count":1},"aggs":{"2":{"date_histogram":{"interval":"1m","field":"@timestamp","min_doc_count":0,"extended_bounds":{"min":"1552048355483","max":"1552069955483"},"format":"epoch_millis"},"aggs":{}}}}}}}} "
It appears that No Limit means 500 ? How do I make it actually mean no limit since its doing an aggregation ?