I'd like to suggest that you add a (configurable) timeout parameter
http://www.elasticsearch.org/guide/reference/api/search/request-body/
to the search calls.
Rationale: if you make a unlucky search query on a large dataset you can practically block elasticsearch for a long time. If you add a timeout of, say, 10 seconds, that will limit the ability of the user to send elasticsearch accidentially trashing over terabytes of log data.
I'd like to suggest that you add a (configurable) timeout parameter
http://www.elasticsearch.org/guide/reference/api/search/request-body/
to the search calls.
Rationale: if you make a unlucky search query on a large dataset you can practically block elasticsearch for a long time. If you add a timeout of, say, 10 seconds, that will limit the ability of the user to send elasticsearch accidentially trashing over terabytes of log data.