Are there any downsides to using Dev Tools to search?

Open Source Elasticsearch and Kibana
1

Suppose I make a Dev Tool Query like this:

GET _search 

{ 

   "query": { 

      "terms": { 

  	   "DestinationIP": [ 

    	      "100.42.74.212", 

    	      "101.50.1.23", 

    	      "101.99.90.41", 

    	      "103.114.160.253" 

  	      ] 

} 

   } 

}

Are there any serious downsides in doing so?

2

You would be searching all the indices. That would be a hit on the cluster.

3

You don’t need to do this i guess :smiley:

4

How does this differ from a generic search? How do I view and specify my indices?

5

Why wouldn’t I need to?

6

Here is some of the basic api usage Popular APIs - Open Distro Documentation
The generic search you are doing is going to search all indices, so basically if you have 10 indices with 1gb of data each, it is going to search 10gb worth of data, rather than just 1gb of data if you can specify the index you want.

1 Like