title: Elasticsearch Field limit more than 1000
body: <p>Can someone assist please. I need to fix the error so CloudTrail log in S3 can be shipped to Logstash the ES and viewed in Kibana. Can't figure out how to increase the field limit to something higher. My configuration looks like </p>
  
  <pre><code>input {
     s3 {
       bucket =&gt; "sample-s3bucket"
       region =&gt; "eu-west-1"
       type =&gt; "cloudtrail"
       codec =&gt; cloudtrail {}
       sincedb_path =&gt; "/tmp/logstash/cloudtrail"
       exclude_pattern =&gt; "/CloudTrail-Digest/"
       interval =&gt; 300
     }
  }
  
  filter {
      if [type] == "cloudtrail" {
          json {
              source =&gt; "message"
          }
  
          geoip {
              source =&gt; "sourceIPAddress"
              target =&gt; "geoip"
              add_tag =&gt; ["cloudtrail-geoip"]
          }
      }
  }
  
  output {
      elasticsearch {
        hosts =&gt; "coordinate_node:9200"
        index =&gt; 'cloudtrail-%{+YYYY.MM.dd}'
           }
      stdout {
       codec =&gt; rubydebug
      }
   }
  </code></pre>
  
  <p>Here is what am seeing on my Logstash machine about <code>limit</code></p>
  
  <blockquote>
    <p>2018-10-04T17:49:49,883][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"cloudtrail-2018.09.27", :_type=>"doc", :_routing=>nil}, #], :response=>{"index"=>{"_index"=>"cloudtrail-2018.09.27", "_type"=>"doc", "_id"=>"lrMzQGYBOny1_iySNW6G", "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"Limit of total fields [1000] in index [cloudtrail-2018.09.27] has been exceeded"}}}</p>
  </blockquote>
  
  <p>Thanks in advance </p>