Regex queries will need more time to run than the standard 10 seconds. We should give them 30 or something.

Also, we should improve the error message when a query times out.

Finally, we should *make sure* that the regex filter comes last in the chain of stuff that Elasticsearch does because we know it'll be the slowest thing. That way we're super duper sure that stuff like <<insource:foo insource:/foo/>> is actually faster then plain <<insource:/foo/>>.

Version: unspecified
Severity: normal