I have been getting a lot of those warnings lately in Kibana (4.3.1) when I'm just watching a dashboard over a period of 30 days with 13 visualizations on it (no error/warning are produced when searching for the last 7 days though). While digging more, I managed to get a better error in the JSON returned in the queries. Some of them were pretty much containing that exception.
Looking at the logs of ElasticSearch, the exception was a lot more detailed but still wasn't giving me any clue on why this is happening. Here is part of the exception:
[2015-12-29 16:41:09,731][DEBUG][action.search.type ] [Cypher] [logstash-2015.12.08][0], node[i2hQZPwoT3qpK8Zvupeg7A], [P], v[12], s[STARTED], a[id=vntyCQvDTle247Turf8Olg]: Failed to execute [org.elasticsearch.action.search.SearchRequest@5749b0ae] lastShard [true]
RemoteTransportException[[Cypher][127.0.0.1:9300][indices:data/read/search[phase/query]]]; nested: EsRejectedExecutionException[rejected execution of org.elasticsearch.transport.TransportService$4@1bf3a021 on EsThreadPoolExecutor[search, queue capacity = 1000, org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor@e3fbd3f[Running, pool size = 10, active threads = 10, queued tasks = 1000, completed tasks = 1672838]]];
Caused by: EsRejectedExecutionException[rejected execution of org.elasticsearch.transport.TransportService$4@1bf3a021 on EsThreadPoolExecutor[search, queue capacity = 1000, org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor@e3fbd3f[Running, pool size = 10, active threads = 10, queued tasks = 1000, completed tasks = 1672838]]]
Here is the full exception: http://pastie.org/private/crlbpktacu4k2lfwgexvbq (it's too big for the post).
I got some help on IRC. I installed Marvel to monitor ElasticSearch (2.1.1) and looked at it while generating the issues I got. Nothing seems unusual, everything seems pretty normal (enough memory left, low memory usage, low CPU, etc).
One solution was to increase the size of the thread pool but I was told it is a workaround and I will end up hitting that issue at some point again.
Any pointer or tip on figuring out how the origin of the issue?