# After adding the filter, executing the query will cause the kibana container to restart

**URL:** <https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430>\
**Category:** Kibana\
**Tags:** docker\
**Created:** [November 24, 2020, 2:03am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430 "2020-11-24T02:03:20Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [November 24, 2020, 2:03am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/1 "2020-11-24T02:03:21Z")

</div>

![1](https://us1.discourse-cdn.com/elastic/original/3X/d/d/dd784e8f6658b41b136814ebd47ded80a105d0d0.png)

I hide the unnecessary domain name display

kibana completes the error:

```auto
Error: Request to Elasticsearch failed: {"error":{}}
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4900279
    at Function._module.service.Promise.try (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2504083)
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2503457
    at Array.map (<anonymous>)
    at Function._module.service.Promise.map (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2503414)
    at callResponseHandlers (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4898793)
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4881154
    at processQueue (http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:204190)
    at http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:205154
    at Scope.$digest (http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:215159)

```

---

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [November 24, 2020, 2:05am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/2 "2020-11-24T02:05:01Z")

</div>

My cpu memory limit for the kibana container is:

```auto
     Limits:
       cpu: 400m
       memory: 1300Mi
     Requests:
       cpu: 400m
       memory: 1300Mi

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 24, 2020, 2:27am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/3 "2020-11-24T02:27:29Z")

</div>

Which container is restarting?

---

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [November 24, 2020, 2:55am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/4 "2020-11-24T02:55:20Z")

</div>

Use kibana to query the above example, causing the kibana container to restart

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 24, 2020, 2:56am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/5 "2020-11-24T02:56:00Z")

</div>

What do the Kibana logs show?

---

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [November 24, 2020, 2:59am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/6 "2020-11-24T02:59:13Z")

</div>

```auto
Error: Request to Elasticsearch failed: {"error":{}}
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4900279
    at Function._module.service.Promise.try (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2504083)
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2503457
    at Array.map (<anonymous>)
    at Function._module.service.Promise.map (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:2503414)
    at callResponseHandlers (http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4898793)
    at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4881154
    at processQueue (http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:204190)
    at http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:205154
    at Scope.$digest (http://kibana.platform.abc.cn/built_assets/dlls/vendors.bundle.dll.js:435:215159)

```

[/quote]

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 24, 2020, 3:00am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/7 "2020-11-24T03:00:03Z")

</div>

Is that all?

---

<div class="post-metadata">

**Author:** ![yt\_h](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yt_h/32/79484_2.png) [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Post date:** [November 24, 2020, 3:06am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/8 "2020-11-24T03:06:21Z")

</div>

I can no longer find the previous kibana container log. After I increased the kibana memory to 2300Mi, the error no longer occurs. This index mode corresponds to 3 indexes, the total size of the 3 indexes is 800M, query specific fields within 7 days, whether kibana needs more memory to perform the query operation。

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 22, 2020, 3:06am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430/9 "2020-12-22T03:06:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.