Auto kill queries taking more time

Elastic Stack Elasticsearch
1

We are using 7.3 ES. Due to few bad queries fired by end user, ES CPU/Memory jumps to very high and impacts all others. We want to know any way to stop those long-running queries and return 429 or some status, so the client can handle this.
We got default_search_timeout option which is shard level timeout. And also this results in sending partial data to client. We are looking for some global end user query level settings. Also as I said, we want to return error rather partial data.

Please help us on some options to protect our cluster with these.

2

7.3 is EOL, please upgrade :slight_smile:

If you upgrade you get access to a number of different improvements around this area as well!

3

Sure thanks, planning to move to 7.8. Are there any flags or options for the same query I asked above? Overall We don't want one bad query from 1 client impacting others

4

See the query setting allow_partial_results or the cluster setting default_allow_partial_results

5

thanks a lot. this works for us

6

7.8 is also pretty old and becomes EOL in less than a month. It would be wise to choose something newer.

1 Like
7

7.15 is latest!

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.