Cluster down - No action possible

Elastic Stack Elasticsearch
1

Hello,

{"error":{"root_cause":[{"type":"circuit_breaking_exception","reason":"[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]","bytes_wanted":1740972440,"bytes_limit":1491035750}],"type":"circuit_breaking_exception","reason":"[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]","bytes_wanted":1740972440,"bytes_limit":1491035750},"status":503}

I cannot update my cluster, upgrade or do anything. I can only contact the support by email with a 3 days SLA. Any idea on how to get around this issue ?

Thank you

2

If you have an error message like this one, that does not mean that your cluster is down.
Just that some queries can not be served because of the memory pressure.

What gives GET _cat/health?v and GET _cat/indices?v?

May you are using parent/child? May be you are not using doc_values?

I can only contact the support by email with a 3 days SLA.

If you have support, please go for it. That's the best way to handle your case.
Is it a cloud instance?

3

Every query returns :

{
  "error" : {
    "root_cause" : [
      {
        "type" : "circuit_breaking_exception",
        "reason" : "[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]",
        "bytes_wanted" : 1740972440,
        "bytes_limit" : 1491035750
      }
    ],
    "type" : "circuit_breaking_exception",
    "reason" : "[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]",
    "bytes_wanted" : 1740972440,
    "bytes_limit" : 1491035750
  },
  "status" : 503
} 

{
  "cluster_name" : "xxxxx",
  "status" : "yellow",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 255,
  "active_shards" : 255,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 254,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 50.09823182711198
}

It is a cloud instance hosted by elastic.co. Thanks for your help!

4

What gives:

GET _cat/indices?v
GET _cat/nodes?v

and

GET _search

Please format your code using </> icon as explained in this guide and not the citation button. It will make your post more readable.

Or use markdown style like:

```
CODE
```

Please edit your post.

5

Hello,

Sorry, for the posting guidelines, it should be better now/

GET /_cat/indices?v
GET /_cat/nodes?v
GET /_search
{"error":{"root_cause":[{"type":"circuit_breaking_exception","reason":"[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]","bytes_wanted":1740972440,"bytes_limit":1491035750}],"type":"circuit_breaking_exception","reason":"[parent] Data too large, data for [<http_request>] would be [1740972440/1.6gb], which is larger than the limit of [1491035750/1.3gb]","bytes_wanted":1740972440,"bytes_limit":1491035750},"status":503}

It all returns the same message

6

I see.

Can you run as well: GET /?

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.