Data too large error

Elastic Stack Elasticsearch
1

I occasionally get the following error in Kibana from elasticsearch

*1. *

Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data
too large, data for field [@timestamp] would be larger than limit
of[639015321/609.4mb]]

I even get this when searching for <5 min of data through the Kibana log
stash search. It will disappear and reappear for the reason apparent to me.
My total data size is not that big yet.

Elastic search has been left on the default of splitting the indices by
day. The current size in 168M for today.

Any hints?

Cheers,.

Rhys

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Hey,

in order for kibana to work, elasticsearch needs to load all @timestamp
values into memory. This exception tries to tell the user, that loading
this into memory would result in an Out-of-Memory exception, so
elasticsearch aborts this request. You could start elasticsearch with more
memory and see if it works.

--Alex

On Thu, Jul 31, 2014 at 11:22 AM, Rhys Campbell <
rhys.james.campbell@gmail.com> wrote:

I occasionally get the following error in Kibana from elasticsearch

*1. *

Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data
too large, data for field [@timestamp] would be larger than limit
of[639015321/609.4mb]]

I even get this when searching for <5 min of data through the Kibana log
stash search. It will disappear and reappear for the reason apparent to me.
My total data size is not that big yet.

Elastic search has been left on the default of splitting the indices by
day. The current size in 168M for today.

Any hints?

Cheers,.

Rhys

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAGCwEM-39t23J_QRFZNu%3DPbF4STdEbYBu7Ucs6gTtPi_e8RVpA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

3

Did you figure this out? I'm running into the same problem.

On Thursday, July 31, 2014 at 3:22:28 AM UTC-6, Rhys Campbell wrote:

I occasionally get the following error in Kibana from elasticsearch

*1. *

Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data
too large, data for field [@timestamp] would be larger than limit
of[639015321/609.4mb]]

I even get this when searching for <5 min of data through the Kibana log
stash search. It will disappear and reappear for the reason apparent to me.
My total data size is not that big yet.

Elastic search has been left on the default of splitting the indices by
day. The current size in 168M for today.

Any hints?

Cheers,.

Rhys

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

This original thread is nearly a year old! You'd be better off starting a
new one :slight_smile:

On 23 April 2015 at 01:36, Spencer Owen owenspencer@gmail.com wrote:

Did you figure this out? I'm running into the same problem.

On Thursday, July 31, 2014 at 3:22:28 AM UTC-6, Rhys Campbell wrote:

I occasionally get the following error in Kibana from elasticsearch

*1. *

Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data
too large, data for field [@timestamp] would be larger than limit
of[639015321/609.4mb]]

I even get this when searching for <5 min of data through the Kibana log
stash search. It will disappear and reappear for the reason apparent to me.
My total data size is not that big yet.

Elastic search has been left on the default of splitting the indices by
day. The current size in 168M for today.

Any hints?

Cheers,.

Rhys

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-oZTfnt9tm6zXziYEb-tj0LRBk9YvEhH3OYAoCf2tBJw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.