# Data too large error

**URL:** https://discuss.elastic.co/t/data-too-large-error/19003
**Category:** Elasticsearch
**Created:** [July 31, 2014, 9:22am UTC](https://discuss.elastic.co/t/data-too-large-error/19003 "2014-07-31T09:22:28Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Rhys\_Campbell](https://avatars.discourse-cdn.com/v4/letter/r/d78d45/32.png) [@Rhys\_Campbell](https://discuss.elastic.co/u/Rhys_Campbell)
#### Post date: [July 31, 2014, 9:22am UTC](https://discuss.elastic.co/t/data-too-large-error/19003/1 "2014-07-31T09:22:28Z")

</div>

I occasionally get the following error in Kibana from elasticsearch

\*1. \*

_Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data  
too large, data for field [@timestamp] would be larger than limit  
of[639015321/609.4mb]]_

I even get this when searching for \<5 min of data through the Kibana log  
stash search. It will disappear and reappear for the reason apparent to me.  
My total data size is not that big yet.

Elastic search has been left on the default of splitting the indices by  
day. The current size in 168M for today.

Any hints?

Cheers,.

Rhys

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [August 4, 2014, 9:08am UTC](https://discuss.elastic.co/t/data-too-large-error/19003/2 "2014-08-04T09:08:10Z")

</div>

Hey,

in order for kibana to work, elasticsearch needs to load all @timestamp  
values into memory. This exception tries to tell the user, that loading  
this into memory would result in an Out-of-Memory exception, so  
elasticsearch aborts this request. You could start elasticsearch with more  
memory and see if it works.

--Alex

On Thu, Jul 31, 2014 at 11:22 AM, Rhys Campbell \<  
[rhys.james.campbell@gmail.com](mailto:rhys.james.campbell@gmail.com)\> wrote:

> I occasionally get the following error in Kibana from elasticsearch
> 
> \*1. \*
> 
> _Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data  
> too large, data for field [@timestamp] would be larger than limit  
> of[639015321/609.4mb]]_
> 
> I even get this when searching for \<5 min of data through the Kibana log  
> stash search. It will disappear and reappear for the reason apparent to me.  
> My total data size is not that big yet.
> 
> Elastic search has been left on the default of splitting the indices by  
> day. The current size in 168M for today.
> 
> Any hints?
> 
> Cheers,.
> 
> Rhys
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ebad6813-41d4-4e41-9a88-ff94058cd2b6%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAGCwEM-39t23J\_QRFZNu%3DPbF4STdEbYBu7Ucs6gTtPi\_e8RVpA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAGCwEM-39t23J_QRFZNu%3DPbF4STdEbYBu7Ucs6gTtPi_e8RVpA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![spuder](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spuder/32/44895_2.png) [@spuder](https://discuss.elastic.co/u/spuder)
#### Post date: [April 22, 2015, 3:36pm UTC](https://discuss.elastic.co/t/data-too-large-error/19003/3 "2015-04-22T15:36:17Z")

</div>

Did you figure this out? I'm running into the same problem.

On Thursday, July 31, 2014 at 3:22:28 AM UTC-6, Rhys Campbell wrote:

> I occasionally get the following error in Kibana from elasticsearch
> 
> \*1. \*
> 
> _Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data  
> too large, data for field [@timestamp] would be larger than limit  
> of[639015321/609.4mb]]_
> 
> I even get this when searching for \<5 min of data through the Kibana log  
> stash search. It will disappear and reappear for the reason apparent to me.  
> My total data size is not that big yet.
> 
> Elastic search has been left on the default of splitting the indices by  
> day. The current size in 168M for today.
> 
> Any hints?
> 
> Cheers,.
> 
> Rhys

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 22, 2015, 9:57pm UTC](https://discuss.elastic.co/t/data-too-large-error/19003/4 "2015-04-22T21:57:29Z")

</div>

This original thread is nearly a year old! You'd be better off starting a  
new one 🙂

On 23 April 2015 at 01:36, Spencer Owen [owenspencer@gmail.com](mailto:owenspencer@gmail.com) wrote:

> Did you figure this out? I'm running into the same problem.
> 
> On Thursday, July 31, 2014 at 3:22:28 AM UTC-6, Rhys Campbell wrote:
> 
> > I occasionally get the following error in Kibana from elasticsearch
> > 
> > \*1. \*
> > 
> > _Oops!ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:Data  
> > too large, data for field [@timestamp] would be larger than limit  
> > of[639015321/609.4mb]]_
> > 
> > I even get this when searching for \<5 min of data through the Kibana log  
> > stash search. It will disappear and reappear for the reason apparent to me.  
> > My total data size is not that big yet.
> > 
> > Elastic search has been left on the default of splitting the indices by  
> > day. The current size in 168M for today.
> > 
> > Any hints?
> > 
> > Cheers,.
> > 
> > Rhys
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups  
> > "elasticsearch" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an  
> > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com)  
> > [https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/fd1bd01d-356b-4fcf-9228-a7da6686277c%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > .  
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-oZTfnt9tm6zXziYEb-tj0LRBk9YvEhH3OYAoCf2tBJw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-oZTfnt9tm6zXziYEb-tj0LRBk9YvEhH3OYAoCf2tBJw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 12:18am UTC](https://discuss.elastic.co/t/data-too-large-error/19003/5 "2017-07-06T00:18:11Z")

</div>


