# Elastic enterprise throws 502 errors

**URL:** <https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615>\
**Category:** Elastic Search\
**Tags:** elastic-app-search, elastic-workplace-search\
**Created:** [January 23, 2024, 10:16am UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615 "2024-01-23T10:16:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gerardo\_Zenobi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gerardo_zenobi/32/106790_2.png) [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Post date:** [January 23, 2024, 10:16am UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/1 "2024-01-23T10:16:09Z")

</div>

Hi there,

We have been getting quite a few 5xx responses from Elastic Enterprise Request: both from our web client requests to App Search, as well as when browsing Enterprise Search within elastic cloud deployment UX.

Example error:

 ![Screenshot 2024-01-23 at 11.19.05](https://us1.discourse-cdn.com/elastic/original/3X/3/c/3c84af76f3ca308e2dbf798aa7e352515b1fe358.png)

```auto
{
    "statusCode": 502,
    "error": "Bad Gateway",
    "message": "Enterprise Search encountered an internal server error. Please contact your system administrator if the problem persists."
}

```

Our deployment intermittently appears as unhealthy, saying our Elastic Enterprise instance/s our unstable.

I am guessing that it might have to do with our minimal (2GM ram) resource configuration for the Enterprise Search instance:

 ![Screenshot 2024-01-23 at 11.14.17](https://us1.discourse-cdn.com/elastic/original/3X/8/e/8e16021db1ecefd1aa39ff102b618d78c1633809.png)

**Questions I have:**

- How do I troubleshoot the issue? I already ship logs and metrics to a monitoring deployment but this doesn't give me any useful information to troubleshoot the problem AFAIK.
- How do I know how much resource I need to provision for Enterprise Search?
  - Do I also need 2 availability zones for Enterprise Search or within 1 availability zone there is already replication ?

thanks in advance.

---

<div class="post-metadata">

**Author:** ![Sean\_Story](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sean_story/32/69987_2.png) [@Sean\_Story](https://discuss.elastic.co/u/Sean_Story)\
**Post date:** [January 23, 2024, 2:17pm UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/2 "2024-01-23T14:17:20Z")

</div>

As a cloud customer, you're entitled to Elastic Support services. You can engage them at support.elastic.co, and they can help dig into your logs to figure out what's going on.

As you noted, 2GB is the smallest size available for Enterprise Search, and depending on what Enterprise Search features you're using (and at what scale) this may be insufficient.

I'd recommend as a first step just bumping the size of the instance up to 4GB, and see if that resolves your issue. If not, I'd engage support, and ask for some more targeted troubleshooting/advice based on your specific use case.

---

<div class="post-metadata">

**Author:** ![Gerardo\_Zenobi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gerardo_zenobi/32/106790_2.png) [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Post date:** [January 23, 2024, 4:19pm UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/3 "2024-01-23T16:19:49Z")

</div>

Thanks for the response @Sean_Story

I have contacted support as well but was hoping perhaps for a faster response here.

> I'd recommend as a first step just bumping the size of the instance up to 4GB, and see if that resolves your issue.

That's not a bad idea : ) What I wanted to avoid was to "brute" fix the issue without knowing exactly the root cause ( "e.g. an out of mem log in enterprise nodes, etc")

---

<div class="post-metadata">

**Author:** ![Sander\_Philipse](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sander_philipse/32/101890_2.png) [@Sander\_Philipse](https://discuss.elastic.co/u/Sander_Philipse)\
**Post date:** [January 26, 2024, 8:05pm UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/4 "2024-01-26T20:05:13Z")

</div>

Hi @Gerardo_Zenobi, have you tried looking at the Enterprise Search logs? The logline you're referencing is a Kibana log line, Enterprise Search should be logging more specific information on any issues it's running into.

---

<div class="post-metadata">

**Author:** ![Gerardo\_Zenobi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gerardo_zenobi/32/106790_2.png) [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Post date:** [February 6, 2024, 8:27am UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/5 "2024-02-06T08:27:57Z")

</div>

Hi @Sander_Philipse ,

It was hard to look at the logs as we were not shipping them to a separate monitoring cluster.

Since then, we started doing so and I have been trying to find clues in them without much success: trying to get around the log stream usage and understand the different ways of filtering to quickly spot issues (e.g. how to show only error/warnings, etc). E.g.:

 ![Screenshot 2024-02-06 at 09.26.55](https://us1.discourse-cdn.com/elastic/original/3X/6/9/6961eb595277122684511222160372ceff24ed93.jpeg)

If you have any tips about it, they are welcome : )

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2024, 8:28am UTC](https://discuss.elastic.co/t/elastic-enterprise-throws-502-errors/351615/6 "2024-03-05T08:28:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.