Elastic Search service is stopped and disabled in services.msc

Elastic Stack Elasticsearch
1

Hi, i have a machine with 1 node, 16gb RAM and 500gb HDD. I'm using filebeats to read data for around 15 applications and each days index is reading and storing around 53gb of logs data per day. Recently when i see that the service in services.msc is stopped and disabled. So i'm not able to start the elasticsearch service again. Therefore i'm getting "Internal Server Error".

Need help to "

  • Understand if these system configurations are fine or not.
  • What's the issue and how to recover the elasticsearch service again.
2

Are you using anything like SCCOM to manage your Windows hosts?

3

No. Error in log says "JVM Heap Size exceed"

4

Maybe you can paste your Elasticsearch log?

5 
[2020-12-15T14:08:27,905][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [ServerName] fatal error in thread [elasticsearch[ServerName][system_write][T#1]], exiting
java.lang.OutOfMemoryError: Java heap space
	at java.util.Arrays.copyOfRange(Arrays.java:3821) ~[?:?]
	at java.lang.StringLatin1.newString(StringLatin1.java:767) ~[?:?]
	at java.lang.StringBuilder.toString(StringBuilder.java:447) ~[?:?]
	at com.fasterxml.jackson.core.util.TextBuffer.contentsAsString(TextBuffer.java:426) ~[jackson-core-2.10.4.jar:2.10.4]
	at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._finishAndReturnString(UTF8StreamJsonParser.java:2439) ~[jackson-core-2.10.4.jar:2.10.4]
	at com.fasterxml.jackson.core.json.UTF8StreamJsonParser.getText(UTF8StreamJsonParser.java:294) ~[jackson-core-2.10.4.jar:2.10.4]
	at org.elasticsearch.common.xcontent.json.JsonXContentParser.text(JsonXContentParser.java:83) ~[elasticsearch-x-content-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.support.AbstractXContentParser.readValueUnsafe(AbstractXContentParser.java:393) ~[elasticsearch-x-content-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.support.AbstractXContentParser.readMapEntries(AbstractXContentParser.java:327) ~[elasticsearch-x-content-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.support.AbstractXContentParser.readMapSafe(AbstractXContentParser.java:316) ~[elasticsearch-x-content-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.support.AbstractXContentParser.map(AbstractXContentParser.java:266) ~[elasticsearch-x-content-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.XContentHelper.convertToMap(XContentHelper.java:174) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.xcontent.XContentHelper.convertToMap(XContentHelper.java:122) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.index.IndexRequest.sourceAsMap(IndexRequest.java:428) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.UpdateHelper.prepareUpdateIndexRequest(UpdateHelper.java:190) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.UpdateHelper.prepare(UpdateHelper.java:90) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.UpdateHelper.prepare(UpdateHelper.java:74) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.TransportUpdateAction.shardOperation(TransportUpdateAction.java:191) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.TransportUpdateAction.shardOperation(TransportUpdateAction.java:184) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.update.TransportUpdateAction.shardOperation(TransportUpdateAction.java:71) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.action.support.single.instance.TransportInstanceSingleOperationAction$ShardTransportHandler$1.doRun(TransportInstanceSingleOperationAction.java:280) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:737) ~[elasticsearch-7.10.0.jar:7.10.0]
	at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) ~[elasticsearch-7.10.0.jar:7.10.0]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) ~[?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) ~[?:?]
	at java.lang.Thread.run(Thread.java:832) [?:?]
6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.