I found elasticsearch courier fetch error.
error log is below.
[FIELDDATA] Data too large, data for [@timestamp] would be larger than limit of [5,133,041,664 / 4.7gb]
Would you tell me how to fix it?
Increase your heap size. Use docs values. Query a smaller subset of data.
Any of those will help.
Limiting the fielddata cache size would also help.