# Elasticsearch high cpu usage

**URL:** <https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079>\
**Category:** Elasticsearch\
**Created:** [January 13, 2023, 2:57am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079 "2023-01-13T02:57:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![yeziblo](https://avatars.discourse-cdn.com/v4/letter/y/74df32/32.png) [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Post date:** [January 13, 2023, 2:57am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079/1 "2023-01-13T02:57:11Z")

</div>

Hi everyone.

My Es cluster had high cpu usage at 3:30 am today, below is grafana monitoring:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/e/fe00736b1a9e6b8bd269957ed35acf2f524632e2.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/3/a3e9370248c9d0d3800c6810c13995fece80c723.png)

And the kibana monitoring:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4c4709f1e5dcdfca55daf4fd351f64ef0169672a.png)

I don't have a clue, because in my nginx log files, I didn't see any request rise significantly at that time, and when I get up, es cpu usage had already dropped.

btw, in elastic cluster log files, no error logs were created at the time.

Do you have any other suggestions?

What should I do so that the next time I encounter a similar problem, I can better troubleshoot it.

Pretty thanks for any records.

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [January 13, 2023, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079/2 "2023-01-13T05:29:15Z")

</div>

The request time for Search went way up at the same time, didn't it? Unusual search? Do you have Kibana users? Do you have the Kibana user that does big queries?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 18, 2023, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079/3 "2023-01-18T23:29:07Z")

</div>

What is the output from the [`_cluster/stats?pretty&human` API](https://www.elastic.co/guide/en/elasticsearch/reference/8.4/cluster-stats.html)?  
What do the Elasticsearch logs show at that time?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 15, 2023, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079/4 "2023-02-15T23:29:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.