Elasticsearch service fails

Elastic Stack Elasticsearch
1

Hi i have elk 8.5.1 installed on a machine with 8 gb ram and 50 gb hardisk. i've set jvm options to 2g for elasticsearch and 2g for logstash. I've elk stack +filebeat installed here. and i am getting logs from jenkins, nexus, apache, elk, maven ,zabbix using filebeat on each of these servers .
Everything works fine. but elasticsearch service fails again and again. When i restart it it works fine for a while and fails again. Here is the log

Nov 23 10:52:39 ip-10-0-9-223 logstash: [2022-11-23T10:52:39,494][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elastic:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused"}
Nov 23 10:52:44 ip-10-0-9-223 kibana: [2022-11-23T10:52:44.494+00:00][WARN ][plugins.licensing] License information could not be obtained from Elasticsearch due to ConnectionError: connect ECONNREFUSED 10.0.9.223:9200 error
Nov 23 10:52:44 ip-10-0-9-223 logstash: [2022-11-23T10:52:44,497][INFO ][logstash.outputs.elasticsearch][main] Failed to perform request {:message=>"Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused", :exception=>Manticore::SocketException, :cause=>#<Java::OrgApacheHttpConn::HttpHostConnectException: Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused>}
Nov 23 10:52:44 ip-10-0-9-223 logstash: [2022-11-23T10:52:44,497][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elastic:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused"}
Nov 23 10:52:49 ip-10-0-9-223 logstash: [2022-11-23T10:52:49,501][INFO ][logstash.outputs.elasticsearch][main] Failed to perform request {:message=>"Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused", :exception=>Manticore::SocketException, :cause=>#<Java::OrgApacheHttpConn::HttpHostConnectException: Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused>}
Nov 23 10:52:49 ip-10-0-9-223 logstash: [2022-11-23T10:52:49,501][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elastic:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused"}
Nov 23 10:52:49 ip-10-0-9-223 filebeat: {"log.level":"info","@timestamp":"2022-11-23T10:52:49.935Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":186},"message":"Non-zero metrics in the last 30s","service.name":"filebeat","monitoring":{"metrics":{"beat":{"cpu":{"system":{"ticks":38500},"total":{"ticks":939280,"time":{"ms":10},"value":939280},"user":{"ticks":900780,"time":{"ms":10}}},"handles":{"limit":{"hard":65535,"soft":65535},"open":17},"info":{"ephemeral_id":"75357dfd-dce0-4b57-853c-7a7c5458e0c1","uptime":{"ms":20130639},"version":"8.5.1"},"memstats":{"gc_next":1867247752,"memory_alloc":934228032,"memory_total":121491323904,"rss":1154785280},"runtime":{"goroutines":92}},"filebeat":{"harvester":{"open_files":6,"running":6}},"libbeat":{"config":{"module":{"running":2}},"output":{"events":{"active":600},"read":{"bytes":36}},"pipeline":{"clients":7,"events":{"active":4101}}},"registrar":{"states":{"current":17}},"system":{"load":{"1":0,"15":0,"5":0,"norm":{"1":0,"15":0,"5":0}}}},"ecs.version":"1.6.0"}}
Nov 23 10:52:50 ip-10-0-9-223 kibana: [2022-11-23T10:52:50.603+00:00][WARN ][plugins.licensing] License information could not be obtained from Elasticsearch due to ConnectionError: connect ECONNREFUSED 10.0.9.223:9200 error
Nov 23 10:52:54 ip-10-0-9-223 logstash: [2022-11-23T10:52:54,504][INFO ][logstash.outputs.elasticsearch][main] Failed to perform request {:message=>"Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused", :exception=>Manticore::SocketException, :cause=>#<Java::OrgApacheHttpConn::HttpHostConnectException: Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused>}
Nov 23 10:52:54 ip-10-0-9-223 logstash: [2022-11-23T10:52:54,505][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elastic:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused"}
Nov 23 10:52:58 ip-10-0-9-223 logstash: [2022-11-23T10:52:58,931][ERROR][logstash.outputs.elasticsearch][main][7f4ba291cce5f998e906f3936f25e9ca4c329e0dbc0b7c39be6038e0bcae90d8] Attempted to send a bulk request but there are no living connections in the pool (perhaps Elasticsearch is unreachable or down?) {:message=>"No Available connections", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError, :will_retry_in_seconds=>64}
Nov 23 10:52:59 ip-10-0-9-223 logstash: [2022-11-23T10:52:59,508][INFO ][logstash.outputs.elasticsearch][main] Failed to perform request {:message=>"Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused", :exception=>Manticore::SocketException, :cause=>#<Java::OrgApacheHttpConn::HttpHostConnectException: Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused>}
Nov 23 10:52:59 ip-10-0-9-223 logstash: [2022-11-23T10:52:59,508][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elastic:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused"}
2

elasticsearch.log

[2022-11-23T06:32:10,172][WARN ][stderr                   ] [ip-10-0-9-223.ap-south-1.compute.internal] Nov 23, 2022 6:32:10 AM org.apache.lucene.store.MMapDirectory lookupProvider
[2022-11-23T06:32:10,173][WARN ][stderr                   ] [ip-10-0-9-223.ap-south-1.compute.internal] WARNING: You are running with Java 19. To make full use of MMapDirectory, please pass '--enable-preview' to the Java command line.
[2022-11-23T06:32:10,187][INFO ][o.e.e.NodeEnvironment    ] [ip-10-0-9-223.ap-south-1.compute.internal] using [1] data paths, mounts [[/ (/dev/nvme0n1p1)]], net usable_space [36.9gb], net total_space [49.9gb], types [xfs]
[2022-11-23T06:32:10,187][INFO ][o.e.e.NodeEnvironment    ] [ip-10-0-9-223.ap-south-1.compute.internal] heap size [2gb], compressed ordinary object pointers [true]
[2022-11-23T06:32:10,351][INFO ][o.e.n.Node               ] [ip-10-0-9-223.ap-south-1.compute.internal] node name [ip-10-0-9-223.ap-south-1.compute.internal], node ID [7npnQ-SzRfWswbi2HuCbmw], cluster name [elasticsearch], roles [ingest, data_frozen, ml, data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold]
[2022-11-23T06:32:14,110][INFO ][o.e.x.s.Security         ] [ip-10-0-9-223.ap-south-1.compute.internal] Security is enabled
[2022-11-23T06:32:14,881][INFO ][o.e.x.s.a.s.FileRolesStore] [ip-10-0-9-223.ap-south-1.compute.internal] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2022-11-23T06:32:15,680][INFO ][o.e.x.s.InitialNodeSecurityAutoConfiguration] [ip-10-0-9-223.ap-south-1.compute.internal] Auto-configuration will not generate a password for the elastic built-in superuser, as we cannot  determine if there is a terminal attached to the elasticsearch process. You can use the `bin/elasticsearch-reset-password` tool to set the password for the elastic user.
[2022-11-23T06:32:15,792][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ip-10-0-9-223.ap-south-1.compute.internal] [controller/6396] [Main.cc@123] controller (64 bit): Version 8.5.1 (Build ac5909e3891a6b) Copyright (c) 2022 Elasticsearch BV
[2022-11-23T06:32:16,496][INFO ][o.e.t.n.NettyAllocator   ] [ip-10-0-9-223.ap-south-1.compute.internal] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2022-11-23T06:32:16,523][INFO ][o.e.i.r.RecoverySettings ] [ip-10-0-9-223.ap-south-1.compute.internal] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2022-11-23T06:32:16,567][INFO ][o.e.d.DiscoveryModule    ] [ip-10-0-9-223.ap-south-1.compute.internal] using discovery type [single-node] and seed hosts providers [settings]
[2022-11-23T06:32:17,984][INFO ][o.e.n.Node               ] [ip-10-0-9-223.ap-south-1.compute.internal] initialized
[2022-11-23T06:32:17,985][INFO ][o.e.n.Node               ] [ip-10-0-9-223.ap-south-1.compute.internal] starting ...
[2022-11-23T06:32:18,004][INFO ][o.e.x.s.c.f.PersistentCache] [ip-10-0-9-223.ap-south-1.compute.internal] persistent cache index loaded
[2022-11-23T06:32:18,006][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [ip-10-0-9-223.ap-south-1.compute.internal] deprecation component started
[2022-11-23T06:32:18,131][INFO ][o.e.t.TransportService   ] [ip-10-0-9-223.ap-south-1.compute.internal] publish_address {10.0.9.223:9300}, bound_addresses {[::]:9300}
[2022-11-23T06:32:19,194][WARN ][o.e.c.c.ClusterBootstrapService] [ip-10-0-9-223.ap-south-1.compute.internal] this node is locked into cluster UUID [-5cIs7zvTTmcjfwdT_gCow] but [cluster.initial_master_nodes] is set to [ip-10-0-9-223.ap-south-1.compute.internal]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts
[2022-11-23T06:32:19,345][INFO ][o.e.c.s.MasterService    ] [ip-10-0-9-223.ap-south-1.compute.internal] elected-as-master ([1] nodes joined)[_FINISH_ELECTION_, {ip-10-0-9-223.ap-south-1.compute.internal}{7npnQ-SzRfWswbi2HuCbmw}{p2nuH2I1Q_GqPcMJEPn2qA}{ip-10-0-9-223.ap-south-1.compute.internal}{10.0.9.223}{10.0.9.223:9300}{cdfhilmrstw} completing election], term: 37, version: 1277, delta: master node changed {previous [], current [{ip-10-0-9-223.ap-south-1.compute.internal}{7npnQ-SzRfWswbi2HuCbmw}{p2nuH2I1Q_GqPcMJEPn2qA}{ip-10-0-9-223.ap-south-1.compute.internal}{10.0.9.223}{10.0.9.223:9300}{cdfhilmrstw}]}
[2022-11-23T06:32:19,404][INFO ][o.e.c.s.ClusterApplierService] [ip-10-0-9-223.ap-south-1.compute.internal] master node changed {previous [], current [{ip-10-0-9-223.ap-south-1.compute.internal}{7npnQ-SzRfWswbi2HuCbmw}{p2nuH2I1Q_GqPcMJEPn2qA}{ip-10-0-9-223.ap-south-1.compute.internal}{10.0.9.223}{10.0.9.223:9300}{cdfhilmrstw}]}, term: 37, version: 1277, reason: Publication{term=37, version=1277}
[2022-11-23T06:32:19,484][INFO ][o.e.r.s.FileSettingsService] [ip-10-0-9-223.ap-south-1.compute.internal] starting file settings watcher ...
[2022-11-23T06:32:19,499][INFO ][o.e.r.s.FileSettingsService] [ip-10-0-9-223.ap-south-1.compute.internal] file settings service up and running [tid=51]
[2022-11-23T06:32:19,503][INFO ][o.e.h.AbstractHttpServerTransport] [ip-10-0-9-223.ap-south-1.compute.internal] publish_address {10.0.9.223:9200}, bound_addresses {[::]:9200}
[2022-11-23T06:32:19,504][INFO ][o.e.n.Node               ] [ip-10-0-9-223.ap-south-1.compute.internal] started {ip-10-0-9-223.ap-south-1.compute.internal}{7npnQ-SzRfWswbi2HuCbmw}{p2nuH2I1Q_GqPcMJEPn2qA}{ip-10-0-9-223.ap-south-1.compute.internal}{10.0.9.223}{10.0.9.223:9300}{cdfhilmrstw}{ml.allocated_processors=2, ml.max_jvm_size=2147483648, ml.allocated_processors_double=2.0, xpack.installed=true, ml.machine_memory=8199434240}
[2022-11-23T06:32:19,541][INFO ][o.e.c.s.ClusterSettings  ] [ip-10-0-9-223.ap-south-1.compute.internal] updating [xpack.monitoring.collection.enabled] from [false] to [true]
[2022-11-23T06:32:19,884][INFO ][o.e.l.LicenseService     ] [ip-10-0-9-223.ap-south-1.compute.internal] license [2131957f-667a-421e-95ab-585fc0a1dd2e] mode [basic] - valid
[2022-11-23T06:32:19,885][INFO ][o.e.x.s.a.Realms         ] [ip-10-0-9-223.ap-south-1.compute.internal] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-11-23T06:32:19,890][INFO ][o.e.g.GatewayService     ] [ip-10-0-9-223.ap-south-1.compute.internal] recovered [22] indices into cluster_state
[2022-11-23T06:32:19,971][INFO ][o.e.h.n.s.HealthNodeTaskExecutor] [ip-10-0-9-223.ap-south-1.compute.internal] Node [{ip-10-0-9-223.ap-south-1.compute.internal}{7npnQ-SzRfWswbi2HuCbmw}] is selected as the current health node.
[2022-11-23T06:32:32,015][INFO ][o.e.c.r.a.AllocationService] [ip-10-0-9-223.ap-south-1.compute.internal] current.health="YELLOW" message="Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.ds-metricbeat-8.4.2-2022.11.17-000001][0]]])." previous.health="RED" reason="shards started [[.ds-metricbeat-8.4.2-2022.11.17-000001][0]]"
[2022-11-23T06:35:15,158][INFO ][o.e.t.LoggingTaskListener] [ip-10-0-9-223.ap-south-1.compute.internal] 5103 finished with response BulkByScrollResponse[took=105.3ms,timed_out=false,sliceId=null,updated=26,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[2022-11-23T06:35:15,796][INFO ][o.e.t.LoggingTaskListener] [ip-10-0-9-223.ap-south-1.compute.internal] 5126 finished with response BulkByScrollResponse[took=503ms,timed_out=false,sliceId=null,updated=397,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[2022-11-23T06:35:21,033][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [ip-10-0-9-223.ap-south-1.compute.internal] updating index lifecycle policy [.alerts-ilm-policy]
[2022-11-23T06:35:21,305][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [ip-10-0-9-223.ap-south-1.compute.internal] updating index lifecycle policy [.preview.alerts-security.alerts-policy]
[2022-11-23T06:36:13,415][INFO ][o.e.c.m.MetadataCreateIndexService] [ip-10-0-9-223.ap-south-1.compute.internal] [zabbix_syslog2022.11.23] creating index, cause [auto(bulk api)], templates [], shards [1]/[1]
[2022-11-23T06:36:13,568][INFO ][o.e.c.m.MetadataMappingService] [ip-10-0-9-223.ap-south-1.compute.internal] [zabbix_syslog2022.11.23/BlkqEr-wRyKpXyoFIKkv8Q] create_mapping
[2022-11-23T06:37:02,549][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] timer thread slept for [9.4s/9458ms] on absolute clock which is above the warn threshold of [5000ms]
[2022-11-23T06:37:02,632][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] timer thread slept for [9.4s/9435941547ns] on relative clock which is above the warn threshold of [5000ms]
[2022-11-23T06:37:02,619][WARN ][o.e.h.AbstractHttpServerTransport] [ip-10-0-9-223.ap-south-1.compute.internal] handling request [null][POST][/_bulk][Netty4HttpChannel{localAddress=/10.0.9.223:9200, remoteAddress=/3.6.252.213:54668}] took [5011ms] which is above the warn threshold of [5000ms]
[2022-11-23T06:37:02,619][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] execution of [ReschedulingRunnable{runnable=org.elasticsearch.monitor.jvm.JvmGcMonitorService$1@46030646, interval=1s}] took [10501ms] which is above the warn threshold of [5000ms]
[2022-11-23T06:37:02,832][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] timer thread slept for [5.1s/5107ms] on absolute clock which is above the warn threshold of [5000ms]
[2022-11-23T06:37:02,833][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] timer thread slept for [5.1s/5154406909ns] on relative clock which is above the warn threshold of [5000ms]
[2022-11-23T06:39:25,377][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] execution of [ReschedulingRunnable{runnable=org.elasticsearch.monitor.jvm.JvmGcMonitorService$1@46030646, interval=1s}] took [5534ms] which is above the warn threshold of [5000ms]
[2022-11-23T06:49:41,827][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] execution of [ReschedulingRunnable{runnable=org.elasticsearch.monitor.jvm.JvmGcMonitorService$1@46030646, interval=1s}] took [17846ms] which is above the warn threshold of [5000ms]
[2022-11-23T06:54:33,715][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] execution of [ReschedulingRunnable{runnable=org.elasticsearch.monitor.jvm.JvmGcMonitorService$1@46030646, interval=1s}] took [5664ms] which is above the warn threshold of [5000ms]
[2022-11-23T07:01:13,432][WARN ][o.e.t.ThreadPool         ] [ip-10-0-9-223.ap-south-1.compute.internal] execution of [ReschedulingRunnable{runnable=org.elasticsearch.monitor.jvm.JvmGcMonitorService$1@46030646, interval=1s}] took [6048ms] which is above the warn threshold of [5000ms]
3

There's nothing in your logs that indicates Elasticsearch stopped or failed that I can see. However 2GB of heap is pretty small.

What is the output from the _cluster/stats?pretty&human API?

4

Can you please tell me the details , where to hit this command and is this the entire command? new to elk

5

@Neelam_Zanvar Go to Management tab in Kibana and Select Dev tools & Run this command >>
GET _cluster/stats?pretty&human

6 
{
  "_nodes": {
    "total": 1,
    "successful": 1,
    "failed": 0
  },
  "cluster_name": "elasticsearch",
  "cluster_uuid": "-5cIs7zvTTmcjfwdT_gCow",
  "timestamp": 1669627203716,
  "status": "yellow",
  "indices": {
    "count": 24,
    "shards": {
      "total": 24,
      "primaries": 24,
      "replication": 0,
      "index": {
        "shards": {
          "min": 1,
          "max": 1,
          "avg": 1
        },
        "primaries": {
          "min": 1,
          "max": 1,
          "avg": 1
        },
        "replication": {
          "min": 0,
          "max": 0,
          "avg": 0
        }
      }
    },
    "docs": {
      "count": 370084,
      "deleted": 3546
    },
    "store": {
      "size": "333.3mb",
      "size_in_bytes": 349584733,
      "total_data_set_size": "333.3mb",
      "total_data_set_size_in_bytes": 349584733,
      "reserved": "0b",
      "reserved_in_bytes": 0
    },
    "fielddata": {
      "memory_size": "0b",
      "memory_size_in_bytes": 0,
      "evictions": 0
    },
    "query_cache": {
      "memory_size": "0b",
      "memory_size_in_bytes": 0,
      "total_count": 0,
      "hit_count": 0,
      "miss_count": 0,
      "cache_size": 0,
      "cache_count": 0,
      "evictions": 0
    },
    "completion": {
      "size": "0b",
      "size_in_bytes": 0
    },
    "segments": {
      "count": 129,
      "memory": "0b",
      "memory_in_bytes": 0,
      "terms_memory": "0b",
      "terms_memory_in_bytes": 0,
      "stored_fields_memory": "0b",
      "stored_fields_memory_in_bytes": 0,
      "term_vectors_memory": "0b",
      "term_vectors_memory_in_bytes": 0,
      "norms_memory": "0b",
      "norms_memory_in_bytes": 0,
      "points_memory": "0b",
      "points_memory_in_bytes": 0,
      "doc_values_memory": "0b",
      "doc_values_memory_in_bytes": 0,
      "index_writer_memory": "4.8mb",
      "index_writer_memory_in_bytes": 5081368,
      "version_map_memory": "47.6kb",
      "version_map_memory_in_bytes": 48788,
      "fixed_bit_set": "41.6kb",
      "fixed_bit_set_memory_in_bytes": 42688,
      "max_unsafe_auto_id_timestamp": 1669617104296,
      "file_sizes": {}
    },
    "mappings": {
      "total_field_count": 10796,
      "total_deduplicated_field_count": 10535,
      "total_deduplicated_mapping_size": "59.6kb",
      "total_deduplicated_mapping_size_in_bytes": 61063,
      "field_types": [
        {
          "name": "alias",
          "count": 354,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "boolean",
          "count": 90,
          "index_count": 12,
          "script_count": 0
        },
        {
          "name": "byte",
          "count": 1,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "constant_keyword",
          "count": 6,
          "index_count": 2,
          "script_count": 0
        },
        {
          "name": "date",
          "count": 133,
          "index_count": 15,
          "script_count": 0
        },
        {
          "name": "double",
          "count": 337,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "flattened",
          "count": 12,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "float",
          "count": 263,
          "index_count": 3,
          "script_count": 0
        },
        {
          "name": "geo_point",
          "count": 9,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "half_float",
          "count": 12,
          "index_count": 3,
          "script_count": 0
        },
        {
          "name": "integer",
          "count": 22,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "ip",
          "count": 24,
          "index_count": 2,
          "script_count": 0
        },
        {
          "name": "keyword",
          "count": 2109,
          "index_count": 15,
          "script_count": 0
        },
        {
          "name": "long",
          "count": 3122,
          "index_count": 14,
          "script_count": 0
        },
        {
          "name": "match_only_text",
          "count": 63,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "nested",
          "count": 21,
          "index_count": 3,
          "script_count": 0
        },
        {
          "name": "object",
          "count": 3683,
          "index_count": 15,
          "script_count": 0
        },
        {
          "name": "scaled_float",
          "count": 152,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "short",
          "count": 4,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "text",
          "count": 361,
          "index_count": 14,
          "script_count": 0
        },
        {
          "name": "version",
          "count": 1,
          "index_count": 1,
          "script_count": 0
        },
        {
          "name": "wildcard",
          "count": 17,
          "index_count": 1,
          "script_count": 0
        }
      ],
      "runtime_field_types": []
    },
    "analysis": {
      "char_filter_types": [],
      "tokenizer_types": [],
      "filter_types": [],
      "analyzer_types": [],
      "built_in_char_filters": [],
      "built_in_tokenizers": [],
      "built_in_filters": [],
      "built_in_analyzers": []
    },
    "versions": [
      {
        "version": "8.5.1",
        "index_count": 24,
        "primary_shard_count": 24,
        "total_primary_size": "333.3mb",
        "total_primary_bytes": 349584733
      }
    ]
  },
  "nodes": {
    "count": {
      "total": 1,
      "coordinating_only": 0,
      "data": 1,
      "data_cold": 1,
      "data_content": 1,
      "data_frozen": 1,
      "data_hot": 1,
      "data_warm": 1,
      "ingest": 1,
      "master": 1,
      "ml": 1,
      "remote_cluster_client": 1,
      "transform": 1,
      "voting_only": 0
    },
    "versions": [
      "8.5.1"
    ],
    "os": {
      "available_processors": 2,
      "allocated_processors": 2,
      "names": [
        {
          "name": "Linux",
          "count": 1
        }
      ],
      "pretty_names": [
        {
          "pretty_name": "Amazon Linux 2",
          "count": 1
        }
      ],
      "architectures": [
        {
          "arch": "aarch64",
          "count": 1
        }
      ],
      "mem": {
        "total": "7.6gb",
        "total_in_bytes": 8199434240,
        "adjusted_total": "7.6gb",
        "adjusted_total_in_bytes": 8199434240,
        "free": "934.2mb",
        "free_in_bytes": 979603456,
        "used": "6.7gb",
        "used_in_bytes": 7219830784,
        "free_percent": 12,
        "used_percent": 88
      }
    },
    "process": {
      "cpu": {
        "percent": 6
      },
      "open_file_descriptors": {
        "min": 659,
        "max": 659,
        "avg": 659
      }
    },
    "jvm": {
      "max_uptime": "2.8h",
      "max_uptime_in_millis": 10123360,
      "versions": [
        {
          "version": "19.0.1",
          "vm_name": "OpenJDK 64-Bit Server VM",
          "vm_version": "19.0.1+10-21",
          "vm_vendor": "Oracle Corporation",
          "bundled_jdk": true,
          "using_bundled_jdk": true,
          "count": 1
        }
      ],
      "mem": {
        "heap_used": "605.4mb",
        "heap_used_in_bytes": 634856960,
        "heap_max": "2gb",
        "heap_max_in_bytes": 2147483648
      },
      "threads": 65
    },
    "fs": {
      "total": "49.9gb",
      "total_in_bytes": 53665050624,
      "free": "17.2gb",
      "free_in_bytes": 18551889920,
      "available": "17.2gb",
      "available_in_bytes": 18551889920
    },
    "plugins": [],
    "network_types": {
      "transport_types": {
        "security4": 1
      },
      "http_types": {
        "security4": 1
      }
    },
    "discovery_types": {
      "single-node": 1
    },
    "packaging_types": [
      {
        "flavor": "default",
        "type": "rpm",
        "count": 1
      }
    ],
    "ingest": {
      "number_of_pipelines": 28,
      "processor_stats": {
        "conditional": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "convert": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "date": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "dot_expander": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "geoip": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "grok": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "json": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "pipeline": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "remove": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "rename": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "script": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "set": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "set_security_user": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        },
        "split": {
          "count": 0,
          "failed": 0,
          "current": 0,
          "time": "0s",
          "time_in_millis": 0
        }
      }
    },
    "indexing_pressure": {
      "memory": {
        "current": {
          "combined_coordinating_and_primary": "0b",
          "combined_coordinating_and_primary_in_bytes": 0,
          "coordinating": "0b",
          "coordinating_in_bytes": 0,
          "primary": "0b",
          "primary_in_bytes": 0,
          "replica": "0b",
          "replica_in_bytes": 0,
          "all": "0b",
          "all_in_bytes": 0
        },
        "total": {
          "combined_coordinating_and_primary": "0b",
          "combined_coordinating_and_primary_in_bytes": 0,
          "coordinating": "0b",
          "coordinating_in_bytes": 0,
          "primary": "0b",
          "primary_in_bytes": 0,
          "replica": "0b",
          "replica_in_bytes": 0,
          "all": "0b",
          "all_in_bytes": 0,
          "coordinating_rejections": 0,
          "primary_rejections": 0,
          "replica_rejections": 0
        },
        "limit": "0b",
        "limit_in_bytes": 0
      }
    }
  }
}
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.