Elasticsearch Shard Failure

Elastic Stack Elasticsearch
1

Hi

I'm using a single-node elasticsearch server. I have 400+ indices with 100GB+ data in cluster and shard count of each index is 5.

When i'm trying to check the data for an index in discover page in kibana. I got the below error. whereas dashboards are working fine without any issue.

1 of 5 shards are failed.
max_bytes_length_exceeded_exception bytes can be at most 32766 in length; got 46350
Error: Internal Server Error

ELK version - 7.10.0

Could someone please assist, what can be done for this issue.

Thanks

2

Many things are wrong here IMO:

  • 7.10 is totally outdated. At least go to 7.17 or better 8.10.3.
  • 5 shards per index. Why?
  • 2000 shards on a single node. You did not tell how much HEAP you defined

max_bytes_length_exceeded_exception bytes can be at most 32766 in length; got 46350

Might be because you are getting back a lot of content? Like running a query on logs indices with size=10000?

May I suggest you look at the following resource about sizing:

3

typo correction. ES has 100+ indices and shards are 500+.

I need to use ES 7.10.0 only.

4

Why?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.