# Elasticsearch Shard Failure

**URL:** <https://discuss.elastic.co/t/elasticsearch-shard-failure/344774>\
**Category:** Elasticsearch\
**Created:** [October 11, 2023, 2:44am UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774 "2023-10-11T02:44:44Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sai\_ravi\_shankar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sai_ravi_shankar/32/120767_2.png) [@sai\_ravi\_shankar](https://discuss.elastic.co/u/sai_ravi_shankar)\
**Post date:** [October 11, 2023, 2:44am UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774/1 "2023-10-11T02:44:44Z")

</div>

Hi

I'm using a single-node elasticsearch server. I have 400+ indices with 100GB+ data in cluster and shard count of each index is 5.

When i'm trying to check the data for an index in discover page in kibana. I got the below error. whereas dashboards are working fine without any issue.

1 of 5 shards are failed.  
max\_bytes\_length\_exceeded\_exception bytes can be at most 32766 in length; got 46350  
Error: Internal Server Error

ELK version - 7.10.0

Could someone please assist, what can be done for this issue.

Thanks

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [October 11, 2023, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774/2 "2023-10-11T09:57:15Z")

</div>

Many things are wrong here IMO:

- 7.10 is totally outdated. At least go to 7.17 or better 8.10.3.
- 5 shards per index. Why?
- 2000 shards on a single node. You did not tell how much HEAP you defined

> max\_bytes\_length\_exceeded\_exception bytes can be at most 32766 in length; got 46350

Might be because you are getting back a lot of content? Like running a query on logs indices with size=10000?

May I suggest you look at the following resource about sizing:

> **[Size your shards | Elasticsearch Guide \[8.11\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/size-your-shards.html)**

---

<div class="post-metadata">

**Author:** ![sai\_ravi\_shankar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sai_ravi_shankar/32/120767_2.png) [@sai\_ravi\_shankar](https://discuss.elastic.co/u/sai_ravi_shankar)\
**Post date:** [October 11, 2023, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774/3 "2023-10-11T15:23:57Z")

</div>

typo correction. ES has 100+ indices and shards are 500+.

I need to use ES 7.10.0 only.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [October 11, 2023, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774/4 "2023-10-11T15:58:02Z")

</div>

> [@sai\_ravi\_shankar](#):
>
> I need to use ES 7.10.0 only.

Why?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2023, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-failure/344774/5 "2023-11-08T15:58:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
