Elasticsearch slow, crash

Elastic Stack Elasticsearch
#1

Hello,

I have deployment a Logger ELK.
I setup ELK version 6.6.1 on vmware server (24GB RAM, 500GB HDD, 8CPU) but have many problem.

  1. Its index data log (IIS log) very slow.
  2. Search and view dashboard, visualize very slow (timeout).

In my case, i have installed: FileBeat (Server X) -> Logstash (Server Y) -> Elasticsearch (Server Y) -> Kibana (Server Y).

Usually, when slow query, i restart Elasticsearch service then it normal (but still slow).

Any method optimal any config for my ELK?

Thanks for help.

#2

What load is the node under? What is CPU usage and disk I/O and iowait looking like? What indexing throughput are you seeing? Is there anything in the logs around long or frequent GC or merges being throttled? How many indices and shards do you have in the cluster?

#3

Thanks.

I use 1 node. CPU under 2%. I use Flash Drive as HDD.
Total about 40 indices (25gb/indice).

I think my server not problem?

Thanks for help.

#4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.