# ES Breaker memory limit

**URL:** <https://discuss.elastic.co/t/es-breaker-memory-limit/33394>\
**Category:** Elasticsearch\
**Created:** [October 30, 2015, 4:00pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394 "2015-10-30T16:00:51Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![zokratez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zokratez/32/5974_2.png) [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Post date:** [October 30, 2015, 4:00pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/1 "2015-10-30T16:00:52Z")

</div>

Hi! When I make some search in Kibana, and I get some errors...

Elastic logs...

```
[2015-10-30 07:50:15,054][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 520090414 [495.9mb] from field [src_ip] would be larger than configured breaker: 519438336 [495.3mb], breaking
[2015-10-30 07:50:15,071][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 519924151 [495.8mb] from field [src_ip] would be larger than configured breaker: 519438336 [495.3mb], breaking
[2015-10-30 07:50:15,161][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 519925465 [495.8mb] from field [src_ip] would be larger than configured breaker: 519438336 [495.3mb], breaking
[2015-10-30 07:50:15,183][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 519626627 [495.5mb] from field [src_ip] would be larger than configured breaker: 519438336 [495.3mb], breaking
[2015-10-30 07:50:23,930][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 519734504 [495.6mb] from field [dst_host.raw] would be larger than configured breaker: 519438336 [495.3mb], breaking
[2015-10-30 07:50:32,267][WARN][indices.breaker] [belerian] [FIELDDATA] New used memory 520170202 [496mb] from field [dst_host.raw] would be larger than configured breaker: 519438336 [495.3mb], breaking

```

The mahine have 15GB RAM

I have the ES\_HEAP\_SIZE set to 10GB

```
root@belerian:~# export
declare -x ES_HEAP_SIZE="10g"

```

And set the 50% of the memory to the fielddata limit (luecen searches?):

```
indices.breaker.fielddata.limit : "50%"

```

Anyway, when I make try to load a dashboard, the ES break...

I missing some configuration?

Thanks!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 31, 2015, 11:19pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/2 "2015-10-31T23:19:35Z")

</div>

You should move things to doc values and add more heap.  
You can also try clearing fielddata cache, but it is a short term solution only.

---

<div class="post-metadata">

**Author:** ![zokratez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zokratez/32/5974_2.png) [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Post date:** [November 2, 2015, 6:35pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/3 "2015-11-02T18:35:01Z")

</div>

Have you some documentation where learn how to move things to doc values? Can I do this from Kibana search editor?

To solve the issue permanently how much memory RAM is necesary?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 2, 2015, 8:51pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/4 "2015-11-02T20:51:09Z")

</div>

Take a look at [https://www.elastic.co/guide/en/elasticsearch/guide/current/doc-values.html](https://www.elastic.co/guide/en/elasticsearch/guide/current/doc-values.html).

How much RAM really depends, I can't give you an answer there.

---

<div class="post-metadata">

**Author:** ![zokratez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zokratez/32/5974_2.png) [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Post date:** [November 4, 2015, 5:08pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/5 "2015-11-04T17:08:10Z")

</div>

We are talking about 60 million of logs in 15 days... I can use curator to delete all older than 15 days... And keep the 60 million of logs +-

How much memory can I need to this data volume?

Thanks!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:40pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394/6 "2017-07-05T23:40:32Z")

</div>