That does unfortunately not really answer the questions I asked. It however looks like you have a query with a very large size value set, which can cause a large amount of heap to be used. This blog post provides additional details around things to avoid doing to your Elasticsearch cluster.