# Extremely regular "took" spiking

**URL:** <https://discuss.elastic.co/t/extremely-regular-took-spiking/204744>\
**Category:** Elasticsearch\
**Created:** [October 23, 2019, 12:47am UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744 "2019-10-23T00:47:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zach\_Diemer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zach_diemer/32/56182_2.png) [@Zach\_Diemer](https://discuss.elastic.co/u/Zach_Diemer)\
**Post date:** [October 23, 2019, 12:47am UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744/1 "2019-10-23T00:47:38Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/b/9/b92c69b07519dfa3de59de34e3da678a01267383.png)

I'm logging the `took` value that's returned from Elasticsearch, and I've noticed that there's an extremely regular pattern to how it's spiking (every 5 minutes, almost exactly).

I'm using Elasticsearch 6.4.2 and my client is NEST 6.3.1 in .NET. I've glanced at our search logs and haven't noticed any pattern behind the searches that are being made that could explain this regular spiking. Does a pattern like this indicate anything in particular?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 23, 2019, 5:25am UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744/2 "2019-10-23T05:25:43Z")

</div>

Does this correspond to peaks in CPU usage or disk utilization? Does this correspond with e.g. some periodic Curator job or a refresh interval?

---

<div class="post-metadata">

**Author:** ![Zach\_Diemer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zach_diemer/32/56182_2.png) [@Zach\_Diemer](https://discuss.elastic.co/u/Zach_Diemer)\
**Post date:** [October 23, 2019, 6:06pm UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744/3 "2019-10-23T18:06:22Z")

</div>

It does not appear to correlate with CPU or disk utilization spikes. I have a regular indexing job that runs at 10 minute intervals.

One interesting twist that I've noticed is that it's only one of my queries (I have a few different "flavors" of search query, this one corresponds to our "full search" experience). Could it be that something in my query could cause spiking? I'm using lots of aggregations, for example.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 23, 2019, 6:18pm UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744/4 "2019-10-23T18:18:28Z")

</div>

Yes, that could certainly have an impact.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 20, 2019, 6:18pm UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744/5 "2019-11-20T18:18:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.