High CPU usage: undertand events / traffic in discover view

Hello there,

I am trying to understand why my cluster is currently being overloaded (high cpu, enterprise search instances rebooting)

I stumbled upon the Discover view /app/discover view in Kibana:

Our problems started exactly where we see an increase of logs / events.

I wanted to understand what do these different event datasets mean and why aren't they correlated (e.g. an app search api call would't trigger both events? ) :

  • app-search-analytics
  • api

Any other information on how to use this view to diagnose performance issues would be much appreciated.

Kind regards