i have Elasticsearch cluster of 5 nodes on 5 different physical machines.
one of the indexes contains 240Million documents, spanning over 1 month of indexing.
when i select (in Kibana) to visualize all the documents from the last month (all the 240M), i get timeout message (the default 30 seconds).
i noticed that there is high cpu usage during that query (there are no other queries at the same time):
this is the shards distribution of that index:
what steps can i take to make this query work?
please let me know if more details are required.