# High Search Rate spikes for AWS elasticsearch

**URL:** <https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023>\
**Category:** Elasticsearch\
**Created:** [September 17, 2020, 7:00pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023 "2020-09-17T19:00:12Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![mehak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak/32/77348_2.png) [@mehak](https://discuss.elastic.co/u/mehak)\
**Post date:** [September 17, 2020, 7:00pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/1 "2020-09-17T19:00:12Z")

</div>

Hi Team,

We are seeing high SearchRate spike at a certain times in a day along with Index and Search latency. We are having a cluster of 6 nodes with 3 master ones and other 3 are data nodes with 200 GB EBS volume. Not able to figure out the exact reason for sudden increase in spike, could you please help what can be the reason for it and how to prevent it.

Also, for indices we are going with the default sharding mechanism(5 primary shards) and I believe this might be the reason for it.

Below is the AWS cluster health dashboard of our domain:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/0/8073a284635c928078160a7bf1ea58f1f05de7c4.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6bea0ac280a2ff0cd6d837d79122293dd12078b8.png)

Thanks,  
Mehak

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 17, 2020, 10:01pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/2 "2020-09-17T22:01:30Z")

</div>

Is this the AWS service, or running on your own EC2 instances?  
What version\>?

---

<div class="post-metadata">

**Author:** ![mehak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak/32/77348_2.png) [@mehak](https://discuss.elastic.co/u/mehak)\
**Post date:** [September 17, 2020, 10:04pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/3 "2020-09-17T22:04:08Z")

</div>

Apologies for not mentioning earlier. This is AWS ElasticSearch service and version is 7.4.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 17, 2020, 10:07pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/4 "2020-09-17T22:07:44Z")

</div>

Ok, that's pretty limited with what we can help with due to the changes they have made to it, and the monitoring they offer. You may also want to ask on the AWS forums.

Can you drill down to see what specific index/indices have these spikes?

---

<div class="post-metadata">

**Author:** ![mehak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak/32/77348_2.png) [@mehak](https://discuss.elastic.co/u/mehak)\
**Post date:** [September 17, 2020, 10:46pm UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/5 "2020-09-17T22:46:58Z")

</div>

Okay, sure. Will do that as well.

Yes, this is happening for one of the indices, even if I run a normal search query on my index, it showed a great spike, I am assuming that we haven't really distributed the shards and are just going by the default ones that can be the reason.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 18, 2020, 4:52am UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/6 "2020-09-18T04:52:45Z")

</div>

Did you look at [Cloud by Elastic](https://www.elastic.co/cloud), also available if needed from [AWS Marketplace](https://aws.amazon.com/marketplace/pp/B01N6YCISK) ?

Cloud by elastic is one way to have access to **all features** , all managed by us. Think about what is there yet like Security, Monitoring, Reporting, SQL, Canvas, Maps UI, Alerting and built-in solutions named [Observability](https://www.elastic.co/observability), [Security](https://www.elastic.co/security), [Enterprise Search](https://www.elastic.co/enterprise-search) and what is coming next 🙂 ...

---

<div class="post-metadata">

**Author:** ![agutierrezrodriguez](https://avatars.discourse-cdn.com/v4/letter/a/ed655f/32.png) [@agutierrezrodriguez](https://discuss.elastic.co/u/agutierrezrodriguez)\
**Post date:** [September 18, 2020, 7:14am UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/7 "2020-09-18T07:14:23Z")

</div>

Take a look into JVM heap sizes in the same hour. Seems a garbage collector operation.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2020, 7:14am UTC](https://discuss.elastic.co/t/high-search-rate-spikes-for-aws-elasticsearch/249023/8 "2020-10-16T07:14:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
