we are on ES6.8 with a big cluster (many terabytes indexed per day), and sometimes the search thread pool fills up (currently the len is set to 1000).
We would like to know which queries are filling our search queue.
I'm aware of "slowlog", but I would like to know:
- how computationally intensive can slowlog be? How much CPU will it eat, in percentage?
- are there alternatives to slowlog? commands or API I can use to find slow queries