I'm new in the usage of Elasticsearch (integrated into a security onion appliance)
I'm working to get a huge query (2.5M logs), and I'm stuck with this error message
{
"error": {
"root_cause": [
{
"type": "illegal_argument_exception",
"reason": "RecyclerBytesStreamOutput cannot hold more than 2GB of data"
}
],
"type": "illegal_argument_exception",
"reason": "RecyclerBytesStreamOutput cannot hold more than 2GB of data"
},
"status": 400
}
the query is the following (hostname as been removed from the query), I did not write myself this query, I've reformatted it from a Kibana request as I don't know yet how to properly write one
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.