# Kibana 4 Running ordinary search so so slow **URL:** \ **Category:** Kibana\ **Created:** [December 11, 2015, 11:35pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024 "2015-12-11T23:35:12Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 11, 2015, 11:35pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/1 "2015-12-11T23:35:12Z")
Hi is there any one can help me this issue? How come Kibana 4 Running ordinary search so so slow, I use the apache access logs for the raw data, I just search the goolebot and load last 60 days, it actually really take a long time. I am crazy. I am wondering if I need to figure out the elastic index or query problem? Thanks, ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 11, 2015, 11:48pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/2 "2015-12-11T23:48:21Z")
KB just reads from ES, so if it is slow then it's likely ES is having issues. Are you monitoring your stack? ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 12, 2015, 4:45pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/3 "2015-12-12T16:45:19Z")
Thanks for you reply. I am wondering what is the monitor you refer to? Any plugins, cause we just use one node, so I am unsure if it is doable for the monitor? Thanks again. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 12, 2015, 8:29pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/4 "2015-12-12T20:29:47Z")
Check out Marvel - [https://www.elastic.co/downloads/marvel](https://www.elastic.co/downloads/marvel) ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 13, 2015, 4:44pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/5 "2015-12-13T16:44:03Z")
Thanks, any free plugin that can be instead of Marvel, I think it is a pricing tool. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 13, 2015, 8:48pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/6 "2015-12-13T20:48:24Z")
Marvel is free. ---
**Author:** ![german23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/german23/32/11052_2.png) [@german23](https://discuss.elastic.co/u/german23)\ **Post date:** [December 14, 2015, 12:35pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/7 "2015-12-14T12:35:27Z")
only Marvel 2.X is free to use right? Marvel for ESCluster 1.X still require license. ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 14, 2015, 8:02pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/8 "2015-12-14T20:02:29Z")
Hi @warkolm Thanks for your help, I think I have already figured out how to install Marvel at the ELK. just see the data, I am unsure if i need to increase the nodes or clusters, cause to search one item at Kibana, it loading so slowly. Cluster: elasticsearchStatus: YellowNodes: 1Indices: 51Memory: 765MB / 4GBTotal Shards: 438Unassigned Shards: 219Documents: 194,253,753Data: 127GBUptime: 6 minutesVersion: 2.1.0 ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 14, 2015, 8:53pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/9 "2015-12-14T20:53:43Z")
It requires a license, but it's a free license. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 14, 2015, 8:54pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/10 "2015-12-14T20:54:20Z")
What is the load on the system like? ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 14, 2015, 9:07pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/11 "2015-12-14T21:07:59Z")
it should always take more than 1 min to load the data, if I select year to date and then i search agent:googlebot AND response:404, that is what i am getting trouble. I am unsure what is the good level from the Marvel, in terms of the speed for searching the data by Kibana search box, it is not a good idea. Thanks for the reply. Very Appreciated. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 14, 2015, 9:34pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/12 "2015-12-14T21:34:20Z")
It sounds like you are overloading your cluster, running a query over a years worth of data is likely to be slow given you only have 4GB of heap. Try giving more resources to your cluster. ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 14, 2015, 9:40pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/13 "2015-12-14T21:40:32Z")
Sounds good, I am going to consider doing these things 1. add nodes; 2. add clusters; 3. add more resources to the cluster as you mentioned, it is said that 4GB memory to 16 GB any helpful doing so? btw, what is the i ideal time response in general for running 1 year data with the AND search query ? Thanks ：） ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 14, 2015, 10:03pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/14 "2015-12-14T22:03:17Z")
> [@shilong](#): > > btw, what is the i ideal time response in general for running 1 year data with the AND search query ? That depends on too many things to say. ---
**Author:** ![shilong](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@shilong](https://discuss.elastic.co/u/shilong)\ **Post date:** [December 14, 2015, 10:22pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/15 "2015-12-14T22:22:23Z")
OK, i will do some more research and Thank you again. 😀 ---
**Author:** ![ebuildy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebuildy/32/6070_2.png) [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Post date:** [November 8, 2016, 12:08pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/16 "2016-11-08T12:08:48Z")
It slows because Kibana is using msearch, mean searches in parallel . You can see an AJAX call to "/elasticsearch/\_msearch". You need lot of RAM on the node. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:34pm UTC](https://discuss.elastic.co/t/kibana-4-running-ordinary-search-so-so-slow/37024/17 "2017-07-06T13:34:19Z")