# Kibana hangs during search for logs containing base64

**URL:** <https://discuss.elastic.co/t/kibana-hangs-during-search-for-logs-containing-base64/337565>\
**Category:** Kibana\
**Created:** [July 4, 2023, 1:17pm UTC](https://discuss.elastic.co/t/kibana-hangs-during-search-for-logs-containing-base64/337565 "2023-07-04T13:17:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![duch](https://avatars.discourse-cdn.com/v4/letter/d/59ef9b/32.png) [@duch](https://discuss.elastic.co/u/duch)\
**Post date:** [July 4, 2023, 1:17pm UTC](https://discuss.elastic.co/t/kibana-hangs-during-search-for-logs-containing-base64/337565/1 "2023-07-04T13:17:37Z")

</div>

Hi,

we are running into a problem where kibana starts hanging when a search is performed in which logs are returned that contain base64 in a message field. The field encompases an api response with among others 10 mb of base 64. In these cases and will cause kibana to either hang or return an "ReleasableBytesStreamOutput cannot hold more than 2GB of data" error when more then 10 of the results contain a message of this kind. We have been unable to split the response messages over multiple fields and other parts of the response message need to remain searchable. Is there a way to keep the reponsmessage searchable while improving performance for searches which include these logs as a result?

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [July 6, 2023, 11:13am UTC](https://discuss.elastic.co/t/kibana-hangs-during-search-for-logs-containing-base64/337565/2 "2023-07-06T11:13:43Z")

</div>

Hi @duch,

Welcome to the community!

> [@duch](#):
>
> ReleasableBytesStreamOutput cannot hold more than 2GB of data

Can you explain more about why you can't split the response message or split your search across multiple queries? Generally we would recommend avoiding large queries like this that breach the limit.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 3, 2023, 11:14am UTC](https://discuss.elastic.co/t/kibana-hangs-during-search-for-logs-containing-base64/337565/3 "2023-08-03T11:14:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.