# Kibana won't load any page, causes Elasticsearch plugin timeoutes

**URL:** <https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466>\
**Category:** Kibana\
**Created:** [May 3, 2017, 9:51pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466 "2017-05-03T21:51:24Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 3, 2017, 9:51pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/1 "2017-05-03T21:51:25Z")

</div>

I recently upgraded my Elasticsearch nodes from 2.x to 5.3.2. Afterward, I installed a new server with an Elasticsearch client (master & date = False), and a new Kibana 5.3.2 instance on that node. Every time I go to load a page (any page except status) in Kibana, it hangs. Then it says the elasticsearch plugin timed out after 30 seconds. The Kibana status page reports the elasticsearch plugin as being red for over 2 minutes before going to green again. Doesn't matter how many times or what page I load in Kibana, the same thing happens.

At the same time, I also use the elasticsearch-head service. I have that loaded with a refresh interval of 5s. Whenever I load a Kibana page, elasticsearch-head will also stop refreshing until the 2 minutes pass, then refreshing resumes.

I've also tried running a script I have from the older 2.x version that just runs a specific query over my indexes. I find that this script runs fine running regular queries when Kibana is "stuck," so it's not a complete freeze of the Elasticsearch system.

I've tried enabling various debug logging modes in Kibana, and it's not telling me what's getting hung up in elasticsearch. Here is a link to the Kibana logs in verbose mode for the duration of the issue:

[https://pastebin.com/95qyNnN0](https://pastebin.com/95qyNnN0)

I'm not sure where to go from here. I've been poking and prodding for a few days now with no luck on restoring Kibana for my team to use. Any assistance is greatly appreciated.

Tom

---

<div class="post-metadata">

**Author:** ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)\
**Post date:** [May 3, 2017, 11:13pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/2 "2017-05-03T23:13:16Z")

</div>

> Every time I go to load a page (any page except status) in Kibana, it hangs. Then it says the elasticsearch plugin timed out after 30 seconds. The Kibana status page reports the elasticsearch plugin as being red for over 2 minutes before going to green again.

Do you see excessive load on the machine, in particular from Elasticsearch? The red status is usually the result of a request from Kibana that pings ES to try to check its status. When it's red, it means either it can't talk to the server, or it timed out for some reason.

This request from your logs is concerning:

```auto
GET /api/kibana/logstash-*/field_capabilities 503 30013ms - 9.0B

```

This leads me to believe it's not actually a problem with the heartbeat, but something's up with your data. Do you have data in your `logstash-*` indices on the new 5.3.2 cluster? That request will fail when you don't...

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 3, 2017, 11:55pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/3 "2017-05-03T23:55:01Z")

</div>

I have a few TBs of data in the logstash-\* indexes. I also have  
metricbeat-\* and vdbench-\* indexes that are a bit smaller. I don't see  
any unusually high load on my elasticsearch cluster when I try to load a  
Kibana page.

I will say that the logstash-\* index does have a few thousand fields  
defined in it. Seems like it might be related to that? The old version  
didn't seem to care.

---

<div class="post-metadata">

**Author:** ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)\
**Post date:** [May 4, 2017, 12:34am UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/4 "2017-05-04T00:34:01Z")

</div>

It could be related. A large number of fields will certainly slow things down, because it increases the amount of data that is sent across the wire. But I don't _think_ you should be any worse off in 5.x than you were in 2.x.

I know the `field_capabilities` API is really new though. In fact, the docs say it isn't even available in 5.3. Based on [this Kibana issue](https://github.com/elastic/kibana/issues/11379) though, and the fact that you see 5.3.2 using it, that can't be true. Can you check your Elasticsearch logs and see if you see any errors there?

Also, can you tell me what version of 2.x you upgraded from too? Maybe there's a weird upgrade path issue too.

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 4, 2017, 4:09pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/5 "2017-05-04T16:09:34Z")

</div>

I've been staring at the logs on my elasticsearch cluster every time I try to launch kibana. I don't see anything unusual or error-like relating to kibana. Just the occasional logstash index error because a number is larger than a "long".

I know I upgraded from Elasticsearch 2.4.x. I don't remember what x is however, and grepping the log files for "version" is not helping narrow it down either.

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 15, 2017, 4:04pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/6 "2017-05-15T16:04:59Z")

</div>

Bump

I still have a 100% unusable ELK stack... Does anybody have any ideas on what I can do in order to get this working??

Thanks.

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 17, 2017, 6:34pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/7 "2017-05-17T18:34:30Z")

</div>

FYI, upgrading to ELK 5.4.0 does not fix the situation.

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [May 17, 2017, 8:50pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/8 "2017-05-17T20:50:34Z")

</div>

I was bored and decided to enable trace level logging on the elasticsearch client that kibana is using. What I found are multiple calls to "[indices:data/read/field\_stats[s]]" that in some cases take a very long time to get a response. Here is a log of about 50 seconds worth of log data: [https://pastebin.com/DJnj9Lxp](https://pastebin.com/DJnj9Lxp)

Note that Kibana will timeout after 30 seconds, if it's asking for "field stats" for every field in the index, I have thousands... this query may never finish! What can I do to disable this, or otherwise restore Kibana to how it behaved in version 2.4 so I can get it back to a usable state?

---

<div class="post-metadata">

**Author:** ![Warren\_McDonald](https://avatars.discourse-cdn.com/v4/letter/w/91b2a8/32.png) [@Warren\_McDonald](https://discuss.elastic.co/u/Warren_McDonald)\
**Post date:** [June 11, 2017, 7:21am UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/9 "2017-06-11T07:21:54Z")

</div>

I have just migrated to a 5.3 AWS ES Domain and have exactly the same problem.  
I can run this API query manually for a month pattern at a time and it will return Ok.  
It just cant handle the wildcard for the whole default logstash pattern

Kibana is completely crippled for the logstash-\* index pattern.

Is there anything configurable to stop this behaviour.

---

<div class="post-metadata">

**Author:** ![Snick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snick/32/17914_2.png) [@Snick](https://discuss.elastic.co/u/Snick)\
**Post date:** [June 12, 2017, 5:47pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/10 "2017-06-12T17:47:18Z")

</div>

I wish you luck finding an answer. I never did, and had to downgrade to the pre 5.x versions, loosing all my data.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 10, 2017, 5:47pm UTC](https://discuss.elastic.co/t/kibana-wont-load-any-page-causes-elasticsearch-plugin-timeoutes/84466/11 "2017-07-10T17:47:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
