# Pleas help me to understand why my Query is slow

**URL:** https://discuss.elastic.co/t/pleas-help-me-to-understand-why-my-query-is-slow/50981
**Category:** Elasticsearch
**Created:** [May 25, 2016, 7:40pm UTC](https://discuss.elastic.co/t/pleas-help-me-to-understand-why-my-query-is-slow/50981 "2016-05-25T19:40:42Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)
#### Post date: [May 25, 2016, 7:40pm UTC](https://discuss.elastic.co/t/pleas-help-me-to-understand-why-my-query-is-slow/50981/1 "2016-05-25T19:40:42Z")

</div>

Hi Experts ,

My slow query logs says

[2016-05-25 15:01:11,899][WARN][index.search.slowlog.query] [Acrobat] [cef-2016.20][1] took[21s], took\_millis[11091], types[], stats[], search\_type[COUNT], total\_shards[15], source[{"size":0,"aggs":{"2":{"terms":{"field":"alertmsg.raw","size":5,"order":{"\_count":"desc"}},"aggs":{"3":{"date\_histogram":{"field":"rt","interval":"12h","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":1,"extended\_bounds":{"min":1462041000000,"max":1464200999999}}}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"match\_all":{}},{"query":{"query\_string":{"query":"\*","analyze\_wildcard":true}}},{"range":{"rt":{"gte":1462041000000,"lte":1464200999999}}}],"must\_not":[]}}}}}], extra\_source[],

[2016-05-25 15:01:11,991][WARN][index.search.slowlog.query] [Acrobat] [cef-2016.19][3] took[11.1s], took\_millis[11190], types[], stats[], search\_type[COUNT], total\_shards[15], source[{"size":0,"aggs":{"2":{"terms":{"field":"alertmsg.raw","size":5,"order":{"\_count":"desc"}},"aggs":{"3":{"date\_histogram":{"field":"rt","interval":"12h","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":1,"extended\_bounds":{"min":1462041000000,"max":1464200999999}}}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"match\_all":{}},{"query":{"query\_string":{"query":"\*","analyze\_wildcard":true}}},{"range":{"rt":{"gte":1462041000000,"lte":1464200999999}}}],"must\_not":[]}}}}}], extra\_source[],

[2016-05-25 15:01:12,022][WARN][index.search.slowlog.query] [Acrobat] [cef-2016.19][4] took[31.2s], took\_millis[11225], types[], stats[], search\_type[COUNT], total\_shards[15], source[{"size":0,"aggs":{"2":{"terms":{"field":"alertmsg.raw","size":5,"order":{"\_count":"desc"}},"aggs":{"3":{"date\_histogram":{"field":"rt","interval":"12h","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":1,"extended\_bounds":{"min":1462041000000,"max":1464200999999}}}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"match\_all":{}},{"query":{"query\_string":{"query":"\*","analyze\_wildcard":true}}},{"range":{"rt":{"gte":1462041000000,"lte":1464200999999}}}],"must\_not":[]}}}}}], extra\_source[],

[2016-05-25 15:01:12,067][WARN][index.search.slowlog.query] [Acrobat] [cef-2016.20][2] took[11.2s], took\_millis[11275], types[], stats[], search\_type[COUNT], total\_shards[15], source[{"size":0,"aggs":{"2":{"terms":{"field":"alertmsg.raw","size":5,"order":{"\_count":"desc"}},"aggs":{"3":{"date\_histogram":{"field":"rt","interval":"12h","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":1,"extended\_bounds":{"min":1462041000000,"max":1464200999999}}}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"match\_all":{}},{"query":{"query\_string":{"query":"\*","analyze\_wildcard":true}}},{"range":{"rt":{"gte":1462041000000,"lte":1464200999999}}}],"must\_not":[]}}}}}], extra\_source[],

[2016-05-25 15:01:12,809][WARN][index.search.slowlog.query] [Acrobat] [cef-2016.19][0] took[12s], took\_millis[12017], types[], stats[], search\_type[COUNT], total\_shards[15], source[{"size":0,"aggs":{"2":{"terms":{"field":"alertmsg.raw","size":5,"order":{"\_count":"desc"}},"aggs":{"3":{"date\_histogram":{"field":"rt","interval":"12h","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":1,"extended\_bounds":{"min":1462041000000,"max":1464200999999}}}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"match\_all":{}},{"query":{"query\_string":{"query":"\*","analyze\_wildcard":true}}},{"range":{"rt":{"gte":1462041000000,"lte":1464200999999}}}],"must\_not":[]}}}}}], extra\_source[],

**Total docs :- 100 Million**  
**Nodes :- 4**  
**RAM :- 8 GB each**  
**total shards :- 15**

Please help me to understand what could be issue of this slowness ?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 10:48pm UTC](https://discuss.elastic.co/t/pleas-help-me-to-understand-why-my-query-is-slow/50981/2 "2017-07-05T22:48:59Z")

</div>


