We use Elasticsearch and Kibana and have quite a lot of data (~1TB).
Sometimes our users send very heavy request using Kibana (search/aggregations through 500GB of data) and Elasticsearch stops working at all. Only restart helps, and then it takes time for cluster to rebuild properly.
Are there any options to restrict so heavy requests? I mean, timeouts or something like this - for example, Elasticsearch stops processing data after, e.g. 120 sec and returns what it has already processed.
It will really save a lot of our nerves