Question

我正在尝试在我们的环境中验证此错误的根本原因。

ES版 elasticsearch-1.7.1

RemoteTransportException[host.com][inet[/internalIP:9300]]
[indices:data/read/search[phase/query]]]; nested: 
QueryPhaseExecutionException[[logstash-v2-2016.01.30][3]: 
query[filtered(+firstname:Steve +lastname:Harvey)-
>BooleanFilter(+cache(event_time_utc:[1423086205000 TO 
1454622205000]))],from[0],size[5],sort[<custom:\"event_time_utc\": 
org.elasticsearch.index.fielddata.fieldcomparator.LongValuesComparatorSource@24f48
98c>!]: Query Failed [Failed to execute main query]]; nested:  ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException:
[FIELDDATA] Data too large, data for [event_time_utc] would be larger than
limit of [17997024460/16.7gb]]; nested: UncheckedExecutionException[org.elasticsearch.
common.breaker.CircuitBreakingException: [FIELDDATA] Data too large, data for
 [event_time_utc] would be larger than limit of [17997024460/16.7gb]]; nested:
 CircuitBreakingException[[FIELDDATA] Data too large, data for 
[event_time_utc] would be larger than limit of [17997024460/16.7gb]]; "

您可以在上面看到数据对于字段event_time_utc来说太大了。我正在执行curl命令来调查此问题。返回的数据没有帮助。

卷曲命令

 [curl -k -XGET 'https://USERNAME:PASSWORD@host.com:9200/logstash-v2-2016.01.30/_stats/fielddata/?fields=event_time_utc&pretty'][1]

我的问题是：

找出这个断路器时，什么属性应该对我有帮助即将被绊倒？
我如何确定哪些字段正在进行中绊倒这个断路器？
其他如何监控此阈值。

输出

{
  "_shards" : {
    "total" : 10,
    "successful" : 10,
    "failed" : 0
  },
  "_all" : {
    "primaries" : {
      "fielddata" : {
        "memory_size_in_bytes" : 80336,
        "evictions" : 0,
        "fields" : {
      "event_time_utc" : {
        "memory_size_in_bytes" : 40168
      }
    }
  }
},
"total" : {
  "fielddata" : {
    "memory_size_in_bytes" : 92592,
    "evictions" : 0,
    "fields" : {
      "event_time_utc" : {
        "memory_size_in_bytes" : 46296
      }
    }
  }
}
  },
  "indices" : {
    "badge_v2-2016.01.30" : {
      "primaries" : {
        "fielddata" : {
          "memory_size_in_bytes" : 80336,
          "evictions" : 0,
        "fields" : {
        "event_time_utc" : {
          "memory_size_in_bytes" : 40168
        }
      }
    }
  },
  "total" : {
    "fielddata" : {
      "memory_size_in_bytes" : 92592,
      "evictions" : 0,
      "fields" : {
        "event_time_utc" : {
          "memory_size_in_bytes" : 46296
            }
          }
        }
      }
    }
  }
}

Elasticsearch故障排除现场数据

0 个答案: