FIELDDATA Data is too large

elasticsearch kibana-4
lezzago picture lezzago · Jun 12, 2015 · Viewed 20.9k times · Source

I open kibana and do a search and i get the error where shards failed. I looked in the elasticsearch.log file and I saw this error:

org.elasticsearch.common.breaker.CircuitBreakingException: [FIELDDATA] Data too large, data for [@timestamp] would be larger than limit of [622775500/593.9mb]

Is there any way to increase that limit of 593.9mb?

Answer

Val picture Val · Jun 13, 2015

You can try to increase the fielddata circuit breaker limit to 75% (default is 60%) in your elasticsearch.yml config file and restart your cluster:

indices.breaker.fielddata.limit: 75%

Or if you prefer to not restart your cluster you can change the setting dynamically using:

curl -XPUT localhost:9200/_cluster/settings -d '{
  "persistent" : {
    "indices.breaker.fielddata.limit" : "40%" 
  }
}'

Give it a try.

Related questions

Export to csv/excel from kibana

I am building a proof of concept using Elasticsearch Logstash and Kibana for one of my projects. I have the dashboard with the graphs working without any issue. One of the requirements for my project is the ability to download …

Read More
Kibana doesn't show any results in "Discover" tab

I setup elasticsearch and Kibana for indexing our application (error) logs. The issue is that Kibana doesn't display any data in the "Discover" tab. Current situation Elasticsearch is up and running, responds to API executing a query directly on Elasticsearch …

Read More
elasticsearch / kibana 4: field exists but is not equal to a value

elasticsearch version 1.4.5 kibana 4.1.1 logstash 1.5.2-1 How do I structure a search in the discover tab of kibana 4 that only returns results if a field exists but is not equal to a specific value? I have some apache log data in …

Read More