1

我看不到仪表板中的数据。它总是显示未找到结果,但有应用了过滤器的数据。我在“响应”选项卡中看到了,我得到了

"reason":"ElasticsearchException[org.elasticsearch.common.breaker.CircuitBreakingException: [FIELDDATA] Data too large, data for [@timestamp] would be larger than limit of [623326003/594.4mb]];

我如何更改此限制,以便能够可视化仪表板中的所有可视化?

我使用“cat /proc/meminfo”来查看我的 RAM 情况如何,并且我有

MemTotal:        8059268 kB
MemFree:          141872 kB
Buffers:          183700 kB
Cached:          5532044 kB
SwapCached:          460 kB
Active:          2624192 kB
Inactive:        4740612 kB
Active(anon):     793784 kB
Inactive(anon):   855316 kB
Active(file):    1830408 kB
Inactive(file):  3885296 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:       1572860 kB
SwapFree:        1569772 kB
Dirty:              5296 kB
Writeback:             0 kB
AnonPages:       1648660 kB
Mapped:           586712 kB
Shmem:                40 kB
Slab:             462420 kB
SReclaimable:     398560 kB
SUnreclaim:        63860 kB
KernelStack:        4944 kB
PageTables:        12192 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:     5602492 kB
Committed_AS:    2018216 kB
VmallocTotal:   34359738367 kB
VmallocUsed:       29564 kB
VmallocChunk:   34359701040 kB
HardwareCorrupted:     0 kB
AnonHugePages:   1499136 kB

我认为我的缓存太多了。我保留了 ES_MIN_MEM 、 ES_MAX_MEM 和 ES_HEAP_SIZE 的默认参数。现在我的问题是……我应该将 ES_HEAP_SIZE 更改为 RAM 总内存的 50% 吗?(4 GB) 还是只有 50% 的可用内存?(141872 kB /2 = 70MB aprox)

4

0 回答 0