# We are getting error logs in es and ks but es is pritty much fine, ks is down

**URL:** <https://forum.opensearch.org/t/we-are-getting-error-logs-in-es-and-ks-but-es-is-pritty-much-fine-ks-is-down/8983>\
**Category:** Open Source Elasticsearch and Kibana\
**Tags:** troubleshoot\
**Created:** [March 23, 2022, 5:39am UTC](https://forum.opensearch.org/t/we-are-getting-error-logs-in-es-and-ks-but-es-is-pritty-much-fine-ks-is-down/8983 "2022-03-23T05:39:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bhanuji](https://avatars.discourse-cdn.com/v4/letter/b/7ea924/32.png) [@bhanuji](https://forum.opensearch.org/u/bhanuji)\
**Post date:** [March 23, 2022, 5:39am UTC](https://forum.opensearch.org/t/we-are-getting-error-logs-in-es-and-ks-but-es-is-pritty-much-fine-ks-is-down/8983/1 "2022-03-23T05:39:48Z")

</div>

ES logs  
[2022-03-23T06:15:40,671][DEBUG][o.e.a.b.TransportShardBulkAction] [seroiudb00697.sero.gic.ericsson.se] [vwave\_metricbeat-ih-000011][2] failed to execute bulk item (index) index {[vwave\_metricbeat-ih][\_doc][\_AYztX8BYHoylFxLurf9], source[{“ecs”:{“version”:“1.1.0”},“service”:{“type”:“system”},“@timestamp”:“2022-03-23T05:15:38.053Z”,“sbc”:{“instrument\_handler\_version”:“1.0.16”},“tags”:[“beats\_input\_raw\_event”],“@version”:“1”,“lum”:{“location”:“Kista”,“test\_position”:“Not set”,“port\_name”:“Not set”,“port\_id”:“Not set”},“metricset”:{“name”:“cpu”,“period”:60000},“agent”:{“type”:“metricbeat”,“ephemeral\_id”:“9c4841b1-9956-4685-98f7-73ac749b955d”,“hostname”:“vwavepi13758239183”,“id”:“8de04281-ed00-4110-8717-43677c70aef5”,“version”:“7.5.1”},“event”:{“duration”:539656,“module”:“system”,“dataset”:“system.cpu”},“host”:{“architecture”:“armv7l”,“name”:“vwavepi13758239183”,“id”:“a65eab243eac4495be8712737a05e18b”,“hostname”:“vwavepi13758239183”,“containerized”:false,“os”:{“family”:“debian”,“kernel”:“5.10.17-v7l+”,“name”:“Raspbian GNU/Linux”,“version”:“10 (buster)”,“codename”:“buster”,“platform”:“raspbian”}},“system”:{“cpu”:{“system”:{“pct”:0.009},“iowait”:{“pct”:0},“idle”:{“pct”:3.9862},“softirq”:{“pct”:0},“nice”:{“pct”:0},“user”:{“pct”:0.0048},“total”:{“pct”:0.0138},“steal”:{“pct”:0},“cores”:4,“irq”:{“pct”:0}}}}]}  
[2022-03-23T06:15:40,678][DEBUG][o.e.a.b.TransportShardBulkAction] [seroiudb00697.sero.gic.ericsson.se] [vwave\_metricbeat-ih-000011][2] failed to execute bulk item (index) index {[vwave\_metricbeat-ih][\_doc][AQYztX8BYHoylFxLurj9], source[{“ecs”:{“version”:“1.1.0”},“service”:{“type”:“system”},“@timestamp”:“2022-03-23T05:15:38.108Z”,“sbc”:{“instrument\_handler\_version”:“1.0.16”},“tags”:[“beats\_input\_raw\_event”],“@version”:“1”,“lum”:{“location”:“Kista”,“test\_position”:“Not set”,“port\_name”:“Not set”,“port\_id”:“Not set”},“metricset”:{“period”:60000,“name”:“socket\_summary”},“agent”:{“type”:“metricbeat”,“ephemeral\_id”:“9c4841b1-9956-4685-98f7-73ac749b955d”,“hostname”:“vwavepi13758239183”,“id”:“8de04281-ed00-4110-8717-43677c70aef5”,“version”:“7.5.1”},“event”:{“duration”:33390409,“module”:“system”,“dataset”:“system.socket.summary”},“host”:{“architecture”:“armv7l”,“name”:“vwavepi13758239183”,“id”:“a65eab243eac4495be8712737a05e18b”,“hostname”:“vwavepi13758239183”,“containerized”:false,“os”:{“family”:“debian”,“kernel”:“5.10.17-v7l+”,“version”:“10 (buster)”,“name”:“Raspbian GNU/Linux”,“codename”:“buster”,“platform”:“raspbian”}},“system”:{“socket”:{“summary”:{“udp”:{“all”:{“count”:5},“memory”:8192},“tcp”:{“all”:{“listening”:2,“established”:1,“count”:3,“time\_wait”:0,“close\_wait”:0,“orphan”:0},“memory”:0},“all”:{“listening”:2,“count”:8}}}}}]}  
[2022-03-23T06:15:40,681][DEBUG][o.e.a.b.TransportShardBulkAction] [seroiudb00697.sero.gic.ericsson.se] [vwave\_metricbeat-ih-000011][2] failed to execute bulk item (index) index {[vwave\_metricbeat-ih][\_doc][AgYztX8BYHoylFxLurj9], source[{“ecs”:{“version”:“1.1.0”},“service”:{“type”:“system”},“@timestamp”:“2022-03-23T05:15:38.124Z”,“sbc”:{“instrument\_handler\_version”:“1.0.16”},“tags”:[“beats\_input\_raw\_event”],“@version”:“1”,“lum”:{“location”:“Kista”,“port\_name”:“Not set”,“test\_position”:“Not set”,“port\_id”:“Not set”},“metricset”:{“period”:60000,“name”:“process\_summary”},“agent”:{“ephemeral\_id”:“9c4841b1-9956-4685-98f7-73ac749b955d”,“id”:“8de04281-ed00-4110-8717-43677c70aef5”,“hostname”:“vwavepi13758239183”,“type”:“metricbeat”,“version”:“7.5.1”},“event”:{“duration”:43664995,“module”:“system”,“dataset”:“system.process.summary”},“host”:{“architecture”:“armv7l”,“name”:“vwavepi13758239183”,“id”:“a65eab243eac4495be8712737a05e18b”,“hostname”:“vwavepi13758239183”,“containerized”:false,“os”:{“family”:“debian”,“version”:“10 (buster)”,“name”:“Raspbian GNU/Linux”,“kernel”:“5.10.17-v7l+”,“codename”:“buster”,“platform”:“raspbian”}},“system”:{“process”:{“summary”:{“idle”:49,“zombie”:0,“unknown”:0,“stopped”:0,“total”:109,“sleeping”:60,“dead”:0,“running”:0}}}}]}

KS logs  
{“type”:“error”,“@timestamp”:“2022-03-09T13:44:25Z”,“tags”:,“pid”:707,“level”:“error”,“error”:{“message”:“[illegal\_argument\_exception] ReleasableBytesStreamOutput cannot hold more than 2GB of data”,“name”:“Error”,“stack”:"[illegal\_argument\_exception] ReleasableBytesStreamOutput cannot hold more than 2GB of data :: {"path":"/\_msearch","query":{"rest\_total\_hits\_as\_int":"true","ignore\_throttled":"true"},"body":"{\"index\":\"vwave\_controller\_complete\_response\*\",\"ignore\_unavailable\":true,\\

can you please help me to resolve the problem

---

<div class="post-metadata">

**Author:** ![kris](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kris/32/2208_2.png) [@kris](https://forum.opensearch.org/u/kris)\
**Post date:** [February 7, 2023, 12:02am UTC](https://forum.opensearch.org/t/we-are-getting-error-logs-in-es-and-ks-but-es-is-pritty-much-fine-ks-is-down/8983/2 "2023-02-07T00:02:58Z")

</div>