"circuit_breaking_exception" wazuh-docker

[DUCARROZ Birgit]

Hi list,

I have suddenly the following error when starting my docker
wazuh-containers:


type "circuit_breaking_exception"
reason "[parent] Data too large, data for [<http_request>] would be
[513360896/489.5mb], which is larger than the limit of
[510027366/486.3mb], real usage: [513360896/489.5mb], new bytes
reserved: [0/0b], usages [request=0/0b, fielddata=0/0b,
in_flight_requests=0/0b, accounting=30410172/29mb]"
bytes_wanted 513360896
bytes_limit 510027366
durability "PERMANENT"
type "circuit_breaking_exception"
reason "[parent] Data too large, data for [<http_request>] would be
[513360896/489.5mb], which is larger than the limit of
[510027366/486.3mb], real usage: [513360896/489.5mb], new bytes
reserved: [0/0b], usages [request=0/0b, fielddata=0/0b,
in_flight_requests=0/0b, accounting=30410172/29mb]"
bytes_wanted 513360896
bytes_limit 510027366
durability "PERMANENT"
status 429

I see that the java process is using about 30% of the servers RAM.

I found the following websites which shoud help me:
https://discuss.elastic.co/t/what-does-this-error-mean-data-too-large-data-for-transport-request/209345

https://www.elastic.co/guide/en/elasticsearch/reference/current/fix-common-cluster-issues.html#circuit-breaker-errors

.. but the problem is that i don't understand what I shoud do to correct
the problem. In which docker container must I log-in or how must I adapt
my docker-compose.yml file to correct this?

Thank you for any help!
Regards,
Birgit

[Birgit Ducarroz]

I found that it works again when I increase the following values in my docker-compose.yml file:

elasticsearch:

   (...)

    environment:
      - "ES_JAVA_OPTS=-Xms612m -Xmx612m"
      nofile:
        soft: 65536
        hard: 66536