Hello Chris,
As you can see from the logs, you have reached a circuit breakage exception, and you'll need to increase the Wazuh indexer heap size to improve the performance of your Wazuh indexer. The circuit_breaking_exception is a mechanism used to prevent operations from causing an OutOfMemoryError. It seems like wazuh-indexer was using most of the JVM heap configured, and the total memory required for all operations was superior to the memory available.
Enter the indexer container and edit the jvm.options file. To confirm the ID of your indexer container, run the command docker ps. For example, to enter the container:
- docker exec -it --user root single-node-wazuh.indexer-1 bash
Edit the
jvm.options file to increase the JVM heap size. The recommended value is half of the system RAM. For example, set the size as follows for a system with 8 GB of RAM (
reference):
-Xms4g
-Xmx4gWhere the total heap space:
-Xms4g - initial size is set to 4Gb of RAM.
-Xmx4g - maximum size is to 4Gb of RAM
Restart the Wazuh indexer and dashboard containers:
- docker restart single-node-wazuh.indexer-1
- docker restart single-node-wazuh.dashboard-1
Let me know if this resolves the issue.
Best regards.