-
Problem report
-
Resolution: Won't fix
-
Trivial
-
None
-
4.4.5
-
None
I use Elasticsearch as a history storage (3 nodes in cluster). After restarting of the zabbix server, I see heavy load on the elastic cluster with many read queries (350-400 Mb/sec on each node).
Queries is like this:
{
"completed": false,
"task": {
"node": "Bf795ulkQzC-upCT5d4wRg",
"id": 71693,
"type": "transport",
"action": "indices:data/read/search",
"description": "indices[uint*], types[values], search_type[QUERY_THEN_FETCH], source[{\"size\":2,\"query\":{\"bool\":{\"must\":[{\"match\":{\"itemid\":{\"query\":71907,\"operator\":\"OR\",\"prefix_length\":0,\"max_expansions\":50,\"fuzzy_transpositions\":true,\"lenient\":false,\"zero_terms_query\":\"NONE\",\"boost\":1.0}}}],\"filter\":[{\"range\":{\"clock\":{\"from\":null,\"to\":1582269002,\"include_lower\":true,\"include_upper\":true,\"boost\":1.0}}}],\"disable_coord\":false,\"adjust_pure_negative\":true,\"boost\":1.0}},\"sort\":[{\"clock\":{\"order\":\"desc\"}}]}]",
"start_time_in_millis": 1582272101942,
"running_time_in_nanos": 56658436343,
"cancellable": true
}
}
Looks like zabbix queries Elastic for all items data for all period of time.