Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-17353

Elasticsearch backend overloaded after server restart

    XMLWordPrintable

    Details

    • Type: Problem report
    • Status: Closed
    • Priority: Trivial
    • Resolution: Won't fix
    • Affects Version/s: 4.4.5
    • Fix Version/s: None
    • Component/s: Server (S)
    • Labels:
      None

      Description

      I use Elasticsearch as a history storage (3 nodes in cluster). After restarting of the zabbix server, I see heavy load on the elastic cluster with many read queries (350-400 Mb/sec on each node).

      Queries is like this:

      {
        "completed": false,
        "task": {
          "node": "Bf795ulkQzC-upCT5d4wRg",
          "id": 71693,
          "type": "transport",
          "action": "indices:data/read/search",
          "description": "indices[uint*], types[values], search_type[QUERY_THEN_FETCH], source[{\"size\":2,\"query\":{\"bool\":{\"must\":[{\"match\":{\"itemid\":{\"query\":71907,\"operator\":\"OR\",\"prefix_length\":0,\"max_expansions\":50,\"fuzzy_transpositions\":true,\"lenient\":false,\"zero_terms_query\":\"NONE\",\"boost\":1.0}}}],\"filter\":[{\"range\":{\"clock\":{\"from\":null,\"to\":1582269002,\"include_lower\":true,\"include_upper\":true,\"boost\":1.0}}}],\"disable_coord\":false,\"adjust_pure_negative\":true,\"boost\":1.0}},\"sort\":[{\"clock\":{\"order\":\"desc\"}}]}]",
          "start_time_in_millis": 1582272101942,
          "running_time_in_nanos": 56658436343,
          "cancellable": true
        }
      }
      

      Looks like zabbix queries Elastic for all items data for all period of time.

        Attachments

          Activity

            People

            Assignee:
            igorbach Igor Gorbach
            Reporter:
            grommir grommir
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: