elk CircuitBreakingException: [parent] Data too large的问题

自己用docker随便搭了一个elk，任何设置都是默认的，开始用的挺好的，后面突然出现问题不能使用了，然后查日志报错

org.elasticsearch.transport.RemoteTransportException: [node-01][192.168.10.248:9300][cluster:monitor/nodes/info[n]]

Caused by: org.elasticsearch.common.breaker.CircuitBreakingException: [parent] Data too large, data for [] would be [2543027816/2.3gb], which is larger than the limit of [2521196134/2.3gb], real usage: [2543026456/2.3gb], new bytes reserved: [1360/1.3kb]

增加es jvm内存，解决了；

vim /etc/elasticsearch/jvm.options

-Xms1g

-Xmx1g

从1g改成8g，然后重启 完美解决。