Type to search.

Open file descriptors near limit

ECK

Elastic Cloud on Kubernetes extends Kubernetes orchestration capabilities to allow you to deploy and manage components of the Elastic Stack.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

ECE

Elastic Cloud Enterprise is a self-managed orchestration platform for deploying and managing the Elastic Stack at scale.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Self-managed

Self-managed deployments are Elastic Stack deployments managed without the assistance of an orchestrator.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Open file descriptors on the node are approaching the process or system limit. Elasticsearch needs descriptors for open segments and connections.

Note

For a complete list of insights, refer to AutoOps insights.

Field Value
Component Elasticsearch
Severity High
Scope Cluster
Domains resource-utilization, stability

You can customize these settings to adjust when AutoOps detects this event and presents the insight. Refer to AutoOps event settings for details.

The default customization settings are:

Setting Type Default
High open file descriptors threshold percent Percentage 80

The following is an example of what you might see when this insight is triggered. Real insights use live data and links from your deployment or cluster.

The open file descriptor count is 61200 of 65536 on es-data-01.

Note

AutoOps shows different recommendations depending on how their conditions match your deployment or cluster.

Increase max file descriptors

Condition: Always shown for this insight.

Set the open file descriptor limit for the Elasticsearch process user to 65,536 or later on the host OS. Use the action below to check max_file_descriptors on each node.

JSON
GET _nodes/stats/process?filter_path=**.max_file_descriptors&pretty
Note

Requires the manage cluster privilege. Requires Elasticsearch 8.0.0 or later. This action is read-only.

Elasticsearch keeps a file descriptor open for each segment file and network connection. When the process approaches the operating system limit, the node might fail to open new files or connections. That can destabilize the node and risk data loss if the process crashes or stops accepting requests.

Important system configuration