PowerProtect：Data Manager ESDB - 資料太大、活動資料

PowerProtect Data Manager 活動例如：由於 Elasticsearch 的問題，備份、還原或複製程序受到影響。

• 在 Elasticsearch index_activity 索引中會看到下列錯誤：

                  "reason": Object {
                      "caused_by": Object {
                          "caused_by": Object {
                              "bytes_limit": Number(858993459),
                              "bytes_wanted": Number(859222328),
                              "durability": String("PERMANENT"),
                              "reason": String("[fielddata] Data too large, data for [_id] would be [859222328/819.4mb], which is larger than the limit of [858993459/819.1mb]"),
                              "type": String("circuit_breaking_exception"),
                          },
                          "reason": String("CircuitBreakingException[[fielddata] Data too large, data for [_id] would be [859222328/819.4mb], which is larger than the limit of [858993459/819.1mb]]"),
                          "type": String("execution_exception"),
                      },
                      "reason": String("java.util.concurrent.ExecutionException: CircuitBreakingException[[fielddata] Data too large, data for [_id] would be [859222328/819.4mb], which is larger than the limit of [858993459/819.1mb]]"),
                      "type": String("exception"),
                  },
                  "shard": Number(0),
              },

• Elasticsearch 記錄指出以下內容：

  org.elasticsearch.transport.RemoteTransportException: [local][127.0.0.1:14400][indices:data/read/search[phase/query]]
  Caused by: org.elasticsearch.search.query.QueryPhaseExecutionException: Query Failed [Failed to execute main query]
          at org.elasticsearch.search.query.QueryPhase.executeInternal(QueryPhase.java:228) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:98) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.search.SearchService.loadOrExecuteQueryPhase(SearchService.java:459) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:623) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.search.SearchService.lambda$executeQueryPhase$2(SearchService.java:484) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.action.ActionRunnable.lambda$supply$0(ActionRunnable.java:47) [elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.action.ActionRunnable$2.doRun(ActionRunnable.java:62) ~[elasticsearch-7.17.17.jar:7.17.17]
          at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26) [elasticsearch-7.17.17.jar:7.17.17]

• 發現 Elasticsearch index_activity 大小為 21.6 GB

  ┌─────┬────────┬────────┬───────────────────────────┬────────────────────────┬─────┬─────┬────────────┬──────────────┬────────────┬────────────────┐
  │ ##  ┆ health ┆ status ┆ index                     ┆ uuid                   ┆ pri ┆ rep ┆ docs.count ┆ docs.deleted ┆ store.size ┆ pri.store.size │
  ╞═════╪════════╪════════╪═══════════════════════════╪════════════════════════╪═════╪═════╪════════════╪══════════════╪════════════╪════════════════╡
  │ 1   ┆ green  ┆ open   ┆ index_activity            ┆ VCi1Df7tQLemZrSnYLyHZg ┆ 1   ┆ 0   ┆ 87971760   ┆ 8576108      ┆ 21.6gb     ┆ 21.6gb         │
  │ 2   ┆ green  ┆ open   ┆ index_protection_copy_set ┆ NzMVnlX_RPG0v3dUXXGznA ┆ 1   ┆ 0   ┆ 15634865   ┆ 4026853      ┆ 6gb        ┆ 6gb            │
  │ 3   ┆ green  ┆ open   ┆ index_asset_protection_de ┆ nujLQyzmRTuCsDlR5ncvBw ┆ 1   ┆ 0   ┆ 6131465    ┆ 1282123      ┆ 3.4gb      ┆ 3.4gb          │
  │     ┆        ┆        ┆ tail                      ┆                        ┆     ┆     ┆            ┆              ┆            ┆                │
  │ 4   ┆ green  ┆ open   ┆ index_protection_copy     ┆ JPGjWiwUS0Wilw87QWE_OA ┆ 1   ┆ 0   ┆ 2542590    ┆ 277569       ┆ 2.1gb      ┆ 2.1gb          │

• 我們觀察到 ESDB 進程利用率很高，CPU 峰值高達 900%

此問題是在 Elasticsearch index_activity 索引中發現的。
當估計欄位需要載入到 JVM 堆中的內存量時，節點會重載。如果操作堆超過限制，它通過引發異常來防止欄位數據載入。

減少了 ESDB：index_activity 索引的容量大小，從而從表中刪除了過時的文檔，從而提高了 ESDB 的整體性能。
由於這是內部任務，請勿 考慮自行進行任何更改！
此活動需要支援人員注意，請向 Dell 團隊提出服務要求。