# Error Data too large

**URL:** https://community.graylog.org/t/error-data-too-large/18455
**Category:** Graylog Central (peer support)
**Created:** [January 13, 2021, 10:55am UTC](https://community.graylog.org/t/error-data-too-large/18455 "2021-01-13T10:55:54Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![inet45](https://avatars.discourse-cdn.com/v4/letter/i/3ab097/32.png) [@inet45](https://community.graylog.org/u/inet45)
#### Post date: [January 13, 2021, 10:55am UTC](https://community.graylog.org/t/error-data-too-large/18455/1 "2021-01-13T10:55:54Z")

</div>

getting this error,

my memory and drive utilization low, can you please help

- Search type returned error: [parent] Data too large, data for [\<agg [375bcdc0-0fcc-44df-bc84-d0291f65f9aa-series-count(request)]\>] would be [726700056/693mb], which is larger than the limit of [726571417/692.9mb], usages [request=36224/35.3kb, fielddata=145806/142.3kb, in\_flight\_requests=15150/14.7kb, accounting=726502876/692.8mb][parent] Data too large, data for [\<agg [375bcdc0-0fcc-44df-bc84-d0291f65f9aa-series-count(request)]\>] would be [726746455/693mb], which is larger than the limit of [726571417/692.9mb], usages [request=31040/30.3kb, fielddata=197389/192.7kb, in\_flight\_requests=15150/14.7kb, accounting=726502876/692.8mb][parent] Data too large, data for [\<agg [375bcdc0-0fcc-44df-bc84-d0291f65f9aa-series-count(request)]\>] would be [726781137/693.1mb], which is larger than the limit of [726571417/692.9mb], usages [request=15488/15.1kb, fielddata=242503/236.8kb, in\_flight\_requests=15150/14.7kb, accounting=726502876/692.8mb].

---

<div class="post-metadata">

### Author: ![makarands](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@makarands](https://community.graylog.org/u/makarands)
#### Post date: [January 13, 2021, 11:15am UTC](https://community.graylog.org/t/error-data-too-large/18455/2 "2021-01-13T11:15:44Z")

</div>

@inet45 You can check your JVM setting for the Graylog and ES, which might be low, or your Journal utilization is too high. Please verify that your Elasticsearch cluster is healthy and fast enough. You may also want to review your Graylog journal settings and set a higher limit.

I hope this helps you!

---

<div class="post-metadata">

### Author: ![inet45](https://avatars.discourse-cdn.com/v4/letter/i/3ab097/32.png) [@inet45](https://community.graylog.org/u/inet45)
#### Post date: [January 14, 2021, 8:33pm UTC](https://community.graylog.org/t/error-data-too-large/18455/3 "2021-01-14T20:33:56Z")

</div>

> [@makarands](#):
>
> Journal

@makarands thanks, can you point on which file to modify and what settings to modify, i am very new to using the graylog and ES

---

<div class="post-metadata">

### Author: ![dickinsonzach](https://avatars.discourse-cdn.com/v4/letter/d/e19b73/32.png) [@dickinsonzach](https://community.graylog.org/u/dickinsonzach)
#### Post date: [January 15, 2021, 12:44pm UTC](https://community.graylog.org/t/error-data-too-large/18455/4 "2021-01-15T12:44:36Z")

</div>

Good morning, hope all is well.

/etc/graylog/server/server.conf is the main config file

And if you go to System/Nodes… Nodes you can see the JVM usage

And here’s a video on Java Heap size

> **[Java Heap sizes in Graylog and ElasticSearch | Graylog](https://www.graylog.org/videos/java-heap)**

Hope it helps. Thank you, Zach.

---

<div class="post-metadata">

### Author: ![inet45](https://avatars.discourse-cdn.com/v4/letter/i/3ab097/32.png) [@inet45](https://community.graylog.org/u/inet45)
#### Post date: [January 18, 2021, 7:14pm UTC](https://community.graylog.org/t/error-data-too-large/18455/5 "2021-01-18T19:14:27Z")

</div>

awesome, very helpful this resolved the issue  
Thank You

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)
#### Post date: [February 1, 2021, 7:14pm UTC](https://community.graylog.org/t/error-data-too-large/18455/6 "2021-02-01T19:14:29Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
