elasticsearch - Elasticsearch中堆转储的默认位置是什么？

Question

我的ES在3Node集群中运行。最近，我在日志中看到了OutofMemory异常。我的ES已启用XX:+HeapDumpOnOutOfMemoryError，它将在发生OutofMemoryError时创建堆转储。即使我用ps -ef | grep elastic命令检查，我也得到这样的响应

elastic+ 2527 1 11 08:47 ? 00:03:59 /usr/bin/java -Xms1720m -Xmx1720m -Djava.awt.headless=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -XX:+DisableExplicitGC -Dfile.encoding=UTF-8 -Djna.nosys=true -Dmapper.allow_dots_in_name=true -Des.path.home=/usr/share/elasticsearch -cp /usr/share/elasticsearch/lib/elasticsearch-2.4.1.jar:/usr/share/elasticsearch/lib/* org.elasticsearch.bootstrap.Elasticsearch start -d -p /var/run/elasticsearch/elasticsearch.pid --default.path.home=/usr/share/elasticsearch --default.path.logs=/var/log/elasticsearch --default.path.data=/var/lib/elasticsearch --default.path.conf=/etc/elasticsearch

我的错误是这样的

[2017-06-27 06:29:36,325][DEBUG][action.search            ] [data] [content-2017][3], node[GDyfoO1ySQ-FgKGFmuJxJg], [P], v[61], s[STARTED], a[id=PN-9iOlNTICPLABsgyd3Qw]: Failed to execute [org.elasticsearch.action.search.SearchRequest@3fbfc52e] lastShard [true]
RemoteTransportException[[data][10.0.x.x:9300][indices:data/read/search[phase/query]]]; nested: QueryPhaseExecutionException[Query Failed [Failed to execute main query]]; nested: OutOfMemoryError[Java heap space];
Caused by: QueryPhaseExecutionException[Query Failed [Failed to execute main query]]; nested: OutOfMemoryError[Java heap space];
        at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:409)
        at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:113)
        at org.elasticsearch.search.SearchService.loadOrExecuteQueryPhase(SearchService.java:372)
        at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:385)
        at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:368)
        at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:365)
        at org.elasticsearch.transport.TransportRequestHandler.messageReceived(TransportRequestHandler.java:33)
        at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:77)
        at org.elasticsearch.transport.TransportService$4.doRun(TransportService.java:376)
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.OutOfMemoryError: Java heap space

我通过给 find . -type f -name \*.hprof这个命令检查了服务器中的所有.hprof文件，但没有找到任何文件

是否想知道是否将为上面的异常生成堆转储(如果它在哪里)？

谢谢

Answer 1

你的命令不是错字吗find . -type f -name \*.hprof代替find . -type f -name \*.hrpf
检查pwdx <processid>-> U将获取进程开始的路径。也有可能在该路径中创建它。

搜索所有路径，例如“/ etc / elasticsearch”，“/ var / log / elasticsearch”，/ usr / share / elasticsearch ..等等(命令输出的路径)
-XX:HeapDumpPath=<Path>应该包括在内