自己用docker随便搭了一个elk，任何设置都是默认的，开始用的挺好的，后面突然出现问题不能使用了，然后查日志报错
org.elasticsearch.transport.RemoteTransportException: [node-01][192.168.10.248:9300][cluster:monitor/nodes/info[n]]
Caused by: org.elasticsearch.common.breaker.CircuitBreakingException: [parent] Data too large, data for [<transport_request>] would be [2543027816/2.3gb], which is larger than the limit of [2521196134/2.3gb], real usage: [2543026456/2.3gb], new bytes reserved: [1360/1.3kb]
增加es jvm内存，解决了；
vim /etc/elasticsearch/jvm.options
-Xms1g
-Xmx1g
从1g改成8g，然后重启 完美解决。
