---
title: High heap usage
description: Describes what AutoOps detects and surfaces with the High heap usage insight: JVM heap usage on a node is at or near its configured maximum.
url: https://docs-v3-preview.elastic.dev/elastic/autoops-insights/tree/main/elasticsearch/high_heap_usage
products:
  - Elastic Cloud Enterprise
  - Elastic Cloud Hosted
  - Elastic Cloud on Kubernetes
  - Elasticsearch
applies_to:
  - Elastic Cloud Hosted: Generally available
  - Elastic Cloud on Kubernetes: Generally available
  - Elastic Cloud Enterprise: Generally available
  - Self-managed Elastic deployments: Generally available
---

# High heap usage
JVM heap usage on a node is at or near its configured maximum. Near-cap heap slows search and indexing, increases garbage collection, and raises the chance the node becomes unresponsive or leaves the cluster.
<note>
  For a complete list of insights, refer to [AutoOps insights](https://docs-v3-preview.elastic.dev/elastic/autoops-insights/tree/main/elasticsearch).
</note>


## Insight details


| Field     | Value             |
|-----------|-------------------|
| Component | Elasticsearch     |
| Severity  | Medium            |
| Scope     | Node              |
| Domains   | memory, stability |


## Customization settings

You can customize these settings to adjust when AutoOps detects this event and presents the insight. Refer to [AutoOps event settings](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/deploy-manage/monitor/autoops/ec-autoops-event-settings) for details.
The default customization settings are:

| Setting                          | Type       | Default |
|----------------------------------|------------|---------|
| High heap threshold percent      | Percentage | `10`    |
| Successive samples for high heap | Integer    | `3`     |
| Search queue threshold           | Integer    | `5`     |
| Search latency threshold (ms)    | Integer    | `250`   |
| Write queue threshold            | Integer    | `1`     |
| Index latency threshold (ms)     | Integer    | `80`    |

<tip>
  Raising these thresholds reduces noise but delays detection. Lowering them triggers the insight sooner but can increase alerts during minor blips.
</tip>


## Example: What you might see in AutoOps

The following is an example of what you might see when this insight is triggered. Real insights use live data and links from your deployment or cluster.

### Heap usage is high on es-data-01 (30)


#### What was detected

Heap usage is high on `es-data-01` and `es-data-02`. Heap used: 30. Current max heap size: 500 GB GB.
- Indices with high search activity: `logs-prod-000045`
- Indices with high indexing activity: `logs-prod-000045`


#### Recommendations

<note>
  AutoOps shows different recommendations depending on how their conditions match your deployment or cluster.
</note>

<dropdown title="Increase heap on node">
  **Condition**: Shown when RAM available on node and still abiding heap size rules.Current max heap is 30 GB. Set JVM heap to 31 GB (suitable for this machine type), then restart the node.
</dropdown>

<dropdown title="Review query logs">
  **Condition**: Shown when cluster version is 9.4 or above.Review query logs on es-data-01 to find expensive searches that fill the queue. Query logs (Elasticsearch 9.4+) give structured per-query timing with less overhead than search slow logs. See [Query logs](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/deploy-manage/monitor/logging-configuration/query-logs).
</dropdown>

<dropdown title="Enable and review search slow logs">
  **Condition**: Shown when cluster version is below 9.4.Enable search slow logs with the action below, then review the slow log to find expensive queries. See [Slow logs](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/deploy-manage/monitor/logging-configuration/slow-logs) for configuration details.
  ```json

  {
    "index.search.slowlog.threshold.query.warn": "10s",
    "index.search.slowlog.threshold.query.info": "5s",
    "index.search.slowlog.threshold.query.debug": "2s",
    "index.search.slowlog.threshold.query.trace": "500ms",
    "index.search.slowlog.threshold.fetch.warn": "1s",
    "index.search.slowlog.threshold.fetch.info": "800ms",
    "index.search.slowlog.threshold.fetch.debug": "500ms",
    "index.search.slowlog.threshold.fetch.trace": "200ms"
  }
  ```

  <note>
    Requires the `manage` index privilege. Requires Elasticsearch 8.0.0 or later. This action changes cluster or index configuration.
  </note>
</dropdown>

<dropdown title="Balance old and young GC">
  **Condition**: Shown when deployment is Self-managed (CCM).Set `-XX:NewRatio=2` in your JVM options file to tune the ratio between old and young GC, then perform a rolling restart of affected nodes.
</dropdown>

<dropdown title="Upgrade node hardware">
  **Condition**: Shown when configured heap exceeds recommended max on a data node.This node is under memory pressure. Reduce heap size to less than 31 GB.
</dropdown>

<dropdown title="Add coordinating node">
  **Condition**: Shown when no coordinating node and slow searches/queues/rejections exist.Add a coordinating-only node to handle client requests and reduce load on data nodes.
</dropdown>

<dropdown title="Tune circuit breakers">
  **Condition**: Always shown for this insight.Tune circuit breaker limits to prevent out-of-memory errors while allowing legitimate query and aggregation load. Adjust parent, fielddata, and request breaker settings in `elasticsearch.yml` based on your heap size and workload.
</dropdown>


#### Background and impact

Each Elasticsearch node runs on a JVM with a configured heap size. Heap holds indexing buffers, query state, caches, and other in-process structures. When usage stays near the maximum, the collector works harder and pauses grow.
Sustained high heap can slow search and indexing, trip circuit breakers, and in severe cases make the node unresponsive or disconnect from the cluster. Common drivers include expensive queries, heavy aggregations, large field data, and heap sized too small for the workload.

## Guide

[High JVM memory pressure](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/troubleshoot/elasticsearch/high-jvm-memory-pressure)