Skip to content

[Ingest Manager] Fleet: Gracefully handle overloaded Elasticsearch #72610

@roncohen

Description

@roncohen

In fleet routes, we've seen some 503s and 409s happening when Elasticsearch is overloaded. It would be good confirm that this is the cause of the 503s and 409s. If that turns out to be right, we need to work towards replying to clients with 429 in those cases to indicate that fleet overloaded at the moment to allow client to exponentially back off.

There has also been new developments on the Elasticsearch side that we should be tracking to make sure we handle gracefully.

ping @ph @nchaulet

Metadata

Metadata

Assignees

No one assigned

    Labels

    Feature:FleetFleet team's agent central management projectTeam:FleetTeam label for Observability Data Collection Fleet team

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions