CentOS上的Elasticsearch 1.7.2

问题：群集从绿色状态变为关闭绿色（不确定黄色或红色，我们只是在状态<>绿色时发出警报），然后自动返回绿色 .

Elasticsearch日志：

[2015-11-20 18:11:50,750][WARN ][cluster.action.shard     ] [node-6a] [index_v6][1] received shard failed for [index_v6][1], node[rNAaZCFtTv6cG1eMP30b9g], [R], s[INITIALIZING], unassigned_info[[reason=ALLOCATION_FAILED], at[2015-11-20T18:11:42.859Z], details[shard failure [engine failure, reason [out of memory (source: [index])]][OutOfMemoryError[Java heap space]]]], indexUUID [4lNodBboRoep64nAfxXbeQ], reason [shard failure [failed to create shard][IndexShardCreationException[[index_v6][1] failed to create shard]; nested: LockObtainFailedException[Can't lock shard [index_v6][1], timed out after 5000ms]; ]]
[2015-11-20 18:14:34,074][WARN ][cluster.action.shard     ] [node-6a] [index_v6][2] received shard failed for [index_v6][2], node[ur-Fm7iCSYSemcHWLTgIVA], [R], s[INITIALIZING], unassigned_info[[reason=ALLOCATION_FAILED], at[2015-11-20T18:03:56.528Z], details[shard failure [engine failure, reason [already closed by tragic event]][OutOfMemoryError[Java heap space]]]], indexUUID [4lNodBboRoep64nAfxXbeQ], reason [shard failure [failed recovery][RecoveryFailedException[[index_v6][2]: Recovery failed from [node-6a][rNAaZCFtTv6cG1eMP30b9g][elastic-search-6a][inet[/10.#########:9300]]{master=true} into [node-6b][ur-Fm7iCSYSemcHWLTgIVA][elastic-search-6b][inet[/10.######:9300]]{master=true}]; nested: RemoteTransportException[[node-6a][inet[/10.#########:9300]][internal:index/shard/recovery/start_recovery]]; nested: RecoveryEngineException[[index_v6][2] Phase[1] Execution failed]; nested: RecoverFilesRecoveryException[[index_v6][2] Failed to transfer [146] files with total size of [9.9gb]]; nested: SendRequestTransportException[[node-6b][inet[/10.######:9300]][internal:index/shard/recovery/file_chunk]]; nested: OutOfMemoryError[Java heap space]; ]]

我们知道我们达到了java堆内存限制 . 我们已经习惯了（不幸的是） .

我们不明白的是：

1）群集恢复为绿色，但我们在日志中看不到任何内容，以帮助我们了解何时或为何 .

2）我们认为这些配置值可能会有所帮助：

indices.fielddata.cache.size:  75%
indices.breaker.fielddata.limit: 70%

但他们似乎没有任何区别 .

（我们仍在努力转向doc值等）

elasticsearch