github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-23 17:28:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

[DOCv2] Temporarily disable Kibana Rules (#126869)

Browse source 
👋🏼 @gchaps asked me to file a new PR since my last
https://github.com/elastic/kibana/pull/122573 got too far behind.

## Summary

🙏🏼 per #116017, adds insight on how to temporarily disable Kibana Rules
for clusters which need breathing room.

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Lisa Cawley <lcawley@elastic.co>
This commit is contained in:
Stef Nestor 2023-07-13 08:22:55 -05:00 • committed by GitHub
parent b534349e8d
commit b1d619617a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
docs/user/alerting/alerting-troubleshooting.asciidoc
View file

@ -189,12 +189,30 @@ In addition to the above methods, refer to the following approaches and common i
* <<event-log-index,Querying event log index>>
* <<testing-connectors,Testing connectors using {connectors-ui} UI and the `kbn-action` tool>>
[discrete]
[[alerting-kibana-throttle]]
==== Temporarily throttle all tasks
If cluster performance becomes degraded from excessive or expensive rules and {kib} is sluggish or unresponsive, you can temporarily reduce load to the Task Manager by updating its <<task-manager-settings-kb,settings>>:
[source,txt]
--------------------------------------------------
xpack.task_manager.max_workers: 1
xpack.task_manager.poll_interval: 1h
--------------------------------------------------
[WARNING]
====
This approach should be used only temporarily as a last resort to restore function to {kib} when it is unresponsive and attempts to identify and <<controlling-rules,snooze or disable>> slow-running rules have not fixed the situation.
It severely throttles all background tasks, not just those relating to {alert-features}. The task manager will run only one task at a time and will look for more work each hour.
====
[discrete]
[[alerting-limitations]]
=== Limitations
The following limitations and known problems apply to the {version} release of
the {kib} {alert-features}.
the {kib} {alert-features}:
[discrete]
==== Alert visibility
@ -208,3 +226,4 @@ the `consumer` property.
include::troubleshooting/alerting-common-issues.asciidoc[]
include::troubleshooting/event-log-index.asciidoc[]
include::troubleshooting/testing-connectors.asciidoc[]