Manage Timeout about cdqr

[orlikoski]

The error does appear to be caused by a timeout with the ES server. Tuning the ES server to have enough memory can help with that.
There is a lot to optimizing ES but a good starting point is to increase the jvm.options memory. Here is a script to change that.

mem_size="2"
echo "Setting jvm.options memory size to $mem_size GB"
sudo sed -i "s/-Xms1/-Xms$mem_size/g" /etc/elasticsearch/jvm.options
sudo sed -i "s/-Xmx1/-Xmx$mem_size/g" /etc/elasticsearch/jvm.options
sudo systemctl restart elasticsearch

CDQR uses Plaso's psort to insert into the ES database. I suggest asking for the resume feature request on their page.

I would recommend not starting over from scratch, but rather, use a new index name while it's re-processing after making changes to the ES server to handle the load.