wazuh或Elasticsearch启动报错

现象：本章采用docker部署wazuh，在一段时间后出现服务错误，错误代码：

ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(https://wazuh.indexer:9200)): 429 Too Many Requests: {“error”:{“root_cause”:[{“type”:“circuit_breaking_exception”,“reason”:“[parent] Data too large, data for [<http_request>] would be [515105008/491.2mb], which is larger than the limit of [510027366/486.3mb], real usage: [515105008/491.2mb], new bytes reserved: [0/0b], usages [request=0/0b, fielddata=0/0b, in_flight_requests=0/0b]”,“bytes_wanted”:515105008,“bytes_limit”:510027366,“durability”:“TRANSIENT”}],“type”:“circuit_breaking_exception”,“reason”:“[parent] Data too large, data for [<http_request>] would be [515105008/491.2mb], which is larger than the limit of [510027366/486.3mb], real usage: [515105008/491.2mb], new bytes reserved: [0/0b], usages [request=0/0b, fielddata=0/0b, in_flight_requests=0/0b]”,“bytes_wanted”:515105008,“bytes_limit”:510027366,“durability”:“TRANSIENT”},“status”:429}

处理： 上网查询资料初步判断是容器内存配置问题，结合docker-compose 配置文件：
environment:
- “OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m”
尝试修改docker 容器参数，参考 https://www.cnblogs.com/jokeryy/p/15346741.html
① 暂停docker服务 systemctl stop docker
② 进入docker配置文件目录下 cd /var/lib/docker/containers/ ls
③ 进入容器ID （ID为文件夹）
④ 修改config.v2.json文件 vim config.v2.json
找到Xms512m 修改为Xms32g
结果：
重启容器服务，查看容器状态，服务恢复正常