In the cluster DC/OS have a container with elasticsearch 5.6.13(single), which gets the data from logstash, 300 indexes, 1400 shards. Indices from 5MB to 500MB.
After running for some time working correctly, then in the logs appears
[o.e.c.m.MetaDataMappingService] [-n4ixxd] [name of index created today] update_mapping [name of index created today]
Not sure what further to do with this event,but the number of processes inside the container grows strongly and they're all very actively writing/reading from disk. LA at 80, a couple of hours it still works, then start message from the GC, apparently slowly eaten off the memory and the container falls.
Settings elastic - almost default, increased the heap size to 4Gb (container allocated to the 8).
bootstrap.memory_lock: true
refresh_interval is increased to 5 minutes