Imported opster information

Author: thekofimensah

docs/reference/troubleshooting/common-issues/high-cpu-usage.asciidoc

@@ -9,8 +9,6 @@ If a thread pool is depleted, {es} will <<rejected-requests,reject requests>>
 related to the thread pool. For example, if the `search` thread pool is
 depleted, {es} will reject search requests until more threads are available.
 
-You might experience high CPU usage if a <<data-tiers,data tier>>, and therefore the nodes assigned to that tier, is experiencing more traffic than other tiers. This imbalance in resource utilization is also known as <<hotspotting,hot spotting>>.
-
 ****
 If you're using Elastic Cloud Hosted, then you can use AutoOps to monitor your cluster. AutoOps significantly simplifies cluster management with performance recommendations, resource utilization visibility, real-time issue detection and resolution paths. For more information, refer to https://www.elastic.co/guide/en/cloud/current/ec-autoops.html[Monitor with AutoOps].
 ****
@@ -60,21 +58,51 @@ backlog of tasks>>.
 The following tips outline the most common causes of high CPU usage and their
 solutions.
 
-**Scale your cluster**
+**Check JVM garbage collection**
+
+High CPU usage is often caused by excessive JVM garbage collection (GC) activity. This excessive GC typically arises from configuration problems or inefficient queries causing increased heap memory usage.
+
+For optimal JVM performance, garbage collection should meet these criteria:
+
+* Young GC completes quickly (ideally within 50 ms).
+* Young GC does not occur too frequently (approximately once every 10 seconds).
+* Old GC completes quickly (ideally within 1 second).
+* Old GC does not occur too frequently (once every 10 minutes or less frequently).
+
+Excessive JVM garbage collection usually indicates high heap memory usage. Common reasons for increased heap memory usage include:
+
+* Oversharding of indices
+* Very large aggregation queries
+* Excessively large bulk indexing requests
+* Inefficient or incorrect mapping definitions
+* Improper heap size configuration
+* Misconfiguration of JVM new generation ratio (-XX:NewRatio)
+
+**Hotspotting**
+
+You might experience high CPU usage on specific data nodes or an entire <<data-tiers,data tier>> if traffic isn’t evenly distributed—a scenario known as <<hotspotting,hot spotting>>. This can happen when applications aren’t properly balancing requests across nodes or when “hot” write indices concentrate indexing activity on just one or a few shards.
+
+For details on diagnosing and resolving hotspotting, see <<hotspotting,hot spotting>>.
+
+**Oversharding**
+
+If your Elasticsearch cluster contains a large number of shards, you might be facing an oversharding issue.
 
-Heavy indexing and search loads can deplete smaller thread pools. To better
-handle heavy workloads, add more nodes to your cluster or upgrade your existing
-nodes to increase capacity.
+Oversharding occurs when there are too many shards, causing each shard to be smaller than optimal. While Elasticsearch doesn’t have a strict minimum shard size, an excessive number of small shards can negatively impact performance. Each shard consumes cluster resources since Elasticsearch must maintain metadata and manage shard states across all nodes.
 
-**Spread out bulk requests**
+If you have too many small shards, you can address this by:
+* Removing empty or unused indices.
+* Deleting or closing indices containing outdated or unnecessary data.
+* Reindexing smaller shards into fewer, larger shards to optimize cluster performance.
 
-While more efficient than individual requests, large <<docs-bulk,bulk indexing>>
-or <<search-multi-search,multi-search>> requests still require CPU resources. If
-possible, submit smaller requests and allow more time between them.
+See <<size-your-shards,Size your shards>> for more information.
+**Additional recommendations**
 
-**Cancel long-running searches**
+To further reduce CPU load or mitigate temporary spikes in resource usage, consider these steps:
 
-Long-running searches can block threads in the `search` thread pool. To check
+* Scale your cluster: Heavy indexing and search loads can deplete smaller thread pools.Add nodes or upgrade existing ones to handle increased indexing and search loads more effectively.
+* Spread out bulk requests: Submit smaller <<docs-bulk,bulk indexing>> or multi-search requests and space them out to avoid overwhelming thread pools.
+* Cancel long-running searches: Regularly use the task management API to identify and cancel searches that consume excessive CPU time. To check
 for these searches, use the <<tasks,task management API>>.
 
 [source,console]