History:  I have been testing ELK stack for a few months now off and on. 
 For months now I have had it logging correctly with no major issues.  I 
picked this back up this week and everything was logging perfectly with 1 
exception:  I am logging to the main partition and not the /data partition 
we setup.  After logging a very large log file we began to get alerts that 
our disk was getting full.   Today I was making a change to the 
elasticsearch.yml to have logs be stored on the /data partition and now no 
dashboards are visible in Kibana.  Instead I get the following "! 
SearchPhaseExecutionException[Failed 
to execute phase [query], all shards failed]"

I have reverted to how it was setup previously and logging to the main 
partition which is not full:
Filesystem      Size  Used Avail Use% Mounted on
/dev/vda1        24G   16G  6.4G  72% /

Looking at other posts This seems to be the starting point but I am at a 
loss on where to turn now:
[elasticsearch]# curl -XGET 
'http://localhost:9200/_cluster/health?pretty=true'
{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 2,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 575,
  "active_shards" : 575,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 585
}

I can not seem to grasp the concept of the shards, why they are now 
unassigned, or why our elasticsearch no longer works correctly.

Any help is greatly appreciated.

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/31caefbe-1cc2-4d9c-a309-f03036e1dda6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to