# Cluster not indexing during specific time

**URL:** <https://discuss.elastic.co/t/cluster-not-indexing-during-specific-time/170262>\
**Category:** Elasticsearch\
**Created:** [February 28, 2019, 12:25am UTC](https://discuss.elastic.co/t/cluster-not-indexing-during-specific-time/170262 "2019-02-28T00:25:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Karthik\_Ramachandran](https://avatars.discourse-cdn.com/v4/letter/k/f19dbf/32.png) [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Post date:** [February 28, 2019, 12:25am UTC](https://discuss.elastic.co/t/cluster-not-indexing-during-specific-time/170262/1 "2019-02-28T00:25:47Z")

</div>

All,

We are facing a specific behavior in elastic where no indexing is happening during specific timeframe daily  
\<From our Dev, the issue is same in all our enviornments\>

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/1/b1560fba9725d1b446a87e6d605b577eb0eae6ce.png)

This is co-relating with a Virus Scan schedule that is is set in all the nodes. But how does virus scan stop indexing as a whole is very confusing.

Any insights would be very helpful to troubleshoot. We already have plans to distribute the virusscan schedule across nodes, but it would not eliminate the case completely if a primary falls in one of the node where Virus scan is running. Moreover, is it virusscan the issue?

Regards  
Karthik R

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [February 28, 2019, 9:34am UTC](https://discuss.elastic.co/t/cluster-not-indexing-during-specific-time/170262/2 "2019-02-28T09:34:00Z")

</div>

> [@Karthik\_Ramachandran](#):
>
> Moreover, is it virusscan the issue?

There's an easy way to find out: switch off the virus scanner and see if the problem persists.

Virus-scanning the Elasticsearch data directories is a very bad idea. A virus scan typically reads every single file from start to finish, which will blow out the page cache, and typically deletes files it considers to be "suspicious" which will bring your Elasticsearch node to a graceless halt. It's also pointless: there is nothing executable in those directories, and most of the data there is compressed or otherwise mutilated so you're basically guaranteed only ever to find false positives that cause you problems. Don't do this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 28, 2019, 9:34am UTC](https://discuss.elastic.co/t/cluster-not-indexing-during-specific-time/170262/3 "2019-03-28T09:34:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.