# Cluster Status Red & Bootstrap Check Failed

**URL:** <https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189>\
**Category:** Elasticsearch\
**Created:** [August 6, 2018, 3:24pm UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189 "2018-08-06T15:24:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Post date:** [August 6, 2018, 3:24pm UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189/1 "2018-08-06T15:24:29Z")

</div>

Hi guys,

i'm using Elasticsearch with a custom application to save data and get analytics.

My Elasticsearch is formed by only a node with so many indexes. This node contains unassigned shards that caused cluster health status red. How can i resolve this issue?

Further, when i run Elasticsearch, i use this command

```
./elasticsearch -E "discovery.type=single.node"

```

because if i try to normally start Elasticsearch, it returns this error:

```
bound or publishing to a non-loopback address, enforcing bootstrap checks
ERROR: [1] bootstrap checks failed
[1]: max number of threads [2048] for user [giuseppe] is too low, increase to at least [4096]

```

I have modified so many Linux system files but no one works fine.  
Can anyone help me?

Thank you a lot in advance!

---

<div class="post-metadata">

**Author:** ![programagor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/programagor/32/40183_2.png) [@programagor](https://discuss.elastic.co/u/programagor)\
**Post date:** [August 6, 2018, 3:49pm UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189/2 "2018-08-06T15:49:46Z")

</div>

Make sure you have the following lines in your `/etc/security/limits.conf`:

```
elasticsearch soft memlock unlimited
elasticsearch hard memlock unlimited
elasticsearch - nofile 65536
elasticsearch - nproc 4096
```

---

<div class="post-metadata">

**Author:** ![Giuseppe\_Merlo](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Post date:** [August 7, 2018, 7:40am UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189/3 "2018-08-07T07:40:40Z")

</div>

Thank you so much! This works fine now.

Any ideas for cluster red status?

**EDIT**

I used Cluster Allocation API to see what is going wrong and this is the response:

```
{
"index": "metrics_timer-2018-07-22",
"shard": 2,
"primary": true,
"current_state": "unassigned",
"unassigned_info": {
"reason": "CLUSTER_RECOVERED",
"at": "2018-08-07T07:37:30.941Z",
"last_allocation_status": "no_valid_shard_copy"
},
"can_allocate": "no_valid_shard_copy",
"allocate_explanation": "cannot allocate because a previous copy of the primary shard existed but can no longer be found on the nodes in the cluster",
"node_allocation_decisions": [
  {
"node_id": "aLwf7SYhRPWog2nbhxzvfQ",
"node_name": "aLwf7SY",
"transport_address": "192.168.1.66:9300",
"node_attributes": {
"ml.machine_memory": "16763133952",
"ml.max_open_jobs": "20",
"ml.enabled": "true"
},
"node_decision": "no",
"store": {
"found": false
}
}
],
}
```

---

<div class="post-metadata">

**Author:** ![programagor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/programagor/32/40183_2.png) [@programagor](https://discuss.elastic.co/u/programagor)\
**Post date:** [August 14, 2018, 8:42am UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189/4 "2018-08-14T08:42:12Z")

</div>

Ouch, that looks bad. If you don't mind losing data, then you can try deleting the index `[metrics_timer-2018-07-22]`. Like this:

```
DELETE /metrics_timer-2018-07-22

```

or

```
curl -X DELETE '192.168.1.66:9200/metrics_timer-2018-07-22'

```

If you want to keep the data, then you'll need to find at least one replica of shard 2 of that index.  
Did you remove a data nodes without having shard replicas?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 11, 2018, 8:42am UTC](https://discuss.elastic.co/t/cluster-status-red-bootstrap-check-failed/143189/5 "2018-09-11T08:42:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.