I've a problem with my ELK stack. Until now, all worked fine, but since 2 days, I've an error and I don't know how I can fix it.
I've a warning message at the top of my Kibana's pages : "Courier Fetch: 5 of 20 shards failed."
My Elasticsearch cluster is OK (Health : green)
I tried to clear the cache of Elasticsearch with this command : "curl -XPOST 'http://localhost:9200/_cache/clear' ". When I do this, everything is OK, but only for a few seconds.
I've a daily report and I saw that every night at 2 a.m, the collect of logs stops and doesn't restart
I don't know if my indexes are too big (~ 10-15 Gb / day) ?
If there's a problem during the index creation, because logstash sends logs permanently ? Shall I stop the logstash pipeline when Elasticsearch creates a new index and start the pipeline when the new index is ready ?