# Elastichsearch is red and indexes corrupted

**URL:** https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472
**Category:** Elasticsearch
**Created:** [December 27, 2024, 9:34am UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472 "2024-12-27T09:34:03Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![bkubra](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@bkubra](https://discuss.elastic.co/u/bkubra)
#### Post date: [December 27, 2024, 9:34am UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/1 "2024-12-27T09:34:03Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/6/d/6d76aaf902257bfa19b7f04797c11596a7d8ea31.png)

how can i fix this problem?

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [December 27, 2024, 9:37am UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/2 "2024-12-27T09:37:20Z")

</div>

Which version of Elasticsearch are you using?

How many indices/shards does this problem affect?

What is the size and specification of your cluster?

What type of storage are you using?

Have you been backing up your data using the [snapshot API](https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshot-restore.html)?

---

<div class="post-metadata">

### Author: ![bkubra](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@bkubra](https://discuss.elastic.co/u/bkubra)
#### Post date: [December 27, 2024, 10:54am UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/3 "2024-12-27T10:54:28Z")

</div>

Elasticsearc version 8.10.4  
115 shards affect from this problem  
We use security onion. When I saw that there was no traffic, I looked at the logs and saw that Elasticsearch was red. 200 GB disk  
hhd harddisk with sn  
there is no snaphot

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [December 27, 2024, 11:14am UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/4 "2024-12-27T11:14:02Z")

</div>

> [@bkubra](#):
>
> hhd harddisk with sn

The excerpt you shared indictes that you have corrupt indices due to hardware failure, so I suspect you will need to rebuild your cluster with new storage. As you have no snapshot I believe you have lost your data as I am not aware of any way to recover from this that does not include restoring from snapshot.

---

<div class="post-metadata">

### Author: ![bkubra](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@bkubra](https://discuss.elastic.co/u/bkubra)
#### Post date: [December 27, 2024, 12:08pm UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/5 "2024-12-27T12:08:52Z")

</div>

thanks

---

<div class="post-metadata">

### Author: ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [December 27, 2024, 4:09pm UTC](https://discuss.elastic.co/t/elastichsearch-is-red-and-indexes-corrupted/372472/6 "2024-12-27T16:09:30Z")

</div>

> [@Christian\_Dahlqvist](#):
>
> I am not aware of any way to recover from this that does not include restoring from snapshot.

That's correct, sorry. See [these docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/corruption-troubleshooting.html) for further information.
