] would be [986291206/940.6mb], which is larger than the limit of [986061209/940.3mb], real usage: [986193512/940.5mb], new bytes reserved: [97694/95.4kb], usages [request=0/0b, fielddata=560/560b, in_flight_requests=1157196/1.1mb, accounting=177508929/169.2mb]]; ], allocation_status[no_attempt]]]"
}
]
},
```
Please help on how to bring the health back to green and get rid of the unassigned shard.
I see a very high index rate in console:
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 2, 2020, 9:44pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/2 "2020-09-02T21:44:05Z")
You can try an empty reroute request against the index to see if that will work. Otherwise, drop the replica and then readd it.
---
### Author:  [@lzukel](https://discuss.elastic.co/u/lzukel)
#### Post date: [September 2, 2020, 9:50pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/3 "2020-09-02T21:50:19Z")
try:
```auto
POST_cluster/reroute?retry_failed=true
```
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 2, 2020, 10:35pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/4 "2020-09-02T22:35:56Z")
Thanks. Can you please let me know the command to execute an empty reroute request against an index? Also how can I drop a replica and readd it? I am new to ELK.
Please note that i can not afford to remove/ lose any data.
Thanks
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 2, 2020, 10:41pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/5 "2020-09-02T22:41:21Z")
I would run the one that @lzukel suggested above first.
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 2, 2020, 11:16pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/6 "2020-09-02T23:16:10Z")
Thanks. The following command was run:
`POST _cluster/reroute?retry_failed=true`
It is very big output and does not fit the allowed content length of the post. Status stays as "Yellow".
Can you please let me know the command to run reroute against a single index as I know the index name that shows yellow?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 2, 2020, 11:21pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/7 "2020-09-02T23:21:06Z")
What is the output from `_cat/recovery/prod_test_access-2020.09.02?v`?
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 2, 2020, 11:31pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/8 "2020-09-02T23:31:14Z")
Ran the following:
`POST _cat/recovery/prod_test_access-2020.09.02?v`
Getting an unauthorized response. Do I need to mention user: password in the command as security is enabled?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 2, 2020, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/9 "2020-09-02T23:36:05Z")
You need to run a `GET`, if you do it in Kibana Console you should be ok.
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 2, 2020, 11:41pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/10 "2020-09-02T23:41:56Z")
Thanks. Please see output below:
```auto
index shard time type stage source_host source_node target_host target_node repository snapshot files files_recovered files_percent files_total bytes bytes_recovered bytes_percent bytes_total translog_ops translog_ops_recovered translog_ops_percent
prod_test_access-2020.09.02 0 106ms empty_store done n/a n/a hostnameA hostnameA n/a n/a 0 0 0.0% 0 0 0 0.0% 0 0 0 100.0%
```
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 3, 2020, 12:36am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/11 "2020-09-03T00:36:21Z")
OK, it'd be worth dropping the replica and then adding it back.
```
PUT prod_test_access-2020.09.02/_settings
{ "index" : { "number_of_replicas" : 0 } }
```
And then;
```
PUT prod_test_access-2020.09.02/_settings
{ "index" : { "number_of_replicas" : 1 } }
```
And that should do it!
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 1:26am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/12 "2020-09-03T01:26:01Z")
Thanks. I attempted that through the console and both the time the output was:
```auto
{
"acknowledged" : true
}
```
Still it shows Yellow as health and the unassigned shard. I hope I was not supposed to wait longer after dropping the replica? See below:
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 3, 2020, 1:28am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/13 "2020-09-03T01:28:36Z")
Allocation is not instantaneous. What is the output from the `_cat/recovery` endpoint from above?
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 1:31am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/14 "2020-09-03T01:31:53Z")
Please see below:
```auto
index shard time type stage source_host source_node target_host target_node repository snapshot files files_recovered files_percent files_total bytes bytes_recovered bytes_percent bytes_total translog_ops translog_ops_recovered translog_ops_percent
prod_test_access-2020.09.02 0 11.1m peer index hostnameA hostnameA hostnameB hostnameB n/a n/a 229 209 91.3% 229 67745704669 23951038748 35.4% 67745704669 0 0 100.0%
prod_test_access-2020.09.02 0 106ms empty_store done n/a n/a hostnameA hostnameA n/a n/a 0 0 0.0% 0 0 0 0.0% 0 0 0 100.0%
```
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 3, 2020, 1:32am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/15 "2020-09-03T01:32:26Z")
RIghto, so that indicates that the recovery process is progressing.
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 1:55am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/16 "2020-09-03T01:55:19Z")
Thank you so much for the help! Its 100% done and the cluster is green now.
So we dropped the replica and then rebuilt it which took care of the unassigned Shard.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 3, 2020, 1:55am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/17 "2020-09-03T01:55:39Z")
No worries.
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 1:58am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/18 "2020-09-03T01:58:45Z")
Oh it turned Yellow and shows 1 unassigned shard again!
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 2:01am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/19 "2020-09-03T02:01:55Z")
And it went back to Green. I will give it some time.
Thanks for all the help
---
### Author:  [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)
#### Post date: [September 3, 2020, 1:15pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290/20 "2020-09-03T13:15:12Z")
Checked today and the same index for **today's** date shows Yellow status and an unassigned shard.
```auto
{
"cluster_name" : "elkcluster-prod",
"status" : "yellow",
"timed_out" : false,
"number_of_nodes" : 8,
"number_of_data_nodes" : 5,
"active_primary_shards" : 191,
"active_shards" : 381,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 1,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 99.73821989528795
}
```
[Next page](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290.md?page=2)