# ElasticSearch has stopped working

**URL:** <https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888>\
**Category:** Elasticsearch\
**Created:** [January 10, 2018, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888 "2018-01-10T13:57:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![wmcgilvery](https://avatars.discourse-cdn.com/v4/letter/w/eb8c5e/32.png) [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\
**Post date:** [January 10, 2018, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888/1 "2018-01-10T13:57:31Z")

</div>

Hello:

I have a setup with Logstash, ElasticSearch and Kibana and ElasticSeach is not working properly.

I found that before Christmas I had stopped receiving information in Kibana and because of an error in logstash, I increased the congestion threshold which solved the logstash issues.

However when I run curl -X GET [http://localhost:9200/\_cat/indices?v](http://localhost:9200/_cat/indices?v) I get.

yellow open winlogbeat-2017.12.10 5 1 2347489 0 2gb 2gb  
red open winlogbeat-2017.12.21 5 1  
red open winlogbeat-2017.12.31 5 1  
yellow open winlogbeat-2017.12.12 5 1 114 0 425.9kb 425.9kb  
red open winlogbeat-2017.12.11 5 1  
yellow open winlogbeat-2017.12.14 5 1 75 0 241.6kb 241.6kb  
yellow open winlogbeat-2017.12.13 5 1 50 0 193.2kb 193.2kb  
yellow open winlogbeat-2017.12.05 5 1 11512589 0 10.1gb 10.1gb  
yellow open winlogbeat-2017.12.04 5 1 11511454 0 10gb 10gb  
yellow open winlogbeat-2017.12.15 5 1 10 0 65.4kb 65.4kb  
yellow open winlogbeat-2017.12.07 5 1 11540471 0 10gb 10gb  
yellow open winlogbeat-2017.12.06 5 1 11512191 0 10.1gb 10.1gb  
yellow open winlogbeat-2017.12.09 5 1 7889794 0 6.9gb 6.9gb  
yellow open winlogbeat-2017.12.08 5 1 11269139 0 9.8gb 9.8gb  
yellow open winlogbeat-2018.01.05 5 1 348 0 987.8kb 987.8kb  
yellow open .kibana 1 1 103 1 111.3kb 111.3kb  
yellow open winlogbeat-2018.01.01 5 1 251 0 979.4kb 979.4kb  
yellow open winlogbeat-2018.01.02 5 1 1050 0 1.4mb 1.4mb  
red open winlogbeat-2017.12.30 5 1  
yellow open winlogbeat-2018.01.03 5 1 95 0 236kb 236kb  
yellow open winlogbeat-2018.01.04 5 1 198 0 627.3kb 627.3kb

the indices since Jan/2018 are very small.

How can I trouble shoot this?

Is this a eleasticSearch issue or Logstash? I have checked the logs and do not see any errors?

thanks

Wil

---

<div class="post-metadata">

**Author:** ![Fram\_Souza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fram_souza/32/24833_2.png) [@Fram\_Souza](https://discuss.elastic.co/u/Fram_Souza)\
**Post date:** [January 10, 2018, 4:43pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888/2 "2018-01-10T16:43:22Z")

</div>

How many nodes are there in a cluster ?

Copy here our output log, and output of \_cluster/health?pretty

---

<div class="post-metadata">

**Author:** ![wmcgilvery](https://avatars.discourse-cdn.com/v4/letter/w/eb8c5e/32.png) [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\
**Post date:** [January 10, 2018, 4:57pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888/3 "2018-01-10T16:57:54Z")

</div>

I only have the one server.

I will check the logs

Wil McGilvery  
Network Manager  
Sofina Foods Inc.

---

<div class="post-metadata">

**Author:** ![Fram\_Souza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fram_souza/32/24833_2.png) [@Fram\_Souza](https://discuss.elastic.co/u/Fram_Souza)\
**Post date:** [January 10, 2018, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888/4 "2018-01-10T19:00:57Z")

</div>

And how many shards ? I imagine it to be 5 (default).

For balance a shards, is need have at least 2 nodes for distribution.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 7, 2018, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888/5 "2018-02-07T19:01:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.