Elasticsearch stop output new log information

Elastic Stack Elasticsearch
1

Hello. We install Kibana+Elasticsearch+logstash and monitoring apache logs. One day Kibana stop to output new log`s information and logstash log has an error:

][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"billing.dostek.kg_access-2019.08.02", :_type=>"_doc", :routing=>nil}, #<LogStash::Event:0x12844f0a>], :response=>{"index"=>{"_index"=>"date-2019.08.02", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"validation_exception", "reason"=>"Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [1000]/[1000] maximum shards open;"}}}}

Anybosy knows how to solve that problem?

2

See https://www.elastic.co/guide/en/elasticsearch/reference/7.3/misc-cluster.html#cluster-shard-limit

you should really try to reduce the number of shards. There are different ways of doing this, using the shrink API, reducing the number of primary shards for new indices or the number of replicas.

--Alex

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.