Elasticsearch stop output new log information

[web_it_web_it]

Hello. We install Kibana+Elasticsearch+logstash and monitoring apache logs. One day Kibana stop to output new log`s information and logstash log has an error:

][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"billing.dostek.kg_access-2019.08.02", :_type=>"_doc", :routing=>nil}, #<LogStash::Event:0x12844f0a>], :response=>{"index"=>{"_index"=>"date-2019.08.02", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"validation_exception", "reason"=>"Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [1000]/[1000] maximum shards open;"}}}}

Anybosy knows how to solve that problem?

[spinscale (Alexander Reelsen)]

See https://www.elastic.co/guide/en/elasticsearch/reference/7.3/misc-cluster.html#cluster-shard-limit

you should really try to reduce the number of shards. There are different ways of doing this, using the shrink API, reducing the number of primary shards for new indices or the number of replicas.

--Alex