# ELK data/shard allocation is not happening properly
**URL:** https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784
**Category:** Elasticsearch
**Created:** [August 18, 2021, 8:00am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784 "2021-08-18T08:00:21Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@karthik\_kiccha](https://discuss.elastic.co/u/karthik_kiccha)
#### Post date: [August 18, 2021, 8:00am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/1 "2021-08-18T08:00:21Z")
Hello Team,
We have 6 node ELK cluster and all of them are configured to act as master and data node. Out of 6 nodes two nodes are consuming more disk space which is at 93%, other nodes are at 70% to 80%. We have tried configuring cluster.shard.route.rebalancing but no luck. So basically disk/shard allocation is not happening properly. We are using ELK 7.8.1 version.
Let me know if anyone has any suggestions.
Regards,
Karthik
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 18, 2021, 10:04pm UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/2 "2021-08-18T22:04:23Z")
Can you share the output from `_cat/allocation?v`?
---
### Author:  [@karthik\_kiccha](https://discuss.elastic.co/u/karthik_kiccha)
#### Post date: [August 19, 2021, 10:02am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/3 "2021-08-19T10:02:29Z")
Here you go,
shards disk.indices disk.used disk.avail disk.total disk.percent host ip node
508 8.6tb 8.6tb 1.7tb 10.3tb 83 ap0es1-4.m0.sysint.local 172.21.6.59 ap0es1-4.m0.sysint.local
508 5.4tb 5.4tb 4.8tb 10.3tb 52 ap0es1-5.m0.sysint.local 172.21.6.65 ap0es1-5.m0.sysint.local
509 5.9tb 5.9tb 4.4tb 10.3tb 57 ap0es1-0.m0.sysint.local 172.21.6.48 ap0es1-0.m0.sysint.local
509 8.1tb 8.1tb 2.2tb 10.3tb 78 ap0es1-2.m0.sysint.local 172.21.6.50 ap0es1-2.m0.sysint.local
469 9.5tb 9.5tb 826.8gb 10.3tb 92 ap0es1-1.m0.sysint.local 172.21.6.56 ap0es1-1.m0.sysint.local
509 8.1tb 8.1tb 2.2tb 10.3tb 78 ap0es1-3.m0.sysint.local 172.21.6.58 ap0es1-3.m0.sysint.local
---
### Author:  [@karthik\_kiccha](https://discuss.elastic.co/u/karthik_kiccha)
#### Post date: [August 19, 2021, 10:08am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/4 "2021-08-19T10:08:05Z")
some closed index are there in ap0es1-1/1-4 nodes, I just want to move them to the other nodes, but not getting proper command to do it.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 19, 2021, 10:11pm UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/5 "2021-08-19T22:11:55Z")
You cannot just move closed indices, you need to reopen them, move and then close again.
What is the output from the `_cluster/stats?pretty&human` API as well please?
---
### Author:  [@karthik\_kiccha](https://discuss.elastic.co/u/karthik_kiccha)
#### Post date: [August 23, 2021, 9:52am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/6 "2021-08-23T09:52:07Z")
ok I can't just move the closed index I got that, but how to rebalance the shards/index, looks like most of the newly created index are going to ap0es1-1 and ap0es1-4, it is not just loadbalancing properly between the clusters.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 23, 2021, 9:54am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/7 "2021-08-23T09:54:18Z")
Elasticsearch balances by the shard count. It will move shards off nodes that cross the watermarks.
So what you are seeing is probably not unexpected and shouldn't be an issue.
---
### Author:  [@karthik\_kiccha](https://discuss.elastic.co/u/karthik_kiccha)
#### Post date: [August 23, 2021, 10:07am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/8 "2021-08-23T10:07:46Z")
can you give me the command to move the index from one node to other node within the cluster?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 23, 2021, 10:09am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/9 "2021-08-23T10:09:38Z")
You can try [Cluster reroute API | Elasticsearch Guide [7.14] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-reroute.html)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2021, 10:10am UTC](https://discuss.elastic.co/t/elk-data-shard-allocation-is-not-happening-properly/281784/10 "2021-09-20T10:10:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.