# ELK Red status **URL:** \ **Category:** Elasticsearch\ **Created:** [January 22, 2020, 9:23am UTC](https://discuss.elastic.co/t/elk-red-status/216015 "2020-01-22T09:23:00Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![antonopo](https://avatars.discourse-cdn.com/v4/letter/a/dfb087/32.png) [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Post date:** [January 22, 2020, 9:23am UTC](https://discuss.elastic.co/t/elk-red-status/216015/1 "2020-01-22T09:23:00Z")
Hi, Every day i am facing an issue on my ELK cluster with red status. Some Indexes everyday are red so i am deleting them and they are recreating and after this the ELK Status is becoming green again. Here is the log of GET /\_cluster/allocation/explain?pretty { "index" : "metricbeat-2019.12.31", "shard" : 0, "primary" : false, "current\_state" : "unassigned", "unassigned\_info" : { "reason" : "PRIMARY\_FAILED", "at" : "2020-01-22T08:28:18.081Z", "details" : "primary failed while replica initializing", "last\_allocation\_status" : "no\_attempt" }, "can\_allocate" : "no", "allocate\_explanation" : "cannot allocate because allocation is not permitted to any of the nodes", "node\_allocation\_decisions" : [ { "node\_id" : "46jaKQPSRC2drwy-bAfhxw", "node\_name" : "xh-gr-elastic-2", "transport\_address" : "10.159.166.9:9300", "node\_attributes" : { "ml.machine\_memory" : "269930561536", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, { "node\_id" : "CBiU9s\_BSai2oBfVeZjwiQ", "node\_name" : "xh-fr-elastic-1", "transport\_address" : "135.238.239.48:9300", "node\_attributes" : { "ml.machine\_memory" : "16654974976", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, { "node\_id" : "EmyFlH3zS3KkvJptV02pMQ", "node\_name" : "xh-gr-elastic-1", "transport\_address" : "10.158.67.175:9300", "node\_attributes" : { "ml.machine\_memory" : "16654729216", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, { "node\_id" : "WNfbhnzgTIi4y3PWM4Yg0A", "node\_name" : "xh-it-elastic-2", "transport\_address" : "151.98.17.61:9300", "node\_attributes" : { "ml.machine\_memory" : "269939691520", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, Do you have any idea what is wrong?? Best Regards, Thanos "node\_id" : "bLV-av6fSAWBTep4FKAqWA", "node\_name" : "xh-gr-elastic-3", "transport\_address" : "10.158.67.107:9300", "node\_attributes" : { "ml.machine\_memory" : "17179332608", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, { "node\_id" : "g9M0MIndTBW62pSrEdktzA", "node\_name" : "xh-it-elastic-1", "transport\_address" : "151.98.17.60:9300", "node\_attributes" : { "ml.machine\_memory" : "34359738368", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] }, { "node\_id" : "obT4-IMdTU6kOAHKVFNxzA", "node\_name" : "xh-fr-elastic-2", "transport\_address" : "135.238.239.132:9300", "node\_attributes" : { "ml.machine\_memory" : "269930713088", "ml.max\_open\_jobs" : "20", "xpack.installed" : "true" }, "node\_decision" : "no", "deciders" : [ { "decider" : "replica\_after\_primary\_active", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" }, { "decider" : "throttling", "decision" : "NO", "explanation" : "primary shard for this replica is not yet active" } ] } ] } ---
**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\ **Post date:** [January 22, 2020, 10:06am UTC](https://discuss.elastic.co/t/elk-red-status/216015/2 "2020-01-22T10:06:00Z")
Here is a blog post about explaining allocation: > **[RED Elasticsearch Cluster? Panic no longer](https://www.elastic.co/blog/red-elasticsearch-cluster-panic-no-longer)** > > Your cluster is RED - you have unassigned shards and your cluster is not fully operational. Introducing a new Elasticsearch API which will save the day. Without further instructions, the allocation explain API tries to explain a random unassigned shard, and it's picking a replica. In your case you want to understand why a specific shard is assigned (i.e. the corresponding primary) so you need to ask it a more specific question: ```auto GET /_cluster/allocation/explain { "index": "metricbeat-2019.12.31", "shard": 0, "primary": true } ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 19, 2020, 10:06am UTC](https://discuss.elastic.co/t/elk-red-status/216015/3 "2020-02-19T10:06:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.