# ERROR: All shards failed for phase: \[query\]

**URL:** <https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236>\
**Category:** Elasticsearch\
**Created:** [February 2, 2018, 2:00pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236 "2018-02-02T14:00:44Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 2, 2018, 2:00pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/1 "2018-02-02T14:00:44Z")

</div>

Hello,

I'm using ElasticSearch and Kibana with X-Pack. When I try to start elasticsearch, I get these error messages.  
And I have no logout button on Kibana.  
I've created a kibana\_user and a superuser, I Can log in with all of them but I can't log out or do something.

I'll work with Java Rest Client API High Level, but I can't log in or fix the settings in Kibana. I hope u can help me 🙂  
 ![no%20log%20out](https://us1.discourse-cdn.com/elastic/original/3X/5/f/5fa34246cbec932a6f8bcfa4a1f87525a7b853a1.png)

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 2, 2018, 2:54pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/2 "2018-02-02T14:54:06Z")

</div>

Please don't post images of text as they are hardly readable and not searchable.

Instead paste the text and format it with `</>` icon. Check the preview window.

Could you edit your post please?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 2, 2018, 2:54pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/3 "2018-02-02T14:54:49Z")

</div>

Most likely you trial license expired?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 3, 2018, 11:29am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/4 "2018-02-03T11:29:46Z")

</div>

```
[2018-02-03T12:27:01,232][INFO][o.e.g.GatewayService] [my_first_node] recovered [28] indices into cluster_state
[2018-02-03T12:27:01,232][WARN][o.e.l.LicenseService] [my_first_node]
**# License [will expire] on [Sunday, February 25, 2018]. If you have a new license, please update it.**
 **# Otherwise, please reach out to your support contact.**
 **# Commercial plugins operate with reduced functionality on license expiration:**
 **# - security**
 **# - Cluster health, cluster stats and indices stats operations are blocked**
**# - All data operations (read and write) continue to work**
 **# - watcher**
 **# - PUT / GET watch APIs are disabled, DELETE watch API continues to work**
 **# - Watches execute and write to the history**
 **# - The actions of the watches don't execute**
 **# - monitoring**
 **# - The agent will stop collecting cluster and indices metrics**
**# - The agent will stop automatically cleaning indices older than [xpack.monitoring.history.duration]**
 **# - graph**
 **# - Graph explore APIs are disabled**
 **# - ml**
 **# - Machine learning APIs are disabled**
 **# - logstash**
 **# - Logstash specific APIs are disabled. You can continue to manage and poll stored configurations**
 **# - deprecation**
 **# - Deprecation APIs are disabled**
 **# - upgrade**
 **# - Upgrade API is disabled**
[2018-02-03T12:27:03,094][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,094][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,125][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_kibana_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,125][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_logstash_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,125][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,125][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,125][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_kibana_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,125][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_logstash_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,125][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,125][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_kibana_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,172][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
```

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 3, 2018, 11:32am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/5 "2018-02-03T11:32:09Z")

</div>

```
[2018-02-03T12:27:03,172][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,172][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,172][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_version_mismatch], reason [all shards failed]
[2018-02-03T12:27:03,172][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_kibana_version_mismatch]
[2018-02-03T12:27:03,203][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_logstash_version_mismatch]
[2018-02-03T12:27:03,203][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_version_mismatch]
[2018-02-03T12:27:03,219][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,219][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,219][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_xpack_license_expiration], reason [all shards failed]
[2018-02-03T12:27:03,219][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_cluster_status], reason [all shards failed]
[2018-02-03T12:27:03,219][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,219][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_xpack_license_expiration], reason [all shards failed]
[2018-02-03T12:27:03,219][DEBUG][o.e.a.s.TransportSearchAction] [my_first_node] All shards failed for phase: [query]
[2018-02-03T12:27:03,219][ERROR][o.e.x.w.i.s.ExecutableSearchInput] [my_first_node] failed to execute [search] input for watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_cluster_status], reason [all shards failed]
[2018-02-03T12:27:03,234][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_cluster_status]
[2018-02-03T12:27:03,250][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_xpack_license_expiration]
[2018-02-03T12:27:07,508][INFO][o.e.c.m.MetaDataCreateIndexService] [my_first_node] [.monitoring-es-6-2018.02.03] creating index, cause [auto(bulk api)], templates [.monitoring-es], shards [1]/[1], mappings [doc]
[2018-02-03T12:27:07,709][INFO][o.e.c.r.a.AllocationService] [my_first_node] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.monitoring-es-6-2018.01.22][0]] ...]).
[2018-02-03T12:27:08,621][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_logstash_version_mismatch]
[2018-02-03T12:27:08,621][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_xpack_license_expiration]
[2018-02-03T12:27:08,700][WARN][o.e.x.w.e.ExecutionService] [my_first_node] failed to execute watch [HGlhEm3ATCqBtxGsyMTsXw_elasticsearch_cluster_status]
[2018-02-03T12:28:08,907][INFO][o.e.c.m.MetaDataCreateIndexService] [my_first_node] [.watcher-history-7-2018.02.03] creating index, cause [auto(bulk api)], templates [.watch-history-7], shards [1]/[1], mappings [doc]
[2018-02-03T12:28:08,991][INFO][o.e.c.m.MetaDataMappingService] [my_first_node] [.watcher-history-7-2018.02.03/mpItdX9oRKy8A49wO9UaLQ] update_mapping [doc]
[2018-02-03T12:28:09,080][INFO][o.e.c.m.MetaDataMappingService] [my_first_node] [.watcher-history-7-2018.02.03/mpItdX9oRKy8A49wO9UaLQ] update_mapping [doc]Preformatted text
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 3, 2018, 11:49am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/6 "2018-02-03T11:49:47Z")

</div>

As I said, please format your code using `</>` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable.

Or use markdown style like:

````
```
CODE
```

````

Please edit your posts.

Did you install x-pack on Kibana as well? Did you change the configuration of kibana? Did you restart Kibana?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 3, 2018, 7:13pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/7 "2018-02-03T19:13:42Z")

</div>

Yes, I installed X-Pack on both and I changed also the config on Kibana

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 3, 2018, 8:25pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/8 "2018-02-03T20:25:34Z")

</div>

Could you share what you changed?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 9:08am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/9 "2018-02-05T09:08:15Z")

</div>

```
elasticsearch.username: "kibana"
elasticsearch.password: "XXXXXXXXXXX"

xpack.graph.enabled: false
xpack.ml.enabled: false
xpack.monitoring.enabled: false
xpack.reporting.enabled: false
xpack.security.enabled: false
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 5, 2018, 9:26am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/10 "2018-02-05T09:26:13Z")

</div>

This is in Kibana, right?  
I guess you changed that in elasticsearch as well?  
You need also to disable alerting I think.

Or remove xpack entirely if you are not going to use it.

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 10:09am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/11 "2018-02-05T10:09:55Z")

</div>

Yes, this is in Kibana. I already changed the configurations also in elasticsearch. I need x-pack... which alerting?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 5, 2018, 10:22am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/12 "2018-02-05T10:22:47Z")

</div>

What do you need xpack for if you are disabling all services ?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 10:25am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/13 "2018-02-05T10:25:42Z")

</div>

Should i change false to right?  
Or uninstall xpack?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 5, 2018, 10:42am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/14 "2018-02-05T10:42:48Z")

</div>

I have no idea of what you want to do. I can't answer. Could you clarify ?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 10:56am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/15 "2018-02-05T10:56:32Z")

</div>

I want to use elasticsearch and kibana with x-pack. I ran the "Cluster Health" (Java API) without x-pack, it worked. Now I want to do the "Cluster Health" with x-pack. I have installed x-pack, I have changed all configurations in Kibana.yml, elasticsearch.yml, pom.xml, Maven, as well as in the documentation.

I only get error messages. In addition, the bar "Loggout" in Kibana is missing, I can not change or view settings.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 5, 2018, 11:36am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/16 "2018-02-05T11:36:10Z")

</div>

To install x-pack.

On elasticsearch, run:

```auto
bin/elasticsearch-plugin install x-pack

```

On Kibana, run:

```auto
bin/kibana-plugin install x-pack

```

Restart elasticsearch. Restart Kibana. And Wait.

Then open your browser (and refresh). That should be all what you need by default.

> I have installed x-pack, I have changed all configurations in Kibana.yml, elasticsearch.yml,

You don't need to touch settings.

> pom.xml, Maven, as well as in the documentation.

This is another story. First, make your Elasticsearch+Kibana works before moving forward.

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 11:38am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/17 "2018-02-05T11:38:02Z")

</div>

I have already installed it, generated passwords, created kibana user, bootstrap password etc. 🙂

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [February 5, 2018, 11:53am UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/18 "2018-02-05T11:53:01Z")

</div>

So why are you modifying settings you don't need to touch?

---

<div class="post-metadata">

**Author:** ![gunesg](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@gunesg](https://discuss.elastic.co/u/gunesg)\
**Post date:** [February 5, 2018, 12:11pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/19 "2018-02-05T12:11:04Z")

</div>

> [@dadoonet](#):
>
> So why are you modifying settings you don't need to touch?

sry, i thought i have to change it...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2018, 12:11pm UTC](https://discuss.elastic.co/t/error-all-shards-failed-for-phase-query/118236/20 "2018-03-05T12:11:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
