# ES Cluster: relation between password error and disk utilization high **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [October 31, 2018, 3:06pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871 "2018-10-31T15:06:56Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Post date:** [October 31, 2018, 3:06pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/1 "2018-10-31T15:06:57Z")
Hi All , ``` Its a doubt, I am trying to co-relate one issue and a situation. ``` My ES cluster (6.4 , 3 Master 2 Data) and kibana and logstash is working well . X-pack is enabled in ES and kibana ( elastic:changeme connected) . And enabled Security audit logs in all machines. Indexed lots of sample log in Data node. After 5 days ES data node's /var/log/elasticsearch directory ( Partition) disk usage is breached 90% . When I am checked on next day elasticsearch is rejecting password form kibana and logstash filter . used this command also : curl --user elastic:changeme -XGET 'ip:9200/\_cat/indices?v' Password error showing . But I am sure about the password . It is "changeme" Is it because of disk usage issue ? I think security index is crashed. because of disc-usage is very high . ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [October 31, 2018, 3:31pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/2 "2018-10-31T15:31:43Z")
Please take a look at your logs (`elasticsearch.log` in `/var/log/elasticsearch` ) from the node that you attempt to authenticate against. The issue would probably manifest in there as `ERROR` messages. If unsure, share some of these logs here so that we can offer some constructive feedback. ---
**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Post date:** [October 31, 2018, 4:37pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/3 "2018-10-31T16:37:09Z")
I Lost the logs. Re installed now . Authentication failed . Password incorrect is the error message . Header issue ---
**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Post date:** [October 31, 2018, 4:39pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/4 "2018-10-31T16:39:48Z")
Is there any chance to user authentication affecting by high disk usage ? ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [October 31, 2018, 4:52pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/5 "2018-10-31T16:52:37Z")
So, you have new logs now. Can you please take a look and tell us what you see ? It's much more productive than answering hypothetical questions. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 28, 2018, 4:52pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871/6 "2018-11-28T16:52:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.