# Is there any configuration that can maintain the green status for .security-7 index always?

**URL:** <https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [July 28, 2020, 6:17am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834 "2020-07-28T06:17:41Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![hiruni.insyncit.net](https://avatars.discourse-cdn.com/v4/letter/h/c68b51/32.png) [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Post date:** [July 28, 2020, 6:17am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/1 "2020-07-28T06:17:41Z")

</div>

Is there any configuration that can maintain the green status for .security-7 index always?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 28, 2020, 6:23am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/2 "2020-07-28T06:23:37Z")

</div>

Welcome to our community! 😃

What state is it changing into to make you ask that question?

---

<div class="post-metadata">

**Author:** ![hiruni.insyncit.net](https://avatars.discourse-cdn.com/v4/letter/h/c68b51/32.png) [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Post date:** [July 28, 2020, 6:56am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/3 "2020-07-28T06:56:01Z")

</div>

Thank you!  
The elastic cluster consists of 5 primary nodes and 1 DR node.  
When the data storage of the cluster exceeds 85%, the .security-7 index also becomes yellow state. Then I was unable to log in to the elastic cluster using basic authentication.  
Therefore I want to know how to keep the green status for .security-7 index.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 28, 2020, 6:58am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/4 "2020-07-28T06:58:18Z")

</div>

A yellow state should not stop you from logging in.

Can you share the response you are getting from Elasticsearch when that happens? Can you also check the logs in the master node for mentions of the `.security` index around that time?

> [@hiruni.insyncit.net](#):
>
> When the data storage of the cluster exceeds 85%

Take a look at [Cluster-level shard allocation and routing settings | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-cluster.html#disk-based-shard-allocation)

---

<div class="post-metadata">

**Author:** ![hiruni.insyncit.net](https://avatars.discourse-cdn.com/v4/letter/h/c68b51/32.png) [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Post date:** [July 28, 2020, 8:49am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/5 "2020-07-28T08:49:31Z")

</div>

Sorry, something missed that unable to login with basic authentication when the DR node was isolated from the cluster and the data storage of the cluster exceeds 85% disk in use.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 28, 2020, 8:56am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/6 "2020-07-28T08:56:34Z")

</div>

If the DR node is isolated from the rest of the cluster it will be in red state as no master is available. This would cause problems for Kibana.

---

<div class="post-metadata">

**Author:** ![hiruni.insyncit.net](https://avatars.discourse-cdn.com/v4/letter/h/c68b51/32.png) [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Post date:** [July 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/7 "2020-07-28T09:14:18Z")

</div>

But, unable to authenticate the elastic user using curl -XGET -u elastic:password '[http://localhost:9200/\_cluster/health?pretty](http://localhost:9200/_cluster/health?pretty)'

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2020, 9:14am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834/8 "2020-08-25T09:14:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
