# Logs are not showing in kibana - maximum shards open error

**URL:** https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156
**Category:** Elasticsearch
**Created:** [February 27, 2020, 7:23am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156 "2020-02-27T07:23:29Z")
**Posts on this page:** 17
**Page:** 1

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [February 27, 2020, 7:23am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/1 "2020-02-27T07:23:30Z")

</div>

Logs stopped suddenly from displaying in kibana. no clue.index pattern also not created.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [February 27, 2020, 7:24am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/2 "2020-02-27T07:24:54Z")

</div>

this is the error logs i am getting from logstash

[2020-02-27T07:24:03,585][WARN][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=\>400, :action=\>["index", {:\_id=\>nil, :\_index=\>"filebeat-6.5.4-2020.02.27", :\_type=\>"\_doc", :routing=\>nil}, #LogStash::Event:0x113e8317], :response=\>{"index"=\>{"\_index"=\>"filebeat-6.5.4-2020.02.27", "\_type"=\>"\_doc", "\_id"=\>nil, "status"=\>400, "error"=\>{"type"=\>"validation\_exception", "reason"=\>"Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [999]/[1000] maximum shards open;"}}}}

---

<div class="post-metadata">

### Author: ![Liza\_Katz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/liza_katz/32/52358_2.png) [@Liza\_Katz](https://discuss.elastic.co/u/Liza_Katz)
#### Post date: [February 27, 2020, 9:50am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/3 "2020-02-27T09:50:35Z")

</div>

Hey @rvb_n,

This seems to be an elastic search related error.  
I'm reassigning it to the correct channel.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [February 27, 2020, 10:24am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/4 "2020-02-27T10:24:35Z")

</div>

Thanks

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 3, 2020, 7:24am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/5 "2020-03-03T07:24:20Z")

</div>

any response

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 3, 2020, 10:07am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/6 "2020-03-03T10:07:48Z")

</div>

What is the output of:

```auto
GET /
GET /_cat/nodes?v
GET /_cat/health?v
GET /_cat/indices?v

```

If some outputs are too big, please share them on [gist.github.com](http://gist.github.com) and link them here.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 4, 2020, 6:04am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/7 "2020-03-04T06:04:54Z")

</div>

i am getting this error

bitnami@ip-172-31-31-216:~$ GET /\_cat/nodes?v  
-bash: GET: command not found

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 4, 2020, 6:18am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/8 "2020-03-04T06:18:10Z")

</div>

That's something to run from the Kibana dev console. Otherwise transform the commands to actual curl requests.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 4, 2020, 6:30am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/9 "2020-03-04T06:30:51Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/c/1/c12d00c7a81971bc6ffb5bc3f14916b3e4409b31.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/2/021ebe00b43b51d83e3b51264fa4ebdc222986d9.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/e/6e183abb58ab78b9c1d0a07f3b1314f67165b4b7.png)

> <https://gist.github.com/Ftwwl/a738245a84a814132d9c542e704c2127>

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 4, 2020, 6:31am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/10 "2020-03-04T06:31:29Z")

</div>

have shared . help on this urgent

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 4, 2020, 6:43am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/11 "2020-03-04T06:43:45Z")

</div>

Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable.

Instead, paste the text and format it with `</>` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer.

It would be great if you could update your post to solve this.

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 4, 2020, 6:44am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/12 "2020-03-04T06:44:03Z")

</div>

Read [this](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and specifically the "Also be patient" part.

It's fine to answer on your own thread after 2 or 3 days (not including weekends) if you don't have an answer.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 4, 2020, 6:49am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/13 "2020-03-04T06:49:28Z")

</div>

> [@dadoonet](#):
>
> GET / GET /\_cat/nodes?v GET /\_cat/health?v GET /\_cat/indices?v

{  
"name" : "ip-172-31-38-116",  
"cluster\_name" : "elasticsearch",  
"cluster\_uuid" : "S-bJlxKyTmSY4eU1CgiQOw",  
"version" : {  
"number" : "7.3.1",  
"build\_flavor" : "oss",  
"build\_type" : "tar",  
"build\_hash" : "4749ba6",  
"build\_date" : "2019-08-19T20:19:25.651794Z",  
"build\_snapshot" : false,  
"lucene\_version" : "8.1.0",  
"minimum\_wire\_compatibility\_version" : "6.8.0",  
"minimum\_index\_compatibility\_version" : "6.0.0-beta1"  
},  
"tagline" : "You Know, for Search"  
}

=============================

# {ip heap.percent ram.percent cpu load\_1m load\_5m load\_15m node.role master name 127.0.1.1 81 97 19 0.28 0.27 0.30 dim \* ip-172-31-38-116 }

{epoch timestamp cluster status node.total node.data shards pri relo init unassign pending\_tasks max\_task\_wait\_time active\_shards\_percent  
1583304549 06:49:09 elasticsearch yellow 1 1 500 500 0 0 499 0 - 50.1%  
}

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [March 4, 2020, 7:48am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/14 "2020-03-04T07:48:27Z")

</div>

As it looks like you only have one node set the number of replicas to 0 for all indices. It looks like the shard count also includes unallocated shards. As replica shards can never be allocated on the same node as the primary you are in effect limited to 500 shards unless you set replicas to 0.

---

<div class="post-metadata">

### Author: ![rvb\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rvb_n/32/53029_2.png) [@rvb\_n](https://discuss.elastic.co/u/rvb_n)
#### Post date: [March 4, 2020, 8:03am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/15 "2020-03-04T08:03:49Z")

</div>

can you please help how to do.

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 4, 2020, 8:28am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/16 "2020-03-04T08:28:53Z")

</div>

Please don't post unformatted code, logs, or configuration as it's very hard to read.

Instead, paste the text and format it with \</\> icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 1, 2020, 8:29am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156/17 "2020-04-01T08:29:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
