# Nearly All Indices UNASSIGNED and All Are Red **URL:** \ **Category:** Elasticsearch\ **Created:** [January 13, 2016, 3:57pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137 "2016-01-13T15:57:16Z")\ **Posts on this page:** 13\ **Page:** 2
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 20, 2016, 9:54pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/21 "2016-01-20T21:54:53Z")
Nope... there isn't. I stated in my post on Jan 19 that all logstash files were green and opening. I resolved the "unassigned" and "red" status a while back. The issue, now, is no new logstash files (folders) are getting created. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 20, 2016, 10:31pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/22 "2016-01-20T22:31:43Z")
Oh, right. Can you create one manually -`curl -XPUT HOST:9200/testindex`. ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 20, 2016, 11:44pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/23 "2016-01-20T23:44:31Z")
yes, I can... I accidentally created one before, and then deleted it... but, yes, I can create a new index, and it creates a new folder. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 21, 2016, 1:12am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/24 "2016-01-21T01:12:15Z")
So then it's probably an LS problem, try restarting it. ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 21, 2016, 2:18am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/25 "2016-01-21T02:18:50Z")
I apologize, I am still too new to know all the lingo. LS? If that means local service, I have restarted all of them immediately after I freed up the disk space below the high watermark, and then again, the following day. No joy. If LS doesn't mean local services, then you'll have to translate for me. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 21, 2016, 2:20am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/26 "2016-01-21T02:20:52Z")
Logstash. Make sure things are flowing through there. ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 21, 2016, 3:09am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/27 "2016-01-21T03:09:36Z")
I have restarted the logstash service several times over the days... sometimes by itself (with Kibana restarted at the same time, as it is dependent on LS), and sometimes as part of a restart of the elasticsearch service (and dependents). It has never helped. I restarted it just now, and still, no joy. I am also having a hard time finding any logs related to logstash (this is a windows server; I can't see any log files in the logstash-2.0.0 folder and its subfolders). ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 21, 2016, 4:27am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/28 "2016-01-21T04:27:20Z")
In addition, tonight is "patch night" and the server has been patched and rebooted, so all services have been restarted. Still no joy on new logstash indices or folders. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 21, 2016, 4:56am UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/29 "2016-01-21T04:56:05Z")
It's probably worth making a new thread in the LS area with configs so we can dig further. ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 25, 2016, 10:32pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/30 "2016-01-25T22:32:36Z")
Mark, I tried getting help over in logstash forum, and made some progress. I decided to run back to this forum when it appears the problem might still be in my elasticsearch configuration. Short (hopefully) recap: At one point, the logstash was doing it's thing, and elasticsearch was doing it's thing. I don't believe I had "control" of elasticsearch (via curl commands or the Sense plugin) as I had never tried that before. The disks filled up. I started looking into how to get things functioning again, and just "using" the environment. At some point, I changed the elasticsearch.yml config file to include: network.host: aa.bb.cc.dd where aa.bb.cc.dd is the public IP of this Windows-based ELK server. I was now able to control the elasticsearch environment, but both logstash and kibana stopped working. It turns out by putting that entry in, it only listens on that IP, and no longer listens on localhost (as far as I can determine). I found the following page. > I was unable to get what was suggested on that page to work. In the end, I have removed the network.host entry, completely, so the system is now working, but I am unable to control (query, delete, etc) via curl commands on a separate linux server or the Sense plugin (and I have yet to figure out how to control things locally on the Windows ELK server). Can you either suggest articles etc on how to control the elasticsearch environment on the Windows 2012 R2 ELK server (without loading Chrome and Sense on it), or configure the elasticsearch environment to listen on both localhost and public IPs? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 25, 2016, 10:44pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/31 "2016-01-25T22:44:40Z")
Take a gander at [Connectivity issues with a new/upgraded 2.X cluster? Read here first :)](https://discuss.elastic.co/t/connectivity-issues-with-a-new-upgraded-2-x-cluster-read-here-first/35699/7) ---
**Author:** ![ToddL](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Post date:** [January 25, 2016, 11:37pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/32 "2016-01-25T23:37:33Z")
Perused, and digested. No help, darn it! By reading over that, the linked Network Changes, and the linked Network Settings pages, I did determine I had a typo in my settings; I had bind.host instead of bind\_host. Regardless, after correcting that, trying with and without quotes, with and without a space between the two IP addresses, I still have no joy. Logstash is still functioning, but I am unable to connect to and control elasticsearch from another linux server or from Chrome and the Sense plugin, both of those are systems off of the local host box. Still stuck. Here are my current settings. network.bind\_host : [10.1.2.3,127.0.0.1] network.publish\_host: 10.1.2.3 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:21pm UTC](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137/33 "2017-07-05T23:21:50Z")
[Previous page](https://discuss.elastic.co/t/nearly-all-indices-unassigned-and-all-are-red/39137.md?page=1)