# Not sure how to handle this warning

**URL:** <https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [March 4, 2020, 12:37am UTC](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961 "2020-03-04T00:37:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pk.241011](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pk.241011/32/86285_2.png) [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Post date:** [March 4, 2020, 12:37am UTC](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961/1 "2020-03-04T00:37:52Z")

</div>

Hi All,

I briefly restarted my cluster and after restart I saw this warning on the Anomaly Explorer Machine learning job.

![ErrorScreen](https://us1.discourse-cdn.com/elastic/original/3X/9/9/99885f31b5653369b265c6675a5bf25961967fb1.jpeg)

This was the sequence of events:

1. First I stopped the datafeed of the machine learning job.
2. Then I stopped stopped logstash from sending the data into the cluster.
3. To be on safe side, I halted the machine learning jobs via  
`POST _ml/set_upgrade_mode?enabled=true`
4. Restarted the cluster and then started the logstash.
5. Returned the machine learning jobs to active state  
`POST _ml/set_upgrade_mode?enabled=false`
6. Started the datafeed for the job.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 1, 2020, 12:37am UTC](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961/2 "2020-04-01T00:37:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [April 10, 2020, 2:22pm UTC](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961/3 "2020-04-10T14:22:40Z")

</div>

Sorry, this message seemed to fall through the cracks here on the discussion board. Did things clear up for you?