# Poor Performance - Cluster

**URL:** https://discuss.elastic.co/t/poor-performance-cluster/130491
**Category:** Elasticsearch
**Created:** [May 3, 2018, 3:24pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491 "2018-05-03T15:24:51Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)
#### Post date: [May 3, 2018, 3:24pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491/1 "2018-05-03T15:24:52Z")

</div>

Hi,

Most of my system is dragging, especially when running large queries... Does my data seem out of control? I only have 12 winlogbeat clients pushing event logs into the stack..

elasticsearch  
2 nodes  
1,269 indices  
12,674 shards  
5,751,097 docs  
10.59GB

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 3, 2018, 3:28pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491/2 "2018-05-03T15:28:29Z")

</div>

Given the cluster size and data volume you have far too many shards. Have a look at [this blog post](https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster) for some practical guidelines.

---

<div class="post-metadata">

### Author: ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)
#### Post date: [May 3, 2018, 3:43pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491/3 "2018-05-03T15:43:41Z")

</div>

I saw that but it does not say how?

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 3, 2018, 3:46pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491/4 "2018-05-03T15:46:53Z")

</div>

One way is to use the shrink API to shrink each index down to a single primary shard, but that only reduces the shard count by a factor of 5 if we assume default settings have been used. You probably need to reduce the shard count by more than that, and may therefore need to reindex your data and perhaps go from daily indices to monthly ones (possibly with a single primary shard).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 31, 2018, 3:47pm UTC](https://discuss.elastic.co/t/poor-performance-cluster/130491/5 "2018-05-31T15:47:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
