# Share \[1000/1000\] elasticsearch one node

**URL:** <https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring\
**Created:** [June 15, 2020, 10:40pm UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192 "2020-06-15T22:40:00Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 15, 2020, 10:40pm UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/1 "2020-06-15T22:40:00Z")

</div>

hi,

I am running elasticsearch with one node and currently sahre on the elasticserach **1000/1000** is this what causes elasticserach not to be able to create indexes?

is there an idea for the problem that I experienced

thanks,  
hambali

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2020, 11:41pm UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/2 "2020-06-15T23:41:22Z")

</div>

Do you mean shard, not share?

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 16, 2020, 12:10am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/3 "2020-06-16T00:10:38Z")

</div>

sorry i mean **shard** elasticserach

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 12:26am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/4 "2020-06-16T00:26:48Z")

</div>

How many indices and shards do you have? What version are you on?

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 16, 2020, 1:02am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/5 "2020-06-16T01:02:08Z")

</div>

1000 indices and i use elasticserach version 7.5.2.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 1:03am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/6 "2020-06-16T01:03:37Z")

</div>

Why do you need so many indices? How large are they?

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 16, 2020, 1:20am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/7 "2020-06-16T01:20:24Z")

</div>

Easier for me to do backup day, beat {winlogbeat, filebeat, auditbeat} around 200 mb and i make index network evry day, is it efficient to separate indexes every day?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 1:26am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/8 "2020-06-16T01:26:45Z")

</div>

You may want to move to monthly indices, as that is super small and you're wasting resources having so many small shards. You can also look at using [ILM](https://www.elastic.co/guide/en/elasticsearch/reference/current/ilm-start.html) to manage this for you.

In the meantime, consider using a reindex job to "merge" these into monthly indices. That'll make a huge difference.

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 16, 2020, 1:31am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/9 "2020-06-16T01:31:24Z")

</div>

For now what should i do, do i have to reindex all existing indices?

Please adavace

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 1:38am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/10 "2020-06-16T01:38:36Z")

</div>

You can change the shard limit - [https://www.elastic.co/guide/en/elasticsearch/reference/current/allocation-total-shards.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/allocation-total-shards.html) - to get around this temporarily.

But it'd be strongly recommended to reduce your shard count by using ILM.

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [June 16, 2020, 1:46am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/11 "2020-06-16T01:46:48Z")

</div>

Thanks solution i will configure indices once every month, and then i will configure ILM.

---

<div class="post-metadata">

**Author:** ![jact](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jact/32/70428_2.png) [@jact](https://discuss.elastic.co/u/jact)\
**Post date:** [June 16, 2020, 4:04am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/12 "2020-06-16T04:04:15Z")

</div>

Hi Warkolm,

i need to know,

1. i've daily indices too, i think its make me save, is right ? . which want better montly backup or daily backup ? if we concern to secure data from the server crash sometime. cause we don't know what happen tommorow.

2. whats different betwen small shards and big shards ? from size and way to manage what is better? and what conditions we must use the small and big shards?

T4

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 4:26am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/13 "2020-06-16T04:26:08Z")

</div>

Welcome to our community! 😃

Please create your own thread for this question.

---

<div class="post-metadata">

**Author:** ![jact](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jact/32/70428_2.png) [@jact](https://discuss.elastic.co/u/jact)\
**Post date:** [June 16, 2020, 4:34am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/14 "2020-06-16T04:34:25Z")

</div>

ups, sorry.

Thanks dude

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 14, 2020, 4:34am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192/15 "2020-07-14T04:34:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
