# Status: Red on ES Cluster
**URL:** https://discuss.elastic.co/t/status-red-on-es-cluster/123707
**Category:** Elasticsearch
**Created:** [March 13, 2018, 9:53am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707 "2018-03-13T09:53:41Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@minidan](https://discuss.elastic.co/u/minidan)
#### Post date: [March 13, 2018, 9:53am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/1 "2018-03-13T09:53:41Z")
Hi,
Maybe simple question but how do I tailor the commands to troubleshoot an linux elasticsearch cluster in RED on the command line?
Nothing I type with localhost:9200 seems to work...
---
### Author:  [@Ben96](https://discuss.elastic.co/u/Ben96)
#### Post date: [March 13, 2018, 10:22am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/2 "2018-03-13T10:22:30Z")
Hi @minidan
if i'm understanding right, you wanna make some `GREP`, `TAIL` `AWK` on the cluster status return ? Like Only GREEN, YELLOW or RED ?
---
### Author:  [@minidan](https://discuss.elastic.co/u/minidan)
#### Post date: [March 13, 2018, 10:27am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/3 "2018-03-13T10:27:04Z")
it's more basic than that I'm afraid... I just get no reponse from curl -XGET 'localhost:9200/\_cat/health?v&pretty' in the terminal
I can't run anything in the Kibana GUI with the status being red.
I'm not sure if it's something different with my network setup, or I'm in the wrong mode, stumped.
---
### Author:  [@Ben96](https://discuss.elastic.co/u/Ben96)
#### Post date: [March 13, 2018, 10:30am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/4 "2018-03-13T10:30:59Z")
To check cluster status health : curl -u user:password (x-pack case) -XGET 'cluster\_ip:port/\_cluster/health?pretty=true'
In case you want grep : curl -s --cacert $CERTS -u $USER:$PASSWORD https://$HOST:$PORT/\_cluster/health?pretty=true|grep status|awk '{print $3}'|cut -d" -f2
For your Issue, please make a copy of your Elasticsearch Logs with quotes. Then i could help you better than now !
---
### Author:  [@minidan](https://discuss.elastic.co/u/minidan)
#### Post date: [March 13, 2018, 10:33am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/5 "2018-03-13T10:33:58Z")
Hi Ben, I'm also not sure how to get those logs... ☹
---
### Author:  [@Ben96](https://discuss.elastic.co/u/Ben96)
#### Post date: [March 13, 2018, 10:34am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/6 "2018-03-13T10:34:57Z")
Those logs, by default are in `/var/log/elasticsearch` i think some like that, check official doc to be sure
---
### Author:  [@minidan](https://discuss.elastic.co/u/minidan)
#### Post date: [March 13, 2018, 11:30am UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/7 "2018-03-13T11:30:20Z")
thanks Ben, there wasn't much in those logs... might have to come back to this when have an idea what is going on
---
### Author:  [@minidan](https://discuss.elastic.co/u/minidan)
#### Post date: [March 16, 2018, 1:42pm UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/8 "2018-03-16T13:42:50Z")
it was just hung. please close this thread, I still have an issue but not for this thread.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2018, 1:43pm UTC](https://discuss.elastic.co/t/status-red-on-es-cluster/123707/9 "2018-04-13T13:43:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.