# Unable to update users and roles (primary shard is not active Timeout) **URL:** \ **Category:** Elasticsearch\ **Created:** [August 28, 2016, 5:32am UTC](https://discuss.elastic.co/t/unable-to-update-users-and-roles-primary-shard-is-not-active-timeout/59108 "2016-08-28T05:32:48Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![rocky4bmw](https://avatars.discourse-cdn.com/v4/letter/r/6bbea6/32.png) [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Post date:** [August 28, 2016, 5:32am UTC](https://discuss.elastic.co/t/unable-to-update-users-and-roles-primary-shard-is-not-active-timeout/59108/1 "2016-08-28T05:32:48Z")
Hi Team, I am using elasticsearch with searchguard 2.3.4 and testing for 1 node only. Whenever I tried to create and update new user and roles it says clustertimed out. Please find below elasticsearch logs and help me in undesrtanding those errors UnavailableShardsException[[auditlog][2] primary shard is not active Timeout: [1m], request: [index {[auditlog][auditlog][AVbPoPfFVOSyDPZ\_6Rka], source[{"audit\_remote\_address":"127.0.0.1:53626","audit\_request\_headers":"[]","audit\_request\_class":"class org.elasticsearch.action.search.SearchRequest","audit\_principal":null,"audit\_details":"null","audit\_date":"Sun Aug 28 00:30:48 CDT 2016","audit\_reason":"indices:data/read/search","audit\_request\_context":"[\_sg\_ssl\_cipher=\>TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, \_sg\_remote\_address=\>127.0.0.1:53626, \_sg\_user=\>User [name=kibanaserver, roles=[]], \_sg\_ssl\_protocol=\>TLSv1.2]","audit\_category":"AUTHENTICATED","audit\_request\_user":"kibanaserver"}]}]] at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase.retryBecauseUnavailable(TransportReplicationAction.java:596) at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase.doRun(TransportReplicationAction.java:465) at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase$2.onTimeout(TransportReplicationAction.java:558) at org.elasticsearch.cluster.ClusterStateObserver$ObserverClusterStateListener.onTimeout(ClusterStateObserver.java:236) at org.elasticsearch.cluster.service.InternalClusterService$NotifyTimeout.run(InternalClusterService.java:804) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Java heapsize details java -XX:+PrintFlagsFinal -version | grep -iE 'HeapSize|PermSize|ThreadStackSize' intx CompilerThreadStackSize = 0 {pd product} uintx ErgoHeapSizeLimit = 0 {product} uintx HeapSizePerGCThread = 87241520 {product} uintx InitialHeapSize := 130023424 {product} uintx LargePageHeapSizeThreshold = 134217728 {product} uintx MaxHeapSize := 2053111808 {product} intx ThreadStackSize = 1024 {pd product} intx VMThreadStackSize = 1024 {pd product} java version "1.8.0\_73" Java(TM) SE Runtime Environment (build 1.8.0\_73-b02) Java HotSpot(TM) 64-Bit Server VM (build 25.73-b02, mixed mode) ---
**Author:** ![rocky4bmw](https://avatars.discourse-cdn.com/v4/letter/r/6bbea6/32.png) [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Post date:** [September 1, 2016, 12:58am UTC](https://discuss.elastic.co/t/unable-to-update-users-and-roles-primary-shard-is-not-active-timeout/59108/2 "2016-09-01T00:58:04Z")
Hi team I am getting below error in elasticsearch logs can you please help. Also when I try to open Kibana quite often I get heapsize error and Kibana loses connection to Elasticsearch. RAM 8GB and Harddisk is of 1 TB. ################################################################# UnavailableShardsException[[auditlog][2] primary shard is not active Timeout: [1m], request: [index {[auditlog][auditlog][AVbjP7iPnbALBV65h4ln], source[{"audit\_remote\_address":"127.0.0.1:53066","audit\_request\_headers":"[]","audit\_request\_class":"class org.elasticsearch.action.bulk.BulkShardRequest","audit\_principal":null,"audit\_details":"null","audit\_date":"Wed Aug 31 19:56:59 CDT 2016","audit\_reason":"indices:data/write/bulk[s]","audit\_request\_context":"[\_sg\_ssl\_cipher=\>TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, \_sg\_user=\>User [name=logstash, roles=[]], \_sg\_remote\_address=\>127.0.0.1:53066, \_sg\_ssl\_protocol=\>TLSv1.2]","audit\_category":"AUTHENTICATED","audit\_request\_user":"logstash"}]}]] at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase.retryBecauseUnavailable(TransportReplicationAction.java:596) at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase.doRun(TransportReplicationAction.java:465) at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) at org.elasticsearch.action.support.replication.TransportReplicationAction$ReroutePhase$2.onTimeout(TransportReplicationAction.java:558) at org.elasticsearch.cluster.ClusterStateObserver$ObserverClusterStateListener.onTimeout(ClusterStateObserver.java:236) at org.elasticsearch.cluster.service.InternalClusterService$NotifyTimeout.run(InternalClusterService.java:804) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 10:23pm UTC](https://discuss.elastic.co/t/unable-to-update-users-and-roles-primary-shard-is-not-active-timeout/59108/3 "2017-07-05T22:23:26Z")