Unavailable_shards_exception and primary shard is not active

Elastic Stack Elasticsearch
1

Hi All,

My Elasticsearch data is keep getting corrupted and latest data will be not available. For this temporarily we are solving like if you delete the last date data then it allows logstash to send the data into elasticsearch and this not permanent solution. Please someone help me to solve the problem.

Bellow is the error:
2019-03-26T01:55:46,924][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 503 ({"type"=>"unavailable_shards_exception", "reason"=>"[ppe-prod-primary-tomcat-2019.03.26][0] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[ppe-prod-primary-tomcat-2019.03.26][0]] containing [index {[ppe-prod-primary-tomcat-2019.03.26][ppe-prod-primary-tomcat][8-LHuGkBRv3HjZ_DqmqK], source[n/a, actual length: [16.5kb], max length: 2kb]}]]"})

2

What type of storage are you using? Which version of Elasticsearch?

3

thanks for replying ,we are using file-system only for storage and 6.2.2 verison for all components(Elasticsearch, Kibana, Logstash).

4

Is it a local disk or backed by some kind of networked storage?

5

we have attached extra volume to this server and using as elasticsearch storage.

6

What type of extra volume?

7

we have created one more file system and is mounted to /mnt. we are using this for storage.

8

What type of extra volume???

9

EBS volume

10

How many nodes do you have in the cluster? How are these configured?

11

it is 3 node cluster setup , one master and other two are data nodes.

12

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.