# Unavailable\_shards\_exception reason=\> filebeat primary shard is not active **URL:** \ **Category:** Logstash\ **Created:** [September 6, 2017, 7:06am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526 "2017-09-06T07:06:38Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Swaroop\_Chandre](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\ **Post date:** [September 6, 2017, 7:06am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526/1 "2017-09-06T07:06:38Z")
## **Hello can anyone help me with this. Getting following error in logstash logs** ``` [2017-09-05T23:47:53,660][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 503 ({"type"=>"unavailable_shards_exception", "reason"=>"[filebeat-2017.09.05][2] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[filebeat-2017.09.05][2]] containing [27] requests]"}) [2017-09-05T23:47:53,660][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 503 ({"type"=>"unavailable_shards_exception", "reason"=>"[filebeat-2017.09.05][2] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[filebeat-2017.09.05][2]] containing [27] requests]"}) [2017-09-05T23:48:55,665][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 503 ({"type"=>"unavailable_shards_exception", "reason"=>"[filebeat-2017.09.05][2] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[filebeat-2017.09.05][2]] containing [6] requests]"}) [2017-09-05T23:48:55,666][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 503 ({"type"=>"unavailable_shards_exception", "reas`Preformatted text`on"=>"[filebeat-2017.09.05][2] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[filebeat-2017.09.05][2]] containing [6] requests]"})emphasized text ``` Current index state GET \_cat/indices ``` red open filebeat-2017.09.06 DTJrafm-QLWl_5eaeGSiWg 5 1 red open filebeat-2017.09.05 Jco7ejvORgakQrAmoHI8Gg 5 1 2574255 0 2gb 2gb yellow open .kibana NHtLrUyfSEOvsdRRyutbyg 1 1 2 0 8.1kb 8.1kb ``` Had earlier deleted all index. Would that be the cause for this error? How Do I resolve this now? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 6, 2017, 8:09am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526/2 "2017-09-06T08:09:32Z")
What do your Elasticsearch logs show? ---
**Author:** ![Swaroop\_Chandre](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\ **Post date:** [September 6, 2017, 8:30am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526/3 "2017-09-06T08:30:18Z")
Thank you for the response. Elastic shows the following output. ``` [2017-09-06T00:44:41,901][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 36kb[6.3E-4%], shards will be relocated away from this node [2017-09-06T00:44:41,901][INFO][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] rerouting shards: [high disk watermark exceeded on one or more nodes] [2017-09-06T00:45:11,913][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 12kb[2.1E-4%], shards will be relocated away from this node [2017-09-06T00:45:41,925][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 16kb[2.8E-4%], shards will be relocated away from this node [2017-09-06T00:45:41,925][INFO][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] rerouting shards: [high disk watermark exceeded on one or more nodes] [2017-09-06T00:46:11,937][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 4kb[7E-5%], shards will be relocated away from this node [2017-09-06T00:46:41,955][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 12kb[2.1E-4%], shards will be relocated away from this node [2017-09-06T00:46:41,955][INFO][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] rerouting shards: [high disk watermark exceeded on one or more nodes] [2017-09-06T00:47:11,967][WARN][o.e.c.r.a.DiskThresholdMonitor] [Z2K_pox] high disk watermark [90%] exceeded on [Z2K_poxOQuigXVHSSazkKQ][Z2K_pox][/var/lib/elasticsearch/nodes/0] free: 8kb[1.4E-4%], shards will be relocated away from this node ``` How do I resolve this ? Regards, Swaroop ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 6, 2017, 8:32am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526/4 "2017-09-06T08:32:02Z")
Add more disk space. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 4, 2017, 8:32am UTC](https://discuss.elastic.co/t/unavailable-shards-exception-reason-filebeat-primary-shard-is-not-active/99526/5 "2017-10-04T08:32:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.