# We couldn't log you in. Please try again

**URL:** <https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [August 16, 2023, 1:48pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929 "2023-08-16T13:48:26Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![daniel\_quiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daniel_quiroz/32/124666_2.png) [@daniel\_quiroz](https://discuss.elastic.co/u/daniel_quiroz)\
**Post date:** [August 16, 2023, 1:48pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/1 "2023-08-16T13:48:26Z")

</div>

Hi Everyone, I'm install elastic and kibana on Centos 7.

They was working but when I restart the server, the services now print "We couldn't log you in. Please try again." in Kibana's login.

I look the service status and both are running, but cluster health is red:

```auto
{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 23,
  "active_shards" : 23,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 3,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 88.46153846153845
}

```

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [August 16, 2023, 8:17pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/2 "2023-08-16T20:17:58Z")

</div>

Go to /var/log/elasticsearch and check the cluster log.

---

<div class="post-metadata">

**Author:** ![daniel\_quiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daniel_quiroz/32/124666_2.png) [@daniel\_quiroz](https://discuss.elastic.co/u/daniel_quiroz)\
**Post date:** [August 16, 2023, 8:29pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/3 "2023-08-16T20:29:47Z")

</div>

Hi,  
The last print on logs is

```auto
 [2023-08-16T15:18:04,453][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:19:04,457][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:20:04,462][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:21:34,468][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:22:34,473][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:24:04,478][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete
[2023-08-16T15:25:04,481][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%], shards will be relocated away from this node; currently relocating away shards totalling [0] bytes; the node is expected to continue to exceed the high disk watermark when these relocations are complete

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [August 17, 2023, 12:30am UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/4 "2023-08-17T00:30:23Z")

</div>

> [@daniel\_quiroz](#):
>
> `[2023-08-16T15:25:04,481][WARN][o.e.c.r.a.DiskThresholdMonitor] [apmlab] high disk watermark [90%] exceeded on [rzsMYzKgQICCjscEqbR8AQ][apmlab][/var/lib/elasticsearch] free: 3.6gb[5.6%]`

You need to free up some space in your server, are you able to remove other files in your server from mount of the `/var` path?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [August 17, 2023, 5:41am UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/5 "2023-08-17T05:41:15Z")

</div>

As Leandro said, minimum is 15% free space. Read [here](https://www.elastic.co/guide/en/elasticsearch/reference/8.9/modules-cluster.html#disk-based-shard-allocation).

---

<div class="post-metadata">

**Author:** ![daniel\_quiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daniel_quiroz/32/124666_2.png) [@daniel\_quiroz](https://discuss.elastic.co/u/daniel_quiroz)\
**Post date:** [August 17, 2023, 2:24pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/6 "2023-08-17T14:24:13Z")

</div>

Thanks, i will to remove files and restart the server.

---

<div class="post-metadata">

**Author:** ![daniel\_quiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daniel_quiroz/32/124666_2.png) [@daniel\_quiroz](https://discuss.elastic.co/u/daniel_quiroz)\
**Post date:** [August 18, 2023, 4:50pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/7 "2023-08-18T16:50:13Z")

</div>

assign more memory to the server and to the directory and it worked, thank you very much.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 15, 2023, 4:50pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/340929/8 "2023-09-15T16:50:41Z")

</div>

Closed on September 15, 2023, 4:50pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.