Hi Arief, you can see that each index has a replication factor of 1, meaning that there are 4 primary shards and 4 replica shards for each index. Since you're running only 1 Elasticsearch node, those replica shards cannot be placed anywhere, which is why the Elasticsearch cluster health state is YELLOW (meaning operational, but degraded).
While this isn't ideal, it's not keeping Graylog from working properly, so you could also ignore the YELLOW cluster state for now. See https://github.com/Graylog2/omnibus-graylog2/issues/26 for a more detailed description. Cheers, Jochen On Wednesday, 13 July 2016 05:11:09 UTC+2, Arief Hydayat wrote: > > Hi Jochen, > > Thanks for your reply. > Here the output: > > health status index pri rep docs.count docs.deleted store.size > pri.store.size > yellow open graylog_9 4 1 2135952 0 844.9mb > 844.9mb > yellow open graylog_8 4 1 20001263 0 > 7.3gb 7.3gb > yellow open graylog_7 4 1 20001845 0 > 7.4gb 7.4gb > yellow open graylog_6 4 1 20003032 0 > 7.3gb 7.3gb > yellow open graylog_5 4 1 20000307 0 > 6.9gb 6.9gb > yellow open graylog_4 4 1 20002381 0 > 7.4gb 7.4gb > yellow open graylog_3 4 1 20001081 0 > 7.2gb 7.2gb > > Yes it's running on OVA version 2.0.3. The disk already extend to 200GB as > well. I see, is there any other way to make it back to GREEN? extend more > disk or something? or possible to add more node on current OVA running? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/19d517b5-18ea-40e0-bd2c-4906f2562e65%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
