Re: Oops! SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

2015-03-13 Thread Taylor Wood
The following as suggested was able to fix all my previous indexes to make 
0 replication and essentially removing the 5 unassigned shards we had per 
Indice.

 curl -XPUT 'localhost:9200/*/_settings' -d ' { "index" : { 
"number_of_replicas" : 0 } } '


Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/f4c18070-a29d-429d-87fb-c358d175e938%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Oops! SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

2015-03-12 Thread aaron
You should be able to set the number of replicas for all previous indexes 
to 0.  You cannot reduce the shard count once an index is created, or 
increase for that matter.  You could reindex your shards.

http://www.elastic.co/guide/en/elasticsearch/reference/current/indices-update-settings.html


curl -XPUT 'localhost:9200/my_index/_settings' -d '
{
"index" : {
"number_of_replicas" : 0
}
}'





On Thursday, March 12, 2015 at 11:35:12 AM UTC-6, Taylor Wood wrote:
>
> I didn't get any help on this but as an FYI for those that may have this 
> issue and are just starting:
>
> Digging deeper it appears our system was created with 5 shards and 1 
> replica.   Granted we are only using 1 node so every day elasticsearch 
> would create an indice of 10 shards, 5 for the primary node and 5 for the 
> secondary node (which doesn't exist on our system but would for 
> redundancy).  We made it so all future indices created have 0 replicas in 
> the future.I can't find a way to clean up all the unallocated shards 
> from previous indices without deleting the data.
>
> If the active shards is almost = to unassigned shards you are using 
> replication and need to have a second node running.
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/0b36108c-3e90-4865-85e3-d6a74b53ee97%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Oops! SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

2015-03-12 Thread Taylor Wood
I didn't get any help on this but as an FYI for those that may have this 
issue and are just starting:

Digging deeper it appears our system was created with 5 shards and 1 
replica.   Granted we are only using 1 node so every day elasticsearch 
would create an indice of 10 shards, 5 for the primary node and 5 for the 
secondary node (which doesn't exist on our system but would for 
redundancy).  We made it so all future indices created have 0 replicas in 
the future.I can't find a way to clean up all the unallocated shards 
from previous indices without deleting the data.

If the active shards is almost = to unassigned shards you are using 
replication and need to have a second node running.

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/a0c368f4-2550-459b-b61e-6f781477eaee%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Oops! SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

2015-01-12 Thread Taylor Wood

>
> Today the Kibana interface appears to be working fine but the status is 
>> still red.
>>
>
>  
>
>> [root@syslog1 ~]#  curl -XGET 
>> 'http://localhost:9200/_cluster/health?pretty=true'
>> {
>>   "cluster_name" : "elasticsearch",
>>   "status" : "red",
>>   "timed_out" : false,
>>   "number_of_nodes" : 2,
>>   "number_of_data_nodes" : 1,
>>   "active_primary_shards" : 590,
>>   "active_shards" : 590,
>>   "relocating_shards" : 0,
>>   "initializing_shards" : 0,
>>   "unassigned_shards" : 600
>> }
>> [root
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/1afb3e14-f845-4772-9520-08d65bd5dede%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Oops! SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

2015-01-09 Thread Taylor Wood
History:  I have been testing ELK stack for a few months now off and on. 
 For months now I have had it logging correctly with no major issues.  I 
picked this back up this week and everything was logging perfectly with 1 
exception:  I am logging to the main partition and not the /data partition 
we setup.  After logging a very large log file we began to get alerts that 
our disk was getting full.   Today I was making a change to the 
elasticsearch.yml to have logs be stored on the /data partition and now no 
dashboards are visible in Kibana.  Instead I get the following "! 
SearchPhaseExecutionException[Failed 
to execute phase [query], all shards failed]"

I have reverted to how it was setup previously and logging to the main 
partition which is not full:
Filesystem  Size  Used Avail Use% Mounted on
/dev/vda124G   16G  6.4G  72% /

Looking at other posts This seems to be the starting point but I am at a 
loss on where to turn now:
[elasticsearch]# curl -XGET 
'http://localhost:9200/_cluster/health?pretty=true'
{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 2,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 575,
  "active_shards" : 575,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 585
}

I can not seem to grasp the concept of the shards, why they are now 
unassigned, or why our elasticsearch no longer works correctly.

Any help is greatly appreciated.

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/31caefbe-1cc2-4d9c-a309-f03036e1dda6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: SearchPhaseExecutionException[Failed to execute phase [query], all shards failed

2014-11-04 Thread Александр Ковтунов
Hello, have fixed it? What was the problem?

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/fd58b76a-a6b3-4a8d-8829-62eeb22b82f0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Some indices failing with "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]"

2014-09-12 Thread Kevin DeLand
There are six indices with a red cluster status, but only two fail... any 
advice on what to check?

On Friday, September 12, 2014 2:57:06 AM UTC-4, Magnus Bäck wrote:
>
> On Friday, September 12, 2014 at 08:53 CEST, 
>  Kevin DeLand > wrote: 
>
> > Everything was working fine when all of a sudden some indices started 
> > failing. 
> > GET localhost:9200/logstash-2014.09.11/_search 
> > yields response: 
> > {"error":"SearchPhaseExecutionException[Failed to execute phase 
> > [query], all shards failed]","status":503} 
>
> How's the cluster's health? Anything interesting in the Elasticsearch 
> logs? 
>
> -- 
> Magnus Bäck| Software Engineer, Development Tools 
> magnu...@sonymobile.com  | Sony Mobile Communications 
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/4f70cae6-8155-40b7-b458-0e6687000ce7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Some indices failing with "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]"

2014-09-12 Thread Kevin DeLand
Which logs should I look in?

From
*~/elasticsearch-1.3.1/logs/elasticsearch.log *
[2014-09-12 07:17:26,047][DEBUG][action.bulk  ] [Frankie and 
Victoria] observer: timeout notification from cluster service. timeout 
setting [1m], time since start [1m]
[2014-09-12 07:18:04,466][DEBUG][action.search.type   ] [Frankie and 
Victoria] All shards failed for phase: [query]
[2014-09-12 07:18:27,103][DEBUG][action.bulk  ] [Frankie and 
Victoria] observer: timeout notification from cluster service. timeout 
setting [1m], time since start [1m]
[2014-09-12 07:18:27,103][DEBUG][action.bulk  ] [Frankie and 
Victoria] observer: timeout notification from cluster service. timeout 
setting [1m], time since start [1m]



On Friday, September 12, 2014 2:57:06 AM UTC-4, Magnus Bäck wrote:
>
> On Friday, September 12, 2014 at 08:53 CEST, 
>  Kevin DeLand > wrote: 
>
> > Everything was working fine when all of a sudden some indices started 
> > failing. 
> > GET localhost:9200/logstash-2014.09.11/_search 
> > yields response: 
> > {"error":"SearchPhaseExecutionException[Failed to execute phase 
> > [query], all shards failed]","status":503} 
>
> How's the cluster's health? Anything interesting in the Elasticsearch 
> logs? 
>
> -- 
> Magnus Bäck| Software Engineer, Development Tools 
> magnu...@sonymobile.com  | Sony Mobile Communications 
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/06391bb2-2ab4-4168-9ced-0ebadd6f08ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Some indices failing with "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]"

2014-09-12 Thread Kevin DeLand
Cluster health is red:
https://gist.github.com/kevindeland/2d727c3d984139ab96d4


On Friday, September 12, 2014 2:57:06 AM UTC-4, Magnus Bäck wrote:
>
> On Friday, September 12, 2014 at 08:53 CEST, 
>  Kevin DeLand > wrote: 
>
> > Everything was working fine when all of a sudden some indices started 
> > failing. 
> > GET localhost:9200/logstash-2014.09.11/_search 
> > yields response: 
> > {"error":"SearchPhaseExecutionException[Failed to execute phase 
> > [query], all shards failed]","status":503} 
>
> How's the cluster's health? Anything interesting in the Elasticsearch 
> logs? 
>
> -- 
> Magnus Bäck| Software Engineer, Development Tools 
> magnu...@sonymobile.com  | Sony Mobile Communications 
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/6849f141-64f0-4a15-99ca-ba43192f7064%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Some indices failing with "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]"

2014-09-11 Thread Magnus Bäck
On Friday, September 12, 2014 at 08:53 CEST,
 Kevin DeLand  wrote:

> Everything was working fine when all of a sudden some indices started
> failing.
> GET localhost:9200/logstash-2014.09.11/_search
> yields response:
> {"error":"SearchPhaseExecutionException[Failed to execute phase
> [query], all shards failed]","status":503}

How's the cluster's health? Anything interesting in the Elasticsearch
logs?

-- 
Magnus Bäck| Software Engineer, Development Tools
magnus.b...@sonymobile.com | Sony Mobile Communications

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/20140912065653.GC3212%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.


Some indices failing with "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]"

2014-09-11 Thread Kevin DeLand
Everything was working fine when all of a sudden some indices started 
failing.

*GET localhost:9200/logstash-2014.09.11/_search*
yields response:
{"error":"SearchPhaseExecutionException[Failed to execute phase [query], 
all shards failed]","status":503}


-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/67143a50-7cd9-4836-a19f-a2911bd05e1f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.