# Graylog and elasticsearch issue

**URL:** <https://community.graylog.org/t/graylog-and-elasticsearch-issue/22827>\
**Category:** Graylog Central (peer support)\
**Created:** [February 25, 2022, 2:10pm UTC](https://community.graylog.org/t/graylog-and-elasticsearch-issue/22827 "2022-02-25T14:10:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sharzad](https://avatars.discourse-cdn.com/v4/letter/s/35a633/32.png) [@Sharzad](https://community.graylog.org/u/Sharzad)\
**Post date:** [February 25, 2022, 2:10pm UTC](https://community.graylog.org/t/graylog-and-elasticsearch-issue/22827/1 "2022-02-25T14:10:11Z")

</div>

i have latest graylog on ubuntu (fresh installation)  
after login i have error:

### Elasticsearch nodes disk usage above low watermark (triggered an hour ago)

There are Elasticsearch nodes in the cluster running out of disk space, their disk usage is above the low watermark. For this reason Elasticsearch will not allocate new shards to the affected nodes. The affected nodes are: [127.0.0.1] Check [Cluster-level shard allocation and routing settings | Reference](https://www.elastic.co/guide/en/elasticsearch/reference/master/disk-allocator.html) for more details.

i don’t have cluster and 5 gig back .

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [February 26, 2022, 12:37am UTC](https://community.graylog.org/t/graylog-and-elasticsearch-issue/22827/2 "2022-02-26T00:37:18Z")

</div>

Hello

It stating you running out of room on your Graylog server

Check your GL server.

`root # df -h`

Or this could be the way this environment is configured. Hard to tell with the lack of information.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 12, 2022, 12:37am UTC](https://community.graylog.org/t/graylog-and-elasticsearch-issue/22827/3 "2022-03-12T00:37:37Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.