# Graylog cant create new index

**URL:** <https://community.graylog.org/t/graylog-cant-create-new-index/9422>\
**Category:** Graylog Central (peer support)\
**Created:** [March 13, 2019, 9:17am UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422 "2019-03-13T09:17:28Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Uporaba](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/uporaba/32/11232_2.png) [@Uporaba](https://community.graylog.org/u/Uporaba)\
**Post date:** [March 13, 2019, 9:17am UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/1 "2019-03-13T09:17:28Z")

</div>

Hi, I can not understand what’s wrong. There is only this in the logs of the graylog:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/0c82188c23dd5f22fabef0fa90e6a358ee3a239b.png)  
and this:  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/7/7882a0c9637445713bf7ec16300204d8aed83328.png)  
and that’s all I see in graylog:  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f7b3bf656801980e612b56b505b49250712e8007.png)  
google didnt give me answer on my question.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 13, 2019, 9:26am UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/2 "2019-03-13T09:26:04Z")

</div>

you should check your elasticsearch log to find the reason.

---

<div class="post-metadata">

**Author:** ![Uporaba](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/uporaba/32/11232_2.png) [@Uporaba](https://community.graylog.org/u/Uporaba)\
**Post date:** [March 13, 2019, 9:29am UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/3 "2019-03-13T09:29:18Z")

</div>

i have this in /var/log/elasticsearch/graylog\_deprecation.log  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4621fd40776cf77a6a0fc8888d8cfe4dce80ea78.png)

---

<div class="post-metadata">

**Author:** ![Uporaba](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/uporaba/32/11232_2.png) [@Uporaba](https://community.graylog.org/u/Uporaba)\
**Post date:** [March 13, 2019, 9:31am UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/4 "2019-03-13T09:31:16Z")

</div>

And this in /var/log/elasticsearch/graylog.log  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/419806ff5dd180310d1d075278f93567c5b06f9c.png)

---

<div class="post-metadata">

**Author:** ![macko003](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/macko003/32/3175_2.png) [@macko003](https://community.graylog.org/u/macko003)\
**Post date:** [March 13, 2019, 7:25pm UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/5 "2019-03-13T19:25:57Z")

</div>

does anything changed since your previous error?

> [@Red status of elasticsearch](https://community.graylog.org/t/red-status-of-elasticsearch/9248):
>
> Hello! The elastic can not create an index graylog\_58. How can I understand why the status of elastic is red? I have everything in 1 place and graylog and elastic. Where can I see the logs and find out the reason? index is open but red. Could this be due to the fact that the disk is 92% busy? [image]

Yes, I see, now you have problem with the graylog\_59 index 😃

Now I’m know I’m the best. My previous answer.

> [@Red status of elasticsearch](https://community.graylog.org/t/red-status-of-elasticsearch/9248/5):
>
> set the high watermark to 5 gb? (spend 10 minutes with this question, based on your screens, you will open a new topic at the community with elatic cluster red again OR no disk space left)

Read answers, and make the suggestions.

---

<div class="post-metadata">

**Author:** ![Uporaba](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/uporaba/32/11232_2.png) [@Uporaba](https://community.graylog.org/u/Uporaba)\
**Post date:** [March 15, 2019, 12:36pm UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/6 "2019-03-15T12:36:04Z")

</div>

i have a lot of disk space

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/d/d562284913fc814ada41e839a5deb9b644749045.png)

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 15, 2019, 2:29pm UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/7 "2019-03-15T14:29:09Z")

</div>

please check this posting about possible reasons [https://www.datadoghq.com/blog/elasticsearch-unassigned-shards/](https://www.datadoghq.com/blog/elasticsearch-unassigned-shards/)

(that is found when entering “elasticsearch unassigned shards” into a search engine of your choice … )

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 29, 2019, 2:29pm UTC](https://community.graylog.org/t/graylog-cant-create-new-index/9422/8 "2019-03-29T14:29:10Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
