# Graylog cluster, elasticsearch unassigned shards

**URL:** <https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524>\
**Category:** Graylog Central (peer support)\
**Created:** [April 19, 2021, 12:06pm UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524 "2021-04-19T12:06:22Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rmn.yalilov](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@rmn.yalilov](https://community.graylog.org/u/rmn.yalilov)\
**Post date:** [April 19, 2021, 12:06pm UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524/1 "2021-04-19T12:06:22Z")

</div>

Hi friends!  
A couple of weeks ago we set up a Graylog cluster on two servers.  
This morning I ran into the problem “Elasticsearch cluster is yellow. Shards: 84 active, 0 initializing, 0 relocating, 8 unassigned”. Elastic Settings: Shards: 4, Replicas: 1.  
How can we return the green status of the cluster and replicate these 8 shards to 2 servers?  
 ![1](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/2/22875e35642268230e42b2a30ca6e2e42f0fe7a9.jpeg)

---

<div class="post-metadata">

**Author:** ![reimlima](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/reimlima/32/16254_2.png) [@reimlima](https://community.graylog.org/u/reimlima)\
**Post date:** [April 19, 2021, 12:59pm UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524/2 "2021-04-19T12:59:27Z")

</div>

Hi @rmn.yalilov

First of all, you have to figure out why those shards are unassigned, and then fix those errors:

Here’s a Doc in ES Guide that might helps you:

> **[Cluster allocation explain API | Elasticsearch Guide \[master\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/master/cluster-allocation-explain.html)**

---

<div class="post-metadata">

**Author:** ![rmn.yalilov](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@rmn.yalilov](https://community.graylog.org/u/rmn.yalilov)\
**Post date:** [April 20, 2021, 3:56am UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524/3 "2021-04-20T03:56:55Z")

</div>

Hi, @reimlima  
The problems are as follows.

 ![2](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/5/59a9b2d25d380c6874e92a98dfbb56436be847a6.jpeg)

---

<div class="post-metadata">

**Author:** ![reimlima](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/reimlima/32/16254_2.png) [@reimlima](https://community.graylog.org/u/reimlima)\
**Post date:** [April 20, 2021, 12:37pm UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524/4 "2021-04-20T12:37:21Z")

</div>

Hi,

my guess is that the main problem is unequilized version in you ES Cluster.

Ensure all node have the same version installed and then restart one at the time and see if it fix the problem.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 4, 2021, 12:37pm UTC](https://community.graylog.org/t/graylog-cluster-elasticsearch-unassigned-shards/19524/5 "2021-05-04T12:37:59Z")

</div>

Closed on May 4, 2021, 12:37pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
