Multiple Errors Between Graylog & Elasticsearch

[tmacgbay]

Ay-ya that is a lot of log to look through…

@monarch684

Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [1000]/[1000] maximum shards open;”}],“type”:“validation_exception”,“reason”:“Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [1000]/[1000] maximum shards open;”},“status”:400}

I would take a look at what the rotation is on all your indexes. You can increase the limit but there might be side effects. I am not sure what version of Graylog or Elastic you are on… or OS… or configuration… or… so I can’t post any more info… but you can now google on elastic shard limit …