|
| 1 | +:_mod-docs-content-type: ASSEMBLY |
| 2 | +[id="troubleshooting-logging-alerts"] |
| 3 | +include::_attributes/common-attributes.adoc[] |
| 4 | += Troubleshooting logging alerts |
| 5 | +:context: troubleshooting-logging-alerts |
| 6 | + |
| 7 | +toc::[] |
| 8 | + |
| 9 | +You can use the following procedures to troubleshoot logging alerts on your cluster. |
| 10 | + |
| 11 | +include::modules/es-cluster-health-is-red.adoc[leveloffset=+1] |
| 12 | + |
| 13 | +[role="_additional-resources"] |
| 14 | +.Additional resources |
| 15 | +// TODO ROSA |
| 16 | +ifdef::openshift-dedicated,openshift-rosa[] |
| 17 | +* link:https://docs.openshift.com/container-platform/latest/observability/monitoring/reviewing-monitoring-dashboards.adoc#reviewing-monitoring-dashboards[Reviewing monitoring dashboards] |
| 18 | +endif::openshift-dedicated,openshift-rosa[] |
| 19 | + |
| 20 | +* link:https://docs.openshift.com/container-platform/latest/observability/monitoring/accessing-metrics/accessing-metrics-as-an-administrator.adoc#reviewing-monitoring-dashboards-admin_accessing-metrics-as-an-administrator[Reviewing monitoring dashboards as a cluster administrator] |
| 21 | +
|
| 22 | +* link:https://www.elastic.co/guide/en/elasticsearch/reference/7.13/fix-common-cluster-issues.html#fix-red-yellow-cluster-status[Fix a red or yellow cluster status] |
| 23 | +
|
| 24 | +[id="elasticsearch-cluster-health-is-yellow"] |
| 25 | +== Elasticsearch cluster health status is yellow |
| 26 | + |
| 27 | +Replica shards for at least one primary shard are not allocated to nodes. Increase the node count by adjusting the `nodeCount` value in the `ClusterLogging` custom resource (CR). |
| 28 | + |
| 29 | +[role="_additional-resources"] |
| 30 | +.Additional resources |
| 31 | +* link:https://www.elastic.co/guide/en/elasticsearch/reference/7.13/fix-common-cluster-issues.html#fix-red-yellow-cluster-status[Fix a red or yellow cluster status] |
| 32 | + |
| 33 | +include::modules/es-node-disk-low-watermark-reached.adoc[leveloffset=+1] |
| 34 | +include::modules/es-node-disk-high-watermark-reached.adoc[leveloffset=+1] |
| 35 | +include::modules/es-node-disk-flood-watermark-reached.adoc[leveloffset=+1] |
| 36 | + |
| 37 | +[id="troubleshooting-logging-alerts-es-jvm-heap-use-is-high"] |
| 38 | +== Elasticsearch JVM heap usage is high |
| 39 | + |
| 40 | +The Elasticsearch node Java virtual machine (JVM) heap memory used is above 75%. Consider https://www.elastic.co/guide/en/elasticsearch/reference/current/advanced-configuration.html#set-jvm-heap-size[increasing the heap size]. |
| 41 | + |
| 42 | +[id="troubleshooting-logging-alerts-aggregated-logging-system-cpu-is-high"] |
| 43 | +== Aggregated logging system CPU is high |
| 44 | + |
| 45 | +System CPU usage on the node is high. Check the CPU of the cluster node. Consider allocating more CPU resources to the node. |
| 46 | + |
| 47 | +[id="troubleshooting-logging-alerts-es-process-cpu-is-high"] |
| 48 | +== Elasticsearch process CPU is high |
| 49 | + |
| 50 | +Elasticsearch process CPU usage on the node is high. Check the CPU of the cluster node. Consider allocating more CPU resources to the node. |
| 51 | + |
| 52 | +include::modules/es-disk-space-low.adoc[leveloffset=+1] |
| 53 | + |
| 54 | +[role="_additional-resources"] |
| 55 | +.Additional resources |
| 56 | +* link:https://www.elastic.co/guide/en/elasticsearch/reference/7.13/fix-common-cluster-issues.html#fix-red-yellow-cluster-status[Fix a red or yellow cluster status] |
| 57 | + |
| 58 | +[id="troubleshooting-logging-alerts-es-filedescriptor-usage-is-high"] |
| 59 | +== Elasticsearch FileDescriptor usage is high |
| 60 | + |
| 61 | +Based on current usage trends, the predicted number of file descriptors on the node is insufficient. Check the value of `max_file_descriptors` for each node as described in the Elasticsearch link:https://www.elastic.co/guide/en/elasticsearch/reference/6.8/file-descriptors.html[File Descriptors] documentation. |
0 commit comments