AutoOps insights
Elastic Cloud Hosted lets you manage and configure one or more deployments of the versioned Elastic Stack, hosted on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Elastic Cloud on Kubernetes extends Kubernetes orchestration capabilities to allow you to deploy and manage components of the Elastic Stack. Availability This functionality is generally available and ready for production usage. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. Elastic Cloud Enterprise is a self-managed orchestration platform for deploying and managing the Elastic Stack at scale. Availability This functionality is generally available and ready for production usage. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. Self-managed deployments are Elastic Stack deployments managed without the assistance of an orchestrator. Availability This functionality is generally available and ready for production usage. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
ECH
Generally available
ECK
Generally available
ECE
Generally available
Self-managed
Generally available
AutoOps monitors hundreds of metrics on your Elasticsearch deployment and raises an insight when it detects a condition that affects performance, stability, or resource efficiency. Each insight identifies the root cause, explains the impact, and surfaces targeted recommendations so you can act quickly.
Browse insights by category. Each page covers what AutoOps detects and why it matters, insight details (component, severity, scope), customization settings, and an example recommendation.
Cluster health (18)
| Insight | Severity | Scope |
|---|---|---|
| Disk watermark flood stage | Critical | Node |
| Disk watermark flood stage (frozen) | Critical | Node |
| Master not discovered | Critical | Cluster |
| Status red | Critical | Cluster |
| Cluster read-only allow delete block | High | Cluster |
| Cluster read-only block | High | Cluster |
| Disk watermark high | High | Node |
| High cluster pending tasks | High | Cluster |
| Indices without replicas | High | Index |
| Cluster metrics lost | Medium | Cluster |
| Coordinating node disconnected | Medium | Cluster |
| Disk watermark low | Medium | Node |
| Loaded master-eligible nodes | Medium | Node |
| Master-eligible node disconnected | Medium | Cluster |
| Partial cluster metrics | Medium | Cluster |
| Status yellow | Medium | Cluster |
| Deployment not highly available | Low | Cluster |
| Management queue size | Low | Node |
Configuration (22)
| Insight | Severity | Scope |
|---|---|---|
| License expired | Critical | Cluster |
| License expiring soon | High | Cluster |
| Minimum master nodes below quorum | High | Cluster |
| Minimum master nodes exceed eligible | High | Cluster |
| Number of master nodes | High | Cluster |
| Disk watermarks wrong configuration | Medium | Node |
| Expensive queries disabled | Medium | Cluster |
| Frozen cache unhealthy | Medium | Node |
| High concurrent recoveries | Medium | Cluster |
| Low concurrent rebalance | Medium | Cluster |
| Low concurrent recoveries | Medium | Cluster |
| Max shards per node | Medium | Cluster |
| Mixed master nodes | Medium | Cluster |
| Shard allocation restricted | Medium | Cluster |
| Shard rebalancing restricted | Medium | Cluster |
| Total and max shard conflict | Medium | Cluster |
| Unlimited shards per node | Medium | Cluster |
| Dedicated master nodes | Low | Cluster |
| Default cluster name | Low | Cluster |
| Default data path | Low | Cluster |
| Minimum master nodes above quorum | Low | Cluster |
| Obsolete Zen discovery settings | Low | Cluster |
CPU (3)
| Insight | Severity | Scope |
|---|---|---|
| High CPU on node | Medium | Node |
| High CPU utilization | Medium | Node |
| Unbalanced GC ratio | Medium | Node |
Disk storage (14)
| Insight | Severity | Scope |
|---|---|---|
| Disk watermark flood stage | Critical | Node |
| Disk watermark flood stage (frozen) | Critical | Node |
| Disk watermark high | High | Node |
| Shard near document limit | High | Index |
| Disk watermark low | Medium | Node |
| Disk watermarks wrong configuration | Medium | Node |
| Default data path | Low | Cluster |
| High deleted-docs ratio | Low | Index |
| Low disk usage on cold nodes | Low | Node |
| Low disk usage on content nodes | Low | Node |
| Low disk usage on data nodes | Low | Node |
| Low disk usage on frozen nodes | Low | Node |
| Low disk usage on hot nodes | Low | Node |
| Low disk usage on warm nodes | Low | Node |
High availability (11)
| Insight | Severity | Scope |
|---|---|---|
| Master not discovered | Critical | Cluster |
| Status red | Critical | Cluster |
| Minimum master nodes below quorum | High | Cluster |
| Minimum master nodes exceed eligible | High | Cluster |
| Number of master nodes | High | Cluster |
| Cluster metrics lost | Medium | Cluster |
| Mixed master nodes | Medium | Cluster |
| Status yellow | Medium | Cluster |
| Dedicated master nodes | Low | Cluster |
| Master-eligible node added | Low | Cluster |
| Minimum master nodes above quorum | Low | Cluster |
Index management (7)
| Insight | Severity | Scope |
|---|---|---|
| Shard near document limit | High | Index |
| Empty indices | Medium | Index |
| Increase in shards count | Medium | Index |
| Indexing on non-hot nodes | Medium | Cluster |
| Oversized shards | Medium | Index |
| Undersized shards | Medium | Index |
| High deleted-docs ratio | Low | Index |
Indexing (15)
| Insight | Severity | Scope |
|---|---|---|
| Indexing failures on indices | High | Node |
| Indexing throttle time | High | Node |
| Missing documents on get | High | Cluster |
| Node indexing failures | High | Node |
| Rejected indexing | High | Node |
| Slow indexing | High | Node |
| Indexing on non-hot nodes | Medium | Cluster |
| Ingest spike | Medium | Cluster |
| Long running bulk index task | Medium | Node |
| Long running delete by query task | Medium | Node |
| Long running index task | Medium | Node |
| Long running reindex task | Medium | Node |
| Long running update by query task | Medium | Node |
| Write hotspotting | Medium | Node |
| Write queue size | Medium | Node |
Memory (13)
| Insight | Severity | Scope |
|---|---|---|
| Node near out of memory | High | Node |
| Vector memory pressure | High | Node |
| Circuit breaker near limit | Medium | Node |
| Circuit breaker trips | Medium | Node |
| Heap size above recommended max | Medium | Node |
| High heap usage | Medium | Node |
| Memory lock disabled | Medium | Node |
| High memory-to-disk ratio on cold nodes | Low | Node |
| High memory-to-disk ratio on content nodes | Low | Node |
| High memory-to-disk ratio on data nodes | Low | Node |
| High memory-to-disk ratio on frozen nodes | Low | Node |
| High memory-to-disk ratio on hot nodes | Low | Node |
| High memory-to-disk ratio on warm nodes | Low | Node |
Node lifecycle (10)
| Insight | Severity | Scope |
|---|---|---|
| Data node disconnected | High | Cluster |
| Coordinating node disconnected | Medium | Cluster |
| Master-eligible node disconnected | Medium | Cluster |
| Coordinating node added | Low | Cluster |
| Coordinating node restarted | Low | Cluster |
| Data node added | Low | Cluster |
| Data node restarted | Low | Cluster |
| Dedicated coordinating nodes | Low | Cluster |
| Master-eligible node added | Low | Cluster |
| Master-eligible node restarted | Low | Cluster |
Performance (68)
Recovery (2)
| Insight | Severity | Scope |
|---|---|---|
| High concurrent recoveries | Medium | Cluster |
| Low concurrent recoveries | Medium | Cluster |
Replication (6)
| Insight | Severity | Scope |
|---|---|---|
| Indices without replicas | High | Index |
| High replica count on cold nodes | Low | Node |
| High replica count on content nodes | Low | Node |
| High replica count on data nodes | Low | Node |
| High replica count on hot nodes | Low | Node |
| High replica count on warm nodes | Low | Node |
Resource utilization (30)
Search (14)
| Insight | Severity | Scope |
|---|---|---|
| Rejected search | High | Node |
| Slow search | High | Node |
| Slow search on cold tier nodes | High | Node |
| Slow search on content tier nodes | High | Node |
| Slow search on frozen tier nodes | High | Node |
| Slow search on hot tier nodes | High | Node |
| Slow search on warm tier nodes | High | Node |
| Vector memory pressure | High | Node |
| Adaptive replica selection disabled | Medium | Cluster |
| Expensive queries disabled | Medium | Cluster |
| Loaded coordinating nodes | Medium | Node |
| Long running search task | Medium | Node |
| Search queue size | Medium | Node |
| Write hotspotting | Medium | Node |
Security and safety (5)
| Insight | Severity | Scope |
|---|---|---|
| Destructive deletes allow wildcards | Medium | Cluster |
| Elasticsearch security disabled | Medium | Cluster |
| Painless regex unrestricted | Medium | Cluster |
| Script contexts unrestricted | Medium | Cluster |
| Script types unrestricted | Medium | Cluster |
Shard allocation (18)
| Insight | Severity | Scope |
|---|---|---|
| Disk watermark flood stage (frozen) | Critical | Node |
| Empty indices | Medium | Index |
| High concurrent rebalance | Medium | Cluster |
| Increase in shards count | Medium | Index |
| Long running shard task | Medium | Node |
| Low concurrent rebalance | Medium | Cluster |
| Max shards per node | Medium | Cluster |
| Oversized shards | Medium | Index |
| Shard allocation restricted | Medium | Cluster |
| Shard count high on data node | Medium | Node |
| Shard count high on frozen node | Medium | Node |
| Shard rebalancing restricted | Medium | Cluster |
| Total and max shard conflict | Medium | Cluster |
| Unbalanced shard counts | Medium | Node |
| Undersized shards | Medium | Index |
| Unlimited shards per node | Medium | Cluster |
| Write hotspotting | Medium | Node |
| Data node without shards | Low | Node |
Snapshots and backup (2)
| Insight | Severity | Scope |
|---|---|---|
| Long running snapshot task | Medium | Node |
| Snapshot repository missing | Medium | Cluster |
Stability (50)
Tasks (9)
| Insight | Severity | Scope |
|---|---|---|
| Long running bulk index task | Medium | Node |
| Long running delete by query task | Medium | Node |
| Long running index task | Medium | Node |
| Long running reindex task | Medium | Node |
| Long running search task | Medium | Node |
| Long running shard task | Medium | Node |
| Long running snapshot task | Medium | Node |
| Long running update by query task | Medium | Node |
| Stuck task | Medium | Node |
Vector search (1)
| Insight | Severity | Scope |
|---|---|---|
| Vector memory pressure | High | Node |
Version upgrade (4)
| Insight | Severity | Scope |
|---|---|---|
| AutoOps agent critically outdated | Critical | Cluster |
| Version is outdated | High | Cluster |
| Supported version is outdated | Medium | Cluster |
| AutoOps agent outdated | Low | Cluster |
Critical (6)
| Insight | Scope | Domain |
|---|---|---|
| AutoOps agent critically outdated | Cluster | Stability, Version upgrade |
| Disk watermark flood stage | Node | Cluster health, Disk storage, Stability |
| Disk watermark flood stage (frozen) | Node | Cluster health, Disk storage, Shard allocation, Stability |
| License expired | Cluster | Configuration |
| Master not discovered | Cluster | Cluster health, High availability |
| Status red | Cluster | Cluster health, High availability |
High (28)
| Insight | Scope | Domain |
|---|---|---|
| Cluster read-only allow delete block | Cluster | Cluster health |
| Cluster read-only block | Cluster | Cluster health |
| Data node disconnected | Cluster | Node lifecycle, Stability |
| Disk watermark high | Node | Cluster health, Disk storage, Stability |
| High cluster pending tasks | Cluster | Cluster health, Performance |
| Indexing failures on indices | Node | Indexing, Stability |
| Indexing throttle time | Node | Indexing, Performance |
| Indices without replicas | Index | Cluster health, Performance, Replication, Stability |
| License expiring soon | Cluster | Configuration |
| Minimum master nodes below quorum | Cluster | Configuration, High availability, Stability |
| Minimum master nodes exceed eligible | Cluster | Configuration, High availability, Stability |
| Missing documents on get | Cluster | Indexing |
| Node indexing failures | Node | Indexing, Stability |
| Node near out of memory | Node | Memory, Performance, Stability |
| Number of master nodes | Cluster | Configuration, High availability, Stability |
| Open file descriptors near limit | Cluster | Resource utilization, Stability |
| Rejected indexing | Node | Indexing, Performance, Stability |
| Rejected search | Node | Performance, Search, Stability |
| Shard near document limit | Index | Disk storage, Index management |
| Slow indexing | Node | Indexing, Performance |
| Slow search | Node | Performance, Search |
| Slow search on cold tier nodes | Node | Performance, Search |
| Slow search on content tier nodes | Node | Performance, Search |
| Slow search on frozen tier nodes | Node | Performance, Search |
| Slow search on hot tier nodes | Node | Performance, Search |
| Slow search on warm tier nodes | Node | Performance, Search |
| Vector memory pressure | Node | Memory, Performance, Search, Vector search |
| Version is outdated | Cluster | Version upgrade |
Medium (65)
| Insight | Scope | Domain |
|---|---|---|
| Adaptive replica selection disabled | Cluster | Performance, Search |
| Circuit breaker near limit | Node | Memory, Performance, Stability |
| Circuit breaker trips | Node | Memory, Performance, Stability |
| Cluster metrics lost | Cluster | Cluster health, High availability |
| Coordinating node disconnected | Cluster | Cluster health, Node lifecycle, Stability |
| Coordinating node underused | Cluster | Performance, Resource utilization |
| Destructive deletes allow wildcards | Cluster | Security and safety |
| Disk watermark low | Node | Cluster health, Disk storage, Stability |
| Disk watermarks wrong configuration | Node | Configuration, Disk storage, Stability |
| Elasticsearch security disabled | Cluster | Security and safety |
| Empty indices | Index | Index management, Performance, Shard allocation |
| Expensive queries disabled | Cluster | Configuration, Performance, Search |
| Frozen cache unhealthy | Node | — |
| Heap size above recommended max | Node | Memory, Performance, Stability |
| High concurrent rebalance | Cluster | Performance, Shard allocation |
| High concurrent recoveries | Cluster | Configuration, Performance, Recovery |
| High CPU on node | Node | CPU, Performance, Stability |
| High CPU utilization | Node | CPU, Performance, Stability |
| High heap usage | Node | Memory, Stability |
| Increase in shards count | Index | Index management, Shard allocation |
| Indexing on non-hot nodes | Cluster | Index management, Indexing, Performance |
| Ingest spike | Cluster | Indexing, Resource utilization |
| Loaded cold tier data nodes | Node | Performance, Resource utilization |
| Loaded content tier data nodes | Node | Performance, Resource utilization |
| Loaded coordinating nodes | Node | Performance, Resource utilization, Search |
| Loaded data nodes | Node | Performance, Resource utilization |
| Loaded frozen tier data nodes | Node | Performance, Resource utilization |
| Loaded hot tier data nodes | Node | Performance, Resource utilization |
| Loaded master-eligible nodes | Node | Cluster health, Performance, Resource utilization |
| Loaded warm tier data nodes | Node | Performance, Resource utilization |
| Long running bulk index task | Node | Indexing, Performance, Stability, Tasks |
| Long running delete by query task | Node | Indexing, Performance, Stability, Tasks |
| Long running index task | Node | Indexing, Performance, Stability, Tasks |
| Long running reindex task | Node | Indexing, Performance, Stability, Tasks |
| Long running search task | Node | Performance, Search, Stability, Tasks |
| Long running shard task | Node | Performance, Shard allocation, Stability, Tasks |
| Long running snapshot task | Node | Performance, Snapshots and backup, Stability, Tasks |
| Long running update by query task | Node | Indexing, Performance, Stability, Tasks |
| Low concurrent rebalance | Cluster | Configuration, Performance, Shard allocation |
| Low concurrent recoveries | Cluster | Configuration, Performance, Recovery |
| Master-eligible node disconnected | Cluster | Cluster health, Node lifecycle, Stability |
| Max shards per node | Cluster | Configuration, Shard allocation, Stability |
| Memory lock disabled | Node | Memory, Performance, Stability |
| Mixed master nodes | Cluster | Configuration, High availability, Performance |
| Oversized shards | Index | Index management, Performance, Shard allocation |
| Painless regex unrestricted | Cluster | Performance, Security and safety |
| Partial cluster metrics | Cluster | Cluster health |
| Script contexts unrestricted | Cluster | Performance, Security and safety |
| Script types unrestricted | Cluster | Performance, Security and safety |
| Search queue size | Node | Performance, Search |
| Shard allocation restricted | Cluster | Configuration, Shard allocation, Stability |
| Shard count high on data node | Node | Shard allocation, Stability |
| Shard count high on frozen node | Node | Shard allocation, Stability |
| Shard rebalancing restricted | Cluster | Configuration, Performance, Shard allocation |
| Snapshot repository missing | Cluster | Snapshots and backup |
| Status yellow | Cluster | Cluster health, High availability |
| Stuck task | Node | Performance, Stability, Tasks |
| Supported version is outdated | Cluster | Version upgrade |
| Total and max shard conflict | Cluster | Configuration, Shard allocation, Stability |
| Unbalanced GC ratio | Node | CPU, Performance, Stability |
| Unbalanced shard counts | Node | Performance, Shard allocation |
| Undersized shards | Index | Index management, Performance, Shard allocation |
| Unlimited shards per node | Cluster | Configuration, Shard allocation, Stability |
| Write hotspotting | Node | Indexing, Performance, Resource utilization, Search, Shard allocation |
| Write queue size | Node | Indexing, Performance |
Low (34)
| Insight | Scope | Domain |
|---|---|---|
| AutoOps agent outdated | Cluster | Version upgrade |
| Coordinating node added | Cluster | Node lifecycle, Performance, Stability |
| Coordinating node restarted | Cluster | Node lifecycle, Performance, Stability |
| Data node added | Cluster | Node lifecycle, Performance, Stability |
| Data node restarted | Cluster | Node lifecycle, Performance, Stability |
| Data node without shards | Node | Performance, Resource utilization, Shard allocation |
| Dedicated coordinating nodes | Cluster | Node lifecycle, Performance |
| Dedicated master nodes | Cluster | Configuration, High availability, Performance |
| Default cluster name | Cluster | Configuration |
| Default data path | Cluster | Configuration, Disk storage |
| Deployment not highly available | Cluster | Cluster health |
| High deleted-docs ratio | Index | Disk storage, Index management |
| High memory-to-disk ratio on cold nodes | Node | Memory, Resource utilization |
| High memory-to-disk ratio on content nodes | Node | Memory, Resource utilization |
| High memory-to-disk ratio on data nodes | Node | Memory, Resource utilization |
| High memory-to-disk ratio on frozen nodes | Node | Memory, Resource utilization |
| High memory-to-disk ratio on hot nodes | Node | Memory, Resource utilization |
| High memory-to-disk ratio on warm nodes | Node | Memory, Resource utilization |
| High replica count on cold nodes | Node | Replication, Resource utilization |
| High replica count on content nodes | Node | Replication, Resource utilization |
| High replica count on data nodes | Node | Replication, Resource utilization |
| High replica count on hot nodes | Node | Replication, Resource utilization |
| High replica count on warm nodes | Node | Replication, Resource utilization |
| Low disk usage on cold nodes | Node | Disk storage, Resource utilization |
| Low disk usage on content nodes | Node | Disk storage, Resource utilization |
| Low disk usage on data nodes | Node | Disk storage, Resource utilization |
| Low disk usage on frozen nodes | Node | Disk storage, Resource utilization |
| Low disk usage on hot nodes | Node | Disk storage, Resource utilization |
| Low disk usage on warm nodes | Node | Disk storage, Resource utilization |
| Management queue size | Node | Cluster health, Performance, Stability |
| Master-eligible node added | Cluster | High availability, Node lifecycle, Performance, Stability |
| Master-eligible node restarted | Cluster | Node lifecycle, Performance, Stability |
| Minimum master nodes above quorum | Cluster | Configuration, High availability, Stability |
| Obsolete Zen discovery settings | Cluster | Configuration |
Cluster (56)
| Insight | Severity | Domain |
|---|---|---|
| AutoOps agent critically outdated | Critical | Stability, Version upgrade |
| License expired | Critical | Configuration |
| Master not discovered | Critical | Cluster health, High availability |
| Status red | Critical | Cluster health, High availability |
| Cluster read-only allow delete block | High | Cluster health |
| Cluster read-only block | High | Cluster health |
| Data node disconnected | High | Node lifecycle, Stability |
| High cluster pending tasks | High | Cluster health, Performance |
| License expiring soon | High | Configuration |
| Minimum master nodes below quorum | High | Configuration, High availability, Stability |
| Minimum master nodes exceed eligible | High | Configuration, High availability, Stability |
| Missing documents on get | High | Indexing |
| Number of master nodes | High | Configuration, High availability, Stability |
| Open file descriptors near limit | High | Resource utilization, Stability |
| Version is outdated | High | Version upgrade |
| Adaptive replica selection disabled | Medium | Performance, Search |
| Cluster metrics lost | Medium | Cluster health, High availability |
| Coordinating node disconnected | Medium | Cluster health, Node lifecycle, Stability |
| Coordinating node underused | Medium | Performance, Resource utilization |
| Destructive deletes allow wildcards | Medium | Security and safety |
| Elasticsearch security disabled | Medium | Security and safety |
| Expensive queries disabled | Medium | Configuration, Performance, Search |
| High concurrent rebalance | Medium | Performance, Shard allocation |
| High concurrent recoveries | Medium | Configuration, Performance, Recovery |
| Indexing on non-hot nodes | Medium | Index management, Indexing, Performance |
| Ingest spike | Medium | Indexing, Resource utilization |
| Low concurrent rebalance | Medium | Configuration, Performance, Shard allocation |
| Low concurrent recoveries | Medium | Configuration, Performance, Recovery |
| Master-eligible node disconnected | Medium | Cluster health, Node lifecycle, Stability |
| Max shards per node | Medium | Configuration, Shard allocation, Stability |
| Mixed master nodes | Medium | Configuration, High availability, Performance |
| Painless regex unrestricted | Medium | Performance, Security and safety |
| Partial cluster metrics | Medium | Cluster health |
| Script contexts unrestricted | Medium | Performance, Security and safety |
| Script types unrestricted | Medium | Performance, Security and safety |
| Shard allocation restricted | Medium | Configuration, Shard allocation, Stability |
| Shard rebalancing restricted | Medium | Configuration, Performance, Shard allocation |
| Snapshot repository missing | Medium | Snapshots and backup |
| Status yellow | Medium | Cluster health, High availability |
| Supported version is outdated | Medium | Version upgrade |
| Total and max shard conflict | Medium | Configuration, Shard allocation, Stability |
| Unlimited shards per node | Medium | Configuration, Shard allocation, Stability |
| AutoOps agent outdated | Low | Version upgrade |
| Coordinating node added | Low | Node lifecycle, Performance, Stability |
| Coordinating node restarted | Low | Node lifecycle, Performance, Stability |
| Data node added | Low | Node lifecycle, Performance, Stability |
| Data node restarted | Low | Node lifecycle, Performance, Stability |
| Dedicated coordinating nodes | Low | Node lifecycle, Performance |
| Dedicated master nodes | Low | Configuration, High availability, Performance |
| Default cluster name | Low | Configuration |
| Default data path | Low | Configuration, Disk storage |
| Deployment not highly available | Low | Cluster health |
| Master-eligible node added | Low | High availability, Node lifecycle, Performance, Stability |
| Master-eligible node restarted | Low | Node lifecycle, Performance, Stability |
| Minimum master nodes above quorum | Low | Configuration, High availability, Stability |
| Obsolete Zen discovery settings | Low | Configuration |
Index (7)
| Insight | Severity | Domain |
|---|---|---|
| Indices without replicas | High | Cluster health, Performance, Replication, Stability |
| Shard near document limit | High | Disk storage, Index management |
| Empty indices | Medium | Index management, Performance, Shard allocation |
| Increase in shards count | Medium | Index management, Shard allocation |
| Oversized shards | Medium | Index management, Performance, Shard allocation |
| Undersized shards | Medium | Index management, Performance, Shard allocation |
| High deleted-docs ratio | Low | Disk storage, Index management |
Node (70)
| Insight | Severity | Domain |
|---|---|---|
| Disk watermark flood stage | Critical | Cluster health, Disk storage, Stability |
| Disk watermark flood stage (frozen) | Critical | Cluster health, Disk storage, Shard allocation, Stability |
| Disk watermark high | High | Cluster health, Disk storage, Stability |
| Indexing failures on indices | High | Indexing, Stability |
| Indexing throttle time | High | Indexing, Performance |
| Node indexing failures | High | Indexing, Stability |
| Node near out of memory | High | Memory, Performance, Stability |
| Rejected indexing | High | Indexing, Performance, Stability |
| Rejected search | High | Performance, Search, Stability |
| Slow indexing | High | Indexing, Performance |
| Slow search | High | Performance, Search |
| Slow search on cold tier nodes | High | Performance, Search |
| Slow search on content tier nodes | High | Performance, Search |
| Slow search on frozen tier nodes | High | Performance, Search |
| Slow search on hot tier nodes | High | Performance, Search |
| Slow search on warm tier nodes | High | Performance, Search |
| Vector memory pressure | High | Memory, Performance, Search, Vector search |
| Circuit breaker near limit | Medium | Memory, Performance, Stability |
| Circuit breaker trips | Medium | Memory, Performance, Stability |
| Disk watermark low | Medium | Cluster health, Disk storage, Stability |
| Disk watermarks wrong configuration | Medium | Configuration, Disk storage, Stability |
| Frozen cache unhealthy | Medium | — |
| Heap size above recommended max | Medium | Memory, Performance, Stability |
| High CPU on node | Medium | CPU, Performance, Stability |
| High CPU utilization | Medium | CPU, Performance, Stability |
| High heap usage | Medium | Memory, Stability |
| Loaded cold tier data nodes | Medium | Performance, Resource utilization |
| Loaded content tier data nodes | Medium | Performance, Resource utilization |
| Loaded coordinating nodes | Medium | Performance, Resource utilization, Search |
| Loaded data nodes | Medium | Performance, Resource utilization |
| Loaded frozen tier data nodes | Medium | Performance, Resource utilization |
| Loaded hot tier data nodes | Medium | Performance, Resource utilization |
| Loaded master-eligible nodes | Medium | Cluster health, Performance, Resource utilization |
| Loaded warm tier data nodes | Medium | Performance, Resource utilization |
| Long running bulk index task | Medium | Indexing, Performance, Stability, Tasks |
| Long running delete by query task | Medium | Indexing, Performance, Stability, Tasks |
| Long running index task | Medium | Indexing, Performance, Stability, Tasks |
| Long running reindex task | Medium | Indexing, Performance, Stability, Tasks |
| Long running search task | Medium | Performance, Search, Stability, Tasks |
| Long running shard task | Medium | Performance, Shard allocation, Stability, Tasks |
| Long running snapshot task | Medium | Performance, Snapshots and backup, Stability, Tasks |
| Long running update by query task | Medium | Indexing, Performance, Stability, Tasks |
| Memory lock disabled | Medium | Memory, Performance, Stability |
| Search queue size | Medium | Performance, Search |
| Shard count high on data node | Medium | Shard allocation, Stability |
| Shard count high on frozen node | Medium | Shard allocation, Stability |
| Stuck task | Medium | Performance, Stability, Tasks |
| Unbalanced GC ratio | Medium | CPU, Performance, Stability |
| Unbalanced shard counts | Medium | Performance, Shard allocation |
| Write hotspotting | Medium | Indexing, Performance, Resource utilization, Search, Shard allocation |
| Write queue size | Medium | Indexing, Performance |
| Data node without shards | Low | Performance, Resource utilization, Shard allocation |
| High memory-to-disk ratio on cold nodes | Low | Memory, Resource utilization |
| High memory-to-disk ratio on content nodes | Low | Memory, Resource utilization |
| High memory-to-disk ratio on data nodes | Low | Memory, Resource utilization |
| High memory-to-disk ratio on frozen nodes | Low | Memory, Resource utilization |
| High memory-to-disk ratio on hot nodes | Low | Memory, Resource utilization |
| High memory-to-disk ratio on warm nodes | Low | Memory, Resource utilization |
| High replica count on cold nodes | Low | Replication, Resource utilization |
| High replica count on content nodes | Low | Replication, Resource utilization |
| High replica count on data nodes | Low | Replication, Resource utilization |
| High replica count on hot nodes | Low | Replication, Resource utilization |
| High replica count on warm nodes | Low | Replication, Resource utilization |
| Low disk usage on cold nodes | Low | Disk storage, Resource utilization |
| Low disk usage on content nodes | Low | Disk storage, Resource utilization |
| Low disk usage on data nodes | Low | Disk storage, Resource utilization |
| Low disk usage on frozen nodes | Low | Disk storage, Resource utilization |
| Low disk usage on hot nodes | Low | Disk storage, Resource utilization |
| Low disk usage on warm nodes | Low | Disk storage, Resource utilization |
| Management queue size | Low | Cluster health, Performance, Stability |