Back to guidesGuide

Diagnose hot shards in OpenSearch before latency and indexing queues spiral

A practical guide to confirm real shard skew, separate symptoms from causes, and apply mitigations that do not make the cluster worse.

Learn how to confirm an OpenSearch hot shard, find the affected index and node, fix the actual cause, and validate that recovery is real.

Created: April 27, 2026

Published: April 27, 2026

Estimated time40 min
LevelAdvanced
Before you startAccess to the OpenSearch API or Dev Tools
PlatformsLinux / Docker
WhatsAppXLinkedIn

Linux

Recommended workflow for operators using curl and jq against a reachable cluster.

curljqHTTPS or HTTP access to the cluster
List the largest shards and sort by size
curl -s http://opensearch.example:9200/_cat/shards/logs-prod-*?v&s=store:desc
Review search, index, and write queues and rejections
curl -s 'http://opensearch.example:9200/_cat/thread_pool/search,index,write?v&h=node_name,name,active,queue,rejected,completed'

Content locked

This guide requires both steps before full content is available.

  • Click “Like” on this guide.
  • Share on WhatsApp, X, LinkedIn, or copy the link.

Access is automatically unlocked as soon as both steps are completed.