← Back to guidesGuide

Stop log bursts from turning OpenSearch rollover into hot shards

A practical runbook to measure shard skew, tune write aliases and ISM rollover, and prove write queues recover without blind reindexing.

Learn how to detect when OpenSearch log indices create hot shards during ingestion bursts, fix rollover with aliases and ISM, and validate recovery with real signals.

Created: June 15, 2026

Published: June 15, 2026

Estimated time42 min

LevelAdvanced

Before you startRead access to OpenSearch Dashboards or Dev Tools

PlatformsLinux / Docker

WhatsApp X LinkedIn

Linux

Diagnose and apply a controlled change from a Linux workstation with curl or Dev Tools.

curljqOpenSearch credentialsnode metrics access

List shards by size

curl -s "$OS/_cat/shards/logs-api-2026.06*?v&s=store:desc"

Inspect write queues

curl -s "$OS/_cat/thread_pool/write?v&h=node_name,active,queue,rejected,completed"

Also available inEvita que los picos de logs conviertan el rollover de OpenSearch en hot shards

Content locked

This guide requires both steps before full content is available.

○Click “Like” on this guide.
○Share on WhatsApp, X, LinkedIn, or copy the link.

Access is automatically unlocked as soon as both steps are completed.