Back to guidesGuide

Diagnose OpenSearch hot shards before indexing queues spiral

A practical runbook to detect hot shards across log and vector indices, separate real skew from slow nodes, and apply safe mitigations with aliases, rollover, and guardrails.

Learn how to find OpenSearch hot shards with Dev Tools, queue metrics, and canary validation before search latency or bulk rejections ruin the morning.

Created: June 27, 2026

Published: June 27, 2026

Estimated time45 min
LevelAdvanced
Before you startRead access to OpenSearch Dev Tools or an equivalent API path.
PlatformsLinux
WhatsAppXLinkedIn

Linux

Shell-based diagnosis with curl against OpenSearch, validating queues, shards, and aliases before changing templates.

curljqHTTPS access to the cluster
List shards with size and node
curl -s "$OS_URL/_cat/shards/logs-prod-*,vectors-*?v&h=index,shard,prirep,state,docs,store,node"
Inspect bulk/search queues
curl -s "$OS_URL/_cat/thread_pool/bulk,search?v&h=node_name,name,active,queue,rejected,completed"
Explain allocation for a suspicious shard
curl -s -H 'Content-Type: application/json' "$OS_URL/_cluster/allocation/explain" -d '{"index":"vectors-catalog-2026.06","shard":0,"primary":true}' | jq

Content locked

This guide requires both steps before full content is available.

  • Click “Like” on this guide.
  • Share on WhatsApp, X, LinkedIn, or copy the link.

Access is automatically unlocked as soon as both steps are completed.