Table of contents
This page describes what to do in case of an Icinga alert. For more information you could search the govuk-puppet repo for the source of the alert


This alert triggers when the es-rotate hasn’t completed successfully.

es-rotate is part of es-tools.

Its job is to rotate the elasticsearch alias for the current day’s logs, and to delete old indexes.

If it doesn’t run, it’s fine to rerun manually on the affected host, using:

sudo -u nobody /usr/local/bin/es-rotate-passive-check

If there is a problem you can find out more information using the elasticsearch-head plugin (see “Elasticsearch cluster health” alert for more details).

This page is owned by #2ndline and needs to be reviewed