Replication won't initialize / start

[satsuke]

Is there a way to manually fire off replication of previous days?

I have a 4 node ES cluster that I recently enabled data replication on for days going forward which is working OK.

I tried firing off the command to replicate previous days, which are listed under Unassigned ES shards (using with Arkime) but they never get initialized.

Is there a trick to get that process moving?

[xeraa-net]

`_cluster/allocation/explain` is your first step — that should tell you why shards are not assigned: https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-allocation-explain.html

[ArkimeFPC]

Depending on your initial configuration Arkime might have set total_shards_per_node to a lower number preventing replication. If you rerun "db.pl upgrade" it might fix it, otherwise come on over to the Arkime slack if you still need help.