Alert rule: SYN_ElasticsearchExpectNodeToReachDiskWatermark

Please consider opening a PR to improve this runbook if you gain new information about causes of the alert, or how to debug or resolve the alert. Click "Edit this Page" in the top right corner to create a PR directly on GitHub.

Overview

This alert fires when the Elasticsearch node storage utilization is expected to reach the disk low watermark. The default watermark is 85%. The node will become read-only at the watermark. To resolve this alert, unused data should be deleted or the disk size must be increased.

Steps for debugging