Skip to content
  • There are no suggestions because the search field is empty.

Troubleshooting Health and Wellness

Troubleshooting New Health and Wellness

This topic describes how to troubleshoot New Health and Wellness issues.

  • Column 1: Issue
  • Column 2:

    An error ‘n of m shards failed’ or ‘unknown field in the index’ in the New Health and Wellness dashboards.


  • Column 1: Resolution
  • Column 2:

    Refresh the index patterns, perform the following:

    1. Log in to NetWitness Platform.
    2. Go to netwitness_adminicon_25x22.png (Admin) > Health & Wellness.
    3. Click New Health & Wellness.
    4. Click Pivot to Dashboard.
    5. Go to netwitness_newhwhom_23x27.png > Stack Management > Index Patterns.
    6. Click nw* index pattern.
    7. Click Refresh to refresh the index pattern on top right corner.

    Note: If the issue still persists, refresh other index patterns such as nw-metricbeat* or nw-concentrator* and so on.


  • Column 1: Issue
  • Column 2:

    Unable to send data to elastic search once disk usage reaches 85%.


  • Column 1: Explanation
  • Column 2:

    If the Elasticsearch disk usage reaches 85%,

    the saved objects (index patterns, dashboards, visualizations etc) becomes read-only mode.

    And, services does not write new metrics to Elasticsearch or allow to edit any saved objects.


  • Column 1: Resolution
  • Column 2: To change the indexes to write mode, execute the following command on the host in which Elasticsearch is installed:
    curl -k --cert /etc/pki/nw/elastic/elasticsearch-cert.pem --key /etc/pki/nw/elastic/elasticsearch-key.pem -X PUT -H "Content-Type: application/json" -d '{"index.blocks.read_only_allow_delete": null }' https://localhost:9200/_all/_settings

    Note: This command is supported only with certificates.


  • Column 1: Issue
  • Column 2: New Health and Wellness > Pivot to Dashboard fails due to time synchronization issue.

  • Column 1: Explanation
  • Column 2: Pivot to dashboard fails if there is no time synchronization between the NetWitness Server and the host on which New Health and Wellness is installed.

  • Column 1: Resolution
  • Column 2:

    You must synchronize the time and pivot to dashboard. To synchronize the time do one of the following:

    • Configure the NTP Server. For more information, see "Configure NTP Servers" in the System Configuration Guide.
    • Run the following commands on the host on which New Health and Wellness is installed
      1. SSH to NetWitness host.
      2. Run the following commands.
        • systemctl stop ntpd
        • ntpdate nw-node-zero
        • systemctl start ntpd

  • Column 1:
  • Column 2: