線上有3臺es組成集羣，其他有兩臺非正常關機了，早上過來發現集羣狀態爲紅色，提示"24 UNASSIGNED shareds":
1）查看集羣相關信息：
curl 'localhost:9200/_nodes/process?pretty'
記下這個node的id號；
2）然後找出UNASSIGNED 的相關信息，方便後續修改！
# curl -XGET http://localhost:9200/_cat/shards|grep UNASSIGNED
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 30528 100 30528 0 0 705k 0 --:--:-- --:--:-- --:--:-- 745k
graylog_83 1 p UNASSIGNED
graylog_83 1 r UNASSIGNED
graylog_83 0 p UNASSIGNED
graylog_83 0 r UNASSIGNED
graylog_82 1 p UNASSIGNED
graylog_82 1 r UNASSIGNED
graylog_85 2 p UNASSIGNED
graylog_85 2 r UNASSIGNED
graylog_85 1 p UNASSIGNED
graylog_85 1 r UNASSIGNED
graylog_84 0 p UNASSIGNED
graylog_84 0 r UNASSIGNED
graylog_87 1 p UNASSIGNED
graylog_87 1 r UNASSIGNED
graylog_86 3 p UNASSIGNED
graylog_86 3 r UNASSIGNED
graylog_86 1 p UNASSIGNED
graylog_86 1 r UNASSIGNED
graylog_89 3 p UNASSIGNED
graylog_89 3 r UNASSIGNED
graylog_88 1 p UNASSIGNED
graylog_88 1 r UNASSIGNED
graylog_88 0 p UNASSIGNED
graylog_88 0 r UNASSIGNED
3）然後依次修改以上UNASSIGNED ，命令爲：
curl -XPOST 'localhost:9200/_cluster/reroute' -d '{
"commands" : [ {
"allocate" : {
"index" : "graylog_83",
"shard" : 1,
"node" : "Auq82gfGQVWgOBw6S7ajRQ",
"allow_primary" : true
}
}]
}'
PS：
index就是索引的名稱：也就是graylog_88,graylog_86,graylog_87.....
node:就是在哪個節點上執行；
shared：分片的編號！