这个是master，elasticsearch-logging-0那就应该是slave了。
[2019-11-25T02:29:05,971][WARN ][o.e.m.j.JvmGcMonitorService] [elasticsearch-logging-1] [gc][3601] overhead, spent [2.1s] collecting in the last [2.1s]
[2019-11-25T02:29:16,927][WARN ][o.e.m.j.JvmGcMonitorService] [elasticsearch-logging-1] [gc][3611] overhead, spent [1.8s] collecting in the last [1.8s]
[2019-11-25T02:29:20,811][WARN ][o.e.m.j.JvmGcMonitorService] [elasticsearch-logging-1] [gc][3614] overhead, spent [1.8s] collecting in the last [1.8s]
[2019-11-25T02:29:29,889][WARN ][o.e.m.j.JvmGcMonitorService] [elasticsearch-logging-1] [gc][3621] overhead, spent [2.2s] collecting in the last [3s]
[2019-11-25T02:29:29,939][WARN ][o.e.d.z.PublishClusterStateAction] [elasticsearch-logging-1] timed out waiting for all nodes to process published state [4758] (timeout [30s], pending nodes: [{elasticsearch-logging-0}{DRHAQw4VSlKy06CHxaDmqw}{m0a-_88bRP-VUulBe5if4g}{172.30.56.6}{172.30.56.6:9300}])
[2019-11-25T02:29:29,985][WARN ][o.e.c.s.MasterService ] [elasticsearch-logging-1] cluster state update task [shard-started StartedShardEntry{shardId [[logstash-2019.07.13][4]], allocationId [Ql-mVTvYQjqSe0dvHClmmQ], message [after peer recovery]}[StartedShardEntry{shardId [[logstash-2019.07.13][4]], allocationId [Ql-mVTvYQjqSe0dvHClmmQ], message [after peer recovery]}], shard-started StartedShardEntry{shardId [[logstash-2019.07.13][4]], allocationId [Ql-mVTvYQjqSe0dvHClmmQ], message [master {elasticsearch-logging-1}{11EauWJsSgG1ZtgnGsC6TA}{nCHWtuEhQ0OgkbHZWz48Kw}{172.30.136.8}{172.30.136.8:9300} marked shard as initializing, but shard state is [POST_RECOVERY], mark shard as started]}[StartedShardEntry{shardId [[logstash-2019.07.13][4]], allocationId [Ql-mVTvYQjqSe0dvHClmmQ], message [master {elasticsearch-logging-1}{11EauWJsSgG1ZtgnGsC6TA}{nCHWtuEhQ0OgkbHZWz48Kw}{172.30.136.8}{172.30.136.8:9300} marked shard as initializing, but shard state is [POST_RECOVERY], mark shard as started]}]] took [32.3s] above the warn threshold of 30s

目前创新互联已为上1000家的企业提供了网站建设、域名、虚拟主机、网站运营、企业网站设计、禹会网站维护等服务，公司将坚持客户导向、应用为本的策略，正道将秉承"和谐、参与、激情"的文化，与客户和合作伙伴齐心协力一起成长，共同发展。

另外有需要云服务器可以了解下创新互联cdcxhl.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。

本文名称：EFK环境下的es集群告警信息-创新互联
文章起源：http://scgulin.cn/article/ddccep.html